# Contributor: Stuart Cardall <developer@it-offshore.co.uk>
# Maintainer: Stuart Cardall <developer@it-offshore.co.uk>

_flavor=${FLAVOR:-hardened}
_kpkg=linux-$_flavor
_kver=4.9.24
_kpkgrel=3

# when changing _ver we *must* bump _mypkgrel
_ver=0.0.20170421
_mypkgrel=1
_name=wireguard

# verify the kernel version before entering chroot
_kapkbuild=../../linux-${_flavor}/APKBUILD
if [ -f $_kapkbuild ]; then
	. $_kapkbuild
	pkgname=$_name-$_flavor
	[ "$_kver" != "$pkgver" ] && die "please update _kver to $pkgver"
	[ "$_kpkgrel" != "$pkgrel" ] && die "please update _kpkgrel to $pkgrel"
fi

_kpkgver="$_kver-r$_kpkgrel"
_abi_release=${_kver}-${_kpkgrel}-${_flavor}

pkgname=${_name}-${_flavor}
pkgver=$_kver
pkgrel=$(($_kpkgrel + $_mypkgrel))
pkgdesc="Next generation secure network tunnel: kernel modules for $_flavor"
arch='x86 x86_64 armhf'
url='https://www.wireguard.io'
license="GPLv2"
depends="linux-${_flavor}=${_kpkgver}"
makedepends="linux-${_flavor}-dev=$_kpkgver libmnl-dev"
install_if="wireguard-tools linux-grsec-$_kpkgver"
options="!check"
source="https://git.zx2c4.com/WireGuard/snapshot/WireGuard-$_ver.tar.xz"
provides="${_name}-grsec=${_kver}-r${pkgrel}"
builddir="$srcdir"/WireGuard-$_ver

build() {
	cd "$builddir"
	# only building module: see wireguard-tools for userspace
	make -C src/ \
		KERNELDIR=/lib/modules/${_abi_release}/build \
		module \
		|| return 1
}

package() {
	cd "$builddir/src"

	local module=
	for module in *.ko; do
		install -v -D -m644 ${module} \
			"$pkgdir/lib/modules/$_abi_release/extra/${module}"
	done
}

sha512sums="1959ced90abf3141f09b8bd88fe43a5b2ee3b176063c6ed02f9dfd1713e1d18b302174ba9de67e89ca9b163a539149cfb1facd4d45303b498acc11bd00856589  WireGuard-0.0.20170421.tar.xz"