Name:           notus-scanner
Version:        22.7.2
Release:        %autorelease
Summary:        Vulnerability scanner for local security checks

License:        AGPL-3.0-or-later
URL:            https://github.com/greenbone/notus-scanner
Source0:        %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
Source1:	notus-scanner.toml
Source2:        notus-scanner.tmpfiles

BuildArch:      noarch

BuildRequires:  pyproject-rpm-macros
BuildRequires:  python3-devel
BuildRequires:  systemd-rpm-macros

Requires:       valkey

%description
Notus Scanner performs local security checks (LSCs) for Greenbone
Vulnerability Management. It consumes the Notus advisory feed and is
typically managed by ospd-openvas.

%prep
%autosetup -n %{name}-%{version}
sed -i -e '/^psutil /s/= ".*"/= ">=5.9.8"/' pyproject.toml
sed -i -e 's,/usr/local,/usr,'' config/notus-scanner.service

%generate_buildrequires
%pyproject_buildrequires

%build
%pyproject_wheel

%install
%pyproject_install
%pyproject_save_files -L notus
install -Dpm0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/gvm/notus-scanner.toml
install -Dpm0644 %{SOURCE2} %{buildroot}%{_tmpfilesdir}/notus-scanner.conf
install -Dpm0644 config/notus-scanner.service %{buildroot}%{_unitdir}/notus-scanner.service
mkdir -p %{buildroot}%{_localstatedir}/lib/notus
mkdir -p %{buildroot}%{_localstatedir}/log/notus-scanner
mkdir -p %{buildroot}%{_sysconfdir}/sudoers.d

%check
# Upstream tests require advisory feeds and runtime services.
%{nil}

%post
%tmpfiles_create %{_tmpfilesdir}/notus-scanner.conf
%systemd_post notus-scanner.service

%preun
%systemd_preun notus-scanner.service

%postun
%systemd_postun_with_restart ospd-scanner.service

%files -f %{pyproject_files}
%license LICENSE
%doc README.md
%config(noreplace) %{_sysconfdir}/gvm/notus-scanner.toml
%{_bindir}/notus-scanner
%{_bindir}/notus-scan-start
%{_bindir}/notus-subscriber
%{_unitdir}/notus-scanner.service
%{_tmpfilesdir}/notus-scanner.conf
%dir %attr(0750,gvm,gvm) %{_localstatedir}/lib/notus
%dir %attr(0750,gvm,gvm) %{_localstatedir}/log/notus-scanner

%changelog
%autochangelog