package.sh

#!/usr/bin/env bash
set -xeu pipefail

HC_VERSION=${HC_VERSION}
PACKAGE_ITERATION=${HC_PACKAGE_ITERATION:-1}
LOCAL=${LOCAL_PACKAGE:-0}

PRODUCT_NAME="vault_selinux"

OUTPUT_PATH=$(pwd)

if [[ "$LOCAL" == "1" ]]; then
  echo "Performing a local package install"
  HC_VERSION="0.0.1"
else
  # Create temporary workspace
  echo "Performing CI package install"
  echo "Creating temporary workspace"
  mkdir pkg_tmp

  cp ./vault.fc ./pkg_tmp/vault.fc
  cp ./vault.if ./pkg_tmp/vault.if
  cp ./vault.sh ./pkg_tmp/vault.sh
  cp ./vault.te ./pkg_tmp/vault.te
  cp ./vault_selinux.spec ./pkg_tmp/vault_selinux.spec

  PACKAGE_DIR=$(cd pkg_tmp; pwd)
  cd $PACKAGE_DIR
fi

# @TODO: I'm sure there are better ways to build RPM packages for Fedora & Centos
# Currently I'm doing this in two different containers, with some %if logic in the
# vault_selinux.spec file

# The current package CircleCI config has a matrix for a Centos & Fedora container

# Check for CentOS or Fedora

if [ -f /etc/os-release ]; then
  . /etc/os-release
  OS=$NAME
fi

if [[ $OS == *"CentOS"* ]]; then
  echo "Detected CentOS"

  # Install Vault RPM
  echo "yum installing Vault"
  yum install -y yum-utils
  yum-config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
  yum -y install vault

  # Install other deps
  echo "yum installing other stuff"
  yum -y install policycoreutils-devel setools-console rpm-build selinux-policy-devel selinux-policy-targeted

elif [[ $OS == *"Fedora"* ]]; then
  echo "Detected Fedora"

  # Install Vault RPM
  echo "dnf installing Vault"
  dnf install -y dnf-plugins-core
  dnf config-manager --add-repo https://rpm.releases.hashicorp.com/fedora/hashicorp.repo
  dnf -y install vault

  # Install other deps
  echo "dnf installing other stuff"
  dnf -y install policycoreutils-devel setools-console rpm-build

fi

echo "Updating #VERSION# in vault.te and vault_selinux.spec"
sed -i "s^#VERSION#^${HC_VERSION}^g" vault.te
sed -i "s^#VERSION#^${HC_VERSION}^g" vault_selinux.spec

# Run the sepolicy builder
if [[ "$LOCAL" == "1" ]]; then
  sudo sh ./vault.sh
else
  sh ./vault.sh
  cp *.rpm $OUTPUT_PATH
  cp noarch/*.rpm $OUTPUT_PATH

  # Cleanup
  cd $OUTPUT_PATH
  rm -rf $PACKAGE_DIR
fi