##
##  teleport.spec -- OpenPKG RPM Package Specification
##  Copyright (c) 2000-2020 OpenPKG Project <http://openpkg.org/>
##
##  Permission to use, copy, modify, and distribute this software for
##  any purpose with or without fee is hereby granted, provided that
##  the above copyright notice and this permission notice appear in all
##  copies.
##
##  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
##  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
##  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
##  IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
##  CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
##  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
##  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
##  USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
##  ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
##  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
##  OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
##  SUCH DAMAGE.
##

#   package information
%define       V_teleport_base  4.2.0
%define       V_teleport_snap  20191219

#   package information
Name:         teleport
Summary:      SSH for Clusters
URL:          https://github.com/gravitational/teleport
Vendor:       Gravitational Inc.
Packager:     OpenPKG Project
Distribution: OpenPKG Community
Class:        EVAL
Group:        Networking
License:      Apache
Version:      %{V_teleport_base}.%{V_teleport_snap}
Release:      20191219

#   list of sources
Source0:      http://download.openpkg.org/components/versioned/teleport/teleport-%{V_teleport_snap}.tar.xz
Source1:      rc.teleport
Source2:      teleport.yaml
Patch0:       teleport.patch

#   build information
BuildPreReq:  OpenPKG, openpkg >= 20160101, go, infozip
PreReq:       OpenPKG, openpkg >= 20160101, x509

%description
    Gravitational Teleport is a tool for remotely accessing isolated
    clusters of Linux servers via SSH or HTTPS. Unlike traditional
    key-based access, Teleport enables teams to easily adopt the
    following practices: Avoid key distribution headaches by using
    auto-expiring keys signed by a cluster certificate authority
    (CA). Connect to clusters located behind firewalls. Record and
    replay SSH sessions for knowledge sharing and auditing purposes.
    Integrate identities of team members with Google Apps and other
    OAuth2 providers. Enforce 2nd factor authentication. Collaboratively
    troubleshoot issues through session sharing. Discover online servers
    and Docker containers within a cluster with dynamic node labels.
    Teleport does not suffer from and trust on first use weakness.

%track
    prog teleport = {
        version   = %{V_teleport_base}
        url       = https://github.com/gravitational/teleport/releases
        regex     = (\d+\.\d+\.\d+)\.tar\.gz
    }

%prep
    %setup -q -n teleport
    %patch -p0

%build
    #   configure paths
    %{l_shtool} subst \
        -e 's;/var/lib/teleport;%{l_prefix}/var/teleport/data;g' \
        -e 's;/usr/local/share/teleport;%{l_prefix}/share/teleport;g' \
        src/github.com/gravitational/teleport/Makefile \
        src/github.com/gravitational/teleport/build.assets/Makefile \
        src/github.com/gravitational/teleport/build.assets/pkg/etc/teleport.yaml \
        src/github.com/gravitational/teleport/lib/defaults/defaults.go \
        src/github.com/gravitational/teleport/lib/events/auditlog.go
    %{l_shtool} subst %{l_value -s -a} \
        src/github.com/gravitational/teleport/lib/srv/exec.go

    #   build program
    (   export GOPATH=`pwd`
        cd $GOPATH/src/github.com/gravitational/teleport
        %{l_make} %{l_mflags} release \
            SHELL="%{l_bash}" \
            BINDIR=%{l_prefix}/bin \
            DATADIR=%{l_prefix}/share/teleport
    ) || exit $?

%install
    #   create directory hierarchy
    %{l_shtool} mkdir -f -p -m 755 \
        $RPM_BUILD_ROOT%{l_prefix}/bin \
        $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d \
        $RPM_BUILD_ROOT%{l_prefix}/etc/teleport \
        $RPM_BUILD_ROOT%{l_prefix}/var/teleport/run \
        $RPM_BUILD_ROOT%{l_prefix}/var/teleport/log \
        $RPM_BUILD_ROOT%{l_prefix}/var/teleport/data

    #   install program
    (   export GOPATH=`pwd`
        cd $GOPATH/src/github.com/gravitational/teleport
        %{l_make} %{l_mflags} install \
            BINDIR=$RPM_BUILD_ROOT%{l_prefix}/bin \
            DATADIR=$RPM_BUILD_ROOT%{l_prefix}/share/teleport
    ) || exit $?

    #   install run-command script
    %{l_shtool} install -c -m 755 %{l_value -s -a} \
        %{SOURCE rc.teleport} $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d/

    #   install default configuration
    cmd_hostname=`which hostname`
    cmd_uname=`which uname`
    %{l_shtool} install -c -m 644 %{l_value -s -a} \
        -e "s;@cmd_hostname@;$cmd_hostname;g" \
        -e "s;@cmd_uname@;$cmd_uname;g" \
        %{SOURCE teleport.yaml} \
        $RPM_BUILD_ROOT%{l_prefix}/etc/teleport/

    #   determine installation files
    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \
        %{l_files_std} \
        '%config %{l_prefix}/etc/teleport/*' \
        '%attr(-,%{l_rusr},%{l_rgrp}) %{l_prefix}/var/teleport/*' \
        '%attr(-,%{l_rusr},%{l_rgrp}) %{l_prefix}/var/teleport/*/*'

%files -f files

%clean

%post
    if [ $1 -eq 2 ]; then
        #   after upgrade, restart service
        eval `%{l_rc} teleport status 2>/dev/null`
        [ ".$teleport_active" = .yes ] && %{l_rc} teleport restart
    fi
    exit 0

%preun
    if [ $1 -eq 0 ]; then
        #   before erase, stop service and remove log files
        %{l_rc} teleport stop 2>/dev/null
        rm -rf $RPM_INSTALL_PREFIX/var/teleport/log/*  >/dev/null 2>&1 || true
        rm -rf $RPM_INSTALL_PREFIX/var/teleport/run/*  >/dev/null 2>&1 || true
        rm -rf $RPM_INSTALL_PREFIX/var/teleport/data/* >/dev/null 2>&1 || true
    fi
    exit 0