| A package mirror needs a host-arch index, even for a phone port |
trap |
generic |
proven |
| Correct downloaded bytes fail when checksums are out of source order |
trap |
generic |
proven |
| apk-tools 3 trusts only /etc/apk/keys, and the keys packages install to /usr/share/apk/keys – so a fresh rootfs can install nothing at all |
trap |
generic |
proven |
| Base a kernel aport on pristine kernel.org or a pinned tag — never an untagged vendor fork |
technique |
generic |
proven |
| Every manifest commit predating pkg fork says unknown |
trap |
device:google-taimen |
proven |
