fix: the project packages come from the Keel archive, not the build host staging #15

Merged

marcos-mendez merged 3 commits from fix/keel-archive-not-staging into main

2026-10-07 20:17:49 -03:00

marcos-mendez commented

2026-10-07 19:36:32 -03:00

(Migrated from github.com)

Supersedes #13 (its commits are included). Same change as Keel-Linux/keel-mariadb#23.

Staging gone. No copy of the build host's trixie-staging in the bootstrap, no 1001 pin in conf.d/main, no bin/keel-archive-check. That distribution holds inithooks keel5, confconsole keel2 and keel 0.3.5; pinned at 1001 the upgrade would have downgraded the layer.
Keel archive. inithooks, confconsole and keel come from archive.keellinux.org through the parent layer's source and 990 pin (common#30), trixie-testing included with KEEL_APT_TRACK=testing (common#32). conf.d/main updates and upgrades them, then bin/keel-project-packages (copied in by root.patched/pre, removed by conf.d/main) requires each to be apt's candidate from the Keel archive in the track's suite. The version floors go.
Overlay (from #13): no keel.sources, no 1001 pin.

Tests: tests/apt-files.bats, tests/project-packages.bats. Coverage: every measured file at 100 percent locally.

appliance / boot-published-layer cannot pass: no postgresql layer is published; the maintainer bypasses it.

Supersedes #13 (its commits are included). Same change as Keel-Linux/keel-mariadb#23. - **Staging gone.** No copy of the build host's `trixie-staging` in the bootstrap, no 1001 pin in conf.d/main, no `bin/keel-archive-check`. That distribution holds inithooks keel5, confconsole keel2 and keel 0.3.5; pinned at 1001 the upgrade would have downgraded the layer. - **Keel archive.** inithooks, confconsole and keel come from archive.keellinux.org through the parent layer's source and 990 pin (common#30), trixie-testing included with `KEEL_APT_TRACK=testing` (common#32). conf.d/main updates and upgrades them, then `bin/keel-project-packages` (copied in by `root.patched/pre`, removed by conf.d/main) requires each to be apt's candidate from the Keel archive in the track's suite. The version floors go. - **Overlay** (from #13): no `keel.sources`, no 1001 pin. Tests: `tests/apt-files.bats`, `tests/project-packages.bats`. Coverage: every measured file at 100 percent locally. `appliance / boot-published-layer` cannot pass: no postgresql layer is published; the maintainer bypasses it.