# Contributor: Olivier Mauras <olivier@mauras.ch>
# Maintainer: Francesco Colista <fcolista@alpinelinux.org>
pkgname=consul
pkgver=1.15.4
pkgrel=2
pkgdesc="Tool for service discovery, monitoring and configuration"
url="https://www.consul.io/"
# riscv64 blocked by dependency boltdb
arch="all !riscv64"
license="MPL-2.0"
makedepends="bash go"
install="$pkgname.pre-install"
options="net chmod-clean"
pkgusers="consul"
pkggroups="consul"
subpackages="$pkgname-openrc"
source="consul-$pkgver.tar.gz::https://github.com/hashicorp/consul/archive/v$pkgver.tar.gz
	consul.initd
	consul.confd
	acl.json.sample
	encrypt.json.sample
	server.json
	tls.json.sample"

# secfixes:
#   1.14.1-r0:
#     - CVE-2022-3920
#   1.13.2-r0:
#     - CVE-2021-41803
#     - CVE-2022-40716
#   1.11.3-r0:
#     - CVE-2022-24687
#   1.11.1-r0:
#     - CVE-2021-44761
#   1.9.5-r0:
#     - CVE-2020-25864
#     - CVE-2021-28156

export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}"
export GOTMPDIR="${GOTMPDIR:-"$srcdir"}"
export GOMODCACHE="${GOMODCACHE:-"$srcdir/go"}"

build() {
	go build -v -o bin/$pkgname \
		-ldflags "-X github.com/hashicorp/consul/version.GitDescribe='$pkgver'" \
		--tags consul
}

check() {
	go test
}

package() {
	# Consul init script
	install -m755 -D "$srcdir"/$pkgname.initd \
		"$pkgdir"/etc/init.d/$pkgname
	# Consul init conf
	install -m644 -D "$srcdir"/$pkgname.confd \
		"$pkgdir"/etc/conf.d/$pkgname
	# Main binary
	install -m750 -o root -g consul \
		-D bin/$pkgname \
		"$pkgdir"/usr/sbin/$pkgname
	# Consul datadir
	install -m750 -o consul -g consul -d "$pkgdir"/var/$pkgname
	# Consul configdir
	install -m750 -o root -g consul -d "$pkgdir"/etc/$pkgname
	# Consul sample config files
	for cf in acl.json.sample encrypt.json.sample server.json tls.json.sample; do
		install -m640 -o root -g consul "$srcdir"/$cf "$pkgdir"/etc/$pkgname
	done
}

sha512sums="
a03d0f71fc4f6e42a0c0efbc8477701356c40d7221ede565985ba6775a7a2ffb75cb99e609b0ec428875731ecc20941cc4bba7d1d1551ea859563a02a3c41e95  consul-1.15.4.tar.gz
a8d16de59b821c027151d775fefc65773e6a5e5c377dd1d6f96f8b682298cd6c8f4daa4bcd46fa2dd05585e6e6b4fb9c9c7edd3e840b75acf745b6ae2b985be3  consul.initd
f2c5af74dfcbca2fea8ebea31139d93f44455b93ef17ec611b880d7071af4125615dbbd23969d0d04ca636c26d7b4e7eb97f1266baa89252097f4cbc5173d817  consul.confd
d4310dde63d3b8fc4791124bd255bf2a1402b86d00f6b1732e18b0caedb75eae6c77382e1a48f12469828ef4bb363db4580fb1aafa63fcdc97b1431f6ea96d58  acl.json.sample
ec30ad73c13f9dd5ba15389567436dbf74c24e822cb959c6ccc40a35e36e212313c70f3cf1ccee3f63a7bb98760173d6c2478161a25b85e14dd889a47572aff1  encrypt.json.sample
a8b984db03f0bfb652d541dbdd3f1bc9be22f16cce78f73e495cc54adea1e09e9ac0e2f306ca8436590433c80a2ef824641f790b30aea9acb806b01fcabc918e  server.json
7582f1845a742cf570db5aa52077eb4c4cbfe68ee2ae9569cc2806444217eba0ee960a3a52f3edd1a7c36ca8b7811df5cab6dd062b060ab43ed57b8c811c85de  tls.json.sample
"