# Contributor: Timo Teräs <timo.teras@iki.fi>
# Maintainer: Celeste <cielesti@protonmail.com>
maintainer="Celeste <cielesti@protonmail.com>"
pkgname=bubblewrap
pkgver=0.11.0
pkgrel=1
pkgdesc="Unprivileged sandboxing tool"
url="https://github.com/containers/bubblewrap"
arch="all"
license="LGPL-2.0-or-later"
options="!check" # Testsuite fails
makedepends="meson libcap-dev libcap-static docbook-xsl"
checkdepends="bash"
subpackages="
	$pkgname-static
	$pkgname-doc
	$pkgname-bash-completion
	$pkgname-zsh-completion
	"
source="$pkgname-$pkgver.tar.gz::https://github.com/containers/bubblewrap/archive/v$pkgver.tar.gz"

# secfixes:
#   0.10.0-r0:
#     - CVE-2024-42472
#   0.4.1-r0:
#     - CVE-2020-5291

build() {
	abuild-meson \
		-Drequire_userns=true \
		-Dman=disabled \
		-Dtests=false \
		-Dc_link_args="$LDFLAGS -static" \
		--prefer-static \
		output-static
	meson compile -C output-static

	abuild-meson \
		-Drequire_userns=true \
		-Dman=enabled \
		-Dtests="$(want_check && echo true || echo false)" \
		output
	meson compile -C output
}

package() {
	DESTDIR="$pkgdir" meson install --no-rebuild -C output
}

static() {
	pkgdesc="$pkgdesc (static binary)"
	depends=""

	install -Dvm755 "$builddir"/output-static/bwrap \
		"$subpkgdir"/usr/bin/bwrap.static
}

sha512sums="
3a8aaea0cd588271d42d140914c40ac38c2ee6dedea6f543d51f35894b64b0a3b625e8bd812de02c967f10e7d691528fc918d02d99a74117b095303900cebfb9  bubblewrap-0.11.0.tar.gz
"
