# Contributor: Stuart Cardall <developer@it-offshore.co.uk>
# Maintainer: Stuart Cardall <developer@it-offshore.co.uk>

_flavor=${FLAVOR:-hardened}
_kpkg=linux-$_flavor
_kver=4.9.68
_kpkgrel=1

# when changing _ver we *must* bump _mypkgrel
# we must also match up _toolsrel with wireguard-tools
_ver=0.0.20171211
_mypkgrel=2
_toolsrel=0
_name=wireguard

# verify the kernel version before entering chroot
_kapkbuild=../../linux-${_flavor}/APKBUILD
if [ -f $_kapkbuild ]; then
	. $_kapkbuild
	pkgname=$_name-$_flavor
	[ "$_kver" != "$pkgver" ] && die "please update _kver to $pkgver"
	[ "$_kpkgrel" != "$pkgrel" ] && die "please update _kpkgrel to $pkgrel"
fi

_kpkgver="$_kver-r$_kpkgrel"
_toolsver="$_ver-r$_toolsrel"
_abi_release=${_kver}-${_kpkgrel}-${_flavor}

pkgname=${_name}-${_flavor}
pkgver=$_kver
pkgrel=$(($_kpkgrel + $_mypkgrel))
pkgdesc="Next generation secure network tunnel: kernel modules for $_flavor"
arch='x86 x86_64 armhf'
url='https://www.wireguard.com'
license="GPLv2"
depends="linux-${_flavor}=${_kpkgver}"
makedepends="linux-${_flavor}-dev=$_kpkgver libmnl-dev"
install_if="wireguard-tools=$_toolsver linux-hardened=$_kpkgver"
options="!check"
source="https://git.zx2c4.com/WireGuard/snapshot/WireGuard-$_ver.tar.xz"
provides="${_name}-grsec=${_kver}-r${pkgrel}"
builddir="$srcdir"/WireGuard-$_ver

build() {
	cd "$builddir"
	# only building module: see wireguard-tools for userspace
	make -C src/ \
		KERNELDIR=/lib/modules/${_abi_release}/build \
		module
}

package() {
	cd "$builddir/src"

	local module=
	for module in *.ko; do
		install -v -D -m644 ${module} \
			"$pkgdir/lib/modules/$_abi_release/extra/${module}"
	done
}

sha512sums="8dfdf09753305e247dbc3a2cb77fcd1abec50dd7c4b1f0643270eea3236c418f9c4daac4215bf99bc6a66c0801b86c1e83ce097cdbf81d6549614f21b6ffbe35  WireGuard-0.0.20171211.tar.xz"