# Contributor: Christian Kampka <christian@kampka.net>
# Contributor: Gennady Feldman <gena01@gmail.com>
# Maintainer:
pkgname=vault
pkgver=0.6.4
pkgrel=0
pkgdesc="Vault is a tool for securely accessing secrets"
url="https://www.vaultproject.io/"
arch="all"
license="MPL-2.0"
depends=""
makedepends="go"
install="$pkgname.pre-install"
pkgusers="vault"
pkggroups="vault"
options="!strip"
source="$pkgname-$pkgver.tar.gz::https://github.com/hashicorp/$pkgname/archive/v$pkgver.tar.gz
	vault.confd
	vault.hcl
	vault.initd"
builddir="$srcdir/$pkgname-$pkgver"

build() {
	cd "$builddir"

	mkdir -p "$builddir/src/github.com/hashicorp"
	ln -s "$builddir" "$builddir/src/github.com/hashicorp/vault"
	GOPATH="$builddir" go build -v -o bin/$pkgname --tags vault || return 1
}

package() {
	cd "$builddir"

	install -m755 -D "$srcdir/$pkgname.initd" \
		"$pkgdir/etc/init.d/$pkgname" || return 1

	install -m644 -D "$srcdir/$pkgname.confd" \
		"$pkgdir/etc/conf.d/$pkgname" || return 1

	install -m750 -o root -g vault -D bin/$pkgname \
		"$pkgdir/usr/sbin/$pkgname" || return 1

	# Allow vault to use mlock as "vault" user.
	setcap cap_ipc_lock=+ep \
		"$pkgdir/usr/sbin/$pkgname" || return 1

	install -m750 -o root -g vault -D "$srcdir/$pkgname.hcl" \
		"$pkgdir/etc/$pkgname.hcl" || return 1

	install -m750 -o vault -g vault -d "$pkgdir/var/lib/$pkgname" || return 1
}

md5sums="c96fcf40cd393df697fb2aba1dbe5a88  vault-0.6.4.tar.gz
2148a788620484be07e1e24feb1cbd34  vault.confd
1f7802f479024809856e3be2e44a1b19  vault.hcl
29f9404e7f3f51639a7a03016e2650f2  vault.initd"
sha256sums="efe8649e899b8e5cd5838f896e1d0340b83611fa6f2bd03ffc219827c665ff4e  vault-0.6.4.tar.gz
f197536bc5bf4531072c0a5cb17627bf01abd188b0cc2005e0ff1768e6143d32  vault.confd
cacbd75cbaccf1034cd21d3015797cf0c1c1ce9c7e7ef7c1e4db4b54b92fe696  vault.hcl
fdc9044f7f830e4684edd813d4b06fa1c491dcbc49448ebb776c9f0d39c54a25  vault.initd"
sha512sums="413d3072ce99cd3a7bb39523ee2791b7839fb3887511ab620390c18aa498c8cb0d4376846a6d57dca616e968f72b720b63745153c470b539d6ce6c4dcd218c5e  vault-0.6.4.tar.gz
6f3f30e5c9d9dd5117f18fce0e669f0cd752a6be4910405d6b394f15273372731ee887a5ba4c700293e5b8bc2bf40fd69d4337156f77b03549d2dc2c0a666bec  vault.confd
8c064aa5dcca84822c1fa85e9d0ff520df46f794b2e9c689a9b4f81f74279387b3aebc08b3ca26cf786c2fcf1a330e765bf5a511074c24f87e5346672346ba1c  vault.hcl
1e436932647b191e691f5c60bec4ad926588cee5119c7cbe61345249a6768472387b6dd8b19b954c8ac80fb97f6e68f93749229b216300b0438dbeb0bdb57957  vault.initd"