# NOTE: Even though ansible-core is in 8.6, it is only available

# at *runtime*, not at *buildtime* - so we can't have

# ansible-core as a build_dep on RHEL8

%if 0%{?fedora} || 0%{?rhel} >= 9

%bcond_without ansible

%if 0%{?fedora}

BuildRequires: ansible-packaging

%else

BuildRequires: ansible-core >= 2.11.0

%endif

%else

%bcond_with ansible

%endif

%bcond_with collection_artifact

%if 0%{?fedora} || 0%{?rhel} >= 8

%bcond_without html

%else

# pandoc is not supported in rhel 7 and older,

# which is needed for converting .md to .html.

%bcond_with html

%endif

%if 0%{?rhel}

Name: rhel-system-roles

%else

Name: linux-system-roles

%endif

Url: https://github.com/linux-system-roles

Summary: Set of interfaces for unified system management

Version: 1.21.0

Release: 2%{?dist}

License: GPLv3+ and MIT and BSD and Python

%global _pkglicensedir %{_licensedir}/%{name}

%global roleinstprefix %{name}.

%if 0%{?rhel}

%global collection_namespace redhat

%global collection_name rhel_system_roles

%else

%global collection_namespace fedora

%global collection_name linux_system_roles

%endif

%global collection_version %{version}

# Helper macros originally from macros.ansible by Igor Raits <ignatenkobrain>

# On RHEL, not available, so we must define those macros locally

# On Fedora, provided by ansible-packager

# Not used (yet). Could be made to point to AH in RHEL - but what about CentOS Stream?

#%%{!?ansible_collection_url:%%define ansible_collection_url() https://galaxy.ansible.com/%%{collection_namespace}/%%{collection_name}}

%if 0%{?rhel}

Provides: ansible-collection(%{collection_namespace}.%{collection_name}) = %{collection_version}

%global ansible_collection_files %{_datadir}/ansible/collections/ansible_collections/%{collection_namespace}/

%define ansible_roles_dir %{_datadir}/ansible/roles

%if %{without ansible}

# Untar and copy everything instead of galaxy-installing the built artifact when ansible is not available

%define ansible_collection_build() tar -cf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz .

%define ansible_collection_install() mkdir -p %{buildroot}%{ansible_collection_files}%{collection_name}; (cd %{buildroot}%{ansible_collection_files}%{collection_name}; tar -xf %{_tmppath}/%{collection_namespace}-%{collection_name}-%{version}.tar.gz)

%else

%define ansible_collection_build() ansible-galaxy collection build

%define ansible_collection_install() ansible-galaxy collection install -n -p %{buildroot}%{_datadir}/ansible/collections %{collection_namespace}-%{collection_name}-%{version}.tar.gz

%endif

%endif

# be compatible with the usual Fedora Provides:

Provides: ansible-collection-%{collection_namespace}-%{collection_name} = %{collection_version}-%{release}

# ansible-core is in rhel 8.6 and later - default to ansible-core, but allow

# the use of ansible if present - we may revisit this if the automatic dependency

# generator is added to ansible-core in RHEL

# Fedora - the automatic generator will add this - no need to explicit declare

# it in the spec file

# EL7 - no dependency on ansible because there is no ansible in el7 - user is

# responsible for knowing they have to install ansible

%if 0%{?rhel} >= 8

Requires: (ansible-core >= 2.11.0 or ansible >= 2.9.0)

%endif

# For each role, call either defcommit() or deftag(). The other macros

# (%%id and %%shortid) can be then used in the same way in both cases.

# This way  the rest of the spec file des not need to know whether we are

# dealing with a tag or a commit.

%global archiveext tar.gz

# list of role names

%global rolenames %nil

# list of assignments that can be used to populate a bash associative array variable

%global rolestodir %nil

%define getarchivedir() %(p=%{basename:%{S:%{1}}}; echo ${p%%.%{archiveext}})

%define defcommit() %{expand:%%global ref%{1} %{2}

%%global shortcommit%{1} %%(c=%%{ref%{1}}; echo ${c:0:7})

%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}

%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}

%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz

%%global rolenames %%{?rolenames} %%{rolename%{1}}

%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"

%%global rolestodir %%{?rolestodir} %{roletodir%{1}}

}

%define deftag() %{expand:%%global ref%{1} %{2}

%%global extractdir%{1} %%{expand:%%getarchivedir %{1}}

%%{!?repo%{1}:%%global repo%{1} %%{rolename%{1}}}

%%global archiveurl%{1} %%{?forgeorg%{1}}%%{!?forgeorg%{1}:%%{url}}/%%{repo%{1}}/archive/%%{ref%{1}}/%%{repo%{1}}-%%{ref%{1}}.tar.gz

%%global rolenames %%{?rolenames} %%{rolename%{1}}

%%global roletodir%{1} [%{rolename%{1}}]="%{extractdir%{1}}"

%%global rolestodir %%{?rolestodir} %%{roletodir%{1}}

}

%global mainid d6a8e0167e9ed8d089093b7ead1e298241b534e1

Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar.gz

# BEGIN AUTOGENERATED SOURCES

%global rolename1 postfix

%deftag 1 1.3.3

%global rolename2 selinux

%deftag 2 1.5.6

%global rolename3 timesync

%deftag 3 1.7.2

%global rolename4 kdump

%deftag 4 1.2.6

%global rolename5 network

%deftag 5 1.11.2

%global rolename6 storage

%deftag 6 1.9.6

%global rolename7 metrics

%deftag 7 1.8.1

%global rolename8 tlog

%deftag 8 1.2.11

%global rolename9 kernel_settings

%deftag 9 1.1.11

%global rolename10 logging

%deftag 10 1.11.5

%global rolename11 nbde_server

%deftag 11 1.3.3

%global rolename12 nbde_client

%deftag 12 1.2.10

%global rolename13 certificate

%deftag 13 1.1.9

%global rolename14 crypto_policies

%deftag 14 1.2.7

%global forgeorg15 https://github.com/willshersystems

%global repo15 ansible-sshd

%global rolename15 sshd

%deftag 15 v0.18.1

%global rolename16 ssh

%deftag 16 1.1.12

%global rolename17 ha_cluster

%deftag 17 1.8.7

%global rolename18 vpn

%deftag 18 1.5.3

%global rolename19 firewall

%deftag 19 1.4.2

%global rolename20 cockpit

%deftag 20 1.4.3

%global rolename21 podman

%deftag 21 1.1.2

%global rolename22 ad_integration

%deftag 22 1.0.2

#%%global rolename23 rhc

#%%deftag 23 1.1.0

%global rolename24 journald

%deftag 24 1.0.0

Source1: %{archiveurl1}

Source2: %{archiveurl2}

Source3: %{archiveurl3}

Source4: %{archiveurl4}

Source5: %{archiveurl5}

Source6: %{archiveurl6}

Source7: %{archiveurl7}

Source8: %{archiveurl8}

Source9: %{archiveurl9}

Source10: %{archiveurl10}

Source11: %{archiveurl11}

Source12: %{archiveurl12}

Source13: %{archiveurl13}

Source14: %{archiveurl14}

Source15: %{archiveurl15}

Source16: %{archiveurl16}

Source17: %{archiveurl17}

Source18: %{archiveurl18}

Source19: %{archiveurl19}

Source20: %{archiveurl20}

Source21: %{archiveurl21}

Source22: %{archiveurl22}

#Source23: %{archiveurl23}

Source24: %{archiveurl24}

# END AUTOGENERATED SOURCES

# Includes with definitions/tags that differ between RHEL and Fedora

Source1001: extrasources.inc

%include %{SOURCE1001}

Source995: CHANGELOG.md

BuildArch: noarch

%if %{with html}

# Requirements for md2html.sh to build the documentation

%if 0%{?fedora} || 0%{?rhel} >= 9

BuildRequires: rubygem-kramdown-parser-gfm

%else

BuildRequires: pandoc

BuildRequires: asciidoc

BuildRequires: highlight

%endif

%endif

# Requirements for galaxy_transform.py

BuildRequires: python3

BuildRequires: python%{python3_pkgversion}-ruamel-yaml

# We must put %%description within the if block to avoid empty lines showing up.

%if 0%{?rhel}

%description

Collection of Ansible roles and modules that provide a stable and

consistent configuration interface for managing multiple versions

of Red Hat Enterprise Linux.

%else

%description

Collection of Ansible roles and modules that provide a stable and

consistent configuration interface for managing multiple versions

of Fedora, Red Hat Enterprise Linux & CentOS.

%endif

%if %{with collection_artifact}

%package collection-artifact

Summary: Collection artifact to import to Automation Hub / Ansible Galaxy

%description collection-artifact

Collection artifact for %{name}. This package contains %{collection_namespace}-%{collection_name}-%{version}.tar.gz

%endif

# Fix issue with package update introduce with changing symlink to directory

# in 1.21.1-5

%pretrans -p <lua>

roles = {

    "certificate", "cockpit", "crypto_policies", "firewall", "ha_cluster",

    "kdump", "kernel_settings", "logging", "metrics", "nbde_client",

    "nbde_server", "network", "postfix", "selinux", "ssh", "sshd", "storage",

    "timesync", "tlog", "vpn"

}

for i,v in ipairs(roles) do

    path = "/usr/share/ansible/roles/linux-system-roles." .. v

    st = posix.stat(path)

    if st and st.type == "link" then

      os.remove(path)

    end

end

%prep

# BEGIN AUTOGENERATED SETUP

#%%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a23 -a24 -n %{getarchivedir 0}

%setup -q -a1 -a2 -a3 -a4 -a5 -a6 -a7 -a8 -a9 -a10 -a11 -a12 -a13 -a14 -a15 -a16 -a17 -a18 -a19 -a20 -a21 -a22 -a24 -n %{getarchivedir 0}

# END AUTOGENERATED SETUP

%if 0%{?rhel}

# Untar vendored collection tarballs to corresponding directories

for file in %{SOURCE801} %{SOURCE901} %{SOURCE902}; do

    if [[ "$(basename $file)" =~ ([^-]+)-([^-]+)-(.+).tar.gz ]]; then

        ns=${BASH_REMATCH[1]}

        name=${BASH_REMATCH[2]}

        ver=${BASH_REMATCH[3]}

        mkdir -p .external/$ns/$name

        pushd .external/$ns/$name > /dev/null

        tar xfz "$file"

        popd > /dev/null

    fi

done

%endif

declare -A ROLESTODIR=(%{rolestodir})

for rolename in %{rolenames}; do

    dir_from_archive="${ROLESTODIR[${rolename}]}"

    if [ ! -d "$dir_from_archive" ]; then

        # ansible-sshd uses tags like vX.Y.Z

        # using the github archive/ link with a tag like this strips

        # the leading v from the tag used to construct the directory

        # name in the archive

        if [[ "$dir_from_archive" =~ %{repo15}-v([0-9]+[.][0-9]+.*) ]]; then

            dir_from_archive="%{repo15}-${BASH_REMATCH[1]}"

        fi

    fi

    mv "$dir_from_archive" ${rolename}

done

%if 0%{?rhel}

cd %{rolename2}/tests

# this test causes avcs we want to ignore

sed -r -i -e '/hosts: all/a\

  tags:\

    - tests::avc' tests_selinux_disabled.yml

cd ../..

%endif

cd %{rolename15}

find -P tests examples -name \*.yml | while read file; do

  sed -r -i -e "s/ansible-sshd/linux-system-roles.sshd/" \

     -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" "$file"

done

sed -r -i -e "s/ willshersystems.sshd/ linux-system-roles.sshd/" README.md

sed -r -i -e "s/min_ansible_version: 2.8/min_ansible_version: 2.9/" meta/main.yml

cd ..

cd %{rolename7}

# metrics roles dir is a symlink to the vendored dir.

# rpm upgrade doesn't like the symlink.  Replace the

# symlink with the real dir

rolesdir=$(pwd)/roles

realrolesdir=$(realpath "$rolesdir")

if [ "$rolesdir" != "$realrolesdir" ]; then

    rm -rf roles

    mv "$realrolesdir" .

    rm -rf vendor

fi

cd ..

%if 0%{?rhel}

# Unpack tar.gz to retrieve to be vendored modules and place them in the roles library.

# ansible.posix:

#   - library:

#     - Module selinux and seboolean for the selinux role

#     - Module mount for the storage role

declare -A module_map=( ["selinux.py"]="selinux" ["seboolean.py"]="selinux" ["mount.py"]="storage" )

for module in "${!module_map[@]}"; do

  role="${module_map[${module}]}"

  if [ ! -d $role/library ]; then

    mkdir $role/library

  fi

  cp -pL .external/ansible/posix/plugins/modules/$module $role/library/$module

  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' -e "s/ansible_collections.ansible.posix.plugins.module_utils/ansible.module_utils.${role}_lsr/" $role/library/$module

done

# ansible.posix:

#   - module_utils:

#     - Module_util mount for the storage role

module_map=( ["mount.py"]="storage" )

for module in "${!module_map[@]}"; do

  role="${module_map[${module}]}"

  if [ ! -d $role/module_utils/${role}_lsr ]; then

    mkdir -p $role/module_utils/${role}_lsr

  fi

  cp -pL .external/ansible/posix/plugins/module_utils/$module $role/module_utils/${role}_lsr/$module

done

# community.general:

#   - library:

#     - Module seport, sefcontext and selogin for the selinux role rolename2

#     - Module ini_file for role tlog

#     - rhc modules

#  ["redhat_subscription.py"]="rhc" ["rhsm_release.py"]="rhc" ["rhsm_repository.py"]="rhc" )

module_map=( ["seport.py"]="selinux" ["sefcontext.py"]="selinux" ["selogin.py"]="selinux" ["ini_file.py"]="tlog" )

for module in "${!module_map[@]}"; do

  role="${module_map[${module}]}"

  if [ ! -d $role/library ]; then

    mkdir $role/library

  fi

  # version 5.x seems to be broken?

  moduledir=.external/community/general/plugins/modules

  if [ ! -f $moduledir/$module ]; then

    moduledir=.external/community/general/plugins/modules/system

  fi

  if [ ! -f $moduledir/$module ]; then

    moduledir=.external/community/general/plugins/modules/files

  fi

  cp -pL $moduledir/$module $role/library/$module

  ls -alrtF $role/library/$module

  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' $role/library/$module

done

# containers.podman:

#   - library:

#     - Module podman_container_info, podman_image and podman_play for the podman role

module_map=( ["podman_container_info.py"]="podman" ["podman_image.py"]="podman" ["podman_play.py"]="podman" )

for module in "${!module_map[@]}"; do

  role="${module_map[${module}]}"

  if [ ! -d $role/library ]; then

    mkdir $role/library

  fi

  moduledir=.external/containers/podman/plugins/modules

  cp -pL $moduledir/$module $role/library/$module

  ls -alrtF $role/library/$module

  sed -i -e ':a;N;$!ba;s/description:\n\( *\)/description:\n\1- WARNING: Do not use this module directly! It is only for role internal use.\n\1/' \

    -e "s/ansible_collections.containers.podman.plugins.module_utils.podman/ansible.module_utils.${role}_lsr/" \

    $role/library/$module

done

# containers.podman:

#   - module_utils:

#     - Module_util common for the podman role

module_map=( ["common.py"]="podman" )

for module in "${!module_map[@]}"; do

  role="${module_map[${module}]}"

  if [ ! -d $role/module_utils/${role}_lsr ]; then

    mkdir -p $role/module_utils/${role}_lsr

  fi

  cp -pL .external/containers/podman/plugins/module_utils/podman/$module $role/module_utils/${role}_lsr/$module

done

# remove the temporary .external directory after vendoring

rm -rf .external

# Replacing "linux-system-roles.rolename" with "rhel-system-roles.rolename" in each role

# Replacing "fedora.linux_system_roles." with "redhat.rhel_system_roles" in each role

# This is for the "roles calling other roles" case

# for podman, change the FQCN - using a non-FQCN module name doesn't seem to work,

# even for the legacy role format

# replace community.general for rhc

for rolename in %{rolenames}; do

    find $rolename -type f -exec \

         sed -e "s/linux-system-roles[.]${rolename}\\>/%{roleinstprefix}${rolename}/g" \

             -e "s/fedora[.]linux_system_roles[.]/%{collection_namespace}.%{collection_name}./g" \

             -e "s/containers[.]podman[.]/%{collection_namespace}.%{collection_name}./g" \

             -e "s/community[.]general[.]/%{collection_namespace}.%{collection_name}./g" \

             -i {} \;

done

%endif

# Removing symlinks in tests/roles

for rolename in %{rolenames}; do

    if [ -d ${rolename}/tests/roles ]; then

        find ${rolename}/tests/roles -type l -exec rm {} \;

        if [ -d ${rolename}/tests/roles/linux-system-roles.${rolename} ]; then

            rm -r ${rolename}/tests/roles/linux-system-roles.${rolename}

        fi

    fi

done

rm %{rolename5}/tests/modules

rm %{rolename5}/tests/module_utils

rm %{rolename5}/tests/playbooks/roles

# Drop network/{scripts/print_all_options.py,tests/ensure_provider_tests.py}

# from rpm. These 2 files fail in brp-python-bytecompile due to f-strings

# when python2 is default python.

rm %{rolename5}/scripts/print_all_options.py

rm %{rolename5}/tests/ensure_provider_tests.py

# Drop storage tests/scripts

rm -rf %{rolename6}/tests/scripts

# transform ambiguous #!/usr/bin/env python shebangs to python3 to stop brp-mangle-shebangs complaining

find -type f -executable -name '*.py' -exec \

     sed -i -r -e '1s@^(#! */usr/bin/env python)(\s|$)@#\13\2@' '{}' +

%build

%if %{with html}

readmes=""

for role in %{rolenames}; do

    readmes="${readmes} $role/README.md"

done

sh md2html.sh $readmes

%endif

mkdir .collections

%if 0%{?rhel}

# Convert the upstream collection readme to the downstream one

%{SOURCE998} lsr_role2collection/collection_readme.md

./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \

                      "Red Hat Enterprise Linux System Roles Ansible Collection" \

                      "https://linux-system-roles.github.io" \

                      "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/administration_and_configuration_tasks_using_system_roles_in_rhel" \

                      "https://access.redhat.com/articles/3050101" \

                      "https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208&component=rhel-system-roles" \

                      > galaxy.yml.tmp

# we vendor-in all of the dependencies on rhel, so remove them

rm -f lsr_role2collection/collection_requirements.txt

# but leave bindep.txt

%else

./galaxy_transform.py "%{collection_namespace}" "%{collection_name}" "%{collection_version}" \

                      "Linux System Roles Ansible Collection" \

                      > galaxy.yml.tmp

%endif

mv galaxy.yml.tmp galaxy.yml

includes=""

for role in %{rolenames}; do

    includes="$includes --include $role"

%if 0%{?rhel}

    # we vendor-in all of the dependencies on rhel, so remove them

    rm -f "$role/meta/requirements.yml" "$role/meta/collection-requirements.yml" \

      "$role/tests/collection-requirements.yml"

%endif

done

# do not process changelogs on RHEL

%if 0%{?rhel}

extra_mapping="--extra-mapping fedora.linux_system_roles:%{collection_namespace}.%{collection_name}"

%else

extra_mapping=""

%endif

LANG=C.utf-8 LC_ALL=C.utf-8 python3 release_collection.py --galaxy-yml galaxy.yml \

    --src-path $(pwd) --dest-path $(pwd)/.collections $includes --force --no-update \

    --src-owner %{name} --skip-git --skip-check --skip-changelog $extra_mapping --debug

# Remove table of contents from logging README.md

# It is not needed for html and AH/Galaxy

sed -i -e 's/^\(## Table of Contents\)/## Background\n\1/' \

  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md

sed -i -e '/^## Table of Contents/,/^## Background/d' \

  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/logging/README.md

# Remove internal links from readme files

# They are not rendered properly on AH.

for role in %{rolenames}; do

    sed -r -i -e 's/\[([^[]+)\]\(#[^)]+\)/\1/g' \

    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/roles/$role/README.md

done

# Remove test only collection dependencies

# NOTE: These should not be in meta/collection-requirements.yml, they should be

# in tests/collection-requirements.yml, but they can't be moved yet

sed -i -e '/community[.]mysql:/d' -e '/community[.]postgresql:/d' \

  .collections/ansible_collections/%{collection_namespace}/%{collection_name}/galaxy.yml

cp %{SOURCE995} \

    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/docs/CHANGELOG.md

%if 0%{?rhel}

cp %{SOURCE996} \

    .collections/ansible_collections/%{collection_namespace}/%{collection_name}/CHANGELOG.rst

%endif

# Build the collection

pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/

%ansible_collection_build

popd

%install

mkdir -p %{buildroot}%{ansible_roles_dir}

for role in %{rolenames}; do

    cp -pR "$role" "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role"

done

%if 0%{?rhel}

# Create symlinks for roles in /usr/share/ansible/roles/linux-system-roles.$rolename

# That's required to make roles work with upstream naming too

for role in %{rolenames}; do

    ln -s "%{name}.$role" "%{buildroot}%{ansible_roles_dir}/linux-system-roles.$role"

done

%endif

mkdir -p %{buildroot}%{_pkglicensedir}

rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}network/examples/roles

for role in %{rolenames}; do

    mkdir -p "%{buildroot}%{_pkgdocdir}/$role"

    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/CHANGELOG.md" \

       "%{buildroot}%{_pkgdocdir}/$role"

    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.md" \

       "%{buildroot}%{_pkgdocdir}/$role"

%if %{with html}

    ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/README.html" \

       "%{buildroot}%{_pkgdocdir}/$role"

%endif

    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" ]; then

        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/COPYING" \

           "%{buildroot}%{_pkglicensedir}/$role.COPYING"

    fi

    if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" ]; then

        ln -sr "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/LICENSE" \

           "%{buildroot}%{_pkglicensedir}/$role.LICENSE"

    fi

    if [ -d "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples" ]; then

        for file in "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/"*.yml ; do

            basename=$(basename "$file" .yml)

            newname="$basename"

            if [[ "$newname" != example-* ]]; then

                newname="example-$newname"

            fi

            if [[ "$newname" != *-playbook ]]; then

                newname="${newname}-playbook"

            fi

            cp "$file" "%{buildroot}%{_pkgdocdir}/$role/${newname}.yml"

            rm "$file"

        done

        if [ -f "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" ]; then

            cp "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory" \

               "%{buildroot}%{_pkgdocdir}/$role/example-inventory"

            rm "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples/inventory"

        fi

        # special case for network

        # this will error if the directory is unexpectedly empty

        rmdir "%{buildroot}%{ansible_roles_dir}/%{roleinstprefix}$role/examples"

    fi

done

rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/semaphore

rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/molecule

rm -r %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/.[A-Za-z]*

rm %{buildroot}%{ansible_roles_dir}/%{roleinstprefix}*/tests/.git*

# NOTE: sshd/examples/example-root-login.yml is

# referenced in the configuring-openssh-servers-using-the-sshd-system-role documentation module

# must be updated if changing the file path

# Install the collection

pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/

%ansible_collection_install

popd

mkdir -p %{buildroot}%{_pkgdocdir}/collection

mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles

ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/README.md \

   %{buildroot}%{_pkgdocdir}/collection

for rolename in %{rolenames}; do

  for file in CHANGELOG.md README.md; do

    if [ -f %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file ]; then

      if [ ! -d %{buildroot}%{_pkgdocdir}/collection/roles/${rolename} ]; then

        mkdir -p %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}

      fi

      ln -sr %{buildroot}%{ansible_collection_files}%{collection_name}/roles/${rolename}/$file \

        %{buildroot}%{_pkgdocdir}/collection/roles/${rolename}

    fi

  done

done

%if %{with html}

# converting README.md to README.html for collection in %%{buildroot}%%{_pkgdocdir}/collection

readmes="%{buildroot}%{_pkgdocdir}/collection/README.md"

for role in %{rolenames}; do

    readmes="${readmes} %{buildroot}%{_pkgdocdir}/collection/roles/${role}/README.md"

done

sh md2html.sh $readmes

%endif

%if %{with collection_artifact}

# Copy collection artifact to /usr/share/ansible/collections/ for collection-artifact

pushd .collections/ansible_collections/%{collection_namespace}/%{collection_name}/

    mv %{collection_namespace}-%{collection_name}-%{version}.tar.gz \

       %{buildroot}%{_datadir}/ansible/collections/

popd

%endif

# Generate the %%files section in files_section.txt

# Bulk files inclusion is not possible because roles store doc and licence

# files together with other files

format_item_for_files() {

    # $1 is directory or file name in buildroot

    # $2 - if true, and item is a directory, use %%dir

    local item

    local files_item

    item="$1" # full path including buildroot

    files_item=${item##"%{buildroot}"} # path with cut buildroot to be added to %%files

    if [ -L "$item" ]; then

        echo "$files_item"

    elif [ -d "$item" ]; then

        if [[ "$item" == */doc* ]]; then

            echo "%doc $files_item"

        elif [ "${2:-false}" = true ]; then

            echo "%dir $files_item"

        else

            echo "$files_item"

        fi

    elif [[ "$item" == */README.md ]] || [[ "$item" == */README.html ]] || [[ "$item" == */CHANGELOG.md ]]; then

        if [[ "$item" == */private_* ]]; then

            # mark as regular file, not %%doc

            echo "$files_item"

        else

            echo "%doc $files_item"

        fi

    elif [[ "$item" == */COPYING* ]] || [[ "$item" == */LICENSE* ]]; then

        echo "%""%""license" "$files_item"

    else

        echo "$files_item"

    fi

}

files_section=files_section.txt

rm -f $files_section

touch $files_section

# Dynamically generate files section entries for %%{ansible_collection_files}

find %{buildroot}%{ansible_collection_files}%{collection_name} -mindepth 1 -maxdepth 1 | \

    while read item; do

        if [[ "$item" == */roles ]]; then

            format_item_for_files "$item" true >> $files_section

            find "$item" -mindepth 1 -maxdepth 1 | while read roles_dir; do

                format_item_for_files "$roles_dir" true >> $files_section

                find "$roles_dir" -mindepth 1 -maxdepth 1 | while read roles_item; do

                    format_item_for_files "$roles_item" >> $files_section

                done

            done

        else

            format_item_for_files "$item" >> $files_section

        fi

    done

# Dynamically generate files section entries for %%{ansible_roles_dir}

find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \

    while read item; do

        if [ -d "$item" ]; then

            format_item_for_files "$item" true >> $files_section

            find "$item" -mindepth 1 -maxdepth 1 | while read roles_item; do

                format_item_for_files "$roles_item" >> $files_section

            done