# Do not build with tests by default

# Pass --with tests to rpmbuild to override

%bcond_with tests

%global goipath         github.com/osbuild/osbuild-composer

Version:        33.2

%gometa

%global common_description %{expand:

A service for building customized OS artifacts, such as VM images and OSTree

commits, that uses osbuild under the hood. Besides building images for local

usage, it can also upload images directly to cloud.

It is compatible with composer-cli and cockpit-composer clients.

}

Name:           osbuild-composer

Release:        1%{?dist}

Summary:        An image building service based on osbuild

# osbuild-composer doesn't have support for building i686 images

# and also RHEL and Fedora has now only limited support for this arch.

ExcludeArch:    i686

# Upstream license specification: Apache-2.0

License:        ASL 2.0

URL:            %{gourl}

Source0:        %{gosource}

Patch0:         0000-fix-image-format.patch

Patch1:         0001-add-rhel-86-test-repositories.patch

BuildRequires:  %{?go_compiler:compiler(go-compiler)}%{!?go_compiler:golang}

BuildRequires:  systemd

BuildRequires:  krb5-devel

BuildRequires:  python3-docutils

BuildRequires:  make

%if 0%{?fedora}

BuildRequires:  systemd-rpm-macros

BuildRequires:  git

BuildRequires:  golang(github.com/aws/aws-sdk-go)

BuildRequires:  golang(github.com/Azure/azure-sdk-for-go)

BuildRequires:  golang(github.com/Azure/azure-storage-blob-go/azblob)

BuildRequires:  golang(github.com/BurntSushi/toml)

BuildRequires:  golang(github.com/coreos/go-semver/semver)

BuildRequires:  golang(github.com/coreos/go-systemd/activation)

BuildRequires:  golang(github.com/deepmap/oapi-codegen/pkg/codegen)

BuildRequires:  golang(github.com/go-chi/chi)

BuildRequires:  golang(github.com/google/uuid)

BuildRequires:  golang(github.com/jackc/pgx/v4)

BuildRequires:  golang(github.com/julienschmidt/httprouter)

BuildRequires:  golang(github.com/getkin/kin-openapi/openapi3)

BuildRequires:  golang(github.com/kolo/xmlrpc)

BuildRequires:  golang(github.com/labstack/echo/v4)

BuildRequires:  golang(github.com/gobwas/glob)

BuildRequires:  golang(github.com/google/go-cmp/cmp)

BuildRequires:  golang(github.com/gophercloud/gophercloud)

BuildRequires:  golang(github.com/prometheus/client_golang/prometheus/promhttp)

BuildRequires:  golang(github.com/stretchr/testify/assert)

BuildRequires:  golang(github.com/ubccr/kerby)

BuildRequires:  golang(github.com/vmware/govmomi)

BuildRequires:  golang(cloud.google.com/go)

BuildRequires:  golang(gopkg.in/ini.v1)

%endif

Requires: %{name}-core = %{version}-%{release}

Requires: %{name}-worker = %{version}-%{release}

Requires: systemd

Provides: weldr

%if 0%{?rhel}

Obsoletes: lorax-composer <= 29

Conflicts: lorax-composer

%endif

# Remove when we stop releasing into Fedora 35

%if 0%{?fedora} >= 34

# lorax 34.3 is the first one without the composer subpackage

Obsoletes: lorax-composer < 34.3

%endif

# remove in F34

Obsoletes: golang-github-osbuild-composer < %{version}-%{release}

Provides:  golang-github-osbuild-composer = %{version}-%{release}

# remove when F34 is EOL

Obsoletes: osbuild-composer-koji <= 23

%description

%{common_description}

%prep

%if 0%{?rhel}

%forgeautosetup -p1

%else

%goprep

%endif

%if 0%{?fedora} >= 34

# Fedora 34 and newer ships a newer version of github.com/getkin/kin-openapi

# package which has a different API than the older ones. Let's make the auto-

# generated code compatible by applying some sed magic.

#

# Remove when F33 is EOL

sed -i "s/openapi3.Swagger/openapi3.T/;s/openapi3.NewSwaggerLoader().LoadSwaggerFromData/openapi3.NewLoader().LoadFromData/" internal/cloudapi/openapi.gen.go

%endif

%build

%if 0%{?rhel}

GO_BUILD_PATH=$PWD/_build

install -m 0755 -vd $(dirname $GO_BUILD_PATH/src/%{goipath})

ln -fs $PWD $GO_BUILD_PATH/src/%{goipath}

cd $GO_BUILD_PATH/src/%{goipath}

install -m 0755 -vd _bin

export PATH=$PWD/_bin${PATH:+:$PATH}

export GOPATH=$GO_BUILD_PATH:%{gopath}

export GOFLAGS=-mod=vendor

%endif

%gobuild -o _bin/osbuild-composer %{goipath}/cmd/osbuild-composer

%gobuild -o _bin/osbuild-worker %{goipath}/cmd/osbuild-worker

make man

%if %{with tests} || 0%{?rhel}

# Build test binaries with `go test -c`, so that they can take advantage of

# golang's testing package. The golang rpm macros don't support building them

# directly. Thus, do it manually, taking care to also include a build id.

#

# On Fedora, also turn off go modules and set the path to the one into which

# the golang-* packages install source code.

%if 0%{?fedora}

export GO111MODULE=off

export GOPATH=%{gobuilddir}:%{gopath}

%endif

TEST_LDFLAGS="${LDFLAGS:-} -B 0x$(od -N 20 -An -tx1 -w100 /dev/urandom | tr -d ' ')"

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-composer-cli-tests %{goipath}/cmd/osbuild-composer-cli-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-dnf-json-tests %{goipath}/cmd/osbuild-dnf-json-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-weldr-tests %{goipath}/internal/client/

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-image-tests %{goipath}/cmd/osbuild-image-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-auth-tests %{goipath}/cmd/osbuild-auth-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-koji-tests %{goipath}/cmd/osbuild-koji-tests

go test -c -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/osbuild-composer-dbjobqueue-tests %{goipath}/cmd/osbuild-composer-dbjobqueue-tests

go build -tags=integration -ldflags="${TEST_LDFLAGS}" -o _bin/cloud-cleaner %{goipath}/cmd/cloud-cleaner

%endif

%install

install -m 0755 -vd                                             %{buildroot}%{_libexecdir}/osbuild-composer

install -m 0755 -vp _bin/osbuild-composer                       %{buildroot}%{_libexecdir}/osbuild-composer/

install -m 0755 -vp _bin/osbuild-worker                         %{buildroot}%{_libexecdir}/osbuild-composer/

install -m 0755 -vp dnf-json                                    %{buildroot}%{_libexecdir}/osbuild-composer/

# Only include repositories for the distribution and release

install -m 0755 -vd                                             %{buildroot}%{_datadir}/osbuild-composer/repositories

# CentOS also defines rhel so we check for centos first

%if 0%{?centos}

# CentOS 9 supports building for CentOS 8 and later

%if 0%{?centos} >= 9

install -m 0644 -vp repositories/centos-*                       %{buildroot}%{_datadir}/osbuild-composer/repositories/

%else

# CentOS 8 only supports building for CentOS 8

install -m 0644 -vp repositories/centos-%{centos}*              %{buildroot}%{_datadir}/osbuild-composer/repositories/

install -m 0644 -vp repositories/centos-stream-%{centos}*       %{buildroot}%{_datadir}/osbuild-composer/repositories/

%endif

%else

%if 0%{?rhel}

# RHEL 9 supports building for RHEL 8 and later

%if 0%{?rhel} >= 9

install -m 0644 -vp repositories/rhel-*                         %{buildroot}%{_datadir}/osbuild-composer/repositories/

%else

# RHEL 8 only supports building for 8

install -m 0644 -vp repositories/rhel-%{rhel}*                  %{buildroot}%{_datadir}/osbuild-composer/repositories/

%endif

%endif

%endif

# Fedora can build for all included fedora releases

%if 0%{?fedora}

install -m 0644 -vp repositories/fedora-*                       %{buildroot}%{_datadir}/osbuild-composer/repositories/

%endif

install -m 0755 -vd                                             %{buildroot}%{_unitdir}

install -m 0644 -vp distribution/*.{service,socket}             %{buildroot}%{_unitdir}/

install -m 0755 -vd                                             %{buildroot}%{_sysusersdir}

install -m 0644 -vp distribution/osbuild-composer.conf          %{buildroot}%{_sysusersdir}/

install -m 0755 -vd                                             %{buildroot}%{_localstatedir}/cache/osbuild-composer/dnf-cache

install -m 0755 -vd                                             %{buildroot}%{_mandir}/man7

install -m 0644 -vp docs/*.7                                    %{buildroot}%{_mandir}/man7/

%if %{with tests} || 0%{?rhel}

install -m 0755 -vd                                             %{buildroot}%{_libexecdir}/osbuild-composer-test

install -m 0755 -vp _bin/osbuild-composer-cli-tests             %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-weldr-tests                    %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-dnf-json-tests                 %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-image-tests                    %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-auth-tests                     %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-koji-tests                     %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/osbuild-composer-dbjobqueue-tests      %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp _bin/cloud-cleaner                          %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/define-compose-url.sh                 %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/provision.sh                          %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/gen-certs.sh                          %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/gen-ssh.sh                            %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/image-info                            %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/run-koji-container.sh                 %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/koji-compose.py                       %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vp tools/libvirt_test.sh                       %{buildroot}%{_libexecdir}/osbuild-composer-test/

install -m 0755 -vd                                             %{buildroot}%{_libexecdir}/tests/osbuild-composer

install -m 0755 -vp test/cases/*                                %{buildroot}%{_libexecdir}/tests/osbuild-composer/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/ansible

install -m 0644 -vp test/data/ansible/*                         %{buildroot}%{_datadir}/tests/osbuild-composer/ansible/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/azure

install -m 0644 -vp test/data/azure/*                           %{buildroot}%{_datadir}/tests/osbuild-composer/azure/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/manifests

install -m 0644 -vp test/data/manifests/*                       %{buildroot}%{_datadir}/tests/osbuild-composer/manifests/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/cloud-init

install -m 0644 -vp test/data/cloud-init/*                      %{buildroot}%{_datadir}/tests/osbuild-composer/cloud-init/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/composer

install -m 0644 -vp test/data/composer/*                        %{buildroot}%{_datadir}/tests/osbuild-composer/composer/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/worker

install -m 0644 -vp test/data/worker/*                          %{buildroot}%{_datadir}/tests/osbuild-composer/worker/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/repositories

install -m 0644 -vp test/data/repositories/*                    %{buildroot}%{_datadir}/tests/osbuild-composer/repositories/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/kerberos

install -m 0644 -vp test/data/kerberos/*                        %{buildroot}%{_datadir}/tests/osbuild-composer/kerberos/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/keyring

install -m 0644 -vp test/data/keyring/id_rsa.pub                %{buildroot}%{_datadir}/tests/osbuild-composer/keyring/

install -m 0600 -vp test/data/keyring/id_rsa                    %{buildroot}%{_datadir}/tests/osbuild-composer/keyring/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/koji

install -m 0644 -vp test/data/koji/*                            %{buildroot}%{_datadir}/tests/osbuild-composer/koji/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/x509

install -m 0644 -vp test/data/x509/*                            %{buildroot}%{_datadir}/tests/osbuild-composer/x509/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/openshift

install -m 0644 -vp test/data/openshift/*                       %{buildroot}%{_datadir}/tests/osbuild-composer/openshift/

install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/schemas

install -m 0644 -vp internal/jobqueue/dbjobqueue/schemas/*      %{buildroot}%{_datadir}/tests/osbuild-composer/schemas/

%endif

%check

%if 0%{?rhel}

export GOFLAGS=-mod=vendor

export GOPATH=$PWD/_build:%{gopath}

# cd inside GOPATH, otherwise go with GO111MODULE=off ignores vendor directory

cd $PWD/_build/src/%{goipath}

%gotest ./...

%else

%gocheck

%endif

%post

%systemd_post osbuild-composer.service osbuild-composer.socket osbuild-composer-api.socket osbuild-remote-worker.socket

%preun

%systemd_preun osbuild-composer.service osbuild-composer.socket osbuild-composer-api.socket osbuild-remote-worker.socket

%postun

%systemd_postun_with_restart osbuild-composer.service osbuild-composer.socket osbuild-composer-api.socket osbuild-remote-worker.socket

%files

%license LICENSE

%doc README.md

%{_mandir}/man7/%{name}.7*

%{_unitdir}/osbuild-composer.service

%{_unitdir}/osbuild-composer.socket

%{_unitdir}/osbuild-composer-api.socket

%{_unitdir}/osbuild-local-worker.socket

%{_unitdir}/osbuild-remote-worker.socket

%{_sysusersdir}/osbuild-composer.conf

%package core

Summary:    The core osbuild-composer binary

%description core

The core osbuild-composer binary. This is suitable both for spawning in containers and by systemd.

%files core

%{_libexecdir}/osbuild-composer/osbuild-composer

%{_libexecdir}/osbuild-composer/dnf-json

%{_datadir}/osbuild-composer/

%package worker

Summary:    The worker for osbuild-composer

Requires:   systemd

Requires:   qemu-img

Requires:   osbuild >= 30

Requires:   osbuild-ostree >= 30

# remove in F34

Obsoletes: golang-github-osbuild-composer-worker < %{version}-%{release}

Provides:  golang-github-osbuild-composer-worker = %{version}-%{release}

%description worker

The worker for osbuild-composer

%files worker

%{_libexecdir}/osbuild-composer/osbuild-worker

%{_unitdir}/osbuild-worker@.service

%{_unitdir}/osbuild-remote-worker@.service

%post worker

%systemd_post osbuild-worker@.service osbuild-remote-worker@.service

%preun worker

# systemd_preun uses systemctl disable --now which doesn't work well with template services.

# See https://github.com/systemd/systemd/issues/15620

# The following lines mimicks its behaviour by running two commands:

# disable and stop all the worker services

systemctl --no-reload disable osbuild-worker@.service osbuild-remote-worker@.service

systemctl stop "osbuild-worker@*.service" "osbuild-remote-worker@*.service"

%postun worker

# restart all the worker services

%systemd_postun_with_restart "osbuild-worker@*.service" "osbuild-remote-worker@*.service"

%if %{with tests} || 0%{?rhel}

%package tests

Summary:    Integration tests

Requires:   %{name} = %{version}-%{release}

Requires:   composer-cli

Requires:   createrepo_c

Requires:   xorriso

Requires:   qemu-kvm-core

Requires:   systemd-container

Requires:   jq

Requires:   unzip

Requires:   container-selinux

Requires:   dnsmasq

Requires:   krb5-workstation

Requires:   podman

Requires:   python3

Requires:   sssd-krb5

Requires:   libvirt-client libvirt-daemon

Requires:   libvirt-daemon-config-network

Requires:   libvirt-daemon-config-nwfilter

Requires:   libvirt-daemon-driver-interface

Requires:   libvirt-daemon-driver-network

Requires:   libvirt-daemon-driver-nodedev

Requires:   libvirt-daemon-driver-nwfilter

Requires:   libvirt-daemon-driver-qemu

Requires:   libvirt-daemon-driver-secret

Requires:   libvirt-daemon-driver-storage

Requires:   libvirt-daemon-driver-storage-disk

Requires:   libvirt-daemon-kvm

Requires:   qemu-img

Requires:   qemu-kvm

Requires:   virt-install

Requires:   expect

Requires:   python3-lxml

Requires:   httpd

Requires:   mod_ssl

Requires:   openssl

Requires:   firewalld

# see https://bugzilla.redhat.com/show_bug.cgi?id=1986333

%if 0%{?rhel} && 0%{?rhel} != 9

Requires:   podman-plugins

%endif

Requires:   dnf-plugins-core

Requires:   skopeo

%if 0%{?fedora}

# koji and ansible are not in RHEL repositories. Depending on them breaks RHEL

# gating (see OSCI-1541). The test script must enable EPEL and install those

# packages manually.

Requires:   koji

Requires:   ansible

%endif

%ifarch %{arm}

Requires:   edk2-aarch64

%endif

%description tests

Integration tests to be run on a pristine-dedicated system to test the osbuild-composer package.

%files tests

%{_libexecdir}/osbuild-composer-test/

%{_libexecdir}/tests/osbuild-composer/

%{_datadir}/tests/osbuild-composer/

%endif

%changelog

* Tue Sep 28 2021 Ondřej Budai <ondrej@budai.cz> - 33.2-1

- New upstream release

* Wed Sep 15 2021 Ondřej Budai <ondrej@budai.cz> - 33.1-1

- New upstream release

* Mon Aug 30 2021 Tom Gundersen <teg@jklm.no> - 33-1

- New upstream release

* Sun Aug 29 2021 Tom Gundersen <teg@jklm.no> - 32-2

- New upstream release

* Thu Aug 12 2021 Ondřej Budai <ondrej@budai.cz> - 31-1

- New upstream release

* Sat Feb 20 2021 Martin Sehnoutka <msehnout@redhat.com> - 28-1

- New upstream release

* Fri Feb 05 2021 Ondrej Budai <obudai@redhat.com> - 27-1

- New upstream release

* Thu Dec 17 2020 Ondrej Budai <obudai@redhat.com> - 26-1

- New upstream release

* Mon Nov 30 2020 Ondrej Budai <obudai@redhat.com> - 25-1

- New upstream release 25 (rhbz#1883481)

* Thu Sep 03 2020 Tom Gundersen <tgunders@redhat.com> - 20.1-1

- New upstream release 20.1 (rhbz#1872370)

* Sun Aug 23 2020 Tom Gundersen <tgunders@redhat.com> - 20-1

- New upstream release 20 (rhbz#1871184 and rhbz#1871179)

* Thu Aug 13 2020 Tom Gundersen <tgunders@redhat.com> - 19-1

- New upstream release 19 (rhbz#1866015 and rhbz#1866013)

* Thu Jul 09 2020 Ondrej Budai <obudai@redhat.com> - 17-1

- New upstream release 17 (rhbz#1831653)

- Obsolete lorax-composer in favor of osbuild-composer (rhbz#1836844)

* Mon Jun 29 2020 Ondrej Budai <obudai@redhat.com> - 16-1

- New upstream release 16 (rhbz#1831653)

* Fri Jun 12 2020 Ondrej Budai <obudai@redhat.com> - 15-1

- New upstream release 15 (rhbz#1831653)

* Thu Jun 04 2020 Ondrej Budai <obudai@redhat.com> - 14-1

- New upstream release 14 (rhbz#1831653)

* Thu May 28 2020 Ondrej Budai <obudai@redhat.com> - 13-1

- New upstream release 13 (rhbz#1831653)

* Tue May 05 2020 Ondrej Budai <obudai@redhat.com> - 11-1

- Initial package (renamed from golang-github-osbuild-composer) (rhbz#1771887)