Merge branch 'staging'

CONTRIBUTING.md

@@ -18,10 +18,10 @@ Below are the steps and processes that we follow.
 Before reporting an issue, check our backlog of
 [open issues](https://codeberg.org/stagex/stagex/issues)
 to see if someone else has already reported it. If so, feel free to add
-your scenario, or additional information, to the discussion. Or simply
+your scenario, or additional information, to the discussion or simply
 "subscribe" to it to be notified when it is updated.
-If you find a new issue with the project we'd love to hear about it! The most
-important aspect of a bug report is that it includes enough information for
+If you find a new issue with the project we'd love to hear about it! 
+The most important aspect of a bug report is that it includes enough information for
 us to reproduce it. 
 Please don't include any private/sensitive information in your issue!
 
@@ -63,7 +63,7 @@ $ make all
 |
 OR
 |
-Prepopulate your local registry
+Prepopulate your docker local registry
 ```shell
 $ make preseed 
 $ rm -rf ./out/sxctl
@@ -76,11 +76,11 @@ new addition.
 cp -R packages/python packages/cython
 vim packages/cython/Containerfile
 # fix SRC_FILE, SRC_HASH, SRC_URL etc manually
-# incorporate anything relevant from Alpines build(){ block }  for {package} 
+# incorporate anything relevant from Alpine's build(){ block }  for {package} 
 # https://git.alpinelinux.org/aports/tree/main/cython/APKBUILD
 make gen-make
 make cython
-make digests 
+make digests.txt 
 ```
 
 Then you can commit {signed} and push your package and open a PR.
@@ -97,7 +97,8 @@ package=somepackage tar -tvf $(find out/${package} -type f -printf '%s %p\n' | s
 
 - test package for reproducibility:
 ```sh
-package=somepackage; rm -rf out{,2}/${package}; make NOCACHE=1 ${package}; mv out/${package} out2/; make NOCACHE=1 ${package}; diffoscope $(find out*/${package} -type f -printf '%s %p\n' | sort -nr | head -n2 | awk '{ print $2 }' | tr '\n' ' ')
+mkdir out2;
+package=somepackage; rm -rf out{,2}/${package}; make NOCACHE=1 ${package}; mv out/${package} out2/${package}; make NOCACHE=1 ${package}; diffoscope $(find out*/${package} -type f -printf '%s %p\n' | sort -nr | head -n2 | awk '{ print $2 }' | tr '\n' ' ')
 ```
 
 - make svg graph of dependency tree for a single package
@@ -109,8 +110,8 @@ package=somepackage; make -Bnd ${package} | make2graph | dot -Tsvg -o ${package}
 ## Submitting Pull Requests
 
 No Pull Request (PR) is too small! Typos, additional comments in the code,
-new test cases, bug fixes, new features, more documentation, ... it's all
-welcome!
+new test cases, bug fixes, new features, more documentation, ... all kinds
+of contribution are welcome.
 
 While bug fixes can first be identified via an "issue", that is not required.
 It's ok to just open up a PR with the fix, but make sure you include the same

README.md

@@ -34,18 +34,37 @@ docker run -i stagex/python -c "print('hello world')"
 ```
 
 Make a hello world OCI container image with Rust:
+<--author: panekj -->
+
 ```dockerfile
-FROM stagex/busybox as build
+FROM stagex/filesystem AS build
+COPY --from=stagex/busybox . /
 COPY --from=stagex/rust . /
 COPY --from=stagex/gcc . /
 COPY --from=stagex/binutils . /
 COPY --from=stagex/libunwind . /
-RUN printf 'fn main(){ println!("Hello World!"); }' > hello.rs
-RUN rustc hello.rs
+COPY --from=stagex/musl . /
+COPY --from=stagex/llvm . /
+COPY --from=stagex/zlib . /
+
+ENV TMPDIR=/tmp
+WORKDIR /home/user
+ENV RUSTFLAGS="-C panic=abort -C target-feature=+crt-static"
+
+RUN /usr/bin/rustc - -o ./hello <<EOF
+fn main(){
+  println!("Hello World!");
+}
+EOF
+
 FROM scratch
-COPY --from=build /home/user/hello .
-CMD ["./hello"]
+COPY --from=build /home/user/hello /hello
+COPY --from=stagex/musl . /
+COPY --from=stagex/libunwind . /
+COPY --from=stagex/gcc . /
+ENTRYPOINT ["/hello"]
 ```
+<--author: panekj -->
 
 ### Package Management
 
@@ -194,7 +213,6 @@ A comparison of `stagex` to other distros in some of the areas we care about:
 * As a policy, we expect all published signers to:
     * Maintain their PGP private keys offline and/or on personal HSMs
         * E.g. Nitrokey, Yubikey, Leger, Trezor, etc.
-    * Maintain a public key in the "keys" folder of this repository
     * Maintain a [keyoxide](https://keyoxide.org) profile self-certifying keys
     * Maintain a [Hagrid](https://keys.openpgp.org) profile with verified UIDs
     * Make best efforts to meet in person and sign each others keys

digests.txt

@@ -12,12 +12,15 @@ d6a180c1b2e06e512f9defcbbd03fab104a464a52bc83c37a1ecf1874e2ef6cf buf
 8cb9360041cd17e8df33c5cbc6c223875045c0c249254367ed7e0eb445720757 busybox
 f4fdf7f5c966bf2aef1e271e146d019ac6923368aad3581f817e2c893f8d97c4 bzip2
 76b232139c838fad3cdc693f839384141c2a5bf6e7f390294a133be1392a9b7a ca-certificates
+0f50ff4441d8b20ff73babab652fc0a563bce46385100240de4ae587012c9505 ccid
 0021ac32c35197d8bba0ae6a27104da7dd7c63535b0f3e9bfe812e55b9e97b9d clang
 1d3e7a0bbb030cfadc6ad6a71d6c96ce2c415570b1fa45478796a11d4aee4628 cmake
 e8c88bae74f453d8277a6265e8ff22c14d404d22d1e67ea68be68b4da59ede6a coreutils
 25afad810fbb9b1d02762030c3e43e07259a79627dbea9b66ef7f797f8377a2a cpio
-d04315da5bc05559d9af4d17e033006f7f01ea87f187f285a7a729461e3d6742 curl
+0b72be087ffc4767c9fb58f3bf55ed99cbd48217871e23d8bdc31b6afb1e0253 curl
 4e937265bab0f853b175bccfff831d3888da567d3966f6a284d233540e09a472 diffutils
+ac56e8eaafde2485a6e60d3b46511701506de859fecf53d0b99be75c9fb63b6e docbook-xml
+76a6fd516da4306eaf24637934432bdae195c867125f55c8d70d7d177b64b590 docbook-xsl
 8a580d399d5f7ac276e276059be5ffc87d6118f30f62a7151de76f7eb4a37fbe dosfstools
 6fc0d5db2775f987f089b7280c6e362d23404662718cd4273dcd881fb2650eec e2fsprogs
 34d8af6561c26beb90b78299f0f20e1327147e7a1e1519d82ec65bbee7c4e824 ed
@@ -27,19 +30,21 @@ d04315da5bc05559d9af4d17e033006f7f01ea87f187f285a7a729461e3d6742 curl
 6cb3e28b54157e1ffbc04fcdcb7e896e1bb9337d323e5b6901a26577efb9e795 file
 c504b17edae1bea8c139d058b20bebd383a0be1b4f57565d92cb578012f9c0f8 filesystem
 e7d48fac7c198c6a58e83a437d6f86f795dc8a7541720472c9f728f9e4710466 findutils
+e2ac807475e66201ad50eee09bf9625ad0e97dc136818ff11775cb13a54d764b flashtools
 045953b67aa1b9f965b5e0b507c55d7590e5f32e33fefc65953718898d30ade6 flex
 e4b39ff2528e93b0d4936c88c0c8da50254a31927e2c1d716a80915f37cc59b2 gawk
 ce77c0d1576d3c9d7905edd438fc58d2c51c0340a996c09a93c4602534dc2e26 gcc
 0bdcb1073255ece49129d61998fb8cbe4521d409c3631bb0d8d3bc5f00d8945b gen_initramfs
 8ef80aa190b4c765615b4a1c17f906d73a83cf39f88e66ff4f086e990db75066 gettext
-4387c280cbd76810cf1244ddd3d1057996f7b3380956f83073b6b48290f9a9ab git
+d177bde1f1ca0f20f74502af4da17b89628683f21116573ada69f38b46d367a6 git
 5c701a3a1f95c1c19e57ce2438d7bd8bce2c6c15556f31bb68ff160b1e6034b2 gmp
 5c12000dd04a015973fbac431c77e6739ec19bde4454bca3067452ad30ebb48f go
+693b5f99ed745bfadac5d89ad45f3e26400059b68430db23c4895e38bb0c8025 go-md2man
 d49e37f8d4455259aadab9fe28e18da44f83ff6e86a2d636a7bc799ac40d8841 gperf
 b5b0726171f66da437dbd24d2398cd324b96f00115770767b4f72df2547c5323 gpg
 821c412751accafc42cecbbdcb9fd6f1ce3de2732c79bceda79cad4973d1c4ad grep
 138a64d541a8acda7e6c19033a83114082d0aca39569f34fd94ea40dbfb7d675 grpcurl
-61881b913fc5a18b476c191c4ddbdc445c074b817c3674bfc89d73d22e3d60ab grub
+5f382615881470e0cf9c670bead785507545a2b829b391247313f516c63355e3 grub
 f8f916ceb9b5bab3bd0accb24049f8c91d23d25ecbc73432fe6e904a6376bc7f gzip
 0e12ae85e8c0dc702482806cd85bacdc4a4d7765f5c1bc452f1237762845cd57 helm
 7ba79dd2b79dfaab960b02974c5bf0e836e1f5a168d5e7103e8194a7f3512444 icu
@@ -47,7 +52,7 @@ f745fee8efc807a1493d2c9bd617b1345f10a4dab02cc528fe930647846682ea iputils
 0297a099ae95eed13d48bce2d4d624544857680095b6201e9919e1d5da45a6cd jq
 63db8d16b2549bb68498ab60f700bc12d9fec725db38440678aefc4f83353537 json-c
 2b7016af8f507d31d222b30e8c42e26bec7178963edf4a029ea50563b87914f6 k9s
-d81144f0a5e8d1dbd99724df80824d395e265642842e121b485156c9f04200be keyfork
+1ace822e40987f94a442c76505fbbe7446da5481e57c7e57d5b51d5b8362d65a keyfork
 facd6c6d1eacf6a0d180f9b231fc45527ecd1693db97cecff282e1b5cbe989d5 ksops-dry-run
 70fa7f6e5918ddb66732d4ef42e979dd6db38ad92875f5ad8ff1a6d04450fa3d kubeconform
 f647075cb0330b8cfc3d35ac097d9155e130ea5d1dd16c99e927c7a3b4da47ed kubectl
@@ -62,10 +67,11 @@ a5aac434ffd8fca96c435756fac9e300b3d06e04a15c707d09e5e8a16c0bcd89 libksba
 1927d17aaf1ad6a9910380714f0dd12c72c69f9ee1b19668bf4cc5f89cbc2b2d libqrencode
 cd53fc6b7ffc28b0575d3f74bc2c32794f36ce138adc49556870ce59443a51b4 libtool
 18d3b25f523d83aec9db229528d83068a5e289cc6dd27c85ab6ed0f0a55bc9a9 libunwind
+c67807377fb18d2a874d975b43e37056eb4067a5be74ebf8c1f5e5ec65ae5650 libusb
 92302a169fde418c2091537b5dbdee16ce34789a71444eb91d1b2dd729a41cc0 libxml2
 a5b94093455cbf9d739a2559155e7ae66654d1511b6b4d7bd08ea440f6e8b281 libxslt
 44bf98b9cfc8f7659311a9780a2bbe76234e7e50706042e3812afab8d8d7ca33 libzstd
-0b887cbb435baacc15ede380682d6ede13fc83b2ad805251e7e0a48d551d0ac3 linux-airgap
+a4fac3ca7795e171a4d1b3b634fdae1790d4f8d076f3c1ac8a38f3ece72e1ec5 linux-airgap
 bc6decf337fec1202a332848358ea128a5f82a7d312372ddb66ab1516742293f linux-generic
 fe366787ecaf36393b17ede6108161af4136bf5b7521e49f0a005a6ef68ef8db linux-headers
 8e43d6705c81a9747f6deeb1b8c51277056e5c0a99e7c1eb7f2460c8d031432f linux-nitro
@@ -77,7 +83,7 @@ c43abe585e2867d2ef2fad0902f2a264a3c4a429f95dddd00320de59dcf66210 llvm
 284b0fdcc8f424cf67dd5a7acdde17f696846bc218c20923dc93e5cc786c26c5 m4
 8357ff7a8afa260ae3cc8e8993d80bce524d9802b2033020f7ea7f8f85133634 make
 55c17c86bca2bfa700548094cbb5ee3da4f0a8b2c09a876481edf9f29e08e58d meson
-694fd10d000e774cef99531e1d4cbfb63fbcf8bd6b5b84d3d830dd1615f9e0e5 mockgen
+4625fbe2fda77b9e5037d08e4b8c65c1232427ade3ee4e0728ac73a0b26472a8 mockgen
 b6202dc29906ea8d7594bce604cb676f5335cc51e75e3f12b5f619e8fc27cc28 mtools
 9dde4c7dd23f8337d2ffaa1e5d93f781ec56292ae583c56fb25b5f7acb3537cd musl-fts
 f888fcf45fabaaae3d0268bcec902ceb94edba7bf8d09ef6966ebb20e00b7127 musl
@@ -87,10 +93,15 @@ a7078cbde902f0c891910a54bee2b4f073d456f1e10f8a051000d05b616eb7b2 nettle
 2b67861ee4ce100bbea14ca78438ea0d1dd921434884ef4c1ca9029a07dc80da ninja
 7899c399f2924c5ba0dfbce9ce6f8391e27ecd0564f0341fb85f83ba293e1ebe npth
 088dbc336e34f16f7a8e323f114918468a7e4b13b190c43593ca7b0dffea54b4 openpgp-card-tools
+8da704d0078d445d3af0338764b9f3a87ba4841744c396c8eddef15466366553 opensc
 9bd55ed05263a538e6a23c0262edc356c998a24674f3b8ad008a4b117a4cdf3b openssl
-69e1a652325d975681f23687cc3d0a24ba7c07710910327450a596e75e2b62d4 pcsc-lite
+fd9b0600f7f73f87d9d678b8b8a7119e0f9b9314c9959bd0d180c31736cb97d6 pcsc-lite
+d83997bda2b9500c8a4567df827a90d65efa842f9a2bb361b6f394589cf167d5 pcsc-tools
 c5ae28da107a71f80e3f9af26633be5cde252f3bf89ed626b26c808b943e7b01 perl
+015ca74b2658e6d181cccaff00dd23c1f90ad1816fcf965324e76fa3454e66e5 perl-module-build
+839acbbd364e05dac68f877ce1777bb42b8ec3bc82c84986eb7805b1c928f341 perl-pod-parser
 2f5128c181a137c259d5304b77d213ca0d9fc85452b034027b47c2431044c5a6 pkgconf
+4e18208d998a26cac3da0f66aebd02a15c1f526ec0517fc184f47e99539c8513 po4a
 ff8bd3f8fda05729ab717a7e68b3bacf2d09537e72b488fcbe767f0c9a3d8fc3 postgresql
 d139ce360aafe2552121ff380dfa7c97d3c4bdf14a2c091ac6eec9df5d5270f4 protobuf
 4683db34b3f577c1cdc32136ac3d160df204b97c31fc48a713b875d4ea6911d6 protoc-gen-go-grpc
@@ -141,7 +152,7 @@ b91a42a8b32013895119a8435686c7c7d37ca6e4ea6d6aae99bdfe614a0a6889 stage2
 80c17352a8ed1f0d085cc9fe8da16d65403282ecb3117739f8221df0d4b17af2 strace
 24083d761fc10ec460aaf9d6466fd9b59589da6604bd230c40db30ceefb6bfe0 sxctl
 909dcabcf13bd39b0138309f6efdeb780e01c00bf17cb1e7ee851e8b8be74d2b syslinux
-eb942d6a6ab5cdd626316da5779efe3280bd6765f0e51c52785e52bb2f3ff2f6 talosctl
+04415fd1dcca6fb9a2edcb11ef12402d120bbded0c13dc4ce38aff0c9c205791 talosctl
 40709224c12e2edf9da1b21434d850edddbdd81e5c960e9e70b4713f48b5ea97 tar
 db0ab7f1b1d7b02dd501a01af85f455a82cd06f93b2e4b79f200273b25c0f250 tcl
 9261a11db7c8d4f74be8d2fa1708a96d80c3c82ddedb26a9131baf2c1cd9e627 texinfo
@@ -151,7 +162,7 @@ afcb2120ef0db23cbfaabf703663065072d2bf722409764bbd9672c887d00a04 tofu
 5e362f43a5e0c49f774605a0e3e1b7523dc6bc775f537c206a3aaa8b8b733c93 tpm2-tss
 41525597d1f5648dc2318da7779e3c5194b4e6d24cb07f2f616ac539bb094d04 util-linux
 9ab45852aee077b68ea101173025be6e1cdbde93692efa4ee198e1960f02ab52 xorriso
-81c93e8b8c68ef402833df1a9a21808dff13d7745964906cf10239d22873f347 xz
+f6ca72fc9096ef5f694b6b7f9b7ad323a571d9447eb5cc790042f72e69b9aad8 xz
 10e80bd7cec3c6e0a7fd36c65bac13600368bff993ad42b03e3b787d2125e5f0 yq
 82f9f8ae24e077529bde415cef3f2408a7321d008bfd9fe904e3726f8c309551 zig
 b19100a245460e1b4bf1c407f54698c0c8cb6a00bf28bbb2c7a61650e690752c zip

packages/ccid/Containerfile

@@ -0,0 +1,41 @@
+FROM scratch as base
+ENV VERSION=1.5.5
+ENV SRC_HASH=194708f75fe369d45dd7c15e8b3e8a7db8b49cfc5557574ca2a2e76ef12ca0ca
+ENV SRC_FILE=ccid-${VERSION}.tar.bz2
+ENV SRC_SITE=https://ccid.apdu.fr/files/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} ${SRC_FILE}
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/m4 . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/perl . /
+COPY --from=stagex/pcsc-lite . /
+COPY --from=stagex/flex . /
+COPY --from=stagex/pkgconf . /
+COPY --from=stagex/libusb . /
+COPY --from=stagex/zlib . /
+RUN tar -xvf $SRC_FILE
+WORKDIR ccid-${VERSION}
+RUN --network=none <<-EOF
+	set -eux
+	./configure \
+		--prefix=/usr \
+		--sysconfdir=/etc \
+		--mandir=/usr/share/man \
+		--infodir=/usr/share/info \
+		--localstatedir=/var \
+        --enable-twinserial
+	make -j "$(nproc)"
+EOF
+
+FROM build as install
+RUN --network=none make DESTDIR=/rootfs install
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/curl/Containerfile

@@ -1,6 +1,6 @@
 FROM scratch as base
-ENV VERSION=8.4.0
-ENV SRC_HASH=16c62a9c4af0f703d28bda6d7bbf37ba47055ad3414d70dec63e2e6336f2a82d
+ENV VERSION=8.9.1
+ENV SRC_HASH=f292f6cc051d5bbabf725ef85d432dfeacc8711dd717ea97612ae590643801e5
 ENV SRC_FILE=curl-${VERSION}.tar.xz
 ENV SRC_SITE=https://curl.se/download/${SRC_FILE}
 
@@ -14,6 +14,7 @@ COPY --from=stagex/make . /
 COPY --from=stagex/musl . /
 COPY --from=stagex/gcc . /
 COPY --from=stagex/openssl . /
+COPY --from=stagex/perl . /
 COPY --from=stagex/ca-certificates . /
 RUN tar -xf curl-${VERSION}.tar.xz
 WORKDIR curl-${VERSION}

packages/docbook-xml/Containerfile

@@ -0,0 +1,285 @@
+FROM scratch as base
+ENV VERSION=4.5
+ENV SRC_HASH_4_5=4e4e037a2b83c98c6c94818390d4bdd3f6e10f6ec62dd79188594e26190dc7b4
+ENV SRC_HASH_4_4=02f159eb88c4254d95e831c51c144b1863b216d909b5ff45743a1ce6f5273090
+ENV SRC_HASH_4_3=23068a94ea6fd484b004c5a73ec36a66aa47ea8f0d6b62cc1695931f5c143464
+ENV SRC_HASH_4_2=acc4601e4f97a196076b7e64b368d9248b07c7abf26b34a02cca40eeebe60fa2
+ENV SRC_HASH_4_1_2=30f0644064e0ea71751438251940b1431f46acada814a062870f486c772e7772
+ENV SRC_SITE=https://docbook.org/xml
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH_4_5} ${SRC_SITE}/4.5/docbook-xml-4.5.zip .
+ADD --checksum=sha256:${SRC_HASH_4_4} ${SRC_SITE}/4.4/docbook-xml-4.4.zip .
+ADD --checksum=sha256:${SRC_HASH_4_3} ${SRC_SITE}/4.3/docbook-xml-4.3.zip .
+ADD --checksum=sha256:${SRC_HASH_4_2} ${SRC_SITE}/4.2/docbook-xml-4.2.zip .
+ADD --checksum=sha256:${SRC_HASH_4_1_2} ${SRC_SITE}/4.1.2/docbkx412.zip .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/perl . /
+COPY --from=stagex/pkgconf . /
+COPY --from=stagex/libtool . /
+COPY --from=stagex/libxml2 . /
+COPY --from=stagex/zlib . /
+COPY --from=stagex/m4 . /
+RUN --network=none <<-EOF
+    set -eux
+    mkdir -p out
+	for version in 4.1.2 4.2 4.3 4.4 4.5; do
+		case $version in
+			4.1.2) filename=docbkx412.zip;;
+			*) filename=docbook-xml-$version.zip;;
+		esac
+		mkdir -p docbook-xml-$version
+		cd docbook-xml-$version
+		unzip ../$filename
+        mkdir -p "../out/usr/share/xml/docbook/xml-dtd-$version"
+        cp -af docbook.cat *.dtd ent/ *.mod ../out/usr/share/xml/docbook/xml-dtd-$version/
+        cd ..
+	done
+    chmod 755 out/usr/share/xml/docbook/xml-dtd-*/ent
+    mkdir -p out/etc/xml
+	export XML_CATALOG_FILES=""
+	xmlcatalog --noout --create out/etc/xml/docbook-xml
+	xmlcatalog --noout --add \
+		"public" \
+		"-//OASIS//DTD DocBook XML V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd" \
+		out/etc/xml/docbook-xml
+
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML CALS Table Model V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/calstblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML CALS Table Model V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/calstblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD XML Exchange Table Model 19990315//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/soextblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook XML Information Pool V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/dbpoolx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook XML Document Hierarchy V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/dbhierx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook XML Additional General Entities V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/dbgenent.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook XML Notations V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/dbnotnx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook XML Character Entities V4.1.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2/dbcentx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteSystem" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.1.2" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteURI" \
+		"http://www.oasis-open.org/docbook/xml/4.1.2" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.1.2" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook CALS Table Model V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/calstblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD XML Exchange Table Model 19990315//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/soextblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook Information Pool V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/dbpoolx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook Document Hierarchy V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/dbhierx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Additional General Entities V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/dbgenent.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Notations V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/dbnotnx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Character Entities V4.2//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.2/dbcentx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteSystem" \
+		"http://www.oasis-open.org/docbook/xml/4.2" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.2" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteURI" \
+		"http://www.oasis-open.org/docbook/xml/4.2" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.2" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook CALS Table Model V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/calstblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD XML Exchange Table Model 19990315//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/soextblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook Information Pool V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/dbpoolx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook Document Hierarchy V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/dbhierx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Additional General Entities V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/dbgenent.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Notations V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/dbnotnx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Character Entities V4.3//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.3/dbcentx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteSystem" \
+		"http://www.oasis-open.org/docbook/xml/4.3" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.3" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteURI" \
+		"http://www.oasis-open.org/docbook/xml/4.3" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.3" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook CALS Table Model V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/calstblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook XML HTML Tables V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/htmltblx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD XML Exchange Table Model 19990315//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/soextblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook Information Pool V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/dbpoolx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook Document Hierarchy V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/dbhierx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Additional General Entities V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/dbgenent.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Notations V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/dbnotnx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook Character Entities V4.4//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.4/dbcentx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteSystem" \
+		"http://www.oasis-open.org/docbook/xml/4.4" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.4" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteURI" \
+		"http://www.oasis-open.org/docbook/xml/4.4" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.4" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML V4.5//EN" \
+		"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD DocBook XML CALS Table Model V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/calstblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//DTD XML Exchange Table Model 19990315//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/soextblx.dtd" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook XML Information Pool V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/dbpoolx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook XML Document Hierarchy V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/dbhierx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ELEMENTS DocBook XML HTML Tables V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/htmltblx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook XML Notations V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/dbnotnx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook XML Character Entities V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/dbcentx.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "public" \
+		"-//OASIS//ENTITIES DocBook XML Additional General Entities V4.5//EN" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5/dbgenent.mod" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteSystem" \
+		"http://www.oasis-open.org/docbook/xml/4.5" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5" \
+		out/etc/xml/docbook-xml
+	xmlcatalog --noout --add "rewriteURI" \
+		"http://www.oasis-open.org/docbook/xml/4.5" \
+		"file:///usr/share/xml/docbook/xml-dtd-4.5" \
+		out/etc/xml/docbook-xml
+    xmlcatalog --noout --create out/etc/xml/catalog
+    xmlcatalog --noout --add "delegatePublic" \
+        "-//OASIS//ENTITIES DocBook XML" \
+        "file:///etc/xml/docbook-xml" \
+        out/etc/xml/catalog
+    xmlcatalog --noout --add "delegatePublic" \
+        "-//OASIS//DTD DocBook XML" \
+        "file:///etc/xml/docbook-xml" \
+        out/etc/xml/catalog
+    xmlcatalog --noout --add "delegateSystem" \
+        "http://www.oasis-open.org/docbook/" \
+        "file:///etc/xml/docbook-xml" \
+        out/etc/xml/catalog
+    xmlcatalog --noout --add "delegateURI" \
+        "http://www.oasis-open.org/docbook/" \
+        "file:///etc/xml/docbook-xml" \
+        out/etc/xml/catalog
+EOF
+
+FROM build as install
+RUN --network=none mv out/ /rootfs
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/docbook-xsl/Containerfile

@@ -0,0 +1,58 @@
+FROM scratch as base
+ENV VERSION=1.79.2
+ENV SRC_HASH=966188d7c05fc76eaca115a55893e643dd01a3486f6368733c9ad974fcee7a26
+ENV SRC_FILE=docbook-xsl-${VERSION}.tar.gz
+ENV SRC_SITE=https://github.com/docbook/xslt10-stylesheets/releases/download/release%2F${VERSION}/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/docbook-xml . /
+COPY --from=stagex/zlib . /
+COPY --from=stagex/libxml2 . /
+COPY --from=stagex/musl . /
+RUN tar -xf ${SRC_FILE}
+WORKDIR docbook-xsl-${VERSION}
+RUN --network=none <<-EOF
+    set -eux
+    dest=out/usr/share/xml/docbook/xsl-stylesheets-${VERSION}
+    mkdir -p $dest
+    install -dm755 out
+    install -m644 VERSION VERSION.xsl "$dest"/
+    ln -s xsl-stylesheets-${VERSION} out/usr/share/xml/docbook/xsl-stylesheets-current
+	for dir in assembly common eclipse epub epub3 fo highlighting html \
+		htmlhelp javahelp lib manpages params profiling roundtrip template \
+        website xhtml xhtml-1_1 xhtml5; do
+		install -dm755 $dest/$dir
+		for f in $dir/*.xml $dir/*.xsl $dir/*.dtd $dir/*.ent; do
+			[ -e "$f" ] || continue
+			install -m644 $f $dest/$dir
+		done
+	done
+	install -dm755 out/etc/xml
+	install -m644 -D COPYING out/usr/share/licenses/docbook-xsl/COPYING
+    docbookdir=/usr/share/xml/docbook
+    urls="
+    	http://cdn.docbook.org/release/xsl-nons
+    	http://docbook.sourceforge.net/release/xsl
+    "
+    cp /etc/xml/catalog out/etc/xml/catalog
+    for url in $urls; do
+    	for rewrite in rewriteSystem rewriteURI; do
+    		for version in ${VERSION} current; do
+    			xmlcatalog --noout --add "$rewrite" \
+    				"$url/$version" \
+    				"file://$docbookdir/xsl-stylesheets-$version" \
+    				out/etc/xml/catalog
+    		done
+    	done
+    done
+EOF
+
+FROM build as install
+RUN --network=none mv out /rootfs && ls -Rlah /rootfs
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/flashtools/Containerfile

@@ -0,0 +1,31 @@
+FROM scratch as base
+ENV VERSION=d1e6f12568cb23387144a4b7a6535fe1bc1e79b1
+ENV SRC_HASH=a68cdb4a2e312f96862119a6d829ac900b53d0cbc80caa5632efd43b5b7eed6c
+ENV SRC_FILE=${VERSION}.tar.gz
+ENV SRC_SITE=https://github.com/osresearch/flashtools/archive/${SRC_FILE}
+
+FROM base as fetch
+COPY --from=stagex/busybox . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/make . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/gcc . /
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+RUN tar -xvf ${SRC_FILE}
+WORKDIR flashtools-${VERSION}
+
+FROM fetch as build
+RUN --network=none make all
+
+from build as install
+RUN <<-EOF
+    mkdir -p /rootfs/usr/bin/
+    install -D -m 0755 flashtool /rootfs/usr/bin/
+    install -D -m 0755 peek /rootfs/usr/bin/
+    install -D -m 0755 poke /rootfs/usr/bin/
+    install -D -m 0755 cbfs /rootfs/usr/bin/
+    install -D -m 0755 uefi /rootfs/usr/bin/
+EOF
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/./ /

packages/go-md2man/Containerfile

@@ -0,0 +1,35 @@
+FROM scratch as base
+ENV VERSION=2.0.3
+ENV SRC_HASH=7ca3a04bb4ab83387538235decc42a535097a05d2fb9f2266d0c47b33119501f
+ENV SRC_FILE=v${VERSION}.tar.gz
+ENV SRC_SITE=https://github.com/cpuguy83/go-md2man/archive/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/go . /
+COPY --from=stagex/ca-certificates . /
+RUN tar -xvf ${SRC_FILE}
+WORKDIR go-md2man-${VERSION}
+ENV PWD=/home/user/go-md2man-${VERSION}
+ENV GOPATH=${PWD}/cache/go
+ENV GOCACHE=${PWD}/cache/
+ENV GOWORK=off
+ENV GOPROXY=https://proxy.golang.org,direct
+ENV GOSUMDB=sum.golang.org
+ENV CGO_ENABLED=0
+ENV GOHOSTOS=linux
+ENV GOHOSTARCH=amd64
+RUN mkdir -p ${GOPATH}
+RUN go build -o bin/go-md2man 
+
+from build as install
+RUN <<-EOF
+    mkdir -p /rootfs/usr/bin/
+    cp bin/go-md2man /rootfs/usr/bin/
+EOF
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/./ /

packages/grub/Containerfile

@@ -1,6 +1,6 @@
 FROM scratch as base
-ENV VERSION=2.06
-ENV SRC_HASH=23b64b4c741569f9426ed2e3d0e6780796fca081bee4c99f62aa3f53ae803f5f
+ENV VERSION=2.12
+ENV SRC_HASH=b30919fa5be280417c17ac561bb1650f60cfb80cc6237fa1e2b6f56154cb9c91
 ENV SRC_FILE=grub-${VERSION}.tar.gz
 ENV SRC_SITE=https://mirrors.kernel.org/gnu/grub/${SRC_FILE}
 
@@ -14,34 +14,63 @@ COPY --from=stagex/flex . /
 COPY --from=stagex/gcc . /
 COPY --from=stagex/binutils . /
 COPY --from=stagex/make . /
+COPY --from=stagex/gawk . /
 COPY --from=stagex/musl . /
 COPY --from=stagex/python . /
 COPY --from=stagex/m4 . /
-COPY --from=stagex/linux-headers . / 
+COPY --from=stagex/perl . /
+COPY --from=stagex/pkgconf . /
+COPY --from=stagex/automake . /
+COPY --from=stagex/autoconf . /
+COPY --from=stagex/gettext . /
+COPY --from=stagex/xz . /
+COPY --from=stagex/linux-headers . /
 RUN tar -xf ${SRC_FILE}
 WORKDIR grub-${VERSION}
 RUN --network=none <<-EOF
 	set -eux
-	./configure \
-        --prefix=/usr
-    make -j "$(nproc)" CFLAGS="-Wno-error"
+    sh autogen.sh
+    touch grub-core/extra_deps.lst
+    mkdir build-pc
+    cd build-pc
+	CLFLAGS="-fno-plt" \
+    ../configure \
+        --prefix=/usr \
+        --sysconfdir=/etc \
+        --mandir=/usr/share/man \
+        --localstatedir=/var \
+        --build=x86_64 \
+        --target=x86_64 \
+        --host=x86_64 \
+        --disable-nls \
+        --disable-werror \
+        --with-platform=pc
+    make
+    cd ..
+    mkdir build-efi
+    cd build-efi
+	../configure \
+        --prefix=/usr \
+        --sysconfdir=/etc \
+        --mandir=/usr/share/man \
+        --localstatedir=/var \
+        --build=x86_64 \
+        --target=x86_64 \
+        --host=x86_64 \
+        --disable-nls \
+        --disable-werror \
+        --with-platform=efi \
+        --disable-efiemu
+    make
 EOF
 
 FROM build as install
-RUN make DESTDIR=/rootfs install
-
-FROM base as test
-COPY --from=install /rootfs/. /
-COPY --from=stagex/musl . /
-COPY --from=stagex/busybox . /
-RUN grub-install --version
-RUN /bin/sh <<-EOF
-	set -eux
-    GRUB_VERSION=\$(echo | grub-install --version) 
-	if [ "grub-install (GRUB) ${VERSION}" != "\$GRUB_VERSION" ]; then
-	    echo "Expected grub version is \$VERSION, but got \$GRUB_VERSION"
-	    exit 1
-	fi
+RUN <<-EOF
+    cd build-pc
+    make DESTDIR=/rootfs install-strip
+    cd ..
+    cd build-efi
+    make DESTDIR=/rootfs install-strip
 EOF
 
 FROM stagex/filesystem as package

packages/keyfork/Containerfile

@@ -1,6 +1,6 @@
 FROM scratch AS base
-ENV VERSION=0.2.0
-ENV SRC_HASH=3a1b652a253349798075b2c11a960d9fad194147f3de49006900831b76d609e5
+ENV VERSION=0.2.2
+ENV SRC_HASH=4a70a6ae1c2fcb6448552950ab67536b9d1abcb5d6e41dedd28db24e3979271f
 ENV SRC_FILE=keyfork-v${VERSION}.tar.gz
 ENV SRC_SITE=https://git.distrust.co/public/keyfork/archive/${SRC_FILE}
 

packages/libusb/Containerfile

@@ -0,0 +1,32 @@
+FROM scratch as base
+ENV VERSION=1.0.27
+ENV SRC_FILE=libusb-${VERSION}.tar.bz2
+ENV SRC_SITE=https://github.com/libusb/libusb/releases/download/v${VERSION}/${SRC_FILE}
+ENV SRC_HASH=ffaa41d741a8a3bee244ac8e54a72ea05bf2879663c098c82fc5757853441575
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/linux-headers . /
+RUN tar -xf ${SRC_FILE}
+WORKDIR libusb-${VERSION}
+RUN --network=none <<-EOF
+	set -eux
+	./configure \
+		--prefix=/usr \
+        --disable-udev \
+        --enable-static
+	make -j1
+EOF
+
+FROM build as install
+RUN make DESTDIR=/rootfs install
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/mockgen/Containerfile

@@ -1,6 +1,6 @@
 FROM scratch as base
-ENV VERSION=1.6.0
-ENV SRC_HASH=470174971c3a63361149a30f5b2d3a716a198afeb6cc71daa30712faa7293942
+ENV VERSION=1.7.0-rc.1
+ENV SRC_HASH=69c7b1a9f65644d14c4566835dc56a480e4cf4b34f4cc44c607455bd133fb23e
 ENV SRC_FILE=v${VERSION}.tar.gz
 ENV SRC_SITE=https://github.com/golang/mock/archive/refs/tags/${SRC_FILE}
 

packages/opensc/Containerfile

@@ -0,0 +1,60 @@
+FROM scratch as base
+ENV VERSION=0.25.1
+ENV SRC_HASH=989e6305900d4f2f56ef84aa0da07c044459b4f8a508957a4cdefce6a1367c7b
+ENV SRC_FILE=${VERSION}.tar.gz
+ENV SRC_SITE=https://github.com/opensc/opensc/archive/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/linux-headers . /
+COPY --from=stagex/util-linux . /
+COPY --from=stagex/perl . /
+COPY --from=stagex/openssl . /
+COPY --from=stagex/ncurses . /
+COPY --from=stagex/readline . /
+COPY --from=stagex/autoconf . /
+COPY --from=stagex/gettext . /
+COPY --from=stagex/pcsc-lite . /
+COPY --from=stagex/automake . /
+COPY --from=stagex/libtool . /
+COPY --from=stagex/pkgconf . /
+COPY --from=stagex/m4 . /
+COPY --from=stagex/zlib . /
+RUN tar -xf ${SRC_FILE}
+WORKDIR OpenSC-${VERSION}
+ENV CFLAGS="-U_FORTIFY_SOURCE -Wno-error"
+RUN --network=none <<-EOF
+    set -eux
+    ./bootstrap
+    ./configure \
+        --prefix=/usr \
+        --sysconfdir=/etc \
+        --mandir=/usr/share/man \
+        --infodir=/usr/share/info \
+        --localstatedir=/var \
+        --enable-zlib \
+        --enable-readline \
+        --enable-openssl \
+        --enable-pcsc \
+        --enable-sm \
+        --enable-piv-sm
+    make -j "$(nproc)"
+    make -C src/tools
+EOF
+
+FROM build as install
+RUN --network=none <<-EOF
+    set -eux
+    make DESTDIR=/rootfs install
+    install -D -m644 etc/opensc.conf /rootfs/etc/opensc.conf
+EOF
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/pcsc-lite/Containerfile

@@ -12,12 +12,12 @@ COPY --from=stagex/busybox . /
 COPY --from=stagex/m4 . /
 COPY --from=stagex/musl . /
 COPY --from=stagex/gcc . /
+COPY --from=stagex/libusb . /
 COPY --from=stagex/binutils . /
 COPY --from=stagex/make . /
 COPY --from=stagex/perl . /
 COPY --from=stagex/flex . /
 COPY --from=stagex/pkgconf . /
-COPY --from=stagex/eudev . /
 RUN tar -xvf $SRC_FILE
 WORKDIR pcsc-lite-${VERSION}
 RUN --network=none <<-EOF
@@ -28,8 +28,8 @@ RUN --network=none <<-EOF
 		--mandir=/usr/share/man \
 		--infodir=/usr/share/info \
 		--localstatedir=/var \
-		--disable-libusb \
-		--enable-libudev \
+		--enable-libusb \
+		--disable-libudev \
 		--disable-maintainer-mode \
 		--disable-silent-rules \
 		--without-systemdsystemunitdir \

packages/pcsc-tools/Containerfile

@@ -0,0 +1,37 @@
+FROM scratch as base
+ENV VERSION=1.7.1
+ENV SRC_HASH=0d024b589e15d79eac8506cd67df7b53cf91e9e6a493c8319f33cd29b5f36426
+ENV SRC_FILE=pcsc-tools-${VERSION}.tar.bz2
+ENV SRC_SITE=https://pcsc-tools.apdu.fr/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} ${SRC_FILE}
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/m4 . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/perl . /
+COPY --from=stagex/flex . /
+COPY --from=stagex/pkgconf . /
+COPY --from=stagex/pcsc-lite . /
+RUN tar -xvjf $SRC_FILE
+WORKDIR pcsc-tools-${VERSION}
+RUN --network=none <<-EOF
+	set -eux
+	./configure \
+		--prefix=/usr \
+		--sysconfdir=/etc \
+		--mandir=/usr/share/man \
+		--localstatedir=/var
+	make -j "$(nproc)"
+EOF
+
+FROM build as install
+RUN --network=none make DESTDIR=/rootfs install
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/perl-module-build/Containerfile

@@ -0,0 +1,29 @@
+FROM scratch as base
+ENV VERSION=0.4234
+ENV SRC_HASH=66aeac6127418be5e471ead3744648c766bd01482825c5b66652675f2bc86a8f
+ENV SRC_FILE=Module-Build-${VERSION}.tar.gz
+ENV SRC_SITE=https://search.cpan.org/CPAN/authors/id/L/LE/LEONT/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/perl . /
+RUN tar -xf ${SRC_FILE}
+WORKDIR Module-Build-${VERSION}
+RUN --network=none <<-EOF
+    set -eux
+    perl Build.PL installdirs=vendor
+    perl Build
+EOF
+
+FROM build as install
+RUN --network=none perl Build install destdir="/rootfs"
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/perl-pod-parser/Containerfile

@@ -0,0 +1,28 @@
+FROM scratch as base
+ENV VERSION=1.67
+ENV SRC_HASH=5deccbf55d750ce65588cd211c1a03fa1ef3aaa15d1ac2b8d85383a42c1427ea
+ENV SRC_FILE=Pod-Parser-${VERSION}.tar.gz
+ENV SRC_SITE=https://search.cpan.org/CPAN/authors/id/M/MA/MAREKR/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/make . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/perl . /
+RUN tar -xf ${SRC_FILE}
+WORKDIR Pod-Parser-${VERSION}
+ENV SOURCE_DATE_EPOCH=1
+RUN --network=none <<-EOF
+    set -eux
+    perl Makefile.PL installdirs=vendor
+    make
+EOF
+
+FROM build as install
+RUN --network=none make DESTDIR="/rootfs" install
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/po4a/Containerfile

@@ -0,0 +1,43 @@
+FROM scratch as base
+ENV VERSION=0.73
+ENV SRC_HASH=ad5edc38bf004807843622fddbf67bd5ac604fc16e14c2bfefa7b07718ad21f3
+ENV SRC_FILE=v${VERSION}.tar.gz
+ENV SRC_SITE=https://github.com/mquinson/po4a/archive/refs/tags/${SRC_FILE}
+
+FROM base as fetch
+ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
+
+FROM fetch as build
+COPY --from=stagex/busybox . /
+COPY --from=stagex/gcc . /
+COPY --from=stagex/binutils . /
+COPY --from=stagex/make . /
+COPY --from=stagex/musl . /
+COPY --from=stagex/perl . /
+COPY --from=stagex/perl-module-build . /
+COPY --from=stagex/perl-pod-parser . /
+COPY --from=stagex/diffutils . /
+COPY --from=stagex/gettext . /
+COPY --from=stagex/libxml2 . /
+COPY --from=stagex/libxslt . /
+COPY --from=stagex/docbook-xml . /
+COPY --from=stagex/docbook-xsl . /
+COPY --from=stagex/zlib . /
+COPY --from=stagex/m4 . /
+COPY --from=stagex/autoconf . /
+COPY --from=stagex/pkgconf . /
+RUN tar -xf ${SRC_FILE}
+WORKDIR po4a-${VERSION}
+RUN --network=none <<-EOF
+	set -eux
+    perl Build.PL \
+        --installdirs=vendor \
+        --create_packlist=0
+    LC_ALL=en_US.UTF-8 perl Build
+EOF
+
+FROM build as install
+RUN --network=none ./Build install --destdir="/rootfs"
+
+FROM stagex/filesystem as package
+COPY --from=install /rootfs/. /

packages/talosctl/Containerfile

@@ -1,6 +1,6 @@
 FROM scratch as base
-ENV VERSION=1.6.6
-ENV SRC_HASH=8735500c987c61802d113176f5578b11c783b169e6ff8e352e554b1c3cb63caa
+ENV VERSION=1.7.2
+ENV SRC_HASH=7f16510394ebe12cd405bc9d2cf4c6ef2c8baf6213006d52c05dcbce0bf06100
 ENV SRC_FILE=v${VERSION}.tar.gz
 ENV SRC_SITE=https://github.com/siderolabs/talos/archive/refs/tags/${SRC_FILE}
 ENV GOPATH=/cache/go

packages/xz/Containerfile

@@ -1,9 +1,9 @@
 FROM scratch as base
 ARG ARCH=x86_64
-ENV VERSION=5.4.6
-ENV SRC_HASH=b92d4e3a438affcf13362a1305cd9d94ed47ddda22e456a42791e630a5644f5c
-ENV SRC_FILE=xz-${VERSION}.tar.xz
-ENV SRC_SITE=https://fossies.org/linux/misc/${SRC_FILE}
+ENV VERSION=5.6.2
+ENV SRC_HASH=92a439948bba24c2bc25bb67a087a19194905209c56b5e600bc94fd2a472e687
+ENV SRC_FILE=v${VERSION}.tar.gz
+ENV SRC_SITE=https://github.com/tukaani-project/xz/archive/refs/tags/${SRC_FILE}
 
 FROM base as fetch
 ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
@@ -14,22 +14,30 @@ COPY --from=stagex/binutils . /
 COPY --from=stagex/musl . /
 COPY --from=stagex/make . /
 COPY --from=stagex/gcc . /
+COPY --from=stagex/m4 . /
+COPY --from=stagex/perl . /
+COPY --from=stagex/autoconf . /
+COPY --from=stagex/automake . /
+COPY --from=stagex/libtool . /
+COPY --from=stagex/gettext . /
+COPY --from=stagex/po4a . /
 RUN tar -xf ${SRC_FILE}
 WORKDIR xz-${VERSION}
 RUN --network=none <<-EOF
-	set -ex
-	./configure \
-		--build=${ARCH}-linux-musl \
-		--host=${ARCH}-linux-musl \
-		--prefix=/usr \
-		--sysconfdir=/etc \
-		--mandir=/usr/share/man \
+    set -ex
+    ./autogen.sh
+    ./configure \
+        --build=${ARCH}-linux-musl \
+        --host=${ARCH}-linux-musl \
+        --prefix=/usr \
+        --sysconfdir=/etc \
+        --mandir=/usr/share/man \
         --infodir=/usr/share/info \
         --localstatedir=/var \
         --disable-rpath \
         --disable-werror \
         --disable-doc
-	make -j "$(nproc)"
+    make -j "$(nproc)"
 EOF
 
 FROM build as install