Copy debian install scripts

.gitmodules

@@ -2,3 +2,7 @@
 	path = mullvad-vpn-daemon/mullvadvpn-app
 	url = git@github.com:mullvad/mullvadvpn-app-priv.git
 	branch = poc-slint
+[submodule "mullvad-vpn-slint/mullvadvpn-app"]
+	path = mullvad-vpn-slint/mullvadvpn-app
+	url = git@github.com:mullvad/mullvadvpn-app-priv.git
+	branch = poc-slint

Dockerfile

@@ -6,16 +6,17 @@ RUN apk update && apk add \
   build-base \
   abuild \
   git \
-	rust \
+	rustup \
-	cargo-auditable \
+  musl-dev \
   pkgconfig \
   protobuf-dev \
   protobuf-dev \
-  libmnl libmnl-dev \
+  libmnl-dev \
-  libnftnl libnftnl-dev \
+  libnftnl-dev \
-  dbus dbus-dev \
+  dbus-dev \
-  fontconfig-dev \
+  fontconfig-dev
-  wayland-dev
+  
+RUN rustup-init -y --default-toolchain stable
 
 # Set pkg-config to use static libraries
 ENV PKG_CONFIG_ALLOW_STATIC=1

docker-build.sh

@@ -4,10 +4,7 @@ set -ex
 cd "$(dirname "$0")"
 
 package="$1"
-shift
-
 builder_image="mullvad-slint-musl-builder"
-cargo_home="${CARGO_HOME:-$HOME/.cargo}"
 . "$HOME/.abuild/abuild.conf"
 
 docker build . -f Dockerfile -t "$builder_image"
@@ -17,12 +14,10 @@ docker run --rm \
     -v "$PACKAGER_PRIVKEY":/key.rsa:ro \
     -v "$PACKAGER_PRIVKEY.pub":/key.rsa.pub:ro \
     -v "$PACKAGER_PRIVKEY.pub":/etc/apk/keys/key.rsa.pub:ro \
-    -v ./packages:/root/packages \
-    -v "$cargo_home":/cargo-home \
-    -e "CARGO_HOME=/cargo-home" \
     -v ./target:/cargo-target \
+    -v ./packages:/root/packages \
     -e "CARGO_TARGET_DIR=/cargo-target" \
     -it \
     "$builder_image" \
-    abuild -F "$@"
+    abuild -F
 

mullvad-vpn-daemon/APKBUILD

@@ -1,90 +1,73 @@
-maintainer="Joakim Hulthe <joakim@hulthe.net>"
+# Contributor:
+# Maintainer: Joakim Hulthe <joakim@hulthe.net>
 pkgname=mullvad-vpn-daemon
-pkgver=2026.3_beta1
+pkgver=2026.1_git
-pkgrel=1
+pkgrel=0
-pkgdesc="Mullvad VPN client (daemon and CLI)"
+pkgdesc="Mullvad VPN system service"
 url="https://mullvad.net/"
-# Mullvad depends on old versions of the `nix` library
+arch="$(uname -m)"
-# which are broken on on loongarch64 and s390x
+license="GPL-3-or-later"
-arch="all !loongarch64 !s390x"
+depends="
-license="GPL-3.0-or-later"
+"
 makedepends="
-	cargo-auditable
+  build-base
-	git
+	rustup
-	protobuf-dev
+  musl-dev
-	dbus-dev
+  pkgconfig
-	libmnl-dev
+  git
-	libnftnl-dev
+  protobuf-dev
+  libmnl-dev
+  libnftnl-dev
+  dbus-dev
 "
-install="
+checkdepends=""
-	$pkgname.post-install
+# TODO: pre/post(de)install-scripts
-	$pkgname.post-upgrade
+#install="$pkgname.pre-install $pkgname.post-install $pkgname.pre-deinstall $pkgname.post-deinstall"
-	$pkgname.pre-upgrade
+install=""
-	$pkgname-systemd.post-install
+subpackages="$pkgname-systemd"
-	$pkgname-systemd.post-upgrade
+source=""
-"
+builddir="$srcdir/"
-subpackages="
+options="net !check suid"
-	$pkgname-systemd
-	$pkgname-suid
-"
-source="
-	https://github.com/mullvad/mullvadvpn-app/archive/refs/tags/${pkgver//_/-}.tar.gz
-"
-builddir="$srcdir/mullvadvpn-app-${pkgver//_/-}/"
-options="net suid"
 
-_cargo_target_dir="${CARGO_TARGET_DIR:-$builddir/target}"
+_cargo_target_dir="${CARGO_TARGET_DIR:-$startdir/mullvadvpn-app/target}"
-_cargo_release_dir="$_cargo_target_dir/$CHOST/release"
-
-prepare() {
-	default_prepare
-
-	cargo fetch --target "$CHOST" --locked
-}
 
 build() {
-	# Specify `--target` so that build artifacts will be in target/<target>/release
+	# rustup-init -y --default-toolchain stable
-	# This avoids clashes with host system when building in a container.
+	source "$HOME/.cargo/env"
 
-	# Compile all binaries
+	cd "$startdir/mullvadvpn-app"
-	cargo auditable build --release --frozen \
-		--target "$CHOST" \
-		-p mullvad-cli \
-		-p mullvad-daemon \
-		-p mullvad-exclude \
-		-p mullvad-problem-report \
-		-p mullvad-setup
-}
 
-check() {
+	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
-	cargo test --target "$CHOST" --frozen
+
+	# * Force the `stable` toolchain since it's installed in the container.
+	#   We don't wan't to needlessly download rust while building.
+	# * Specify `--target` so that the final binary ends up in target/<target>/release.
+	cargo +stable build --release --locked \
+	    --target "$target" \
+	    -p mullvad-daemon \
+	    -p mullvad-cli \
+	    -p mullvad-exclude \
+	    -p mullvad-problem-report
 }
 
 package() {
-	install -m755 -Dt "$pkgdir/usr/bin/" \
+	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
-		"$_cargo_release_dir/mullvad" \
-		"$_cargo_release_dir/mullvad-daemon" \
-		"$_cargo_release_dir/mullvad-problem-report" \
-		"$_cargo_release_dir/mullvad-setup"
 
-	# Bundle the relay list.
+	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-daemon" \
-	install -m644 -D "$builddir/dist-assets/relays/relays.json" \
+		"$pkgdir"/usr/bin/mullvad-daemon
-		"$pkgdir/usr/share/mullvad-vpn/relays.json"
 
-	# Files in /usr/lib/systemd/ are automatically put in systemd subpackage
+	install -m755 -D "$_cargo_target_dir/$target/release/mullvad" \
-	install -m755 -Dt "$pkgdir/usr/lib/systemd/system/" \
+		"$pkgdir"/usr/bin/mullvad
-		"$builddir/dist-assets/linux/mullvad-daemon.service" \
+
-		"$builddir/dist-assets/linux/mullvad-early-boot-blocking.service"
+	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-exclude" \
+		"$pkgdir"/usr/bin/mullvad-exclude
+	chmod u+s "$pkgdir"/usr/bin/mullvad-exclude
+
+	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-problem-report" \
+		"$pkgdir"/usr/bin/mullvad-problem-report
 }
 
-suid() {
+systemd() {
-	pkgdesc="mullvad-exclude cli for split tunneling"
+	install -m755 -D "$startdir/mullvadvpn-app/dist-assets/linux/mullvad-daemon.service" \
-	depends="$pkgname=$pkgver-r$pkgrel"
+		"$subpkgdir"/usr/lib/systemd/system/mullvad-daemon.service
-
-	install -m4755 -Dt "$subpkgdir/usr/bin/" \
-		"$_cargo_release_dir/mullvad-exclude"
 }
-
-sha512sums="
-7766ad0401cd42a43c272726bd600e70d29a95f4f9b5192cc906e6e7008139a403fb6128a00940ea1306c0446f8af4a43d2f3fd89c6cd81a730be9db8ae50f82  2026.3-beta1.tar.gz
-"

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.post-install

@@ -1,8 +0,0 @@
-#!/bin/sh
-set -eu
-
-echo '>>> To start Mullvad VPN, enable the daemon:'
-echo '    systemctl enable --now mullvad-daemon.service'
-echo ''
-echo '>>> Optional: block network until VPN is up at boot:'
-echo '    systemctl enable mullvad-early-boot-blocking.service'

mullvad-vpn-daemon/mullvad-vpn-daemon-systemd.post-upgrade

@@ -1,6 +0,0 @@
-#!/bin/sh
-set -eu
-
-# Mark systemd service for restart
-systemctl set-property mullvad-daemon.service Markers=+needs-restart \
-  || echo "Failed to mark mullvad-daemon for restart"

mullvad-vpn-daemon/mullvad-vpn-daemon.post-deinstall

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+set -eu
+
+function remove_logs_and_cache {
+  rm -r --interactive=never /var/log/mullvad-vpn/ || \
+    echo "Failed to remove mullvad-vpn logs"
+  rm -r --interactive=never /var/cache/mullvad-vpn/ || \
+    echo "Failed to remove mullvad-vpn cache"
+}
+
+function remove_config {
+  rm -r --interactive=never /etc/mullvad-vpn || \
+    echo "Failed to remove mullvad-vpn config"
+}
+
+function remove_symlinks {
+  rm /usr/bin/mullvad-problem-report || \
+    echo "Failed to remove mullvad-problem-report"
+}
+
+# checking what kind of an action is taking place
+case $@ in
+  # apt purge passes "purge"
+  "purge")
+    remove_logs_and_cache
+    remove_config
+    remove_symlinks
+    ;;
+  # apt remove passes "remove"
+  "remove")
+    remove_symlinks
+    ;;
+  # dnf remove passes a 0
+  "0")
+    remove_logs_and_cache
+    remove_config
+    remove_symlinks
+    ;;
+esac

mullvad-vpn-daemon/mullvad-vpn-daemon.post-install

@@ -1,7 +1,8 @@
-#!/bin/sh
+#!/usr/bin/env bash
 set -eu
 
-# Copy vendored relay list into place
+ln -sf /opt/Mullvad\ VPN/resources/mullvad-problem-report /usr/bin/mullvad-problem-report
-mkdir -p /var/cache/mullvad-vpn \
+
-  && cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json \
+systemctl enable "/usr/lib/systemd/system/mullvad-daemon.service"
-  || echo "failed to install /var/cache/mullvad-vpn/relays.json"
+systemctl start mullvad-daemon.service || echo "Failed to start mullvad-daemon.service"
+systemctl enable "/usr/lib/systemd/system/mullvad-early-boot-blocking.service"

mullvad-vpn-daemon/mullvad-vpn-daemon.post-upgrade

@@ -1,8 +0,0 @@
-#!/bin/sh
-set -eu
-
-# Overwrite the cached relay list with the vendored one.
-# The new daemon should contain an up-to-date list.
-mkdir -p /var/cache/mullvad-vpn \
-  && cp /usr/share/mullvad-vpn/relays.json /var/cache/mullvad-vpn/relays.json \
-  || echo "failed to install /var/cache/mullvad-vpn/relays.json"

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-deinstall

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -eu
+
+echo "Running prerm."
+is_number_re='^[0-9]+$'
+# Check if we're running during an upgrade step on Fedora
+# https://fedoraproject.org/wiki/Packaging:Scriptlets#Syntax
+if [[ "$1" =~ $is_number_re ]] && [ "$1" -gt 0 ]; then
+    exit 0;
+fi
+
+if [[ "$1" == "upgrade" ]]; then
+    exit 0;
+fi
+
+# the user might've disabled or stopped the service themselves already
+systemctl stop mullvad-daemon.service || true
+systemctl disable mullvad-daemon.service || true
+systemctl stop mullvad-early-boot-blocking.service || true
+systemctl disable mullvad-early-boot-blocking.service || true
+
+/opt/Mullvad\ VPN/resources/mullvad-setup reset-firewall || echo "Failed to reset firewall"
+/opt/Mullvad\ VPN/resources/mullvad-setup remove-device || echo "Failed to remove device from account"

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-install

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -eu
+
+if which systemctl &> /dev/null && systemctl is-system-running | grep -vq offline &> /dev/null; then
+    if systemctl status mullvad-daemon &> /dev/null; then
+        /opt/Mullvad\ VPN/resources/mullvad-setup prepare-restart || true
+        systemctl stop mullvad-daemon.service
+        systemctl disable mullvad-daemon.service
+        systemctl disable mullvad-early-boot-blocking.service || true
+        cp /var/log/mullvad-vpn/daemon.log /var/log/mullvad-vpn/old-install-daemon.log \
+            || echo "Failed to copy old daemon log"
+    fi
+fi
+
+rm -f /var/cache/mullvad-vpn/relays.json
+rm -f /var/cache/mullvad-vpn/api-ip-address.txt

mullvad-vpn-daemon/mullvad-vpn-daemon.pre-upgrade

@@ -1,6 +0,0 @@
-#!/bin/sh
-set -eu
-
-# Clear the cached API IP address.
-# The new daemon should contain an up-to-date address.
-rm -f /var/cache/mullvad-vpn/api-ip-address.txt

mullvad-vpn-slint/APKBUILD

@@ -2,23 +2,22 @@
 # Maintainer: Joakim Hulthe <joakim@hulthe.net>
 pkgname=mullvad-vpn-slint
 pkgver=2026.1_git
-pkgrel=4
+pkgrel=0
 pkgdesc="Mullvad VPN GUI"
 url="https://mullvad.net/"
-arch="all"
+arch="$(uname -m)"
 license="GPL-3-or-later"
 # TODO: maybe depend on mullvad-vpn-daemon?
 depends="
 "
 makedepends="
-	build-base
+  build-base
-	cargo-auditable
+	rustup
-	rust
+  musl-dev
-	pkgconfig
+  pkgconfig
-	protobuf-dev
+  protobuf-dev
-	fontconfig-dev
+  fontconfig-dev
-	dbus-dev
+  dbus-dev
-	wayland-dev
 "
 checkdepends=""
 install=""
@@ -29,57 +28,30 @@ options="net !check"
 
 _cargo_target_dir="${CARGO_TARGET_DIR:-$startdir/mullvadvpn-app/target}"
 
-prepare() {
-	default_prepare
-
-	cd "$startdir/mullvadvpn-app"
-	cargo fetch --target "$CHOST" --locked
-}
-
 build() {
+	# rustup-init -y --default-toolchain stable
+	source "$HOME/.cargo/env"
+
 	cd "$startdir/mullvadvpn-app"
 
-	# Specify `--target` so that the final binary ends up in target/<target>/release.
+	# rustup default stable
-	cargo build --release --locked \
+	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
-	    --target "$CHOST" \
+
+	# * Force the `stable` toolchain since it's installed in the container.
+	#   We don't wan't to needlessly download rust while building.
+	# * Specify `--target` so that the final binary ends up in target/<target>/release.
+	cargo +stable build --release --locked \
+	    --target "$target" \
 	    -p mullvad-slint
 }
 
 package() {
-	# Executable
+	local target="$(rustup +stable show active-toolchain | sed 's/^[^-]*-//' | grep -o "^[^ ]*")"
-	install -m755 -D "$_cargo_target_dir/$CHOST/release/mullvad-slint" \
+
+	# TODO: .desktop
+	# TODO: icon
+
+	install -m755 -D "$_cargo_target_dir/$target/release/mullvad-slint" \
 		"$pkgdir"/usr/bin/mullvad-slint
-
-	# .desktop file
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/mullvad-vpn-slint.desktop" \
-		"$pkgdir"/usr/share/applications/mullvad-vpn-slint.desktop
-	
-  # Icons
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/16x16/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/16x16/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/20x20/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/20x20/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/24x24/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/24x24/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/30x30/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/30x30/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/32x32/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/32x32/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/36x36/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/36x36/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/40x40/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/40x40/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/48x48/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/48x48/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/64x64/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/64x64/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/72x72/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/72x72/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/96x96/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/96x96/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/256x256/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/256x256/apps/mullvad.png
-	install -m644 -D "$startdir/mullvadvpn-app/dist-assets/linux/slint/512x512/apps/mullvad.png" \
-		"$pkgdir"/usr/share/icons/hicolor/512x512/apps/mullvad.png
 }
 

podman-build.sh

@@ -4,10 +4,7 @@ set -ex
 cd "$(dirname "$0")"
 
 package="$1"
-shift
-
 builder_image="mullvad-slint-musl-builder"
-cargo_home="${CARGO_HOME:-$HOME/.cargo}"
 . "$HOME/.abuild/abuild.conf"
 
 podman build . -f Dockerfile -t "$builder_image"
@@ -17,12 +14,10 @@ podman run --rm \
     -v "$PACKAGER_PRIVKEY":/key.rsa:ro \
     -v "$PACKAGER_PRIVKEY.pub":/key.rsa.pub:ro \
     -v "$PACKAGER_PRIVKEY.pub":/etc/apk/keys/key.rsa.pub:ro \
-    -v ./packages:/root/packages \
-    -v "$cargo_home":/cargo-home \
-    -e "CARGO_HOME=/cargo-home" \
     -v ./target:/cargo-target \
+    -v ./packages:/root/packages \
     -e "CARGO_TARGET_DIR=/cargo-target" \
     -it \
     "$builder_image" \
-    abuild -F "$@"
+    abuild -F