apk v2 package format error

[hertznsk]

Problem

APK packages created using FPM version 1.17.0 cannot be installed on Alpine Linux 3.23 with the error below:
ERROR: datadog-php-tracer_1.17.0_aarch64.apk: v2 package format error.

Root Cause

Alpine 3.23 introduced apk-tools v3.0.0, which enforces stricter APK v2 package validation. The new version requires a datahash field in the package's PKGINFO file - a SHA256 hash of the gzipped data.tar that's validated post-installation. Packages built with fpm 1.17.0 don't include this field, causing validation failures.

Additional information

DataDog/dd-trace-php#3555

[mcandre]

Alpine Linux changelogs:

https://www.alpinelinux.org/posts/Alpine-3.23.0-released.html

apk-tools changelogs:

https://gitlab.alpinelinux.org/alpine/apk-tools/-/releases

https://gitlab.alpinelinux.org/alpine/apk-tools/-/releases/v3.0.0

Support for the original "alpine v1" packages and for broken v2 packages from foreign tools has been removed

Scrolling the history, one of the breaking changes may be a new, strict requirement for more (SHA256) checksums for all files:

https://gitlab.alpinelinux.org/alpine/apk-tools/-/commit/d26b65d30f55a9f0df7d4a94165a657b33b160f1

There may be stricter validation of ISA's.

https://gitlab.alpinelinux.org/alpine/apk-tools/-/commit/c1a3e69f24e235fc78f4dddb1f85fdf281464446

Unknown which ISA identifier string fpm uses by default, on Intel or Apple Silicon Macs.

[mcandre]

Requesting assistance from apk-tools, as the validation error message is unfortunately quite generic.

https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/11187

https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/11188

[mcandre]

Recommend targeting apk v3 format.