# Contributor: Stuart Cardall <developer@it-offshore.co.uk>
# Maintainer: Stuart Cardall <developer@it-offshore.co.uk>

_flavor=${FLAVOR:-hardened}
_kpkg=linux-$_flavor
_kver=4.9.44
_kpkgrel=0

# when changing _ver we *must* bump _mypkgrel
# we must also match up _toolsrel with wireguard-tools
_ver=0.0.20170810
_mypkgrel=0
_toolsrel=0
_name=wireguard

# verify the kernel version before entering chroot
_kapkbuild=../../linux-${_flavor}/APKBUILD
if [ -f $_kapkbuild ]; then
	. $_kapkbuild
	pkgname=$_name-$_flavor
	[ "$_kver" != "$pkgver" ] && die "please update _kver to $pkgver"
	[ "$_kpkgrel" != "$pkgrel" ] && die "please update _kpkgrel to $pkgrel"
fi

_kpkgver="$_kver-r$_kpkgrel"
_toolsver="$_ver-r$_toolsrel"
_abi_release=${_kver}-${_kpkgrel}-${_flavor}

pkgname=${_name}-${_flavor}
pkgver=$_kver
pkgrel=$(($_kpkgrel + $_mypkgrel))
pkgdesc="Next generation secure network tunnel: kernel modules for $_flavor"
arch='x86 x86_64 armhf'
url='https://www.wireguard.io'
license="GPLv2"
depends="linux-${_flavor}=${_kpkgver}"
makedepends="linux-${_flavor}-dev=$_kpkgver libmnl-dev"
install_if="wireguard-tools=$_toolsver linux-hardened=$_kpkgver"
options="!check"
source="https://git.zx2c4.com/WireGuard/snapshot/WireGuard-$_ver.tar.xz"
provides="${_name}-grsec=${_kver}-r${pkgrel}"
builddir="$srcdir"/WireGuard-$_ver

build() {
	cd "$builddir"
	# only building module: see wireguard-tools for userspace
	make -C src/ \
		KERNELDIR=/lib/modules/${_abi_release}/build \
		module
}

package() {
	cd "$builddir/src"

	local module=
	for module in *.ko; do
		install -v -D -m644 ${module} \
			"$pkgdir/lib/modules/$_abi_release/extra/${module}"
	done
}

sha512sums="41aa997fa9d333a8d93096e5a4a776be7bdd14d227c4cffe3027ff1db6dff36b2fa56c1d028a574aa05b5e1572badbf5af3c1612334382f405caa30e92cfd34e  WireGuard-0.0.20170810.tar.xz"