#!/bin/mkpkg
# description: Netfilter nftables - firewalling, NAT, and packet mangling for Linux (minimal)
# url: https://netfilter.org/projects/nftables/

# Note: This is a minimal build WITHOUT Python bindings

name=nftables
version=1.1.7
release=1
depends=(libmnl libnftnl libedit gmp)
makedeps=(bison flex)
groups=(nftables)
services=(nftables)
source=(
    https://www.netfilter.org/pub/nftables/nftables-$version.tar.xz
)
sha256sums=(
    "a6fbf060d8d4fff001517a2b94f356bb4366bfbf0ba366366f9d27cc38caa58f"
)

build() {
    cd $name-$version
    export CONFIG_SHELL=/bin/bash
    ./configure \
        --prefix=/usr \
        --sbindir=/usr/bin \
        --sysconfdir=/etc \
        --with-cli=editline \
        --without-json \
        --without-python-bin \
        --disable-debug \
        --disable-man-doc \
        --disable-python
    make
    make DESTDIR=$PKG install

    rm -rf $PKG/usr/share/doc
}

post_build() {
    # runit service
    install -d $PKG/etc/sv/nftables/log

    printf '%s\n' \
        '#!/bin/sh' \
        'exec 2>&1' \
        '[ ! -r /etc/nftables.conf ] && exit 0' \
        'nft -f /etc/nftables.conf' \
        'exec chpst -b nftables pause' \
        > $PKG/etc/sv/nftables/run

    printf '%s\n' \
        '#!/bin/sh' \
        'nft flush ruleset' \
        > $PKG/etc/sv/nftables/finish

    printf '%s\n' \
        '#!/bin/sh' \
        'mkdir -p /var/log/nftables' \
        'exec svlogd -tt /var/log/nftables' \
        > $PKG/etc/sv/nftables/log/run

    chmod 755 $PKG/etc/sv/nftables/run
    chmod 755 $PKG/etc/sv/nftables/finish
    chmod 755 $PKG/etc/sv/nftables/log/run
}

signify() {
    untrusted comment: public key
    RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3
}

# vim: filetype=sh