Name:           python-cvmutils
Version:        0.1.8
Release:        %autorelease
Summary:        Tools for confidential virtual machines

License:        LGPL-2.1-or-later
URL:            https://gitlab.com/vkuznets/cvmutils/
Source:         cvmutils-%{version}.tar.gz

BuildArch:      noarch
BuildRequires:  python3-devel systemd-rpm-macros

%description
This tool prepares Linux OS image to run with encrypted root volume.

%package -n     python3-cvmutils
Summary:        %{summary}

%description -n python3-cvmutils
This tool prepares Linux OS image to run with encrypted root volume.

%package -n     cvmutils-reseal
Summary:        %{summary}
Requires:       python3-cvmutils = %{version}-%{release}

%description -n cvmutils-reseal
A tool for LUKS volume key re-sealing when expected PCR values change.

%package -n     cvmutils-dracut
Summary:        %{summary}
Requires:       dracut openssl

%description -n cvmutils-dracut
Dracut module for cvmutils.

%prep
%autosetup -p1 -n cvmutils-%{version}

%generate_buildrequires
%pyproject_buildrequires

%build
%pyproject_wheel

%install
%pyproject_install
mkdir -p %{buildroot}%{_mandir}/man1/
install -c -m 0644 man/cvm-encrypt-image.1 %{buildroot}%{_mandir}/man1/cvm-encrypt-image.1

mkdir -p %{buildroot}%{_datarootdir}/cvmutils/scripts/
install -c -m 0755 scripts/*.py %{buildroot}%{_datarootdir}/cvmutils/scripts

# dracut module
mkdir -p %{buildroot}/%{_prefix}/lib/dracut/modules.d/
cp -ar dracut/99cvmutils %{buildroot}/%{_prefix}/lib/dracut/modules.d/
mkdir -p %{buildroot}%{_bindir}
install -c -m 0755 dracut/bin/cvmutils-rquote %{buildroot}%{_bindir}
mkdir -p %{buildroot}%{_unitdir}/initrd.target.wants
install -c -m 0644 dracut/*.service %{buildroot}%{_unitdir}
cp -a dracut/initrd.target.wants/*.service %{buildroot}%{_unitdir}/initrd.target.wants/

%check
%_pyproject_check_import_allow_no_modules -t

%post -n cvmutils-dracut
%systemd_post cvmutils-initrd.service

%preun -n cvmutils-dracut
%systemd_preun cvmutils-initrd.service

%postun -n cvmutils-dracut
%systemd_postun cvmutils-initrd.service

%files -n python3-cvmutils
%{_bindir}/cvm-encrypt-image
%{python3_sitelib}/cvmutils
%{python3_sitelib}/cvmutils-%{version}.dist-info
%{_datarootdir}/cvmutils/scripts
%{_mandir}/man1/cvm-encrypt-image.1*

%files -n cvmutils-reseal
%{_bindir}/cvm-reseal

%files -n cvmutils-dracut
%{_unitdir}/cvmutils-initrd.service
%{_unitdir}/initrd.target.wants/cvmutils-initrd.service
%{_bindir}/cvmutils-rquote
%{_prefix}/lib/dracut/modules.d/99cvmutils

%changelog
%autochangelog