# Contributor: Stuart Cardall <developer@it-offshore.co.uk>
# Maintainer: Stuart Cardall <developer@it-offshore.co.uk>

_flavor=${FLAVOR:-hardened}
_kpkg=linux-$_flavor
_kver=4.9.73
_kpkgrel=0

# when changing _ver we *must* bump _mypkgrel
# we must also match up _toolsrel with wireguard-tools
_ver=0.0.20180304
_mypkgrel=2
_toolsrel=0
_name=wireguard

# verify the kernel version before entering chroot
_kapkbuild=../../linux-${_flavor}/APKBUILD
if [ -f $_kapkbuild ]; then
	. $_kapkbuild
	pkgname=$_name-$_flavor
	[ "$_kver" != "$pkgver" ] && die "please update _kver to $pkgver"
	[ "$_kpkgrel" != "$pkgrel" ] && die "please update _kpkgrel to $pkgrel"
fi

_kpkgver="$_kver-r$_kpkgrel"
_toolsver="$_ver-r$_toolsrel"
_abi_release=${_kver}-${_kpkgrel}-${_flavor}

pkgname=${_name}-${_flavor}
pkgver=$_kver
pkgrel=$(($_kpkgrel + $_mypkgrel))
pkgdesc="Next generation secure network tunnel: kernel modules for $_flavor"
arch='x86 x86_64 armhf'
url='https://www.wireguard.com'
license="GPL-2.0"
depends="linux-${_flavor}=${_kpkgver}"
makedepends="linux-${_flavor}-dev=$_kpkgver libmnl-dev"
install_if="wireguard-tools=$_toolsver linux-hardened=$_kpkgver"
options="!check"
source="https://git.zx2c4.com/WireGuard/snapshot/WireGuard-$_ver.tar.xz"
provides="${_name}-grsec=${_kver}-r${pkgrel}"
builddir="$srcdir"/WireGuard-$_ver

build() {
	cd "$builddir"
	# only building module: see wireguard-tools for userspace
	make -C src/ \
		KERNELDIR=/lib/modules/${_abi_release}/build \
		module
}

package() {
	cd "$builddir/src"

	local module=
	for module in *.ko; do
		install -v -D -m644 ${module} \
			"$pkgdir/lib/modules/$_abi_release/extra/${module}"
	done
}

sha512sums="dc7ad4c366625bc614f95abe163459804fa3b6a4dd9e1c7eee1571d3dab5a5bc88dbdc6cc79b9ec48f471ba71da54050f1bce8874ed130f15234a8353d276e50  WireGuard-0.0.20180304.tar.xz"