# Contributor: Stefan Reimer <stefan@zero-downtime.net>
# Maintainer: Stefan Reimer <stefan@zero-downtime.net>
pkgname=falco
pkgver=0.40.0
pkgrel=0
pkgdesc="Falco is the open source solution for runtime security for hosts, containers, Kubernetes and the cloud"
url="https://github.com/falcosecurity/falco"
arch="x86_64 aarch64"
license="AGPL-3.0"
makedepends="cmake clang bpftool linux-headers bash perl autoconf elfutils-dev libtool argp-standalone
             musl-fts-dev
             musl-libintl
             musl-legacy-error
             musl-obstack-dev "
#            protobuf-dev
#            c-ares-dev
#            openssl-dev
#            curl-dev
#            grpc-dev
#            yaml-cpp-dev
#           "
options="!check"

# Original config
# https://raw.githubusercontent.com/falcosecurity/rules/main/rules/falco_rules.yaml
# https://raw.githubusercontent.com/falcosecurity/falco/master/falco.yaml

source="
  $pkgname-$pkgver.tar.gz::https://github.com/falcosecurity/falco/archive/refs/tags/$pkgver.tar.gz
  falco.patch
  rules.patch
  falco.initd
  "

subpackages="$pkgname-openrc"

prepare() {
  [[ -d build ]] || mkdir build
}

build() {
  cd build

  cmake \
    -DCPACK_GENERATOR=TGZ \
    -DCMAKE_BUILD_TYPE=Release \
    -DFALCO_VERSION=$pkgver \
    -DCMAKE_INSTALL_PREFIX=/usr \
    -DFALCO_ETC_DIR=/etc/falco \
    -DUSE_BUNDLED_DEPS=On \
    -DMINIMAL_BUILD=On \
    -DUSE_JEMALLOC=Off \
    -DUSE_DYNAMIC_LIBELF=Off \
    -DMUSL_OPTIMIZED_BUILD=On \
    -DBUILD_DRIVER=Off \
    -DBUILD_BPF=Off \
    -DBUILD_LIBSCAP_MODERN_BPF=On \
    -DADD_FALCOCTL_DEPENDENCY=OFF \
    ..

  make falco
}

package() {
  cd build
  make DESTDIR="${pkgdir}" install

  # patch falco config
  cd $pkgdir/etc/falco
  patch --no-backup-if-mismatch -i $srcdir/falco.patch
  patch --no-backup-if-mismatch -i $srcdir/rules.patch

  # We dont build anything on targets so remove sources
  rm -rf $pkgdir/usr/src
  rm -rf $pkgdir/usr/lib
  rm -rf $pkgdir/usr/include

  install -Dm755 "$srcdir"/$pkgname.initd \
    "$pkgdir"/etc/init.d/$pkgname
}

sha512sums="
1db97907cd43447472dde3cd5035b49eec3d1a6a2270a76c229edc076934d57de054d518f9299fb54ea9b46f17d28863a0e6d4311325dbaefffe5c38cdd314df  falco-0.40.0.tar.gz
1cfa0fc1ad837b68e571564244fceedcfe23d698bc43fc88bdc95f8ad83370d96e843fccb0494c09b78ba059687dd9bb7bdfd53c6bfc90d08a9cdab124a13efd  falco.patch
a7ab1f2e365fe3aba5a1e3797dce632123bf9477eccfefb1d31f0ae10300d657e328c0a84462fb1557e10e88d567e2e93220db054cb6089ee52ee38bba1096e4  rules.patch
9d1292a99bab7792bfe344940fa41ccf01318d5f30f854b01457e9f53ccca27f7f334466c061a11fbe8ebf918aeeb7f723b16a233c9e3bd60dd632d831ae9f5c  falco.initd
"