alpine-overlay/kubezero/falco/APKBUILD

# Contributor: Stefan Reimer <stefan@zero-downtime.net>
# Maintainer: Stefan Reimer <stefan@zero-downtime.net>
pkgname=falco
pkgver=0.36.2
pkgrel=0
pkgdesc="Falco is the open source solution for runtime security for hosts, containers, Kubernetes and the cloud"
url="https://github.com/falcosecurity/falco"
arch="x86_64 aarch64"
license="AGPL-3.0"
makedepends="cmake linux-headers bash perl autoconf elfutils-dev libtool argp-standalone
             musl-fts-dev
             musl-libintl
             musl-legacy-error
             musl-obstack-dev
            "
options="!check"
depends="falco-kernel~$pkgver"

# Original config
# https://raw.githubusercontent.com/falcosecurity/rules/main/rules/falco_rules.yaml
# https://raw.githubusercontent.com/falcosecurity/falco/master/falco.yaml

source="
  $pkgname-$pkgver.tar.gz::https://github.com/falcosecurity/falco/archive/refs/tags/$pkgver.tar.gz
  falco.patch
  rules.patch
  "

prepare() {
  [[ -d build ]] || mkdir build
}

build() {
  cd build

  cmake \
    -DCPACK_GENERATOR=TGZ \
    -DCMAKE_BUILD_TYPE=Release \
    -DFALCO_VERSION=$pkgver \
    -DCMAKE_INSTALL_PREFIX=/usr \
    -DFALCO_ETC_DIR=/etc/falco \
    -DUSE_BUNDLED_DEPS=On \
    -DMUSL_OPTIMIZED_BUILD=On \
    -DBUILD_DRIVER=Off \
    -DBUILD_BPF=Off \
    -DBUILD_LIBSCAP_MODERN_BPF=Off \
    ..

  make falco
}

package() {
  cd build
  make DESTDIR="${pkgdir}" install

  # patch falco config
  cd $pkgdir/etc/falco
  patch -i --no-backup-if-mismatch $srcdir/falco.patch
  patch -i --no-backup-if-mismatch $srcdir/rules.patch
  
  # We dont build anything on targets so remove sources
  rm -rf $pkgdir/usr/src
  rm -rf $pkgdir/usr/lib
  rm -rf $pkgdir/usr/include
}

sha512sums="
a3fef235ab4f3121bd0400827712652530ec417498c44ada8b6bf565f7631d035673b53dad94ea6ae9c854d45202ed71b2771f19e0c92eea3fc3503e5b75b02e  falco-0.36.2.tar.gz
b152fcf6cd81895efa37797ab7ff1aac7350b5f51f2648aa9e3cce9d5ece55791ddf82c396e9da216293e2379a785a294cc972f28a91162dc5bc88ab09e1ab08  falco.patch
88e722ddbfe8da1f2341d8da66223271987bf7fab0fb907a343010c2af85f637e2621f42c9973863c33f586a2f823f53984ca7358673fc99596d3dc83669a7f1  rules.patch
"