Bikeshed comment

.gitmodules

@@ -2,7 +2,3 @@
 	path = mullvad-vpn-daemon/mullvadvpn-app
 	url = git@github.com:mullvad/mullvadvpn-app-priv.git
 	branch = poc-slint
-[submodule "mullvad-vpn-slint/mullvadvpn-app"]
-	path = mullvad-vpn-slint/mullvadvpn-app
-	url = git@github.com:mullvad/mullvadvpn-app-priv.git
-	branch = poc-slint

Dockerfile

@@ -6,17 +6,16 @@ RUN apk update && apk add \
   build-base \
   abuild \
   git \
-	rustup \
+	rust \
-  musl-dev \
+	cargo-auditable \
   pkgconfig \
   protobuf-dev \
   protobuf-dev \
-  libmnl-dev \
+  libmnl libmnl-dev \
-  libnftnl-dev \
+  libnftnl libnftnl-dev \
-  dbus-dev \
+  dbus dbus-dev \
-  fontconfig-dev
+  fontconfig-dev \
-  
+  wayland-dev
-RUN rustup-init -y --default-toolchain stable
 
 # Set pkg-config to use static libraries
 ENV PKG_CONFIG_ALLOW_STATIC=1

docker-build.sh

@@ -4,6 +4,8 @@ set -ex
 cd "$(dirname "$0")"
 
 package="$1"
+shift
+
 builder_image="mullvad-slint-musl-builder"
 cargo_home="${CARGO_HOME:-$HOME/.cargo}"
 . "$HOME/.abuild/abuild.conf"
@@ -22,5 +24,5 @@ docker run --rm \
     -e "CARGO_TARGET_DIR=/cargo-target" \
     -it \
     "$builder_image" \
-    abuild -F
+    abuild -F "$@"
 

mullvad-vpn-daemon/APKBUILD

@@ -1,73 +1,118 @@
 # Contributor:
 # Maintainer: Joakim Hulthe <joakim@hulthe.net>
 pkgname=mullvad-vpn-daemon
-pkgver=2026.1_git
+pkgver=2026.2_beta1
-pkgrel=0
+pkgrel=1
 pkgdesc="Mullvad VPN system service"
 url="https://mullvad.net/"
-arch="$(uname -m)"
+arch="all"
 license="GPL-3-or-later"
 depends="
+	dbus
+	libmnl
+	libnftnl
 "
 makedepends="
 	build-base
-	rustup
+	cargo-auditable
-  musl-dev
+	rust
 	pkgconfig
 	git
 	protobuf-dev
+	dbus-dev
 	libmnl-dev
 	libnftnl-dev
-  dbus-dev
 "
 checkdepends=""
-# TODO: pre/post(de)install-scripts
+install="
-#install="$pkgname.pre-install $pkgname.post-install $pkgname.pre-deinstall $pkgname.post-deinstall"
+	$pkgname.post-install
-install=""
+	$pkgname.pre-upgrade
-subpackages="$pkgname-systemd"
+	$pkgname.post-upgrade
-source=""
+	$pkgname.pre-deinstall
-builddir="$srcdir/"
+	$pkgname.post-deinstall
-options="net !check suid"
+ 	$pkgname-systemd.post-install
+	$pkgname-systemd.post-upgrade
+"
+subpackages="
+	$pkgname-systemd
+	$pkgname-suid
+"
+source="
+	https://github.com/mullvad/mullvadvpn-app/archive/refs/tags/2026.2-beta1.tar.gz
+"
+builddir="$srcdir/mullvadvpn-app-2026.2-beta1/"
+options="net suid"
 
-_cargo_target_dir="${CARGO_TARGET_DIR:-$startdir/mullvadvpn-app/target}"
+_cargo_target_dir="${CARGO_TARGET_DIR:-$builddir/target}"
+_cargo_release_dir="$_cargo_target_dir/$CHOST/release"
+
+prepare() {
+	default_prepare
+
+	cargo fetch --target "$CHOST" --locked
+}
 
 build() {
-	# rustup-init -y --default-toolchain stable
+	# Specify `--target` so that build artifacts will end up in target/<target>/release
-	source "$HOME/.cargo/env"
+	# This avoids clashes with host system when running in a container with a mounted target folder.
 
-	cd "$startdir/mullvadvpn-app"
+	# Compile all binaries
-
+	cargo auditable build --release --locked \
-	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
+	    --target "$CHOST" \
-
-	# * Force the `stable` toolchain since it's installed in the container.
-	#   We don't wan't to needlessly download rust while building.
-	# * Specify `--target` so that the final binary ends up in target/<target>/release.
-	cargo +stable build --release --locked \
-	    --target "$target" \
-	    -p mullvad-daemon \
 	    -p mullvad-cli \
+	    -p mullvad-daemon \
 	    -p mullvad-exclude \
-	    -p mullvad-problem-report
+	    -p mullvad-problem-report \
+	    -p mullvad-setup
+
+	# Generate vendored relay list
+	cargo run --release --locked \
+	    -p mullvad-api --bin relay_list \
+	    --target "$CHOST" \
+	    > "$builddir/relays.json"
+}
+
+check() {
+	cargo test --target "$CHOST" --frozen
 }
 
 package() {
-	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
+	install -m755 -D "$_cargo_release_dir/mullvad" \
+		"$pkgdir/usr/bin/mullvad"
 
-	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-daemon" \
+	install -m755 -D "$_cargo_release_dir/mullvad-daemon" \
-		"$pkgdir"/usr/bin/mullvad-daemon
+		"$pkgdir/usr/bin/mullvad-daemon"
 
-	install -m755 -D "$_cargo_target_dir/$target/release/mullvad" \
+	install -m755 -D "$_cargo_release_dir/mullvad-problem-report" \
-		"$pkgdir"/usr/bin/mullvad
+		"$pkgdir/usr/bin/mullvad-problem-report"
 
-	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-exclude" \
+	install -m755 -D "$_cargo_release_dir/mullvad-setup" \
-		"$pkgdir"/usr/bin/mullvad-exclude
+		"$pkgdir/usr/bin/mullvad-setup"
-	chmod u+s "$pkgdir"/usr/bin/mullvad-exclude
 
-	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-problem-report" \
+	# Bundle the vendored relay list. It's copied to /var/cache/mullvad-vpn/ by the post-* scripts.
-		"$pkgdir"/usr/bin/mullvad-problem-report
+	install -m644 -D "$builddir/relays.json" \
+		"$pkgdir/usr/share/mullvad-vpn/relays.json"
 }
 
 systemd() {
+	pkgdesc="systemd service files for Mullvad VPN"
+	depends="$pkgname=$pkgver-r$pkgrel"
+
 	install -m755 -D "$startdir/mullvadvpn-app/dist-assets/linux/mullvad-daemon.service" \
-		"$subpkgdir"/usr/lib/systemd/system/mullvad-daemon.service
+		"$subpkgdir/usr/lib/systemd/system/mullvad-daemon.service"
+
+	install -m755 -D "$startdir/mullvadvpn-app/dist-assets/linux/mullvad-early-boot-blocking.service" \
+		"$subpkgdir/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
 }
+
+suid() {
+	pkgdesc="mullvad-exclude cli for split tunneling"
+	depends="$pkgname=$pkgver-r$pkgrel"
+
+	install -m4755 -D "$_cargo_release_dir/mullvad-exclude" \
+		"$subpkgdir/usr/bin/mullvad-exclude"
+}
+
+sha512sums="
+9af0c263f0e5985d7842099f50a5070da0b23691f08ffe57c3b6d239d2c1c9acea89c07890f31d89bd75448a2dd1fd3c878b85be458baba0bcd90760e714b032  2026.2-beta1.tar.gz
+"

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.post-install

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+set -eu
+
+# Are we running systemd?
+if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
+    # Does `mullvad-daemon.service` exist?
+    if systemctl list-unit-files mullvad-daemon.service &> /dev/null; then
+      systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
+      systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
+      systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
+    fi
+fi

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.post-upgrade

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+set -eu
+
+# Are we running systemd?
+if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
+    # Does `mullvad-daemon.service` exist?
+    if systemctl list-unit-files mullvad-daemon.service &> /dev/null; then
+      systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
+      systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
+      systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
+    fi
+fi

mullvad-vpn-daemon/mullvad-vpn-daemon.post-deinstall

@@ -1,39 +1,9 @@
 #!/usr/bin/env bash
 set -eu
 
-function remove_logs_and_cache {
+rm -r --interactive=never /var/log/mullvad-vpn/ || \
-  rm -r --interactive=never /var/log/mullvad-vpn/ || \
   echo "Failed to remove mullvad-vpn logs"
-  rm -r --interactive=never /var/cache/mullvad-vpn/ || \
+rm -r --interactive=never /var/cache/mullvad-vpn/ || \
   echo "Failed to remove mullvad-vpn cache"
-}
+rm -r --interactive=never /etc/mullvad-vpn || \
-
-function remove_config {
-  rm -r --interactive=never /etc/mullvad-vpn || \
   echo "Failed to remove mullvad-vpn config"
-}
-
-function remove_symlinks {
-  rm /usr/bin/mullvad-problem-report || \
-    echo "Failed to remove mullvad-problem-report"
-}
-
-# checking what kind of an action is taking place
-case $@ in
-  # apt purge passes "purge"
-  "purge")
-    remove_logs_and_cache
-    remove_config
-    remove_symlinks
-    ;;
-  # apt remove passes "remove"
-  "remove")
-    remove_symlinks
-    ;;
-  # dnf remove passes a 0
-  "0")
-    remove_logs_and_cache
-    remove_config
-    remove_symlinks
-    ;;
-esac

mullvad-vpn-daemon/mullvad-vpn-daemon.post-install

@@ -1,8 +1,7 @@
 #!/usr/bin/env bash
 set -eu
 
-ln -sf /opt/Mullvad\ VPN/resources/mullvad-problem-report /usr/bin/mullvad-problem-report
+# Overwrite the cached relay list with the one embedded in the package.
-
+mkdir -p /var/cache/mullvad-vpn \
-systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
+  && cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json \
-systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
+  || echo "failed to install /var/cache/mullvad-vpn/relays.json"
-systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"

mullvad-vpn-daemon/mullvad-vpn-daemon.post-upgrade

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -eu
+
+# Overwrite the cached relay list with the one embedded in the package.
+mkdir /var/cache/mullvad-vpn
+cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-deinstall

@@ -1,23 +1,11 @@
 #!/usr/bin/env bash
 set -eu
 
-echo "Running prerm."
-is_number_re='^[0-9]+$'
-# Check if we're running during an upgrade step on Fedora
-# https://fedoraproject.org/wiki/Packaging:Scriptlets#Syntax
-if [[ "$1" =~ $is_number_re ]] && [ "$1" -gt 0 ]; then
-    exit 0;
-fi
-
-if [[ "$1" == "upgrade" ]]; then
-    exit 0;
-fi
-
 # the user might've disabled or stopped the service themselves already
 systemctl stop mullvad-daemon.service || true
 systemctl disable mullvad-daemon.service || true
 systemctl stop mullvad-early-boot-blocking.service || true
 systemctl disable mullvad-early-boot-blocking.service || true
 
-/opt/Mullvad\ VPN/resources/mullvad-setup reset-firewall || echo "Failed to reset firewall"
+mullvad-setup reset-firewall || echo "Failed to reset firewall"
-/opt/Mullvad\ VPN/resources/mullvad-setup remove-device || echo "Failed to remove device from account"
+mullvad-setup remove-device || echo "Failed to remove device from account"

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-upgrade

@@ -1,9 +1,11 @@
 #!/usr/bin/env bash
 set -eu
 
+# Are we running systemd?
 if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
+    # Is `mullvad-daemon.service` running?
     if systemctl status mullvad-daemon &> /dev/null; then
-        /opt/Mullvad\ VPN/resources/mullvad-setup prepare-restart || true
+        mullvad-setup prepare-restart || true
         systemctl stop mullvad-daemon.service
         systemctl disable mullvad-daemon.service
         systemctl disable mullvad-early-boot-blocking.service || true
@@ -12,5 +14,5 @@ if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offlin
     fi
 fi
 
-rm -f /var/cache/mullvad-vpn/relays.json
+# Since we are upgrading mullvad-daemon, it will probably have current IP baked into itself.
 rm -f /var/cache/mullvad-vpn/api-ip-address.txt

mullvad-vpn-slint/APKBUILD

@@ -2,22 +2,23 @@
 # Maintainer: Joakim Hulthe <joakim@hulthe.net>
 pkgname=mullvad-vpn-slint
 pkgver=2026.1_git
-pkgrel=0
+pkgrel=4
 pkgdesc="Mullvad VPN GUI"
 url="https://mullvad.net/"
-arch="$(uname -m)"
+arch="all"
 license="GPL-3-or-later"
 # TODO: maybe depend on mullvad-vpn-daemon?
 depends="
 "
 makedepends="
 	build-base
-	rustup
+	cargo-auditable
-  musl-dev
+	rust
 	pkgconfig
 	protobuf-dev
 	fontconfig-dev
 	dbus-dev
+	wayland-dev
 "
 checkdepends=""
 install=""
@@ -28,28 +29,25 @@ options="net !check"
 
 _cargo_target_dir="${CARGO_TARGET_DIR:-$startdir/mullvadvpn-app/target}"
 
-build() {
+prepare() {
-	# rustup-init -y --default-toolchain stable
+	default_prepare
-	source "$HOME/.cargo/env"
 
 	cd "$startdir/mullvadvpn-app"
+	cargo fetch --target "$CHOST" --locked
+}
 
-	# rustup default stable
+build() {
-	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
+	cd "$startdir/mullvadvpn-app"
 
-	# * Force the `stable` toolchain since it's installed in the container.
+	# Specify `--target` so that the final binary ends up in target/<target>/release.
-	#   We don't wan't to needlessly download rust while building.
+	cargo build --release --locked \
-	# * Specify `--target` so that the final binary ends up in target/<target>/release.
+	    --target "$CHOST" \
-	cargo +stable build --release --locked \
-	    --target "$target" \
 	    -p mullvad-slint
 }
 
 package() {
-	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
-
 	# Executable
-	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-slint" \
+	install -m755 -D "$_cargo_target_dir/$CHOST/release/mullvad-slint" \
 		"$pkgdir"/usr/bin/mullvad-slint
 
 	# .desktop file
@@ -57,31 +55,31 @@ package() {
 		"$pkgdir"/usr/share/applications/mullvad-vpn-slint.desktop
 	
   # Icons
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_1_16x16x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/16x16/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/16x16/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_2_20x20x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/20x20/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/20x20/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_3_24x24x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/24x24/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/24x24/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_5_30x30x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/30x30/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/30x30/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_6_32x32x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/32x32/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/32x32/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_7_36x36x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/36x36/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/36x36/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_8_40x40x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/40x40/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/40x40/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_9_48x48x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/48x48/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/48x48/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_12_64x64x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/64x64/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/64x64/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_13_72x72x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/72x72/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/72x72/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_15_96x96x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/96x96/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/96x96/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_4_256x256x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/256x256/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/256x256/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/icon_10_512x512x32.png" \
+	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/512x512/apps/mullvad.png" \
 		"$pkgdir"/usr/share/icons/hicolor/512x512/apps/mullvad.png
 }
 

podman-build.sh

@@ -4,6 +4,8 @@ set -ex
 cd "$(dirname "$0")"
 
 package="$1"
+shift
+
 builder_image="mullvad-slint-musl-builder"
 cargo_home="${CARGO_HOME:-$HOME/.cargo}"
 . "$HOME/.abuild/abuild.conf"
@@ -22,5 +24,5 @@ podman run --rm \
     -e "CARGO_TARGET_DIR=/cargo-target" \
     -it \
     "$builder_image" \
-    abuild -F
+    abuild -F "$@"