# Define the kmod package name here.
%define kmod_name	amneziawg

%define findpat %( echo "%""P" )
%define __find_requires /usr/lib/rpm/redhat/find-requires.ksyms
%define __find_provides /usr/lib/rpm/redhat/find-provides.ksyms %{kmod_name} %{?epoch:%{epoch}:}%{version}-%{release}
%define dup_state_dir %{_localstatedir}/lib/rpm-state/kmod-dups
%define kver_state_dir %{dup_state_dir}/kver
%define kver_state_file %{kver_state_dir}/%{kmod_kernel_version}.%{_arch}
%define dup_module_list %{dup_state_dir}/rpm-kmod-%{kmod_name}-modules
%define debug_package %{nil}

%global _use_internal_dependency_generator 0
%global kernel_source() %{_usrsrc}/kernels/%{kmod_kernel_version}.%{_arch}


# If kmod_kernel_version isn't defined on the rpmbuild line, define it here.
#%%{!?kmod_kernel_version: %%define kmod_kernel_version 6.12.0-211.40.1.el10_2}

%if 0%{?centos} == 10 && "%{?dist_home_url}" == "https://centos.org/"
%{!?kmod_kernel_version: %define kmod_kernel_version 6.12.0-254.el10}
%endif

%if 0%{?rhel} == 10 && "%{?dist_home_url}" != "https://centos.org/"
%{!?kmod_kernel_version: %define kmod_kernel_version 6.12.0-211.40.1.el10_2}
%endif

%if 0%{?centos} == 9 && "%{?dist_home_url}" == "https://centos.org/"
%{!?kmod_kernel_version: %define kmod_kernel_version 5.14.0-731.el9}
%endif

%if 0%{?rhel} == 9 && "%{?dist_home_url}" != "https://centos.org/"
%{!?kmod_kernel_version: %define kmod_kernel_version 5.14.0-687.33.1.el9_8}
%endif

Name:		kmod-%{kmod_name}
Version:	3.1.20260906
Release:	1%{?dist}
Summary:	%{kmod_name} kernel module(s)
Group:		System Environment/Kernel
License:	GPLv2
URL:		https://github.com/amnezia-vpn/amneziawg-linux-kernel-module

AutoReq:	no

Source0:	%{url}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
Patch0:         0001-Fix-build-on-CentOS-Stream-9.patch
Patch1:         0001-Fix-build-on-EL9.patch
Patch2:         0001-Fix-build-on-EL10.2.patch
Patch3:         0004-Fix-build-on-Centos-10.patch
Source5:	GPL-v2.0.txt

BuildRoot:	%(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)

BuildRequires:	elfutils-libelf-devel
BuildRequires:	kernel-abi-stablelists = %{kmod_kernel_version}
BuildRequires:	kernel-devel = %{kmod_kernel_version}
BuildRequires:	kernel-rpm-macros
BuildRequires:	redhat-rpm-config
BuildRequires:	rpm-build
BuildRequires:	gcc
BuildRequires:	make

Provides:	kernel-modules >= %{kmod_kernel_version}.%{_arch}
Provides:	kmod-%{kmod_name} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires:	kernel >= %{kmod_kernel_version}
Requires:	kernel-core-uname-r >= %{kmod_kernel_version}

Requires:	amneziawg-tools >= 3.0

Requires(post):		%{_sbindir}/depmod
Requires(postun):	%{_sbindir}/depmod

Requires(post):		%{_sbindir}/weak-modules
Requires(postun):	%{_sbindir}/weak-modules

Requires(posttrans):	%{_bindir}/sort
Requires(postun):	%{_bindir}/sort

%description
This package provides the %{kmod_name} kernel module(s).
It is built to depend upon the specific ABI provided by a range of releases
of the same variant of the Linux kernel and not on any one specific build.

%prep
%setup -q -n amneziawg-linux-kernel-module-%{version}
%patch -P0 -p1
%patch -P1 -p1
%patch -P2 -p1
%if 0%{?centos} == 10 && "%{?dist_home_url}" == "https://centos.org/"
%patch -P3 -p1
%endif

echo "override %{kmod_name} %{kmod_kernel_version}.* weak-updates/%{kmod_name}" > kmod-%{kmod_name}.conf

%build
pushd src
%{__make} -C %{kernel_source} %{?_smp_mflags} modules M=$PWD
popd

whitelist="/lib/modules/kabi-current/kabi_stablelist_%{_target_cpu}"
for modules in $( find . -name "*.ko" -type f -printf "%{findpat}\n" | sed 's|\.ko$||' | sort -u ) ; do
	# update greylist
	nm -u ./$modules.ko | sed 's/.*U //' |  sed 's/^\.//' | sort -u | while read -r symbol; do
		grep -q "^\s*$symbol\$" $whitelist || echo "$symbol" >> ./greylist
	done
done
sort -u greylist | uniq > greylist.txt

%install
%{__install} -d %{buildroot}/lib/modules/%{kmod_kernel_version}.%{_arch}/extra/%{kmod_name}/
%{__install} src/%{kmod_name}.ko %{buildroot}/lib/modules/%{kmod_kernel_version}.%{_arch}/extra/%{kmod_name}/
%{__install} -d %{buildroot}%{_sysconfdir}/depmod.d/
%{__install} -m 0644 kmod-%{kmod_name}.conf %{buildroot}%{_sysconfdir}/depmod.d/
%{__install} -d %{buildroot}%{_defaultdocdir}/kmod-%{kmod_name}-%{version}/
%{__install} -m 0644 %{SOURCE5} %{buildroot}%{_defaultdocdir}/kmod-%{kmod_name}-%{version}/
%{__install} -m 0644 greylist.txt %{buildroot}%{_defaultdocdir}/kmod-%{kmod_name}-%{version}/

# strip the modules(s)
find %{buildroot} -name \*.ko -type f | xargs --no-run-if-empty %{__strip} --strip-debug

# Sign the modules(s)
%if %{?_with_modsign:1}%{!?_with_modsign:0}
	# If the module signing keys are not defined, define them here.
	%{!?privkey: %define privkey %{_sysconfdir}/pki/kmod/msvsphere_kmod.priv}
	%{!?pubkey: %define pubkey %{_sysconfdir}/pki/kmod/msvsphere_kmod.pem}
	for module in $(find %{buildroot} -type f -name \*.ko);
		do %{_usrsrc}/kernels/%{kmod_kernel_version}.%{_arch}/scripts/sign-file \
			sha256 %{privkey} %{pubkey} $module;
	done
%endif

%clean
%{__rm} -rf %{buildroot}

%post
modules=( $(find /lib/modules/%{kmod_kernel_version}.x86_64/extra/%{kmod_name} | grep '\.ko$') )
printf '%s\n' "${modules[@]}" | %{_sbindir}/weak-modules --add-modules --no-initramfs

mkdir -p "%{kver_state_dir}"
touch "%{kver_state_file}"

exit 0

%posttrans
# We have to re-implement part of weak-modules here because it doesn't allow
# calling initramfs regeneration separately
if [ -f "%{kver_state_file}" ]; then
        kver_base="%{kmod_kernel_version}"
        kvers=$(ls -d "/lib/modules/${kver_base%%.*}"*)

        for k_dir in $kvers; do
                k="${k_dir#/lib/modules/}"

                tmp_initramfs="/boot/initramfs-$k.tmp"
                dst_initramfs="/boot/initramfs-$k.img"

                # The same check as in weak-modules: we assume that the kernel present
                # if the symvers file exists.
                if [ -e "/$k_dir/symvers.gz" ]; then
                        /usr/bin/dracut -f "$tmp_initramfs" "$k" || exit 1
                        cmp -s "$tmp_initramfs" "$dst_initramfs"
                        if [ "$?" = 1 ]; then
                                mv "$tmp_initramfs" "$dst_initramfs"
                        else
                                rm -f "$tmp_initramfs"
                        fi
                fi
        done

        rm -f "%{kver_state_file}"
        rmdir "%{kver_state_dir}" 2> /dev/null
fi

rmdir "%{dup_state_dir}" 2> /dev/null

exit 0

%preun
if rpm -q --filetriggers kmod 2> /dev/null| grep -q "Trigger for weak-modules call on kmod removal"; then
        mkdir -p "%{kver_state_dir}"
        touch "%{kver_state_file}"
fi

mkdir -p "%{dup_state_dir}"
rpm -ql kmod-%{kmod_name}-%{version}-%{release}.%{_arch} | grep '\.ko$' > "%{dup_module_list}"

%postun
if rpm -q --filetriggers kmod 2> /dev/null| grep -q "Trigger for weak-modules call on kmod removal"; then
        initramfs_opt="--no-initramfs"
else
        initramfs_opt=""
fi

modules=( $(cat "%{dup_module_list}") )
rm -f "%{dup_module_list}"
printf '%s\n' "${modules[@]}" | %{_sbindir}/weak-modules --remove-modules $initramfs_opt

rmdir "%{dup_state_dir}" 2> /dev/null

exit 0

%files
%defattr(644,root,root,755)
/lib/modules/%{kmod_kernel_version}.%{_arch}/
%config /etc/depmod.d/kmod-%{kmod_name}.conf
%doc /usr/share/doc/kmod-%{kmod_name}-%{version}/

%changelog
* Thu Sep 10 2026 Arkady L. Shane <ashejn@gmail.com> - 3.1.20260906-1
- Update to 3.1.20260906

* Fri Aug 21 2026 Arkady L. Shane <ashejn@gmail.com> - 3.1.20260812-1
- Update to 3.1.20260812