Skip to content

CHANGELOG.md

Latest commit

 

History

History
1416 lines (1120 loc) · 62.3 KB

CHANGELOG.md

File metadata and controls

1416 lines (1120 loc) · 62.3 KB

Changelog

All notable changes to GRPM will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.9.4 - 2026-02-09 - Bash Interpreter Hardening

Ebuild Metadata Extraction & Signature File Filtering

Major hardening of the bash interpreter (mvdan.cc/sh) for reliable ebuild metadata extraction. Fixes incorrect download of GPG signature files (.sig, .asc) that should only be fetched when verify-sig USE flag is enabled.

Fixed

  • Signature file download bug — Packages with verify-sig? ( *.sig ) in SRC_URI no longer download signature files when verify-sig is disabled
  • stripFunctionBodies — Phase function bodies (src_compile, src_test, etc.) are stripped before metadata extraction. These contain advanced bash unsupported by mvdan.cc/sh (brace expansion in variable names, ${var@a} parameter attributes) but aren't needed for SRC_URI evaluation
  • Eclass stdout pollution — Eclass sourcing now redirects stdout to prevent usev/echo output from corrupting SRC_URI capture
  • Silent manifest fallbacks removed — 4 fallback paths that silently returned unfiltered manifest distfiles now properly filter signature files or propagate errors (aligns with Portage behavior)
  • ver_cut/ver_rs default to PV — Eclass version functions now default to $PV when version argument is omitted
  • S variable resolution — Correct $S variable computation, unpack directory detection, and version selection
  • Econf ECONF_SOURCE — econf now respects ECONF_SOURCE and reads CHOST/CBUILD from environment
  • Brace expansion propagation — All bash variables propagated to eclass executor with brace expansion support
  • Pre-inherit split — Proper handling of pre-inherit ebuild content for type -P workaround and BASH_VERSINFO
  • Multilib ABI defaults — Only enable amd64 ABI in multilib defaults

Added

  • .tar.lz (lzip) unpack support — Uses external decompressor (xz >= 5.4.0 / plzip / lzip), matching Portage unpacker.eclass strategy. Fixes dev-build/make build.
  • extractRawSrcURI fallback — When bash evaluation fails, extracts SRC_URI= and SRC_URI+= directly from ebuild text via regex, preserving USE conditionals for proper filtering
  • filterSignatureFiles safety net — All manifest fallback paths filter .sig/.asc/.sign files when verify-sig is disabled
  • BASH_VERSINFO emulation — Forces eclasses to use bash 4 code paths, avoiding unsupported bash 5+ features (${var@a})
  • 33 new tests — Professional test coverage for all new functions (stripFunctionBodies, filterSignatureFiles, extractRawSrcURI, isFunctionDefinition, etc.)

Improved

  • golangci-lint clean — 0 lint issues (removed dead code, fixed errcheck, added nolint directives on inherently complex functions)

Verified on Real Gentoo

  • sys-apps/findutils — only .tar.xz downloaded (no .sig)
  • sys-apps/sed — only .tar.xz downloaded (no .sig)
  • dev-build/make — only .tar.lz downloaded (no .sig)
  • 17+ packages tested in previous sessions (zlib, gawk, libffi, bison, m4, etc.)

0.9.3 - 2026-01-20

Install Helper Path Resolution & Unpack Phase Fix

Hotfix for packages with non-standard archive names and relative paths in install helpers.

Fixed

  • Install helpers path resolution — All install helpers (dobin, dosbin, doins, etc.) now correctly resolve relative paths against $S (source directory)
  • Unpack phase uses $A variable — phaseUnpack() now uses the $A variable from Manifest instead of hardcoded ${PN}-${PV}.tar.* pattern
  • tree package fix — app-text/tree now builds successfully (archive is unix-tree-2.2.1.tar.bz2, not tree-2.2.1.tar.*)

Changed

  • Centralized path resolution — Added resolveSourcePath() helper method following DRY principle
  • Updated helpers: Dobin, Dosbin, Newbin, Newsbin, Doexe, Doins, Newins, Dolib, DolibSo, DolibA, Doheader, Doinitd

Technical Details

The fix addresses two issues:

  1. Archive naming: Some packages use non-standard archive names (e.g., unix-tree-*.tar.bz2 instead of tree-*.tar.*)
  2. Relative paths: Install helpers like dobin tree expected files relative to $S, but Go's os.Stat() looked in current directory

0.9.2 - 2026-01-19

Emerge Installed Package Filtering

Fixes inconsistency where resolve correctly filters installed packages but emerge showed full dependency tree.

Fixed

  • emerge ignores installed packages — grpm emerge -p mc now shows 1 package instead of 93 (#61)

Added

  • Portage-compatible flags for emerge:
    • --deep, -D — Traverse dependencies of already-installed packages
    • --with-bdeps — Include build-time dependencies for installed packages
    • --emptytree, -e — Assume no packages installed (full dependency tree)
    • --vardb — Custom path to installed packages database

Example

# Show only packages to install (default, Portage-compatible)
grpm emerge -p mc                    # 1 package

# Show full dependency tree
grpm emerge -e -p mc                 # 93 packages

# Deep update with build deps
grpm emerge -D --with-bdeps @world

0.9.1 - 2026-01-19

Enterprise CLI, Dependency Filtering & Mirror Fallback

Major release combining CLI improvements, Portage-compatible dependency filtering, and mirror fallback.

Fixed

  • Critical: Dependency explosion — grpm resolve app-misc/mc now shows 1 package instead of 2094
    • Root cause: USE-conditional dependencies were included regardless of USE flag state
    • Root cause: All dependencies were traversed even if already installed
    • Root cause: BDEPEND was included for packages already built

Added

  • Portage-compatible resolution options:
    • --deep — Traverse dependencies of already-installed packages
    • --with-bdeps — Include build-time dependencies for installed packages
    • --emptytree — Show full dependency tree (assume nothing installed)
    • --vardb — Custom path to installed packages database
  • DepType tracking — Constraints now carry dependency type (RDEPEND, BDEPEND, DEPEND, IDEPEND, PDEPEND)
  • VarDB integration — Resolver loads /var/db/pkg to check installed packages
  • Enterprise CLI Help Formatter — Professional help output comparable to Cobra
    • Combined short/long flags display (-p, --pretend)
    • Command descriptions with examples
    • "See also" cross-references
  • Shell Completion — Full completion support for bash, zsh, and fish
    • grpm completion bash > /etc/bash_completion.d/grpm
    • grpm completion zsh > ~/.zsh/completions/_grpm
    • grpm completion fish > ~/.config/fish/completions/grpm.fish
  • Man Page Generation — Unix-style manual pages
    • grpm doc man — Main grpm.1 man page
    • grpm doc man emerge — Per-command man pages
    • grpm doc man --all --dir ./man — Generate all pages
  • "Did You Mean?" Suggestions — Typo correction using Levenshtein distance
  • Mirror Fallback — Portage-compatible distfile fetching (GENTOO_MIRRORS → SRC_URI)

Changed

  • Default behavior — Resolver now only shows packages that need to be installed
  • Mock mode — Automatically implies --emptytree (no installed packages)
  • Type-safe CommandName constants — Compile-time safety for command routing

Example

# Show only packages to install (Portage-compatible default)
grpm resolve app-misc/mc           # 1 package (mc)

# Show full dependency tree (for analysis)
grpm resolve --emptytree app-misc/mc  # 95 packages

0.9.0 - 2026-01-19

Enterprise Tool Check Refactoring

Portage-compatible tool handling following enterprise patterns.

Changed

  • Tool check is now opt-in — Replaced --skip-tool-check (opt-out) with --check-tools (opt-in)
  • BDEPEND handling — Tool dependencies are now handled via BDEPEND like Portage, not pre-flight checks
  • Default behavior — grpm emerge @world works without tool check by default
  • Error messages — Updated to suggest installing missing tools instead of skipping check

Fixed

  • Collision detection — Only files are now checked for collisions, directories are skipped (was counting 147 collisions for 49 files)
  • VarDB persistence — Packages are now properly tracked in /var/db/pkg after installation
  • Shared file collision — /usr/share/info/dir excluded from collision check (GNU Info directory file shared across packages)
  • Collision logging — Added detailed collision reporting for better diagnostics

Removed

  • --skip-tool-check flag — Replaced with --check-tools (breaking change)

Technical Notes

  • Portage relies on BDEPEND as regular dependencies, not global tool validation
  • Pre-checking tools for ALL packages (2000+ for @world) was an anti-pattern causing false positives
  • One package with cargo.eclass was requiring Rust for entire @world
  • Now follows enterprise pattern: BDEPEND + natural build failures + rich error reporting

Migration

# Before (v0.8.x):
grpm emerge --skip-tool-check @world

# After (v0.9.0):
grpm emerge @world                    # No flag needed (default)
grpm emerge --check-tools @world      # Optional pre-validation

0.8.4 - 2026-01-19

Package Set Expansion Hotfix

Fix for package sets not working in resolve/install/emerge/fetch commands.

Added

  • SetExpander service (internal/sets/expander.go) — Unified interface for expanding package sets across all CLI commands
  • SetRegistry — Central registry for all known sets with pluggable architecture
  • Set support in all commands:
    • grpm resolve @world — Resolve dependencies for all world packages
    • grpm resolve @system — Resolve dependencies for all system packages
    • grpm install @selected — Install packages from world file
    • grpm emerge @world — Build all world packages from source
    • grpm fetch @system — Download sources for system packages

Fixed

  • @system returning empty packages — Profile symlink (/etc/portage/make.profile) is now properly resolved before storing path, critical for profile inheritance where parent paths are relative to actual profile directory
  • Multi-parent profile inheritance — parent file can contain multiple lines (multiple parent profiles), now ALL parents are recursively traversed instead of just the first one
  • Profile cycle detection — Added visited set to prevent infinite loops in profile chain

Technical Notes

  • profile.LoadProfile() now uses filepath.EvalSymlinks() to resolve symlinks
  • SystemSet.collectProfilePackages() is recursive with cycle detection via visited map
  • Tested on real Gentoo WSL2: 50 system packages correctly found from full profile chain

0.8.3 - 2026-01-19

SRC_URI Evaluation Hotfix

Critical fix for packages with dynamic SRC_URI generation (#50).

Added

  • MetadataEvaluator (internal/ebuild/metadata.go) — Evaluates ebuild metadata by sourcing with eclass support via mvdan.cc/sh interpreter
  • EvaluateSrcURI() — Extracts evaluated SRC_URI after full eclass execution (e.g., toolchain.eclass for gcc)
  • ExtractEbuildMetadata() — Generic metadata extraction for multiple variables

Fixed

  • gcc distfile selection (#50) — grpm fetch now downloads only version-specific files (3 files) instead of ALL distfiles from Manifest (70+ files)
  • Dynamic SRC_URI evaluation — Packages using eclasses to generate SRC_URI (gcc, chromium, etc.) now work correctly
  • Manifest filtering — Only distfiles present in evaluated SRC_URI are included
  • ver_cut version extraction — PMS-compliant ver_cut implementation for correct SNAPSHOT calculation (e.g., gcc-13-20250807 instead of broken gcc-13.4.1_p20250807-20250807)

Technical Notes

  • mvdan.cc/sh workaround — Custom ver_cut implementation uses indexed variables instead of array slicing due to bugs in mvdan.cc/sh interpreter (array slicing broken in subshells). See TODO in internal/metadata/evaluator.go for upstream issue tracking.

Changed

  • getDistfilesWithURIs() now uses two-tier evaluation: interpreter first, regex fallback

0.8.2 - 2026-01-17

UX Improvements Release

User experience improvements and bug fixes based on community feedback.

Added

  • emerge --info command — Displays system environment like Portage (Go version, platform, memory, repos, installed packages)
  • USE flags in --pretend output — Shows USE="flag1 -flag2" in emerge pretend mode
  • User-friendly error messages — Clear error messages with package suggestions when packages not found
  • Similar package search — Fuzzy matching algorithm suggests similar packages on typos (e.g., "neofatch" → "neofetch")
  • Per-package tool check — grpm tools --check now shows which tools are needed by specific eclasses

Fixed

  • Search version display — Versions now sorted correctly using PMS version comparison
  • Info command filtering — Respects mask and keyword filtering like resolve/emerge
  • Dependency deduplication — Info output no longer shows duplicate dependencies

Changed

  • Error messages now use errors.As() for proper wrapped error handling

0.8.1 - 2026-01-17

Package Mask, Keywords Filtering & Atom Parsing Fix

Solver now respects package.mask and KEYWORDS, plus critical atom parsing fix (#45, #46, #48).

Added

  • MaskManager (internal/mask/) — Manages masks from multiple sources with proper priority
  • Multi-source mask loading — Repository profiles/package.mask, profile cascade, user /etc/portage/package.mask
  • User unmask support — /etc/portage/package.unmask overrides all masks
  • KEYWORDS filtering — Solver filters packages by KEYWORDS vs ACCEPT_KEYWORDS
  • Architecture detection — Auto-detects system architecture for default ACCEPT_KEYWORDS
  • Keywords field in Package — pkg.Package now includes Keywords field
  • Solver integration — NewResolverWithFilters() constructor for combined mask + keyword filtering
  • CLI integration — Resolve and emerge commands now use full Portage-compatible filtering
  • loadPackageFromAtom() — New helper for PMS-compliant atom loading with version support
  • Comprehensive atom parsing tests — 18 test cases covering version operators, complex versions, edge cases

Fixed

  • gcc-16.0.9999 selection bug — Unkeyworded and masked packages are now properly filtered
  • Solver now selects gcc-15.2.1 (same as Portage) instead of unkeyworded gcc-16.0.9999
  • Manifest path bug (#45) — Versioned atoms like =sys-devel/gcc-13.4.1_p20250807 now correctly parse to sys-devel/gcc for path construction
  • info command — Now properly handles versioned atoms (grpm info =sys-devel/gcc-13.4.1)
  • fetch command — Fixed atom parsing in parsePackageAtom() to use pkg.ParseAtom().CP()

0.8.0 - 2026-01-17

Configuration Management Release

Full Portage configuration compatibility (#40, #41, #42):

Added

  • Dynamic make.conf parser — Variable expansion (${VAR}, $VAR), source directive, circular reference prevention
  • repos.conf support — INI format parsing, [DEFAULT] main-repo, Portage fallback chain (repos.conf → PORTDIR → auto-detect)
  • package.use patterns — Full atom syntax (=, >=, ~, =*, slots, wildcards), priority-based USE flag resolution, USE_EXPAND support

0.7.11 - 2026-01-17

Security Release: Path Traversal Prevention

Security Advisory: Path Traversal Vulnerability (CWE-22)

Fixed a path traversal vulnerability that could allow malicious package names to access files outside the repository directory. Reported by Max Steel via Gentoo Forums.

CVE: Pending assignment Severity: High Affected Versions: < 0.7.11 Issue: #36

Fixed

Path Traversal Prevention (#36)

  • Input validation — Category and package names are now validated against PMS format
    • Rejects .., .hidden, null bytes, and other invalid characters
    • Enforces PMS-compliant naming: [A-Za-z0-9][A-Za-z0-9+_.-]* for categories
    • Enforces PMS-compliant naming: [A-Za-z0-9][A-Za-z0-9+_-]* for packages (dots forbidden)
  • Path containment — Defense-in-depth check ensures paths stay within base directory
    • Uses filepath.Clean() and prefix comparison
    • Protects against symlink-based escapes

Added

  • New security utilities (internal/pkg/pathutil.go)
    • ValidateCategoryPackageName() — Combined validation for category/package pairs
    • ValidatePathContainment() — Verify path stays within base directory
    • SafeJoinPath() — Safe path joining with traversal protection
  • Exported validators (internal/pkg/atom.go)
    • IsValidCategory() — PMS-compliant category validation (was private)
    • IsValidPackageName() — PMS-compliant package name validation (was private)
  • Path traversal test suites (internal/repo/portage_test.go)
    • TestPortageRepository_LoadPackage_PathTraversal — 12 attack vectors
    • TestPortageRepository_LoadPackageVersion_PathTraversal — 4 attack vectors
    • TestPortageRepository_GetAllVersions_PathTraversal — 5 attack vectors

Changed

  • internal/repo/portage.go — LoadPackage(), LoadPackageVersion(), GetAllVersions() now validate input
  • internal/repo/cached_portage.go — LoadPackage(), GetAllVersions() now validate input
  • internal/state/vardb.go — Write operations validate category/package + path containment

Technical Details

  • Attack vectors blocked:
    • ../../../etc/passwd — Parent directory traversal
    • sys-libs/../../etc — Package name traversal
    • .hidden/pkg — Hidden directory access
    • sys\x00libs/zlib — Null byte injection
  • All 86+ security test cases pass
  • Zero issues from golangci-lint

Upgrade Recommendation

All users should upgrade immediately. This vulnerability could potentially allow reading arbitrary files on the system if a malicious package name was processed.

0.7.10 - 2026-01-17

Docker Layer Caching Support

Build dependencies separately for optimized Docker builds

Requested by community (#33) for Docker layer caching optimization.

Added

  • --onlydeps / -o flag for emerge — Build dependencies only, skip target package(s)
    • Useful for Docker layer caching: pre-build dependencies in a separate layer
    • Example: grpm emerge --onlydeps app-misc/hello builds only hello's dependencies
    • Compatible with versioned atoms: grpm emerge -o "=sys-devel/gcc-13.4.1"
    • Portage-compatible behavior (same as emerge --onlydeps)

Fixed

  • Versioned atoms now correctly select specified version (#32)
    • Previously: =sys-devel/gcc-13.4.1_p20250807 would incorrectly select gcc-16.0.9999 (latest)
    • Now: Resolver properly uses version from SAT solver solution via LoadPackageVersion()
    • Root cause: buildResultFromSolution() was ignoring the version and loading latest instead

Technical Details

  • internal/cli/emerge.go — Added --onlydeps flag and filterTargetPackages() function
  • internal/cli/emerge_test.go — 6 test cases for atom filtering
  • internal/repo/repository.go — Added LoadPackageVersion() to Repository interface
  • internal/repo/portage.go — Implemented LoadPackageVersion() for exact version loading
  • internal/solver/resolver.go — Fixed buildResultFromSolution() to use LoadPackageVersion()

0.7.9 - 2026-01-16

Versioned Atom Support

Fix for Issue #30: emerge now correctly handles versioned atoms

Commands like grpm emerge "=sys-devel/gcc-13.4.1_p20250807" now work as expected.

Fixed

  • Versioned atom parsing in resolver — Atoms with version operators (=, >=, <, etc.) are now properly parsed before package lookup (#30)
    • Previously: =sys-devel/gcc-13.4.1_p20250807 was passed directly to filesystem, causing "no such file or directory"
    • Now: Atom is parsed, category/package extracted, version constraint applied via FindByAtom()

Added

  • loadPackageFromAtom() helper in resolver for PMS-compliant atom parsing
  • Regression tests for versioned atom handling (resolver_test.go)

Technical Details

  • internal/solver/resolver.go — New loadPackageFromAtom() function, modified Resolve() to track root package names
  • internal/solver/resolver_test.go — 3 new test functions covering Issue #30 scenarios

0.7.8 - 2026-01-14

Alternative Root Installation

Install packages to chroot, stage tarballs, or cross-compilation targets

Added

  • --root flag for emerge — Install packages to alternative root directory
    • Equivalent to $ROOT environment variable in Portage
    • Useful for building stage tarballs, chroots, cross-compilation
    • VarDB created at {root}/var/db/pkg
    • Example: grpm emerge --root /mnt/gentoo app-misc/hello

0.7.7 - 2026-01-13

E2E Integration Tests & CI Enhancement

Professional E2E test suite for full workflow validation

Adds comprehensive end-to-end tests that would have caught the v0.7.6 version selection bug automatically. Tests run in CI with real Gentoo.

Added

E2E Integration Tests (tests/integration/e2e_test.go)

  • TestE2E_VersionSelection_RealRepository — Version selection on real Gentoo tree
    • Validates correct version is selected for app-misc/hello, dev-libs/openssl, app-shells/bash
    • Catches alphabetical vs PMS version comparison bugs
  • TestE2E_VersionSelection_EdgeCases — 5 edge cases with controlled repository
    • patch_vs_base: 2.12 vs 2.12.2
    • numeric_comparison: 1.9 vs 1.10 vs 1.11
    • suffix_ordering: 1.0_alpha < 1.0_beta < 1.0_rc1 < 1.0
    • revision_comparison: 2.0-r1 vs 2.0-r10 (numeric, not string)
    • complex_gentoo_real: Real-world version sets
  • TestE2E_ResolveWorkflow — Full dependency resolution workflow
  • TestE2E_DependencyChain — Deep dependency chain resolution
  • TestE2E_AtomMatching — Atom constraints (>=, <, =)
  • TestE2E_CachedRepository — Cache consistency verification

CI Integration

  • E2E tests added to integration.yml — Runs in Gentoo container
    • New step "Run E2E Tests" before Autotools/CMake/Meson tests
    • Uses real /var/db/repos/gentoo repository
    • 10-minute timeout (E2E tests are fast)
  • Manual trigger support — Filter with E2E in workflow dispatch

Test Results (Gentoo WSL2)

TestE2E_VersionSelection_RealRepository: PASS (0.18s)
  - app-misc/hello: 2.12.2 (correct!)
  - dev-libs/openssl: 3.6.9999 (from 14 versions)
  - app-shells/bash: 9999 (from 20 versions)
TestE2E_VersionSelection_EdgeCases: PASS (0.01s)
TestE2E_ResolveWorkflow: PASS (0.02s)
TestE2E_AtomMatching: PASS (0.00s)
TestE2E_CachedRepository: PASS (0.16s)

Changed

  • .github/workflows/integration.yml — Added E2E test step with Gentoo environment

0.7.6 - 2026-01-13

Critical Bug Fix: Version Selection

Fixes incorrect package version selection

GRPM was selecting hello-2.12 instead of hello-2.12.2 because versions were sorted alphabetically, not by Portage version comparison algorithm.

Fixed

Version Selection Bug

  • Correct Portage version sorting — LoadPackage now uses pkg.CompareVersions() for proper version ordering
    • Previously: versions[len(versions)-1] took last element alphabetically
    • Alphabetically: "2.12.2" < "2.12" (string comparison), selecting wrong version
    • Now: Sorts using PMS Chapter 3 version comparison algorithm
    • Example: 2.12.2 > 2.12 > 2.10 > 2.9 (correct numeric ordering)
    • Fixed in both PortageRepository and CachedPortageRepository

Added

Emerge CLI Flags

  • --replace / -R — Replace existing package (ignore collisions with same package)
    • Unmerges old version before installing new one
    • Implements Portage's "protect-owned" behavior
  • --force / -f — Force installation (skip collision checks)
    • Useful for overwriting untracked files from previous failed installs
    • Bypasses file existence checks during merge

Comprehensive Version Selection Tests

  • New test file: internal/repo/version_selection_test.go
    • TestLoadPackage_SelectsHighestVersion — 8 test cases covering:
      • Patch versions (2.12 vs 2.12.2)
      • Minor versions (1.9 vs 1.10)
      • Major versions (2.0 vs 10.0)
      • Suffix ordering (1.0_alpha < 1.0_beta < 1.0_rc1 < 1.0)
      • Revisions (1.0 < 1.0-r1 < 1.0-r2)
      • Letter suffixes (1.0a < 1.0b < 1.0)
      • Post-release patches (1.0 < 1.0_p1 < 1.0_p2)
    • TestLoadPackage_SingleVersion — Single ebuild handling
    • TestLoadPackage_NoEbuilds — Error handling for empty packages
    • BenchmarkLoadPackage_ManyVersions — Performance benchmark

Changed

  • internal/cli/emerge.go — Added --replace, --force flags with full pipeline support
  • internal/repo/portage.go — Version sorting before selection
  • internal/repo/cached_portage.go — Version sorting + logging migration
  • internal/repo/cache/cached_repo.go — Logging migration to internal/logging
  • internal/repo/manager.go — Logging migration to internal/logging

Technical Details

  • Bug discovered during real Gentoo WSL2 testing
  • Portage shows hello-2.12.2, GRPM was building hello-2.12
  • Root cause: alphabetic sorting instead of version comparison
  • Fix verified with comprehensive test suite
  • Zero issues from golangci-lint

0.7.5 - 2026-01-13

Build Process & Output Quality Release

Professional Output and Reliable Builds

This release focuses on two critical areas: fixing source build reliability and improving output quality to match Portage's professional appearance.

Added

Unified Logging Infrastructure

  • Complete codebase logging refactor — All output now uses internal/logging/ package
    • Solver, CLI, and ebuild modules migrated from log.Printf to unified logging
    • Debug output suppressed by default (only shown with -v or --verbose)
    • Consistent Portage-style formatting across all commands
  • New package-level convenience functions:
    • logging.Verbose() — Verbose-level messages
    • logging.Debug() — Debug-level messages (hidden by default)
    • logging.Action(), logging.Info(), logging.Warn(), logging.Error()

Fixed

Source Build Reliability

  • Ebuild S variable parsing — Custom source directories are now properly handled
    • Added ParseSVariable() with bash parameter expansion support
    • Supports ${var/pattern/replacement}, ${var^}, ${var%pattern}, etc.
    • Enables packages like screenfetch with S=${WORKDIR}/${PN/f/F}-${PV}
    • Previously always used default S=${WORKDIR}/${P}, causing "no such file" errors
  • Tar/Zip timestamp preservation — Archive extraction now preserves original file timestamps
    • Critical fix for automake-based packages (hello, glibc, etc.)
    • Added os.Chtimes() calls after file extraction
    • Directory timestamps restored in reverse order (deepest first)
    • Previously all files got current timestamp, causing make to trigger regeneration
    • Symptom: aclocal-1.16: command not found during build
  • Package replacement mode — Replace mode now works correctly
    • Fixed collision detection to compare by package name (not full atom)
    • Files owned by same package (any version) no longer cause collisions
    • Added findInstalledVersion() to detect existing installations
    • When --replace/-R used: old package is unmerged before new merge
    • Implements Portage's "protect-owned" behavior
  • Work directory cleanup timing — Fixed premature cleanup of build directory
    • Build directory now preserved until after installation completes
    • Cleanup happens in installFromImageDir after successful merge
    • Previously cleanup occurred immediately after ExecutePhases, before install

CLI Improvements

  • CLI --help exit code — All CLI commands now return exit code 0 when using --help
    • Previously returned exit code 1 with "Error: flag: help requested"
    • Fixed in 13 places across 6 files (emerge, tools, fetch, analyze, commands, app)
    • Uses errors.Is(err, flag.ErrHelp) for proper error comparison
  • mirror:// URL expansion in emerge — Emerge command now properly expands mirror:// URLs
    • Added SRC_URI parsing in ebuild executor (internal/ebuild/executor.go)
    • Uses profiles/thirdpartymirrors for URL expansion
    • Example: mirror://gnu/hello/hello-2.12.tar.gz → https://ftp.gnu.org/gnu/hello/hello-2.12.tar.gz
    • Previously only fetch command supported mirror expansion, now emerge does too
  • Ebuild phase function detection — Custom ebuild functions are now properly detected
    • Added ParseEbuild() call in emerge command to populate ParsedEbuild
    • Enables proper dispatch to custom src_configure, src_install, etc. functions
    • Previously always used default phase implementations

Changed

  • internal/solver/resolver.go — Uses logging.Info() for resolution output
  • internal/cli/app.go — Global logging level from -v/-vv/-vvv flags
  • internal/cli/emerge.go — Full migration to unified logging
  • internal/cli/install_real.go — Full migration to unified logging
  • internal/cli/analyze.go — Full migration to unified logging
  • internal/cli/fetch.go — Full migration to unified logging
  • internal/cli/commands.go — Full migration to unified logging
  • internal/ebuild/executor.go — Debug output via logging.Debug()
  • internal/ebuild/phases_impl.go — Debug output via logging.Debug()
  • internal/repo/portage.go — Debug output via logging.Debug()

Technical Details

  • Tested on real Gentoo WSL2: resolve, update, emerge, fetch, analyze, tools
  • Zero issues from golangci-lint after refactoring
  • All tests pass
  • Output matches Portage's emerge format for familiarity

0.7.4 - 2026-01-13

Critical Hotfix Release

Fixes for Real-World Gentoo Usage

Two critical bugs discovered during Gentoo WSL2 testing are now fixed: mirror:// URL expansion and rsync sync hanging.

Fixed

  • mirror:// URL expansion — Third-party mirror URLs are now properly expanded
    • Added ThirdPartyMirrors parser for profiles/thirdpartymirrors file
    • mirror://gnu/, mirror://sourceforge/, etc. now resolve to real HTTP URLs
    • Previously grpm fetch failed with "unsupported protocol scheme mirror"
    • Example: mirror://gnu/hello/hello-2.12.tar.gz now expands to https://ftp.gnu.org/gnu/hello/hello-2.12.tar.gz and fallback mirrors
  • rsync sync hanging — Native Go rsync no longer hangs on real Gentoo mirrors
    • Removed debug code that limited sync to 10 files
    • Added timeout handling with connection deadline
    • Added fallback to system rsync binary if native implementation times out
    • Context cancellation now properly closes connection to unblock operations

Added

  • Integration tests for fetch/SRC_URI parsing — Validates v0.7.3 functionality
    • Tests for variable expansion (P, PN, PV, etc.)
    • Tests for USE flag conditionals (nil = include all)
    • Tests for arrow rename syntax
    • Tests against real Gentoo repository
  • Integration tests for config directories — Validates directory handling
    • Tests for package.mask as directory (EAPI 7+)
    • Tests for package.use as directory
    • Tests for dotfiles/backups being ignored
    • Tests for subdirectories not being recursed
  • Integration tests for profile directories
    • Tests for use.force/use.mask as directories
    • Tests for lexicographic file ordering (PMS compliance)
  • Integration tests for v0.7.4 fixes
    • Tests for mirror:// URL expansion with real repository
    • Tests for rsync syncer timeout and fallback behavior

0.7.3 - 2026-01-13

Portage Compatibility Release

Critical Fixes for Portage Compatibility

This is the definitive Portage compatibility release with code properly on main branch. Fixes two important issues discovered during real-world testing on Gentoo WSL2: proper handling of package.mask directories and signature file (.asc) fetching.

Fixed

package.mask Directory Handling (EAPI 7+)
  • Directory support - package.mask can now be a directory containing multiple files
  • PMS-compliant file ordering - Files sorted lexicographically (POSIX locale)
  • Skip patterns - Dotfiles (.hidden) and backup files (file~) are ignored
  • Subdirectory handling - Subdirectories are not recursed into (matches Portage behavior)
  • Applied same fix to package.use, package.accept_keywords, and profile files
Signature File (.asc) Fetching
  • SRC_URI parsing for fetch - Now parses ebuild's SRC_URI to get explicit URLs
  • USE conditional handling - Passing nil for activeFlags now includes ALL conditionals
  • verify-sig support - .asc files inside verify-sig? ( ... ) are now properly extracted
  • Upstream URLs - Signature files use explicit upstream URLs instead of trying Gentoo mirrors
  • Example: zlib-1.3.1.tar.xz.asc now fetches from https://zlib.net/ and GitHub
Documentation
  • README.md - REST API endpoint corrected to Unix socket (/var/run/grpm-rest.sock)
  • ROADMAP.md - Updated to reflect current state with 98.2% coverage

Changed

  • internal/config/config.go - loadPackageMask() now supports file or directory
  • internal/profile/parser.go - parseListFile() handles directory traversal
  • internal/repo/srcuri_parser.go - nil activeFlags means "include all conditionals"
  • internal/cli/fetch.go - getDistfilesWithURIs() parses SRC_URI from ebuild

Technical Details

  • Verified against Portage source code (lib/portage/util/__init__.py:grabfile)
  • Follows PMS specification for profile directory handling
  • New test cases: TestParseSrcURI_NilActiveFlags, TestParseSrcURI_FetchAllDistfiles
  • Tested on real Gentoo WSL2 installation with sys-libs/zlib

0.7.2 - 2026-01-13

Superseded Release

⚠️ This release was superseded by v0.7.3.

Released before PR was properly merged to main. While binaries contain the code, please use v0.7.3 for proper git history and documentation.

0.7.0 - 2026-01-13

Portage-Style Logging Release

Professional Output

This release introduces Portage-style logging with colored output, progress indicators, and professional formatting matching Gentoo's emerge output.

Added

Portage-Style Logging (internal/logging/)
  • Logger package - Professional logging with Portage-style formatting
    • >>> prefix for actions (emerging, installing, syncing)
    • * prefix for informational messages (green)
    • ! prefix for warnings (yellow)
    • !!! prefix for errors (red)
  • ANSI color support - Automatic terminal detection via golang.org/x/term
  • Log levels - Quiet, Normal, Verbose, Debug
  • File logging - Optional log file output (colors stripped automatically)
  • Specialized methods for package management:
    • Emerge(current, total, atom) - Package emergence progress
    • Installing(current, total, atom) - Installation progress
    • Syncing(repo) - Repository sync start
    • SyncComplete(duration, filesChanged) - Sync completion
    • Mirror(index, total, host) - Mirror selection
    • MirrorFailed(host, err) - Mirror failure
    • Retry(attempt, max, delay) - Retry notification
Progress Indicators (internal/logging/progress.go)
  • Spinner - Animated progress indicator with multiple styles
    • Styles: dots, line, circle, square, arrow, bounce
    • Configurable interval and message
  • ProgressBar - Percentage-based progress bar
    • Customizable width and style
    • ETA calculation support
  • SyncProgress - Repository sync-specific progress tracking
CLI Improvements
  • Verbose flag parsing - -v, -vv, -vvv and --verbose support
  • Log level mapping - Verbose levels map to logger levels automatically
  • Consistent output - All CLI commands use unified logging

Changed

  • internal/cli/app.go - Integrated Portage-style logger
  • internal/sync/rsync.go - Uses new logging for sync output
  • cmd/grpm/main.go - Improved verbose flag handling

Technical Details

  • New dependency: golang.org/x/term for terminal detection
  • Thread-safe logging with mutex protection
  • Zero external dependencies for core logging (stdlib only)
  • Verified against Portage reference (lib/portage/output.py)

0.6.0 - 2026-01-12

Infrastructure & Quality Release

Production Readiness Focus

This release completes the infrastructure needed for real-world package building: automatic source downloading, comprehensive eclass testing, coverage analysis, and external tool detection.

Added

Distfile Fetching (v0.6.0-001)
  • grpm fetch command - Standalone distfile downloading
    • grpm fetch app-misc/hello - Download sources for a package
    • --pretend/-p - Dry-run mode showing what would be downloaded
    • --verify - Verify existing distfiles without downloading
  • Automatic fetching in emerge - Sources downloaded before build
  • Mirror support - GENTOO_MIRRORS from make.conf
  • Resume support - Partial downloads can be resumed
  • Checksum verification - BLAKE2B, SHA512, SHA256 from Manifest
Debug Helpers (v0.6.0-002)
  • debug-print - Debug output when PORTAGE_DEBUG=1 or GRPM_DEBUG=1
  • debug-print-function - Log function entry points
  • debug-print-section - Mark logical sections in execution
  • PMS Section 12.3.16 compliant implementation
Eclass Integration Testing (v0.6.0-003)
  • tests/integration/eclass_test.go - Comprehensive eclass test suite
  • 21 eclasses tested with mock content for CI
  • Test categories: Load, Execute, Inherit Chain, Metadata Accumulation
  • Build tag integration for conditional compilation
  • Coverage: toolchain-funcs, cmake, meson, python-*, cargo, go-module, xdg, systemd, etc.
Coverage Analyzer (v0.6.0-004)
  • grpm analyze command - Repository coverage analysis
    • grpm analyze - Analyze default Gentoo repository
    • --repo/-r PATH - Custom repository path
    • --output/-o FORMAT - Output: text, json, markdown
    • --category/-c NAME - Filter by category
    • --verbose/-v - Show per-package details
  • Analysis engine (internal/analyze/)
    • EAPI validation (supports 0-8)
    • Eclass availability checking
    • Helper function coverage
    • Blocker categorization
  • Reports - Actionable coverage reports with blocker breakdown
External Tool Detection (v0.6.0-005)
  • grpm tools command - Tool availability management
    • grpm tools - List all known tools with status
    • --check - Summary of tool availability
    • --missing - Show missing tools with install hints
    • --available - Show available tools with paths
    • --category NAME - Filter by category (compilers, build, etc.)
    • --for-eclass NAME - Tools needed for specific eclass
  • Tool registry (internal/tools/)
    • 50+ tools registered across 7 categories
    • Gentoo package suggestions for missing tools
    • Eclass-to-tool mappings
  • Pre-build validation - Check required tools before emerge
    • --skip-tool-check flag to bypass validation

Technical Details

  • New packages: internal/analyze/, internal/tools/
  • New CLI commands: fetch, analyze, tools
  • 70+ new tests across all features
  • All code passes golangci-lint with 0 issues

0.5.2 - 2026-01-10

Refactor: Dynamic Eclass Loading

Community Feedback Addressed

This release addresses criticism from the Gentoo community (forums.gentoo.org) about hardcoded eclass implementations. Eclasses are now loaded dynamically from the repository, matching Portage's behavior.

Added

  • Dynamic eclass loading - Eclasses are now loaded from repository eclass/ directories

    • New internal/eclass/ package (3300+ lines) for dynamic loading
    • eclass.Cache - Scans and caches eclass files with mtime tracking
    • eclass.Executor - Executes eclasses via mvdan.cc/sh interpreter
    • eclass.HybridLoader - Dynamic loading with Go fallbacks
    • ebuild.DynamicEclassLoader - Bridge for integration
    • ebuild.SetupDynamicEclassLoading() - Configuration helper

  • Metadata accumulation - Proper handling of DEPEND, IUSE, RDEPEND from eclasses

    • Backup/restore of metadata variables during inherit
    • E_DEPEND, E_IUSE accumulator variables

  • EXPORT_FUNCTIONS support - Phase function exports from eclasses

Changed

  • Executor now uses dynamic eclass loading by default (EnableDynamicEclass: true)
  • Go eclass implementations (cmake, meson, python, cargo, etc.) serve as fallbacks
  • Added EclassLocations option for custom eclass search paths

Technical Details

  • Uses mvdan.cc/sh bash interpreter for eclass execution
  • Priority: dynamic loading → Go fallbacks
  • Thread-safe with mutex protection
  • Non-fatal fallback on cache creation errors

0.5.1 - 2026-01-10

Hotfix: Multilib ABI Lookup

Fixed

  • Deterministic ABI lookup - Fixed non-deterministic map iteration in multilib functions
    • computeABILibdir, GetABIChost, GetABICflags, GetABILdflags, setupABIEnvironment
    • Added getCurrentArch() to determine system architecture from CHOST
    • Now uses deterministic search order as fallback
    • Fixes CI test failures on Linux (TestComputeLibdir_WithABI, TestGetABICflags)

0.5.0 - 2026-01-10

Language Ecosystems Release

Rapid Development Phase Complete

This release marks the end of the initial rapid development phase. GRPM now supports approximately 75% of the Gentoo package tree. Future development will focus on stability, testing, and community feedback.

This release adds comprehensive support for Python, Rust, and Go package ecosystems.

Added

Python Eclasses (v0.5.0-001)

  • internal/ebuild/eclass_python.go - Full Python eclass suite
  • python-utils-r1 - Core Python utilities
  • python-single-r1 - Single Python implementation packages
  • python-r1 - Multi-implementation packages
  • python-any-r1 - Build-time only Python dependency
  • distutils-r1 - Distutils/setuptools/flit/poetry build system
  • PYTHON_COMPAT validation and USE flag generation
  • python_foreach_impl, python_setup, python_fix_shebang

Package Sets (v0.5.0-002)

  • internal/state/sets.go - Package set management
  • @world - All explicitly installed packages
  • @system - Essential system packages
  • @selected - Packages in /var/lib/portage/world
  • @preserved-rebuild - Packages needing rebuild
  • Set operations: union, intersection, difference, expand

Multilib Eclass (v0.5.0-003)

  • internal/ebuild/eclass_multilib.go - Core multilib support
  • internal/ebuild/eclass_multilib_build.go - multilib-build eclass
  • ABI types: amd64, x86, arm64, arm, ppc64
  • get_libdir, get_abi_CHOST, get_abi_CFLAGS, get_abi_LIBDIR
  • multilib_foreach_abi, multilib_is_native_abi
  • CFLAGS -m32/-m64 handling

REQUIRED_USE Solver (v0.5.0-004)

  • internal/pkg/required_use.go - Full REQUIRED_USE implementation
  • Operators: || (any-of), ^^ (exactly-one), ?? (at-most-one)
  • Conditionals: flag?, !flag?
  • Complex nested expressions
  • Automatic USE flag resolution

cargo.eclass (v0.5.0-005)

  • internal/ebuild/eclass_cargo.go - Rust package support
  • Crate URI generation for SRC_URI
  • Crate vendoring from DISTDIR
  • .cargo/config.toml generation
  • CFLAGS to RUSTFLAGS conversion
  • CHOST to Rust target triple conversion
  • Full phase support: src_unpack, src_configure, src_compile, src_test, src_install

go-module.eclass (v0.5.0-006)

  • internal/ebuild/eclass_go_module.go - Go package support
  • EGO_SUM parsing and SRC_URI generation
  • Go module cache setup
  • Vendor directory support
  • GOPROXY=off for offline builds
  • CGO integration with system compilers
  • Full phase support: src_unpack, src_compile, src_install
  • ego wrapper for Go commands

Changed

  • Ebuild execution now supports Python, Rust, and Go build workflows
  • ~75% estimated Gentoo package tree coverage (up from ~60%)

0.4.0 - 2026-01-10

Build Systems Release

This release adds comprehensive build system support for CMake and Meson, covering approximately 60% of the Gentoo package tree.

Added

CMake Build System (v0.4.0-001, v0.4.0-005)

  • internal/ebuild/build_cmake.go - CMake execution engine
  • internal/ebuild/eclass_cmake.go - Full cmake.eclass implementation
  • Support for Ninja and Unix Makefiles generators
  • cmake_use, cmake_use_find_package helpers
  • cmake_comment_add_subdirectory for directory exclusion
  • Full phase support: src_configure, src_compile, src_test, src_install
  • CMAKE_MAKEFILE_GENERATOR auto-detection

Meson Build System (v0.4.0-002, v0.4.0-006)

  • internal/ebuild/build_meson.go - Meson execution engine
  • internal/ebuild/eclass_meson.go - Full meson.eclass implementation
  • meson_use, meson_feature helpers for USE flag mapping
  • Full phase support with ninja backend
  • Cross-compilation support via meson cross files

toolchain-funcs Eclass (v0.4.0-003)

  • internal/ebuild/helpers_toolchain.go - Toolchain detection functions
  • Compiler detection: tc-getCC, tc-getCXX, tc-getLD, tc-getAR, tc-getRANLIB
  • Cross-compilation: tc-getBUILD_CC, tc-getBUILD_CXX, tc-is-cross-compiler
  • Architecture: tc-arch, tc-arch-kernel, tc-endian
  • Toolchain export: tc-export, tc-export_build_env
  • Compiler type detection: tc-is-gcc, tc-is-clang

flag-o-matic Eclass (v0.4.0-008)

  • internal/ebuild/eclass_flag_o_matic.go - Flag manipulation with FlagSet value object
  • Append operations: append-cflags, append-cxxflags, append-cppflags, append-ldflags, append-flags
  • Filter operations: filter-flags, filter-ldflags, filter-lfs-flags, filter-lto
  • Replace operations: replace-flags, replace-cpu-flags
  • Strip operations: strip-flags, strip-unsupported-flags
  • Test operations: test-flags, test-flag-CC, test-flag-CXX, test-flags-CCLD
  • Utility: get-flag, raw-ldflags, no-as-needed, is-ldflagq
  • Glob pattern matching for flag filtering

Repository Cache (v0.4.0-004)

  • internal/cache/ - Core cache package with pluggable backends
    • cache.go - Cache interface and factory
    • sqlite.go - SQLite backend with WAL mode (modernc.org/sqlite, pure Go)
    • memory.go - In-memory LRU cache backend
    • entry.go - Cache entry types with mtime validation
  • internal/repo/cache/ - Repository-specific cache wrapper
    • cache.go - RepoCache with automatic invalidation
    • index.go - Directory indexer for fast package lookups
    • cached_repo.go - CachedRepository wrapper
  • internal/repo/cached_portage.go - Cached PortageRepository integration
  • Thread-safe concurrent access with prepared statements
  • Automatic stale entry invalidation on ebuild modification

Integration Tests (v0.4.0-007)

  • tests/integration/framework.go - Test framework (504 lines)
  • tests/integration/autotools_test.go - 10 autotools packages (383 lines)
  • tests/integration/cmake_test.go - 15 CMake packages (485 lines)
  • tests/integration/meson_test.go - 15 Meson packages (523 lines)
  • .github/workflows/integration.yml - CI workflow for Gentoo container
  • Total: 2768 lines of integration tests
  • Build tag: //go:build integration for conditional compilation

Changed

  • Ebuild execution now supports autotools, CMake, and Meson workflows
  • Repository operations can use cache for faster metadata access

0.3.0 - 2026-01-10

PMS Compliance Release

This release brings comprehensive PMS (Package Manager Specification) compliance, EAPI 0-8 feature matrix, and direct mvdan.cc/sh integration for bash compatibility.

Added

PMS-Compliant Atom Parser (v0.3.0-001)

  • Character-by-character parser for package atoms per PMS Section 8.3
  • All version operators: =, >=, >, <=, <, ~, =* (glob)
  • Blocker support: ! (weak), !! (strong)
  • Slot dependencies: :slot, :slot/subslot, :*, :=
  • Repository constraints: ::repo-name
  • USE dependencies: [flag,-flag,flag?,flag(+),flag(-)]
  • ParseAtom() function with comprehensive validation
  • Atom.Matches(*Package) for package matching
  • Atom.ToConstraint() for solver integration

Full EAPI 8 Support (v0.3.0-002)

  • REQUIRED_USE validator - Full expression parsing (||, ^^, ??, flag?, !flag?, conditionals)
  • SRC_URI enhancements - Arrow syntax (-> filename), USE-conditional downloads
  • USE flag helpers - use_enable, use_with (1-4 argument modes per PMS 11.3.2)
  • EAPI 8 installation helpers - dosym -r (relative symlinks), dostrip, einstalldocs
  • New ebuild variables - IDEPEND, PROPERTIES, RESTRICT parsing
  • Atom parser integration - FindByAtom() in Repository, AddAtomConstraint() in SAT solver

EAPI Feature Matrix (v0.3.0-004)

  • EAPIFeatures struct with 30+ feature flags for EAPI-dependent behavior
  • GetEAPIFeatures(), IsEAPISupported(), ValidateEAPI() functions
  • Complete EAPI 0-8 coverage per PMS Appendix A
  • Feature flags: BDEPEND, IDEPEND, SlotOperators, Nonfatal, OffsetPrefix, etc.
  • Trailing slash behavior per EAPI (0-6 has trailing, 7+ doesn't)

Version Manipulation Commands (v0.3.0-005)

  • ver_test - Version comparison per PMS Algorithm 3.2-3.7
  • ver_cut - Extract version components
  • ver_rs - Replace version separators

PMS Environment Variables (v0.3.0-006)

  • PVR - Package version with revision (per PMS 11.1)
  • ROOT, EROOT - Target filesystem root with EAPI-specific trailing slash
  • SYSROOT, ESYSROOT - Cross-compilation support (EAPI 7+)
  • BROOT - Build dependencies root (EAPI 7+)
  • EPREFIX - Gentoo Prefix support (EAPI 3+)

Error Handling Commands (v0.3.0-007, v0.3.0-008)

  • assert - Check PIPESTATUS array, die if non-zero (per PMS 12.3.6)
  • nonfatal - Suppress die in called command (EAPI 4+, per PMS 12.3.8)
  • Exit status tracking (lastExitStatus, pipeStatus)

Missing Phase Functions (v0.3.0-009)

  • pkg_pretend - Pre-merge sanity checks (EAPI 4+)
  • pkg_config - Post-install configuration
  • pkg_info - Package information display
  • pkg_nofetch - Fetch restriction handling

Installation Helpers (v0.3.0-011, v0.3.0-012, v0.3.0-013)

  • into - Set installation destination prefix
  • doinfo - Install GNU info files to /usr/share/info
  • domo - Install gettext message catalogs to /usr/share/locale

Banned Command Validation (v0.3.0-014)

  • IsBannedCommand(), GetBannedCommands() for EAPI-specific validation
  • Stub implementations with deprecation warnings: dohard, dosed, useq, einstall, dohtml, dolib, libopts, hasv, hasq
  • EAPI-aware command availability per PMS Chapter 12

Default Phase Functions (v0.3.0-015)

  • default_src_unpack - Default unpack implementation
  • default_src_prepare - Default prepare (eapply_user in EAPI 6+)
  • default_src_configure - Default configure (econf)
  • default_src_compile - Default compile (emake or nothing)
  • default_src_test - Default test (emake check/test)
  • default_src_install - Default install (emake DESTDIR or einstalldocs)
  • default_pkg_nofetch - Default fetch restriction message
  • default dispatcher function

EAPI Validation (v0.3.0-016)

  • ValidateEAPI() with detailed error messages
  • Pre-execution EAPI compatibility checks
  • Graceful degradation for unknown EAPIs

PMS Compliance Test Suite (v0.3.0-017)

  • 1076 lines of comprehensive PMS compliance tests
  • Version comparison tests (40+ cases per PMS Algorithm 3.2-3.7)
  • Dependency atom parsing tests
  • EAPI feature availability tests
  • Located in tests/pms_compliance_test.go

Changed

Bash Compatibility

  • mvdan.cc/sh direct integration - GoSh wrapper NOT needed
  • Direct use of mvdan.cc/sh/v3 for bash parsing and execution
  • Full compatibility with Portage bash requirements (EAPI 0-6: Bash 3.2, EAPI 7: Bash 4.2, EAPI 8: Bash 5.0)

Test Infrastructure

  • Split helpers_test.go (4717 lines) into 12 focused test files
  • Improved test organization and maintainability
  • Shared test utilities in helpers_test.go

Documentation

  • Added PMS Chapter 6 - Ebuild File Format (docs/pms/chapter6-ebuild-format.md)
  • Updated PMS documentation index

0.2.1 - 2026-01-09

Fixed

PMS-Compliant Version Comparison (v0.2.1-001, v0.2.1-002, v0.2.1-003)

Critical bug fixes for version comparison per PMS Chapter 3.2-3.3:

  • Version suffix ordering - Implemented PMS Algorithm 3.5-3.6:

    • Correct: _alpha < _beta < _pre < _rc < (release) < _p
    • Previously: Used alphabetical comparison (_p < _pre < _rc)
    • Impact: Fixes incorrect package version selection during dependency resolution

  • Leading zero handling - Implemented PMS Algorithm 3.3:

    • Components with leading zeros compared lexicographically
    • Trailing zeros stripped before comparison

  • Letter suffix parsing - Implemented PMS Section 3.2:

    • Single letter suffix (1.0a, 1.0b) parsed separately
    • Correct ordering: 1.0a < 1.0b < 1.0z < 1.0 (letter < no letter)

  • Revision handling - -r0 now equals no revision per PMS

Changed

  • Version struct refactored to rich domain model with:
    • VersionComponent - numeric parts with leading zero tracking
    • VersionSuffix - suffix type and number
    • letterSuffix field for single letter
    • revision field for -rN
  • Comprehensive test suite for PMS compliance (30+ new test cases)

0.2.0 - 2026-01-09

Ebuild Parser Improvements

This release focuses on improving ebuild parsing with proper variable expansion and removing hardcoded eclass handling.

Added

Package Variable Expansion (v0.2.0-003)

  • PackageMetadata struct for PMS 11.1 variables (P, PN, PV, PR, PVR, PF, CATEGORY)
  • NewPackageMetadata() constructor for building metadata from package info
  • NewEbuildParserWithMetadata() for creating parser with variable expansion context
  • Proper ${P}, ${PN}, ${PV}, ${PVR}, ${PF}, ${CATEGORY} expansion in ebuild content
  • Exported ExtractVariable() method for public access

REST API Improvements (v0.2.0-001)

  • Unix socket support for daemon communication
  • Improved socket handling and error messages

xargs Helper (v0.2.0-004)

  • Native xargs implementation for ebuild helpers
  • Cross-platform support without external dependencies

Changed

Eclass Loading (v0.2.0-005)

  • BREAKING: Removed handleBuiltinEclass() function
  • All eclasses now loaded exclusively from repository
  • Go helper implementations (tc-getCC, etc.) registered in interpreter
  • More accurate Portage behavior emulation

Fixed

  • Eclass loading now correctly sources from repository filesystem
  • Variable expansion works in DEPEND, RDEPEND, SRC_URI, SLOT, etc.
  • Tests updated to use real eclass files instead of builtin mocks

0.1.1 - 2026-01-09

Module Architecture Improvements

Major refactoring and improvements to the ebuild execution module.

Changed

Code Architecture

  • Split monolithic helpers.go (3200+ lines) into 11 focused modules:
    • helpers_build.go - Build commands (emake, econf)
    • helpers_install.go - Installation helpers (dobin, doins, dosym, fowners, fperms)
    • helpers_fs.go - Filesystem utilities
    • helpers_msg.go - Messaging (einfo, ewarn, die)
    • helpers_use.go - USE flag functions
    • helpers_toolchain.go - Toolchain detection
    • helpers_version.go - Version manipulation
    • helpers_patch.go - Patching functions
    • helpers_doc.go - Documentation helpers
    • helpers_unpack.go - Archive extraction
    • helpers_default.go - Default phase implementations
  • Platform-specific code isolation (helpers_chown_unix.go, helpers_chown_stub.go)

Ebuild Execution

  • Real eclass inherit with EXPORT_FUNCTIONS support
  • Proper phase dispatch to custom ebuild functions (no more hardcoded defaults)
  • Hook phases (pkg_preinst, pkg_postinst, pkg_prerm, pkg_postrm) working correctly

Installation Helpers

  • Real fowners implementation with chown on Unix systems
  • User/group lookup via os/user package
  • Recursive ownership changes with -R flag

Package Queries

  • Enhanced has_version with real VarDB queries
  • Enhanced best_version with real VarDB queries
  • Proper version constraint matching

Binary Packages

  • Improved GPKG metadata parsing per GLEP 78
  • SHA256 checksum generation
  • Fixed test fixtures with valid nested tar archives

Added

  • internal/ebuild/eclass.go - Eclass registry, loader, stack management
  • internal/ebuild/script.go - Ebuild script parsing for phase detection
  • internal/ebuild/phase_dispatch_test.go - Phase dispatch tests
  • tests/integration/v0.2.0_integration_test.go - Comprehensive integration tests

Fixed

  • Phase dispatch now calls custom ebuild functions instead of hardcoded defaults
  • Binary package tests use valid nested metadata.tar archives
  • Test fixtures properly structured for GPKG format

0.1.0 - 2026-01-08

Initial Public Release

GRPM (Go Resource Package Manager) is a modern reimplementation of Gentoo's Portage package manager in pure Go.

Added

Core Features

  • SAT-based dependency resolution using gophersat library
  • Domain-Driven Design architecture with rich domain model
  • Gentoo version comparison and constraint handling
  • Slot and subslot support with ABI tracking
  • USE flag resolution and conditional dependencies
  • Circular dependency detection
  • Slot and version conflict resolution

Package Management

  • Binary package support (GPKG and TBZ2 formats)
  • Package installation with collision detection
  • Package removal with dependency tracking
  • VarDB integration (Gentoo /var/db/pkg format)
  • Package signing (GPG/SSH/RSA)
  • Local and remote binhost support

Source Building

  • Full ebuild execution engine
  • PMS phase implementation (setup through install)
  • Autotools workflow support (configure/make/make install)
  • Parallel compilation support

System Integration

  • Profile system with inheritance
  • Configuration management (make.conf, package.*)
  • Metadata caching (SQLite backend)
  • CONFIG_PROTECT support
  • Privilege dropping (userpriv/userfetch)
  • Virtual package support
  • Multiple repository/overlay support

Daemon & API

  • Single binary with CLI and daemon modes
  • gRPC service on Unix socket
  • REST API for monitoring and integration
  • Job queue with worker pool
  • Parallel build scheduler

Repository Management

  • Native rsync implementation
  • Git sync with GPG verification
  • Auto-selection strategy
  • Pluggable sync module

Advanced Features

  • Slot collision resolution with autounmask
  • @world/@system/@selected package sets
  • System update with --deep/--newuse flags
  • Dependency cleanup (depclean)
  • Parallel package builds (--jobs)

CLI Commands

Command Description
resolve Resolve dependencies with SAT solver
install Install packages (binary or source)
emerge Build packages from source
remove Remove installed packages
search Search for packages
info Display package information
sync Synchronize repository
update Update @world/@system packages
depclean Remove orphaned packages
build Create binary packages
status Show daemon status
daemon Start daemon mode

Technical Details

  • Language: Go 1.25+
  • License: Apache-2.0
  • Platforms: Linux (amd64, arm64, armv7, armv6, i386)
  • Test Coverage: ~70%
  • Total Code: ~60,000 lines

Known Limitations

  • Ebuild execution limited to autotools workflow
  • Limited eclass support (toolchain-funcs, eutils, multilib)
  • No EAPI 8 features yet
  • CMake/Meson not supported

Dependencies

  • github.com/crillab/gophersat - SAT solver
  • github.com/spf13/cobra - CLI framework
  • google.golang.org/grpc - gRPC server
  • github.com/gokrazy/rsync - Native rsync
  • modernc.org/sqlite - Pure Go SQLite
  • mvdan.cc/sh/v3 - Bash interpreter

Links