# http://fedoraproject.org/wiki/Packaging:Guidelines?rd=Packaging/Guidelines#PIE

%global _hardened_build 1

Name:             obs-signd

Summary:          The OBS sign daemon

License:          GPLv2

Group:            Applications/System

Url:              https://github.com/openSUSE/obs-sign

Version:          2.2.1

Release:          9%{?dist}

# Taken from upstream git

# git clone https://github.com/openSUSE/obs-sign && cd obs-sign

# git checkout 2.2.1

# tar czvf obs-signd-2.2.1.tar.bz2 \

#   sign.8  sign.c  sign.conf  sign.conf.5  signd signd.8 obssignd

Source0:          obs-signd-%version.tar.bz2

# Upstream doesn't provide systemd service file

Source1:          signd.service

# We renamed the option in gnupg2 to 'file-is-digest'

Patch0:           obs-sign-rename-option-files-are-digests-to-file-is-digest.patch

# https://github.com/openSUSE/obs-sign/pull/6

Patch1:			  0001-fixes-user-id-matching-to-provide-unique-results.patch

Requires:         gnupg2

Requires(post):   systemd

Requires(preun):  systemd

Requires(postun): systemd

BuildRequires:    perl-generators

BuildRequires:    systemd

%description

The OpenSUSE Build Service sign client and daemon.

This daemon can be used to sign anything via gpg by communicating

with a remote server to avoid the need to host the private key

on the same server.

%prep

%setup -q -c -n obs-signd-%version

%patch0 -p1

%patch1 -p1

%build

gcc %{optflags} -fPIC -pie -o sign sign.c

%install

mkdir -p %{buildroot}%{_sbindir} %{buildroot}%{_sysconfdir}

install -d -m 0755 %{buildroot}%{_bindir}

# binaries and configuration

mkdir -p %{buildroot}%{_sbindir} %{buildroot}%{_bindir} %{buildroot}%{_sysconfdir}

install -m 0755 signd %{buildroot}%{_sbindir}

install -m 0750 sign %{buildroot}%{_bindir}

install -m 0644 sign.conf %{buildroot}%{_sysconfdir}

# systemd service

mkdir -p %{buildroot}%{_unitdir}

install -m 0644 %SOURCE1 %{buildroot}%{_unitdir}

# man pages

install -d -m 0755 %{buildroot}%{_mandir}/man{5,8}

for f in 5 8; do

  install -m 0644 sig*.${f} %{buildroot}%{_mandir}/man${f}/

done

%pre

getent group obsrun >/dev/null || %{_sbindir}/groupadd -r obsrun

getent passwd obsrun >/dev/null || \

  %{_sbindir}/useradd -r -s /bin/false -c "User for Open Build Service backend" \

                         -d %{_libdir}/obs -g obsrun obsrun

exit 0

%post

%systemd_post signd.service

%preun

%systemd_preun signd.service

%postun

%systemd_postun_with_restart signd.service

%files

%config(noreplace) %{_sysconfdir}/sign.conf

%verify(not mode) %attr(4750,root,obsrun) %{_bindir}/sign

%{_sbindir}/signd

%{_unitdir}/signd.service

%doc %{_mandir}/man*/*

%changelog

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.1-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Tue Apr 26 2016 Miroslav Suchy <msuchy@redhat.com> - 2.2.1-8

- fix id matching (Patch1)

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.1-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.1-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Fri Oct 03 2014 Josef Stribny <jstribny@redhat.com> - 2.2.1-5

- Add install section to unit file

* Tue Aug 26 2014 Josef Stribny <jstribny@redhat.com> - 2.2.1-4

- Enable Position-independent code (PIC)

* Mon Aug 25 2014 Josef Stribny <jstribny@redhat.com> - 2.2.1-3

- Create group or user only if it doesn't exist yet

- Remove explicit gzip of man pages

* Fri Aug 22 2014 Josef Stribny <jstribny@redhat.com> - 2.2.1-2

- Use macros where possible

* Fri May 23 2014 Josef Stribny <jstribny@redhat.com> 2.2.1-1

- Initial package