Testing Workflow

.github/workflows/build-rpm.yml

@@ -0,0 +1,71 @@
+name: Build RPM Package
+
+on:
+  push:
+    tags:
+      - v[0-9]+.[0-9]+.[0-9]+
+
+jobs:
+  build-rpm:
+    name: Build and upload RPM packages
+    runs-on: ubuntu-latest
+    container:
+      image: fedora:latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: install RPM build tools
+      run: |
+        dnf -y install \
+          cmake \
+          gcc \
+          gcc-c++ \
+          git \
+          rpm-build \
+          rpmdevtools \
+          tar
+
+    - name: Setup RPM build tree
+      run: |
+        rpmdev-setuptree
+
+    - name: Create source tarball
+      run: |
+        cmake -B build -S .
+        cmake --build build --target sdist
+
+    - name: Set environment variables
+      run: |
+        echo "PKG_NAME=ca-certificates-brazil" >> $GITHUB_ENV
+        echo "PKG_VERSION=$(grep \
+            -m1 -iPo '.*CPACK_PACKAGE_VERSION [\"]*\K[\S]*[^(\"\))]' \
+            build/CPackConfig.cmake) \
+        " >> $GITHUB_ENV
+
+    - name: Copy SOURCES and SPEC file
+      run: |
+        cp packaging/pkg.spec.in ~/rpmbuild/SPECS/${PKG_NAME}.spec
+        rpmdev-bumpspec -n ${PKG_VERSION} ~/rpmbuild/SPECS/${PKG_NAME}.spec
+        cp dist/*.src.tar.gz ~/rpmbuild/SOURCES/
+
+    - name: Build RPM
+      run: |
+        dnf -y builddep ~/rpmbuild/SPECS/ca-certificates-brazil.spec
+        rpmbuild -ba ~/rpmbuild/SPECS/ca-certificates-brazil.spec
+
+    - name: Upload built RPMs
+      uses: actions/upload-artifact@v4
+      with:
+        name: built-rpms
+        path: |
+          ~/rpmbuild/RPMS/
+          ~/rpmbuild/SRPMS/
+
+    - name: Create GitHub Release
+      uses: softprops/action-gh-release@v2
+      if: github.ref_type == 'tag'
+      with:
+        generate_release_notes: true
+        files: |
+          ~/rpmbuild/RPMS/**/*.rpm

packaging/pkg.spec.in

@@ -0,0 +1,52 @@
+%global debug_package %{nil}
+%global source_date_epoch_from_changelog 0
+
+%define __openssl   %{_bindir}/openssl
+
+Name:               ca-certificates-brazil
+Version:            __VERSION__
+Release:            %{autorelease}
+Summary:            The ICP-Brasil root certificate bundle
+
+License:            Public Domain
+URL:                https://www.gov.br/iti/pt-br/assuntos/certificado-digital
+Source0:            %{name}-%{version}.src.tar.gz
+
+BuildArch:          noarch
+BuildRequires:      %{__openssl}
+BuildRequires:      %{_bindir}/mktemp
+BuildRequires:      %{_bindir}/unzip
+
+%description
+The Brazilian Public Key Infrastructure - ICP-Brasil is a hierarchical chain 
+of trust that enables the issuance of digital certificates for the virtual 
+identification of citizens.
+
+It is observed that the model adopted by Brazil was single-root certification,
+and the ITI, in addition to playing the role of Root Certifying Authority - Root AC,
+also has the role of accrediting and discrediting the other participants in the 
+chain, supervise and audit the processes.
+
+%prep
+%autosetup -c
+%{cmake}
+
+%build
+%{cmake_build}
+
+%install
+%{__rm} -rf %{buildroot}
+%{cmake_install}
+
+
+%files
+%{_datadir}/pki/ca-trust-source/anchors/isrg-root-x2.crt
+%{_datadir}/pki/ca-trust-source/anchors/lets-encrypt-ca-bundle.crt
+%{_datadir}/pki/ca-trust-source/anchors/icp-brasil-ca-bundle.crt
+
+
+%post -p %{_bindir}/update-ca-trust
+%postun -p %{_bindir}/update-ca-trust
+
+%changelog
+%autochangelog