From 1128eb5d0f8803972fb7b53ab9f1799987f1a61c Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 26 Apr 2026 16:43:48 +1000
Subject: [PATCH] feat: add sops rpm

---
 rpms/sops/metadata.yaml       | 20 ++++++++++++++++++++
 rpms/sops/resources/build.sh  | 10 ++++++++++
 rpms/sops/resources/nfpm.yaml | 30 ++++++++++++++++++++++++++++++
 3 files changed, 60 insertions(+)
 create mode 100644 rpms/sops/metadata.yaml
 create mode 100755 rpms/sops/resources/build.sh
 create mode 100644 rpms/sops/resources/nfpm.yaml

diff --git a/rpms/sops/metadata.yaml b/rpms/sops/metadata.yaml
new file mode 100644
index 0000000..8157022
--- /dev/null
+++ b/rpms/sops/metadata.yaml
@@ -0,0 +1,20 @@
+---
+name: sops
+github: getsops/sops
+description: Simple and flexible tool for managing secrets.
+arch: amd64
+platform: linux
+maintainer: getsops
+homepage: https://github.com/getsops/sops
+license: MPL-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 3.12.2
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 3.12.2
diff --git a/rpms/sops/resources/build.sh b/rpms/sops/resources/build.sh
new file mode 100755
index 0000000..6240d31
--- /dev/null
+++ b/rpms/sops/resources/build.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+set -e
+
+wget -O /app/sops https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/getsops/sops/releases/download/v${PACKAGE_VERSION}/sops-v${PACKAGE_VERSION}.linux.amd64
+chmod +x /app/sops
+
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm
diff --git a/rpms/sops/resources/nfpm.yaml b/rpms/sops/resources/nfpm.yaml
new file mode 100644
index 0000000..472bf6d
--- /dev/null
+++ b/rpms/sops/resources/nfpm.yaml
@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - sops
+
+provides:
+  - sops
+
+contents:
+  - src: /app/sops
+    dst: /usr/bin/sops
+    file_info:
+      mode: 0755
+      owner: root
+      group: root