Make package function more compact

mullvad-vpn-daemon/APKBUILD

@@ -1,49 +1,36 @@
-# Contributor:
-# Maintainer: Joakim Hulthe <joakim@hulthe.net>
+maintainer="Joakim Hulthe <joakim@hulthe.net>"
 pkgname=mullvad-vpn-daemon
 pkgver=2026.2_beta1
-pkgrel=1
-pkgdesc="Mullvad VPN system service"
+pkgrel=0
+pkgdesc="Mullvad VPN client (daemon and CLI)"
 url="https://mullvad.net/"
-arch="all"
-license="GPL-3-or-later"
-depends="
-	dbus
-	libmnl
-	libnftnl
-"
+# Mullvad depends on old versions of the `nix` library
+# which are broken on on loongarch64 and s390x
+arch="all !loongarch64 !s390x"
+license="GPL-3.0-or-later"
 makedepends="
-	build-base
 	cargo-auditable
-	rust
-	pkgconfig
 	git
 	protobuf-dev
 	dbus-dev
 	libmnl-dev
 	libnftnl-dev
 "
-checkdepends=""
 install="
-	$pkgname.post-install
 	$pkgname.pre-upgrade
-	$pkgname.post-upgrade
 	$pkgname.pre-deinstall
-	$pkgname.post-deinstall
- 	$pkgname-systemd.post-install
+	$pkgname-systemd.post-install
 	$pkgname-systemd.post-upgrade
+	$pkgname-systemd.pre-deinstall
 "
 subpackages="
 	$pkgname-systemd
 	$pkgname-suid
 "
 source="
-	https://github.com/mullvad/mullvadvpn-app/archive/refs/tags/2026.2-beta1.tar.gz
+	https://github.com/mullvad/mullvadvpn-app/archive/refs/tags/${pkgver//_/-}.tar.gz
 "
-sha512sums="
-	9af0c263f0e5985d7842099f50a5070da0b23691f08ffe57c3b6d239d2c1c9acea89c07890f31d89bd75448a2dd1fd3c878b85be458baba0bcd90760e714b032  2026.2-beta1.tar.gz
-"
-builddir="$srcdir/mullvadvpn-app-2026.2-beta1/"
+builddir="$srcdir/mullvadvpn-app-${pkgver//_/-}/"
 options="net suid"
 
 _cargo_target_dir="${CARGO_TARGET_DIR:-$builddir/target}"
@@ -56,23 +43,17 @@ prepare() {
 }
 
 build() {
-	# Specify `--target` so that the build artifacts ends up in target/<target>/release to
-	# avoid clashes with host system when running in a container with a mounted target folder.
+	# Specify `--target` so that build artifacts will be in target/<target>/release
+	# This avoids clashes with host system when building in a container.
 
 	# Compile all binaries
-	cargo auditable build --release --locked \
-	    --target "$CHOST" \
-	    -p mullvad-cli \
-	    -p mullvad-daemon \
-	    -p mullvad-exclude \
-	    -p mullvad-problem-report \
-	    -p mullvad-setup
-
-	# Generate vendored relay list
-	cargo run --release --locked \
-	    -p mullvad-api --bin relay_list \
-	    --target "$CHOST" \
-	    > "$builddir/relays.json"
+	cargo auditable build --release --frozen \
+		--target "$CHOST" \
+		-p mullvad-cli \
+		-p mullvad-daemon \
+		-p mullvad-exclude \
+		-p mullvad-problem-report \
+		-p mullvad-setup
 }
 
 check() {
@@ -80,38 +61,33 @@ check() {
 }
 
 package() {
-	install -m755 -D "$_cargo_release_dir/mullvad" \
-		"$pkgdir/usr/bin/mullvad"
+	install -m755 -Dt "$pkgdir/usr/bin/" \
+		"$_cargo_release_dir/mullvad" \
+		"$_cargo_release_dir/mullvad-daemon" \
+		"$_cargo_release_dir/mullvad-problem-report" \
+		"$_cargo_release_dir/mullvad-setup"		
 
-	install -m755 -D "$_cargo_release_dir/mullvad-daemon" \
-		"$pkgdir/usr/bin/mullvad-daemon"
+	# TODO: Bundle a relay list.
+	# We can't generate one at build time since that would break build reproducibility.
+	# Once mullvad starts checking a relay list into their release branches, we can bundle that.
+	#install -m644 -D "$builddir/<todo>/relays.json" \
+	#	"$pkgdir/usr/share/mullvad-vpn/relays.json"
+	# TODO: Copy relay list into /var/cache/ in post-upgrade/post-install
 
-	install -m755 -D "$_cargo_release_dir/mullvad-problem-report" \
-		"$pkgdir/usr/bin/mullvad-problem-report"
-
-	install -m755 -D "$_cargo_release_dir/mullvad-setup" \
-		"$pkgdir/usr/bin/mullvad-setup"
-
-	# Bundle the vendored relay list. It's copied to /var/cache/mullvad-vpn/ by the post-* scripts.
-	install -m644 -D "$builddir/relays.json" \
-		"$pkgdir/usr/share/mullvad-vpn/relays.json"
-}
-
-systemd() {
-	pkgdesc="systemd service files for Mullvad VPN"
-	depends="$pkgname=$pkgver-r$pkgrel"
-
-	install -m755 -D "$startdir/mullvadvpn-app/dist-assets/linux/mullvad-daemon.service" \
-		"$subpkgdir/usr/lib/systemd/system/mullvad-daemon.service"
-
-	install -m755 -D "$startdir/mullvadvpn-app/dist-assets/linux/mullvad-early-boot-blocking.service" \
-		"$subpkgdir/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
+	# files in /usr/lib/systemd/ are automatically put in systemd subpackage
+	install -m755 -Dt "$pkgdir/usr/lib/systemd/system/" \
+		"$builddir/dist-assets/linux/mullvad-daemon.service" \
+		"$builddir/dist-assets/linux/mullvad-early-boot-blocking.service"
 }
 
 suid() {
 	pkgdesc="mullvad-exclude cli for split tunneling"
 	depends="$pkgname=$pkgver-r$pkgrel"
 
-	install -m4755 -D "$_cargo_release_dir/mullvad-exclude" \
-		"$subpkgdir/usr/bin/mullvad-exclude"
+	install -m4755 -Dt "$subpkgdir/usr/bin/" \
+		"$_cargo_release_dir/mullvad-exclude"
 }
+
+sha512sums="
+9af0c263f0e5985d7842099f50a5070da0b23691f08ffe57c3b6d239d2c1c9acea89c07890f31d89bd75448a2dd1fd3c878b85be458baba0bcd90760e714b032  2026.2-beta1.tar.gz
+"

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.post-install

@@ -1,12 +1,9 @@
-#!/usr/bin/env bash
+#!/bin/sh
 set -eu
 
-# Are we running systemd?
-if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
-    # Does `mullvad-daemon.service` exist?
-    if systemctl list-unit-files mullvad-daemon.service &> /dev/null; then
-      systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
-      systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
-      systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
-    fi
+# Enable and start systemd services
+if which systemctl >/dev/null 2>&1 && systemctl is-system-running | grep -vq offline >/dev/null 2>&1; then
+  systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
+  systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
+  systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
 fi

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.post-upgrade

@@ -1,12 +1,9 @@
-#!/usr/bin/env bash
+#!/bin/sh
 set -eu
 
-# Are we running systemd?
-if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
-    # Does `mullvad-daemon.service` exist?
-    if systemctl list-unit-files mullvad-daemon.service &> /dev/null; then
-      systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
-      systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
-      systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
-    fi
+# Enable and start systemd services
+if which systemctl >/dev/null 2>&1 && systemctl is-system-running | grep -vq offline >/dev/null 2>&1; then
+  systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
+  systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
+  systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"
 fi

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.pre-deinstall

@@ -0,0 +1,8 @@
+#!/bin/sh
+set -eu
+
+# Stop and disable all mullvad services
+systemctl stop mullvad-daemon.service || true
+systemctl disable mullvad-daemon.service || true
+systemctl stop mullvad-early-boot-blocking.service || true
+systemctl disable mullvad-early-boot-blocking.service || true

mullvad-vpn-daemon/mullvad-vpn-daemon.post-deinstall

@@ -1,9 +0,0 @@
-#!/usr/bin/env bash
-set -eu
-
-rm -r --interactive=never /var/log/mullvad-vpn/ || \
-  echo "Failed to remove mullvad-vpn logs"
-rm -r --interactive=never /var/cache/mullvad-vpn/ || \
-  echo "Failed to remove mullvad-vpn cache"
-rm -r --interactive=never /etc/mullvad-vpn || \
-  echo "Failed to remove mullvad-vpn config"

mullvad-vpn-daemon/mullvad-vpn-daemon.post-install

@@ -1,7 +1,8 @@
-#!/usr/bin/env bash
+#!/bin/sh
 set -eu
 
-# Overwrite the cached relay list with the one embedded in the package.
-mkdir -p /var/cache/mullvad-vpn \
-  && cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json \
-  || echo "failed to install /var/cache/mullvad-vpn/relays.json"
+# TODO: see `package()` in APKBUILD
+# Copy vendored relay list into place
+# mkdir -p /var/cache/mullvad-vpn \
+#   && cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json \
+#   || echo "failed to install /var/cache/mullvad-vpn/relays.json"

mullvad-vpn-daemon/mullvad-vpn-daemon.post-upgrade

@@ -1,6 +1,8 @@
-#!/usr/bin/env bash
+#!/bin/sh
 set -eu
 
-# Overwrite the cached relay list with the one embedded in the package.
-mkdir /var/cache/mullvad-vpn
-cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json
+# TODO: see `package()` in APKBUILD
+# Overwrite the cached relay list with the vendored one.
+# mkdir -p /var/cache/mullvad-vpn \
+#   && cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json \
+#   || echo "failed to install /var/cache/mullvad-vpn/relays.json"

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-deinstall

@@ -1,11 +1,6 @@
-#!/usr/bin/env bash
+#!/bin/sh
 set -eu
 
-# the user might've disabled or stopped the service themselves already
-systemctl stop mullvad-daemon.service || true
-systemctl disable mullvad-daemon.service || true
-systemctl stop mullvad-early-boot-blocking.service || true
-systemctl disable mullvad-early-boot-blocking.service || true
-
+# Log out and remove any firewall rules
 mullvad-setup reset-firewall || echo "Failed to reset firewall"
 mullvad-setup remove-device || echo "Failed to remove device from account"

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-upgrade

@@ -1,10 +1,10 @@
-#!/usr/bin/env bash
+#!/bin/sh
 set -eu
 
-# Are we running systemd?
-if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
-    # Is `mullvad-daemon.service` running?
-    if systemctl status mullvad-daemon &> /dev/null; then
+# Stop the daemon gracefully, and set up firewall rules to prevent network
+# leaks during upgrade.
+if which systemctl >/dev/null 2>&1 && systemctl is-system-running | grep -vq offline >/dev/null 2>&1; then
+    if systemctl status mullvad-daemon >/dev/null 2>&1; then
         mullvad-setup prepare-restart || true
         systemctl stop mullvad-daemon.service
         systemctl disable mullvad-daemon.service
@@ -14,5 +14,5 @@ if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offlin
     fi
 fi
 
-# Since we are upgrading mullvad-daemon, it will probably have current IP baked into itself.
+# Clear the cached API IP address.
 rm -f /var/cache/mullvad-vpn/api-ip-address.txt