Name:           openvas-scanner
Version:        23.48.0
Release:        %autorelease
Summary:        Scanner component of Greenbone Vulnerability Management

License:        GPL-2.0-or-later
URL:            https://github.com/greenbone/openvas-scanner
Source0:        %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
Source1:        openvas-scanner.tmpfiles
#Source2:        openvas-sudoers
Source3:        openvas-scanner.sysusers

BuildRequires:  bison
BuildRequires:  cargo-rpm-macros
BuildRequires:  cmake >= 3.18
BuildRequires:  flex
BuildRequires:  gcc
BuildRequires:  make
BuildRequires:  pkgconfig
BuildRequires:  systemd-rpm-macros

BuildRequires:  pkgconfig(glib-2.0) >= 2.42
BuildRequires:  pkgconfig(gnutls) >= 3.6.4
BuildRequires:  pkgconfig(gpgme) >= 1.1.2
BuildRequires:  pkgconfig(json-glib-1.0) >= 1.4.4
BuildRequires:  pkgconfig(libbsd)
BuildRequires:  pkgconfig(libcurl) >= 7.74.0
BuildRequires:  pkgconfig(libgcrypt)
BuildRequires:  pkgconfig(libgvm_base) >= 22.4
BuildRequires:  pkgconfig(libgvm_boreas) >= 22.4
BuildRequires:  pkgconfig(libgvm_util) >= 22.4
BuildRequires:  pkgconfig(ksba) >= 1.0.7
BuildRequires:  pkgconfig(libmagic)
BuildRequires:  pkgconfig(libpcap)
BuildRequires:  pkgconfig(libssh) >= 0.6.0
BuildRequires:  pkgconfig(mit-krb5)
BuildRequires:  cmake(eclipse-paho-mqtt-c)
BuildRequires:  pkgconfig(zlib)

BuildRequires:  openvas-smb-devel

Requires:       gvm-libs%{?_isa}
Recommends:     openvas-smb%{?_isa}
Requires:       valkey

%description
OpenVAS Scanner is the scanner component of Greenbone Vulnerability
Management. It executes Network Vulnerability Tests written in NASL and
uses Redis for scanner state and knowledge-base data.

%prep
%autosetup -n %{name}-%{version}

%generate_buildrequires
cd rust
# Too many missing deps
#cargo_generate_buildrequires

%build
%cmake \
    -DSBINDIR=%{_sbindir} \
    -DSYSCONFDIR=%{_sysconfdir} \
    -DLOCALSTATEDIR=%{_localstatedir} \
    -DOPENVAS_RUN_DIR=%{_rundir}/ospd \
    -DOPENVAS_STATE_DIR=%{_localstatedir}/lib/openvas \
    -DOPENVAS_NVT_DIR=%{_localstatedir}/lib/openvas/plugins \
    -DCMAKE_SKIP_RPATH=ON \
    -DBUILD_TESTING=OFF

%cmake_build
cd rust
#make
cargo build --release

%install
%cmake_install

install -Dpm0644 %{SOURCE1} %{buildroot}%{_tmpfilesdir}/openvas-scanner.conf
#install -Dpm0440 %{SOURCE2} %{buildroot}%{_sysconfdir}/sudoers.d/openvas-scanner
install -Dpm0644 %{SOURCE3} %{buildroot}%{_sysusersdir}/openvas-scanner.conf
install -Dpm0644 config/redis-openvas.conf %{buildroot}%{_sysconfdir}/valkey/openvas.conf
mkdir -p %{buildroot}%{_sysconfdir}/openvas/gnupg
echo db_address = /run/valkey/openvas.sock > %{buildroot}%{_sysconfdir}/openvas/openvas.conf

%check
# Upstream tests require scanner/runtime services and are disabled for this
# initial EPEL10 package.
%{nil}

%pre
%sysusers_create_compat %{SOURCE3}

%post
%tmpfiles_create %{_tmpfilesdir}/openvas-scanner.conf

%files
%license COPYING
%doc README.md INSTALL.md
%{_sbindir}/openvas
%{_bindir}/openvas-nasl
%{_bindir}/openvas-nasl-lint
# TODO - does this need a devel package?
%{_libdir}/libopenvas_*.so*
%{_mandir}/man1/openvas-nasl.1*
%{_mandir}/man1/openvas-nasl-lint.1*
%{_mandir}/man8/openvas.8*
%{_datadir}/openvas/
%dir %attr(0750,gvm,gvm) %{_sysconfdir}/openvas
%dir %attr(0750,gvm,gvm) %{_sysconfdir}/openvas/gnupg
%config(noreplace) %{_sysconfdir}/openvas/openvas.conf
%config(noreplace) %{_sysconfdir}/openvas/openvas_log.conf
%config(noreplace) %attr(0640,valkey,root) %{_sysconfdir}/valkey/openvas.conf
#config(noreplace) %{_sysconfdir}/sudoers.d/openvas-scanner
%{_tmpfilesdir}/openvas-scanner.conf
%{_sysusersdir}/openvas-scanner.conf

%dir %attr(0750,gvm,gvm) %{_localstatedir}/lib/openvas
%dir %attr(0750,gvm,gvm) %{_localstatedir}/lib/openvas/plugins
%dir %attr(0750,gvm,gvm) %{_localstatedir}/log/gvm

%changelog
%autochangelog