# Contributor: Jake Buchholz <tomalok@gmail.com>
# Maintainer: Jake Buchholz <tomalok@gmail.com>

pkgname=runc
pkgdesc="CLI tool for spawning and running containers according to the OCI specification"
url="https://www.opencontainers.org"

_commit=dc9208a3303feef5b3839f4323d9beb36df0a9dd
pkgver=1.0.0_rc10
pkgrel=1

_ver=v${pkgver/_rc/-rc}
# if we're building against an explicit commit beyond pkgver, use this instead:
#_ver=$_commit

arch="all !mips !mips64" # PIE build mode not available on mips64
license="Apache-2.0"
makedepends="go go-md2man libseccomp-dev libtool"
subpackages="$pkgname-doc"
source="runc-$_ver.tar.gz::https://github.com/opencontainers/runc/archive/$_ver.tar.gz"
builddir="$srcdir/src/github.com/opencontainers/runc"
options="!check"

# secfixes:
#   1.0.0_rc10-r0:
#     - CVE-2019-19921
#   1.0.0_rc9-r0:
#     - CVE-2019-16884
#   1.0.0_rc7-r0:
#     - CVE-2019-5736

build() {
	cd "$srcdir"
	export GOPATH="$PWD"
	mkdir -p "$(dirname "$builddir")"
	ln -s "$PWD/$pkgname-${_ver#v}" "$builddir"
	cd "$builddir"
	make COMMIT="$_commit"
	make man
}

package() {
	install -Dsm755 "$builddir"/runc "$pkgdir"/usr/bin/runc
	install -d "$pkgdir"/usr/share/man/man8/
	install -Dm644 "$builddir"/man/man8/* "$pkgdir"/usr/share/man/man8/
}

sha512sums="0ea1088a072501f11ca3e4a746d9d9f36058f05b9e610b381688f5cab6d712cbc137858c6392329ebed5e9d867351cb5a82bdb5056587060a832589e27f9a88d  runc-v1.0.0-rc10.tar.gz"