#!/bin/mkpkg
# description: Free, easy to use NTP implementation from OpenBSD
# url: https://www.openntpd.org

name=openntpd
version=7.9p1
release=5
depends=(libressl)
groups=(ntp:user:ntp:/var/empty:755:902:902)
services=(ntpd)
permissions=(
    /var/empty:root:root:755
    /etc/ntpd.conf:root:root:644
)
source=(https://cdn.openbsd.org/pub/OpenBSD/OpenNTPD/$name-$version.tar.gz)

sha256sums=(
    "091eeb3f4e358e28c3ab2ea58f93d7a0b5758a20d7c8a0418e162e9b2c27addc"
)

patch() {
    cd $name-$version

    # musl: no /etc/services so getservbyname("ntp","udp") returns NULL
    # and fatal() fires immediately. Two-file fix:
    #
    # 1. ntp.c: remove the fatal() guard so NULL se is allowed to pass through
    # 2. server.c: replace both se->s_port dereferences with htons(123)

    sed -i '/if ((se = getservbyname("ntp", "udp")) == NULL)/{n; s/.*fatal.*//;}' \
        src/ntp.c

    sed -i 's/se->s_port/htons(123)/g' \
        src/server.c
}

build() {
    cd $name-$version
    ./configure \
        --prefix=/usr \
        --sysconfdir=/etc \
        --localstatedir=/var \
        --with-privsep-user=ntp \
        --with-cacert=/etc/ssl/cert.pem
    make
    make DESTDIR=$PKG install
}

post_build() {
    cd $name-$version

    # ntpd.conf — pool.ntp.org with HTTPS constraints
    printf '%s\n' \
        '# krypt ntpd.conf' \
        '' \
        'servers pool.ntp.org' \
        '' \
        '# HTTPS time constraint validation (requires libtls)' \
        'constraints from "https://www.google.com/search?q=openntpd"' \
        > $PKG/etc/ntpd.conf

    # runit service
    # ntpd manages its own privilege separation — runs as root,
    # forks an unprivileged child as ntp.
    # -s removed: deprecated and fatal in 6.8p1; use constraints instead.
    install -d $PKG/etc/sv/ntpd/log

    printf '%s\n' \
        '#!/bin/sh' \
        'exec 2>&1' \
        'exec ntpd -d' \
        > $PKG/etc/sv/ntpd/run

    printf '%s\n' \
        '#!/bin/sh' \
        'rm -f /var/run/ntpd.sock' \
        > $PKG/etc/sv/ntpd/finish

    printf '%s\n' \
        '#!/bin/sh' \
        'mkdir -p /var/log/ntpd' \
        'exec svlogd -tt /var/log/ntpd' \
        > $PKG/etc/sv/ntpd/log/run

    chmod 755 $PKG/etc/sv/ntpd/run
    chmod 755 $PKG/etc/sv/ntpd/finish
    chmod 755 $PKG/etc/sv/ntpd/log/run

}

signify() {
    untrusted comment: public key
    RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3
}

# vim: filetype=sh