blob: 3040d8474dbd55eac5f1406759e416cefe62567e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
# Maintainer: Avi Zimmerman <avi.zimmerman@gmail.com>
pkgname="webmesh-bin"
pkgver="0.17.1"
pkgrel="1"
pkgdesc="A service mesh for the web"
arch=("x86_64" "aarch64" "armv6h" "i686" "s390x" "ppc64le")
url="https://webmeshproj.github.io"
license=("Apache-2.0")
makedepends=("cosign" "curl")
optdepends=("wireguard-tools: for debugging")
conflicts=("webmesh-git" "webmesh")
source=("https://github.com/webmeshproj/webmesh/releases/download/v$pkgver/checksums.txt")
sha256sums=("62267304daf772ffbb6f19c6905b0f14232d8fbedb6d2c6a71dd81f4c49386a3")
prepare() {
echo "==> Verifying cosign signature..."
COSIGN_EXPERIMENTAL=1 cosign verify-blob \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-identity-regexp="github\.com/webmeshproj/webmesh" \
--signature="https://github.com/webmeshproj/webmesh/releases/download/v$pkgver/checksums.txt.sig" \
--certificate="https://github.com/webmeshproj/webmesh/releases/download/v$pkgver/checksums.txt.sig.cert" \
checksums.txt
echo "==> Downloading release package..."
curl --silent -JL https://github.com/webmeshproj/webmesh/releases/download/v$pkgver/webmesh_Linux_$CARCH.tar.gz > webmesh_Linux_$CARCH.tar.gz
echo "==> Verifying checksums..."
sha256sum -c checksums.txt --ignore-missing
# Delete the checksum files so they don't get packaged
# and upgrades always fetch the correct version
rm -f ../checksums.txt checksums.txt
echo "==> Extracting release archive..."
tar -C "$srcdir" -xzf webmesh_Linux_$CARCH.tar.gz
}
package() {
cd "$srcdir"
install -Dm755 webmesh-node "$pkgdir/usr/bin/webmesh-node"
install -Dm755 wmctl "$pkgdir/usr/bin/wmctl"
install -Dm644 contrib/systemd/webmeshd.service "$pkgdir/usr/lib/systemd/system/webmeshd.service"
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}
# vim:set ts=2 sw=2 et:
|