File step-ca.spec of Package step-ca

#
# spec file for package cfssl
#
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#

%define configdir /etc/step-ca
%define datadir   /var/lib/step-ca
%define user_group _step-ca
%define services %{name}.service

Name:           step-ca
Version:        0.27.4
Release:        0
%define pkg_name certificates
%define pkg_version %{version}
Summary:        Smallstep CA
License:        BSD-3-Clause
Group:          Productivity/Networking/Security
Url:            https://smallstep.com/certificates
Source:         %{pkg_name}-%{pkg_version}.tar.gz
Source1:        vendor.tar.xz
Source2:        step-ca-init
Source3:        README.SUSE
Source5:        step-ca-apparmor
Source6:        step-ca-has-provisioner
Source9:        series
Patch1:         service-file.patch
Provides:       user(%{user_group})
Provides:       group(%{user_group})
BuildRequires:  packaging-apparmor
BuildRequires:  apparmor-rpm-macros
BuildRequires:  apparmor-abstractions
BuildRequires:  golang-packaging
BuildRequires:  golang(API) >= 1.19
BuildRequires:  pkgconfig(systemd)
BuildRequires:  pkgconfig(libpcsclite)
Requires:       apparmor-abstractions
Requires:       step-cli
%{systemd_ordering}
%go_nostrip

%description
A private certificate authority (X.509 & SSH) & ACME server for secure
automated certificate management, so you can use TLS everywhere & SSO for SSH.

%prep
%autosetup -p1 -n %{pkg_name}-%{pkg_version} -a 1

%build
%goprep github.com/smallstep/certificates/
source_date=$(date -u '+%Y-%m-%d %H:%M UTC' -d "@${SOURCE_DATE_EPOCH}")
%gobuild -mod=vendor -ldflags="-w -X 'main.Version=%{version}' -X 'main.BuildTime=${source_date}'" cmd/...

%install
%goinstall

install -m 0755 -d %{buildroot}%{_sbindir} %{buildroot}%{_unitdir}
install -m 0750 -d %{buildroot}%{datadir} %{buildroot}%{configdir}

mv %{buildroot}%{_bindir}/* %{buildroot}%{_sbindir}

install -m 0755 %{SOURCE2} %{buildroot}%{_sbindir}/step-ca-init
install -m 0755 %{SOURCE6} %{buildroot}%{_sbindir}/step-ca-has-provisioner

install -m 0640 /dev/null  %{buildroot}%{configdir}/password.txt

install -m 0644 systemd/step-ca.service %{buildroot}%{_unitdir}/step-ca.service
ln -sf /sbin/service %{buildroot}%{_sbindir}/rcstep-ca

cp %{SOURCE3} .

install -D -m 0644 %{SOURCE5} %{buildroot}/etc/apparmor.d/step-ca
pushd %{buildroot}/etc/apparmor.d
%apparmor_postprocess step-ca
popd

%pre
%{_sbindir}/groupadd -r %{user_group} &>/dev/null || :
%{_sbindir}/useradd -g %{user_group} -s /bin/false -r -c "Smallstep CA" -d %{datadir} %{user_group} &>/dev/null || :
%service_add_pre %{services}

%post
%service_add_post %{services}

%preun
%service_del_preun %{services}

%postun
%apparmor_reload /etc/apparmor.d/step-ca
%service_del_postun %{services}

%files
%config(noreplace) %attr(-,root,%{user_group})    %{configdir}
%dir               %attr(-,%{user_group},%{user_group}) %{datadir}
%doc README.md README.SUSE
%license LICENSE
#caps(CAP_NET_BIND_SERVICE=pe)
%attr(750,root,%{user_group}) %{_sbindir}/%{name}
%config                   /etc/apparmor.d/step-ca
%config(noreplace) %ghost /etc/apparmor.d/local/step-ca
%{_unitdir}/%{name}.service
%{_sbindir}/rc%{name}
%{_sbindir}/%{name}-init
%{_sbindir}/step-ca-has-provisioner