.goreleaser.yaml

version: 2
release:
  draft: true
  prerelease: auto
dist: results
builds:
  - id: oinit
    main: ./cmd/oinit
    binary: oinit
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - freebsd
    ldflags:
      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{.CommitDate}} -X main.builtBy=goreleaser
    mod_timestamp: "{{.CommitTimestamp}}"

  - id: oinit-ca
    main: ./cmd/oinit-ca
    binary: oinit-ca
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - freebsd
    ldflags:
      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{.CommitDate}} -X main.builtBy=goreleaser
    mod_timestamp: "{{.CommitTimestamp}}"

  - id: oinit-shell
    main: ./cmd/oinit-shell
    binary: oinit-shell
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - freebsd
    ldflags:
      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{.CommitDate}} -X main.builtBy=goreleaser
    mod_timestamp: "{{.CommitTimestamp}}"

  - id: oinit-switch
    main: ./cmd/oinit-switch
    binary: oinit-switch
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - freebsd
    ldflags:
      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{.CommitDate}} -X main.builtBy=goreleaser
    mod_timestamp: "{{.CommitTimestamp}}"

archives:
  - formats: ["tar.gz"]
    name_template: >-
      {{ .ProjectName }}_
      {{- title .Os }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else if eq .Arch "386" }}i386
      {{- else }}{{ .Arch }}{{ end }}
      {{- if .Arm }}v{{ .Arm }}{{ end }}

checksum:
  name_template: "checksums.txt"

snapshot:
  version_template: "{{ incpatch .Version }}-next"

changelog:
  sort: asc
  filters:
    exclude:
      - "^docs:"
      - "^test:"

nfpms:
  - id: oinit
    package_name: oinit
    ids:
      - oinit
    homepage: https://codebase.helmholtz.cloud/m-team/oidc/ssh/oinit/
    maintainer: Marcus Hardt <hardt@kit.edu>
    description: |-
      Command-line client tool to use ssh-certificates with openssh
      oinit is a set of tools to integrate federated identities with 
      ssh-certificates. This client tool uses OpenID Connect to
      authenticate with the REST interface the oinit-ca.
    license: MIT
    contents:
      - src: copyright
        dst: /usr/share/doc/{{ .PackageName }}/copyright
    section: misc
    formats:
      - apk
      - deb
      - rpm
      - archlinux
    provides:
      - oinit
    overrides:
      deb:
        dependencies:
          - openssh-client
        recommends:
          - oidc-agent
      rpm:
        dependencies:
          - openssh-clients
        recommends:
          - oidc-agent
      apk:
        dependencies:
          - openssh-client
          # oidc-agent is not packaged for Alpine
      archlinux:
        dependencies:
          - openssh
          # oidc-agent is not packaged for Arch Linux
    deb:
      lintian_overrides:
        - statically-linked-binary
        - changelog-file-missing-in-native-package

  - id: oinit-ca
    package_name: oinit-ca
    builds:
      - oinit-ca
    homepage: https://codebase.helmholtz.cloud/m-team/oidc/ssh/oinit/
    maintainer: Marcus Hardt <hardt@kit.edu>
    description: |-
      Certificate authority for oinit command-line tool
      oinit is a set of tools to integrate federated identities with
      ssh-certificates. This is the CA package, which uses the openssh
      ssh-ca and adds a REST interface, which allows federated users to
      authenticate using their federated identitty via OpenID Connect.
    license: MIT
    section: misc
    formats:
      - apk
      - deb
      - rpm
      - archlinux
    provides:
      - oinit-ca
    bindir: /usr/sbin
    contents:
      - src: copyright
        dst: /usr/share/doc/{{ .PackageName }}/copyright
      - src: configs/config.sample.ini
        dst: /etc/oinit-ca/config.ini
        type: config
      - src: init/oinit-ca-packaged.service
        dst: /usr/lib/systemd/system/oinit-ca.service
      - src: configs/nginx.oinit-ca.conf
        dst: /etc/nginx/location.d/nginx.oinit-ca.conf
    scripts:
      postinstall: "scripts/oinit-ca-postinstall.sh"
      preremove: "scripts/oinit-ca-preremove.sh"
    deb:
      lintian_overrides:
        - statically-linked-binary
        - changelog-file-missing-in-native-package

  - id: oinit-openssh
    package_name: oinit-openssh
    builds:
      - oinit-switch
      - oinit-shell
    homepage: https://codebase.helmholtz.cloud/m-team/oidc/ssh/oinit/
    maintainer: Marcus Hardt <hardt@kit.edu>
    description: |-
      oinit programs to integrate with OpenSSH
      oinit is a set of tools to integrate federated identities with
      ssh-certificates. This is the serverside package, which supports
      mapping the federated user to the corresponding user in the
      ssh-certificate.
    license: MIT
    contents:
      - src: copyright
        dst: /usr/share/doc/{{ .PackageName }}/copyright
      - dst: /var/oinit-shell
        type: dir
    section: misc
    formats:
      - apk
      - deb
      - rpm
      - archlinux
    provides:
      - oinit-openssh
    bindir: /usr/bin
    overrides:
      deb:
        recommends:
          - openssh-server
          - motley-cue
      rpm:
        recommends:
          - openssh-server
          - util-linux
          - motley-cue
      apk:
        recommends:
          - openssh
          - util-linux
          # motley-cue is not packaged for Alpine
      archlinux:
        recommends:
          - openssh
          - util-linux
          # motley-cue is not packaged for Arch Linux
    scripts:
      postinstall: "scripts/oinit-openssh-postinstall.sh"
      preremove: "scripts/oinit-openssh-preremove.sh"
    deb:
      lintian_overrides:
        - statically-linked-binary
        - changelog-file-missing-in-native-package
# dockers:
#   - id: oinit-ca
#     ids:
#       - oinit-ca
#     image_templates:
#       - "{{ .Env.REGISTRY }}/{{ .Env.IMAGE }}:latest"
#       - "{{ .Env.REGISTRY }}/{{ .Env.IMAGE }}:{{ .Tag }}"
#     dockerfile: "build/Dockerfile.goreleaser"
#     build_flag_templates:
#       - "--pull"
#       - "--label=org.opencontainers.image.revision={{.FullCommit}}"
#       - "--label=org.opencontainers.image.created={{.Date}}"
#       - "--label=org.opencontainers.image.version={{.Version}}"