refactor: modernise RPM builder with Python tooling

- Replace Makefile version/release file system with metadata.yaml only
- Add Python build automation (./tools/build) with Gitea API integration
- Add GitHub release updater (./tools/update-gh) for version management
- Centralize Dockerfiles into single parameterized Dockerfile
- Remove 54+ individual package Dockerfiles and version directories
- Update Makefile to use new Python tooling
- Add GITEA_API_TOKEN validation to prevent duplicate builds
- Support both explicit version/release args and metadata.yaml reading

.gitea/workflows/build.yaml

@@ -10,15 +10,17 @@ jobs:
     runs-on: almalinux-8
     container:
       image: git.unkin.net/unkin/almalinux8-actionsdind:latest
-      options: --privileged
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
 
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
 
       - name: Build Packages
+        env:
+          VAULT_ROLE_ID: ${{ secrets.RPMBUILDER_VAULT_ROLEID }}
         run: |
-          make all
+          make all DISTRO=el/8
 
       - name: Show RPMs
         run: |
@@ -34,15 +36,17 @@ jobs:
     runs-on: almalinux-8
     container:
       image: git.unkin.net/unkin/almalinux9-actionsdind:latest
-      options: --privileged
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
 
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
 
       - name: Build Packages
+        env:
+          VAULT_ROLE_ID: ${{ secrets.RPMBUILDER_VAULT_ROLEID }}
         run: |
-          make all
+          make all DISTRO=el/9
 
       - name: Show RPMs
         run: |

.gitignore

@@ -1 +1,3 @@
 dist
+env
+.claude

Dockerfile

@@ -1,4 +1,5 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+ARG BASE_IMAGE=git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+FROM ${BASE_IMAGE}
 
 # Create output directory for RPMs
 RUN mkdir -p /app/dist

Makefile

@@ -1,58 +1,85 @@
 # Variables
 ROOT_DIR := $(PWD)
-RPMS_DIR := $(ROOT_DIR)/rpms
-REPO_OPTIONS := --disablerepo=* --enablerepo=unkin
+BUILD_TOOL := $(ROOT_DIR)/tools/build
+DISTRO ?= el/9  # Default to el/9 if not specified
 
-# Automatically find all package/version directories
-PACKAGES := $(shell find $(RPMS_DIR) -mindepth 2 -maxdepth 2 -type d | sed "s|$(RPMS_DIR)/||" | grep -Ev '(scripts|/resources)')
+# Automatically find all packages with metadata.yaml
+PACKAGES := $(shell find $(ROOT_DIR)/rpms -mindepth 1 -maxdepth 1 -type d -exec test -f {}/metadata.yaml \; -print | xargs -n1 basename | sort)
 
-# Default target to build all packages and versions
-.PHONY: all list cache build clean
-all: cache $(PACKAGES)
+# Default target to build all packages
+.PHONY: all list build clean
+all: build-all
 
+# List all available packages
 list:
-	@echo "Builds:"
+	@echo "Available packages:"
 	@for package in $(PACKAGES); do \
-		echo "  '$$package'"; \
+		echo "  $$package"; \
 	done
 
-cache:
-	echo "Refreshing DNF cache..." && \
-	dnf clean all && \
-	dnf makecache
+# Build all packages using Python tool
+build-all:
+	@echo "Building all packages using Python tooling for distro $(DISTRO)..."
+	$(BUILD_TOOL) --all --distro $(DISTRO)
 
-# Build specific package/version
+# Build specific package using Python tool
 .PHONY: $(PACKAGES)
 $(PACKAGES):
-	@PACKAGE_NAME=$(shell echo $(@) | cut -d/ -f1) && \
-	PACKAGE_VERSION=$(shell echo $(@) | cut -d/ -f2) && \
-	echo "Starting build $$PACKAGE_NAME/$$PACKAGE_VERSION" && \
-	$(MAKE) build PACKAGE_NAME=$$PACKAGE_NAME PACKAGE_VERSION=$$PACKAGE_VERSION
+	@echo "Building package: $@ for distro $(DISTRO)"
+	$(BUILD_TOOL) --package $@ --distro $(DISTRO)
 
-# Build target
+# Build specific package with version/release override
 build:
-	@mkdir -p $(ROOT_DIR)/dist/$(PACKAGE_NAME)/
-	@cd $(RPMS_DIR)/$(PACKAGE_NAME) && \
-		export PACKAGE_RELEASE=$$(cat $(PACKAGE_VERSION)/release) && \
-		export PACKAGE_FULL_NAME=$(PACKAGE_NAME)-$(PACKAGE_VERSION)-$$PACKAGE_RELEASE && \
-		echo "Checking repos for $$PACKAGE_FULL_NAME" && \
-		if dnf info $$PACKAGE_FULL_NAME $(REPO_OPTIONS) > /dev/null 2>&1; then \
-			echo "Skipping build for $(PACKAGE_NAME) version $(PACKAGE_VERSION) (already exists in the repository)"; \
-		else \
-			echo "Building RPM for $(PACKAGE_NAME) version $(PACKAGE_VERSION)"; \
-			docker build \
-				--build-arg PACKAGE_VERSION=$(PACKAGE_VERSION) \
-				--build-arg PACKAGE_RELEASE=$${PACKAGE_RELEASE} \
-				-t $$(echo $(PACKAGE_NAME)-builder \
-				| tr '[:upper:]' '[:lower:]') . && \
-			docker create --name $(PACKAGE_NAME)-$(PACKAGE_VERSION)-builder \
-				$$(echo $(PACKAGE_NAME)-builder | tr '[:upper:]' '[:lower:]') && \
-			docker start -a $(PACKAGE_NAME)-$(PACKAGE_VERSION)-builder && \
-			docker cp $(PACKAGE_NAME)-$(PACKAGE_VERSION)-builder:/app/dist/. $(ROOT_DIR)/dist/$(PACKAGE_NAME)/ && \
-			docker rm $(PACKAGE_NAME)-$(PACKAGE_VERSION)-builder; \
-		fi
+	@if [ -z "$(PACKAGE_NAME)" ]; then \
+		echo "Error: PACKAGE_NAME not specified"; \
+		echo "Usage: make build PACKAGE_NAME=package [PACKAGE_VERSION=version] [PACKAGE_RELEASE=release]"; \
+		exit 1; \
+	fi
+	@if [ -n "$(PACKAGE_VERSION)" ] && [ -n "$(PACKAGE_RELEASE)" ]; then \
+		echo "Building $(PACKAGE_NAME) with explicit version $(PACKAGE_VERSION)-$(PACKAGE_RELEASE) for distro $(DISTRO)"; \
+		$(BUILD_TOOL) --package $(PACKAGE_NAME) --version $(PACKAGE_VERSION) --release $(PACKAGE_RELEASE) --distro $(DISTRO); \
+	else \
+		echo "Building $(PACKAGE_NAME) using metadata.yaml for distro $(DISTRO)"; \
+		$(BUILD_TOOL) --package $(PACKAGE_NAME) --distro $(DISTRO); \
+	fi
+
+# Dry run - show what would be built without building
+dry-run:
+	@echo "Dry run - showing what would be built for distro $(DISTRO):"
+	$(BUILD_TOOL) --all --distro $(DISTRO) --dry-run
 
 # Clean target
 clean:
 	@echo "Cleaning build artifacts..."
 	rm -rf $(ROOT_DIR)/dist
+
+# Update packages from GitHub releases
+update:
+	@echo "Checking for package updates from GitHub releases..."
+	$(ROOT_DIR)/tools/update-gh --all
+
+# Update specific package from GitHub
+update-%:
+	@echo "Checking for updates for package: $*"
+	$(ROOT_DIR)/tools/update-gh --package $*
+
+# Help target
+help:
+	@echo "Available targets:"
+	@echo "  all          - Build all packages (default)"
+	@echo "  list         - List all available packages"
+	@echo "  build-all    - Build all packages using Python tooling"
+	@echo "  <package>    - Build specific package (e.g., 'make consul')"
+	@echo "  build        - Build with explicit PACKAGE_NAME, PACKAGE_VERSION, PACKAGE_RELEASE"
+	@echo "  dry-run      - Show what would be built without building"
+	@echo "  clean        - Remove build artifacts"
+	@echo "  update       - Check all packages for GitHub release updates"
+	@echo "  update-<pkg> - Check specific package for GitHub release updates"
+	@echo "  help         - Show this help message"
+	@echo ""
+	@echo "Examples:"
+	@echo "  make consul                                    # Build consul using metadata.yaml"
+	@echo "  make build PACKAGE_NAME=consul                # Build consul using metadata.yaml"
+	@echo "  make build PACKAGE_NAME=consul PACKAGE_VERSION=1.21.1 PACKAGE_RELEASE=1"
+	@echo "  make update-consul                             # Check consul for GitHub updates"
+	@echo "  make dry-run                                   # Show what would be built"

rpms/act_runner/0.2.12/release

@@ -1 +0,0 @@
-1

rpms/act_runner/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy nfpm.yaml from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/bind_exporter/0.8.0/release

@@ -1 +0,0 @@
-1

rpms/bind_exporter/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/boilerplate/0.6.1/release

@@ -1 +0,0 @@
-1

rpms/boilerplate/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/cni-plugins/1.7.1/release

@@ -1 +0,0 @@
-1

rpms/cni-plugins/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/consul-cni/1.7.1/release

@@ -1 +0,0 @@
-1

rpms/consul-cni/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/consul/1.21.1/release

@@ -1 +0,0 @@
-1

rpms/consul/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/etcd/3.5.18/release

@@ -1 +0,0 @@
-2

rpms/etcd/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/exportarr/2.2.0/release

@@ -1 +0,0 @@
-1

rpms/exportarr/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/frr_exporter/1.8.0/release

@@ -1 +0,0 @@
-1

rpms/frr_exporter/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy nfpm.yaml from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/g10k/0.9.10/release

@@ -1 +0,0 @@
-1

rpms/g10k/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/helmfile/1.1.7/release

@@ -1 +0,0 @@
-1

rpms/incus/6.10.1/release

@@ -1 +0,0 @@
-1

rpms/incus/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jellyfin-ffmpeg-bin/7.1.1/release

@@ -1 +0,0 @@
-3

rpms/jellyfin-ffmpeg-bin/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jellyfin-server/10.10.7/release

@@ -1 +0,0 @@
-1

rpms/jellyfin-server/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jellyfin-web/10.10.7/release

@@ -1 +0,0 @@
-1

rpms/jellyfin-web/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jsonnet-language-server/0.16.0/release

@@ -1 +0,0 @@
-1

rpms/jsonnet-language-server/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jsonnet-lint/0.21.0/release

@@ -1 +0,0 @@
-1

rpms/jsonnet-lint/Dockerfile

@@ -1,19 +0,0 @@
-# Start with the AlmaLinux 9 base image
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jsonnet-lint/metadata.yaml

@@ -0,0 +1,9 @@
+name: jsonnet-lint
+release: 1
+version: 0.21.0
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+github: google/go-jsonnet

rpms/jsonnet/0.21.0/release

@@ -1 +0,0 @@
-1

rpms/jsonnet/Dockerfile

@@ -1,19 +0,0 @@
-# Start with the AlmaLinux 9 base image
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/jsonnet/metadata.yaml

@@ -0,0 +1,9 @@
+name: jsonnet
+release: 1
+version: 0.21.0
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+github: google/go-jsonnet

rpms/libfoundationdb/metadata.yaml

@@ -0,0 +1,9 @@
+name: libfoundationdb
+release: 1
+version: 7.3.71
+github: apple/foundationdb
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/libfoundationdb/resources/build.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/bash
+
+# Download the required library
+curl -L -o /app/libfdb_c.so https://github.com/apple/foundationdb/releases/download/${PACKAGE_VERSION}/libfdb_c.x86_64.so
+
+# Make the library readable
+chmod 755 /app/libfdb_c.so
+
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/libfoundationdb/resources/nfpm.yaml

@@ -0,0 +1,36 @@
+# nfpm.yaml
+
+name: libfoundationdb
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "FoundationDB client library - Shared library for FoundationDB applications"
+
+maintainer: FoundationDB Community
+homepage: https://github.com/apple/foundationdb
+license: Apache-2.0
+
+disable_globbing: false
+
+replaces:
+  - libfoundationdb
+
+provides:
+  - libfoundationdb
+  - libfdb_c.so()(64bit)
+
+# Files to include in the package
+contents:
+  - src: /app/libfdb_c.so
+    dst: /usr/lib64/libfdb_c.so
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal
+scripts:
+  postinstall: /app/resources/scripts/postinstall.sh

rpms/libfoundationdb/resources/scripts/postinstall.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+# Update the dynamic linker cache to include the new library
+ldconfig

rpms/nfpm/2.41.1/release

@@ -1 +0,0 @@
-1

rpms/nfpm/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/node_exporter/1.9.1/release

@@ -1 +0,0 @@
-1

rpms/node_exporter/Dockerfile

@@ -1,19 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/nomad-autoscaler/0.4.6/release

@@ -1 +0,0 @@
-1

rpms/nomad-autoscaler/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/nomad/1.10.1/release

@@ -1 +0,0 @@
-1

rpms/nomad/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/nzbget/25.0/release

@@ -1 +0,0 @@
-1

rpms/nzbget/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/nzbget_exporter/2025.08.03/release

@@ -1 +0,0 @@
-1

rpms/nzbget_exporter/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy nfpm.yaml from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/openbao-plugin-secret-consul/metadata.yaml

@@ -0,0 +1,9 @@
+name: openbao-plugin-secret-consul
+release: 1
+version: 0.1.0
+github: openbao/openbao-plugins
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/openbao-plugin-secret-consul/resources/build.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/bash
+
+# Download the required files
+curl -L -o /app/openbao-plugin-secrets-consul.tar.gz https://github.com/openbao/openbao-plugins/releases/download/secrets-consul-v${PACKAGE_VERSION}/openbao-plugin-secrets-consul_linux_amd64_v1.tar.gz
+
+# Extract the binary
+tar -xzf /app/openbao-plugin-secrets-consul.tar.gz -C /app
+
+# Rename the binary to a simpler name
+mv /app/openbao-plugin-secrets-consul_linux_amd64_v1 /app/openbao-plugin-secrets-consul
+
+# Make the binary executable
+chmod +x /app/openbao-plugin-secrets-consul
+
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/openbao-plugin-secret-consul/resources/nfpm.yaml

@@ -0,0 +1,35 @@
+# nfpm.yaml
+
+name: openbao-plugin-secret-consul
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "OpenBao secrets engine plugin for HashiCorp Consul"
+
+maintainer: OpenBao Community
+homepage: https://github.com/openbao/openbao-plugins
+license: MPL-2.0
+
+disable_globbing: false
+
+replaces:
+  - openbao-plugin-secret-consul
+
+provides:
+  - openbao-plugin-secret-consul
+
+# Files to include in the package
+contents:
+  - src: /app/openbao-plugin-secrets-consul
+    dst: /opt/openbao-plugins/openbao-plugin-secrets-consul
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal
+scripts:
+  preinstall: /app/resources/scripts/preinstall.sh

rpms/openbao-plugin-secret-consul/resources/scripts/preinstall.sh

@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+mkdir -p /opt/openbao-plugins

rpms/openbao-plugin-secret-nomad/metadata.yaml

@@ -0,0 +1,9 @@
+name: openbao-plugin-secret-nomad
+release: 1
+version: 0.1.4
+github: openbao/openbao-plugins
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/openbao-plugin-secret-nomad/resources/build.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/bash
+
+# Download the required files
+curl -L -o /app/openbao-plugin-secrets-nomad.tar.gz https://github.com/openbao/openbao-plugins/releases/download/secrets-nomad-v${PACKAGE_VERSION}/openbao-plugin-secrets-nomad_linux_amd64_v1.tar.gz
+
+# Extract the binary
+tar -xzf /app/openbao-plugin-secrets-nomad.tar.gz -C /app
+
+# Rename the binary to a simpler name
+mv /app/openbao-plugin-secrets-nomad_linux_amd64_v1 /app/openbao-plugin-secrets-nomad
+
+# Make the binary executable
+chmod +x /app/openbao-plugin-secrets-nomad
+
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/openbao-plugin-secret-nomad/resources/nfpm.yaml

@@ -0,0 +1,35 @@
+# nfpm.yaml
+
+name: openbao-plugin-secret-nomad
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "OpenBao secrets engine plugin for HashiCorp Nomad"
+
+maintainer: OpenBao Community
+homepage: https://github.com/openbao/openbao-plugins
+license: MPL-2.0
+
+disable_globbing: false
+
+replaces:
+  - openbao-plugin-secret-nomad
+
+provides:
+  - openbao-plugin-secret-nomad
+
+# Files to include in the package
+contents:
+  - src: /app/openbao-plugin-secrets-nomad
+    dst: /opt/openbao-plugins/openbao-plugin-secrets-nomad
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal
+scripts:
+  preinstall: /app/resources/scripts/preinstall.sh

rpms/openbao-plugin-secret-nomad/resources/scripts/preinstall.sh

@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+mkdir -p /opt/openbao-plugins

rpms/openbao-plugins/metadata.yaml

@@ -0,0 +1,9 @@
+name: openbao-plugins
+release: 1
+version: 1.0.0
+github: openbao/openbao-plugins
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/openbao-plugins/resources/build.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/bash
+
+# This is a meta package - no binaries to download
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/openbao-plugins/resources/nfpm.yaml

@@ -0,0 +1,30 @@
+# nfpm.yaml
+
+name: openbao-plugins
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "Meta package that installs all OpenBao plugins"
+
+maintainer: OpenBao Community
+homepage: https://github.com/openbao/openbao-plugins
+license: MPL-2.0
+
+disable_globbing: false
+
+replaces:
+  - openbao-plugins
+
+provides:
+  - openbao-plugins
+
+# Dependencies - this meta package pulls in all plugin packages
+depends:
+  - openbao-plugin-secret-consul
+  - openbao-plugin-secret-nomad
+
+# No actual files in this meta package
+contents: []

rpms/packer/1.13.1/release

@@ -1 +0,0 @@
-1

rpms/packer/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/pgbouncer_exporter/0.11.0/release

@@ -1 +0,0 @@
-1

rpms/pgbouncer_exporter/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/postgres_exporter/0.17.1/release

@@ -1 +0,0 @@
-1

rpms/postgres_exporter/Dockerfile

@@ -1,19 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/puppet-initial/1.0.3/release

@@ -1 +0,0 @@
-1

rpms/puppet-initial/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/puppetdb_exporter/1.1.0/release

@@ -1 +0,0 @@
-1

rpms/puppetdb_exporter/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy nfpm.yaml from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/ruff/0.8.1/release

@@ -1 +0,0 @@
-6

rpms/ruff/Dockerfile

@@ -1,18 +0,0 @@
-FROM git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-
-# Create output directory for RPMs
-RUN mkdir -p /app/dist
-
-# Set working directory
-WORKDIR /app
-
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
-ARG PACKAGE_VERSION
-ENV PACKAGE_VERSION=${PACKAGE_VERSION}
-
-# Copy resources from the context into the container
-COPY resources /app/resources
-
-# Default command to build RPMs
-CMD /app/resources/build.sh

rpms/stalwart-cli/metadata.yaml

@@ -0,0 +1,9 @@
+name: stalwart-cli
+release: 1
+version: 0.13.4
+github: stalwartlabs/stalwart
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/stalwart-cli/resources/build.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+
+# Download the required files
+curl -L -o /app/stalwart-cli.tar.gz https://github.com/stalwartlabs/stalwart/releases/download/v${PACKAGE_VERSION}/stalwart-cli-x86_64-unknown-linux-gnu.tar.gz
+
+# Extract the binary
+tar -xzf /app/stalwart-cli.tar.gz -C /app
+
+# Make the binary executable
+chmod +x /app/stalwart-cli
+
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/stalwart-cli/resources/nfpm.yaml

@@ -0,0 +1,31 @@
+# nfpm.yaml
+
+name: stalwart-cli
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "Stalwart CLI - Command line interface for Stalwart Mail Server"
+
+maintainer: Stalwart Labs
+homepage: https://stalw.art
+license: AGPL-3.0
+
+disable_globbing: false
+
+replaces:
+  - stalwart-cli
+
+provides:
+  - stalwart-cli
+
+# Files to include in the package
+contents:
+  - src: /app/stalwart-cli
+    dst: /usr/bin/stalwart-cli
+    file_info:
+      mode: 0755
+      owner: root
+      group: root

rpms/stalwart-foundationdb/metadata.yaml

@@ -0,0 +1,9 @@
+name: stalwart-foundationdb
+release: 1
+version: 0.13.4
+github: stalwartlabs/stalwart
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/stalwart-foundationdb/resources/build.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+
+# Download the required files
+curl -L -o /app/stalwart-foundationdb.tar.gz https://github.com/stalwartlabs/stalwart/releases/download/v${PACKAGE_VERSION}/stalwart-foundationdb-x86_64-unknown-linux-gnu.tar.gz
+
+# Extract the binary
+tar -xzf /app/stalwart-foundationdb.tar.gz -C /app
+
+# Make the binary executable
+chmod +x /app/stalwart-foundationdb
+
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/stalwart-foundationdb/resources/nfpm.yaml

@@ -0,0 +1,50 @@
+# nfpm.yaml
+
+name: stalwart-foundationdb
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "Stalwart Mail Server with FoundationDB support - A modern, secure JMAP, IMAP and SMTP mail server"
+
+maintainer: Stalwart Labs
+homepage: https://stalw.art
+license: AGPL-3.0
+
+disable_globbing: false
+
+replaces:
+  - stalwart-foundationdb
+
+provides:
+  - stalwart-foundationdb
+
+conflicts:
+  - stalwart
+
+depends:
+  - libfoundationdb
+
+# Files to include in the package
+contents:
+  - src: /app/stalwart-foundationdb
+    dst: /opt/stalwart/bin/stalwart-foundationdb
+    file_info:
+      mode: 0755
+      owner: stalwart
+      group: stalwart
+  - src: /app/resources/stalwart-foundationdb.service
+    dst: /usr/lib/systemd/system/stalwart-foundationdb.service
+    file_info:
+      mode: 0644
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal
+scripts:
+  preinstall: /app/resources/scripts/preinstall.sh
+  postinstall: /app/resources/scripts/postinstall.sh
+  preremove: /app/resources/scripts/preremove.sh
+  postremove: /app/resources/scripts/postremove.sh

rpms/stalwart-foundationdb/resources/scripts/postinstall.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+
+# Create default configuration if it doesn't exist
+if [ ! -f /opt/stalwart/etc/config.toml ]; then
+    cat > /opt/stalwart/etc/config.toml << 'EOF'
+# Stalwart Mail Server Configuration with FoundationDB
+# This is a minimal configuration file. Please customize according to your needs.
+# Full documentation: https://stalw.art/docs/
+
+[server]
+hostname = "localhost"
+
+[server.listener.smtp]
+bind = ["127.0.0.1:25"]
+protocol = "smtp"
+
+[server.listener.submission]
+bind = ["127.0.0.1:587"]
+protocol = "smtp"
+
+[server.listener.imap]
+bind = ["127.0.0.1:143"]
+protocol = "imap"
+
+[server.listener.http]
+bind = ["[::]:8080"]
+protocol = "http"
+
+[storage]
+data = "foundationdb"
+fts = "foundationdb"
+blob = "fs"
+lookup = "foundationdb"
+directory = "internal"
+
+[store."foundationdb"]
+type = "foundationdb"
+cluster = "/etc/foundationdb/fdb.cluster"
+
+[store."fs"]
+type = "fs"
+path = "/var/lib/stalwart/blobs"
+
+[directory."internal"]
+type = "internal"
+store = "foundationdb"
+
+[authentication.fallback-admin]
+user = "admin"
+secret = "$6$PAEtTGE/jbt9B/FQ$lYXn/whSh7rzegMdA6W8vuw2E/3IDFjpb0edXRqrl1d8i2KQF6Qm.ESmZ3j5jIHCTPSIH3JYBvIgvIbk9sH3p1"
+EOF
+
+    chown stalwart:stalwart /opt/stalwart/etc/config.toml
+    chmod 600 /opt/stalwart/etc/config.toml
+fi
+
+# Reload systemd
+systemctl daemon-reload

rpms/stalwart-foundationdb/resources/scripts/postremove.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# Reload systemd after service file removal
+systemctl daemon-reload
+
+# Note: We don't remove user data, logs, or configuration files
+# to preserve user data in case of reinstallation

rpms/stalwart-foundationdb/resources/scripts/preinstall.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+# Create stalwart user and group
+if ! getent group stalwart >/dev/null; then
+    groupadd -r stalwart
+fi
+
+if ! getent passwd stalwart >/dev/null; then
+    useradd -r -g stalwart -d /opt/stalwart -s /sbin/nologin -c "Stalwart Mail Server" stalwart
+fi
+
+# Create required directories
+mkdir -p /opt/stalwart/{bin,etc,data,logs}
+mkdir -p /var/lib/stalwart
+mkdir -p /var/log/stalwart
+
+# Set ownership
+chown -R stalwart:stalwart /opt/stalwart
+chown -R stalwart:stalwart /var/lib/stalwart
+chown -R stalwart:stalwart /var/log/stalwart

rpms/stalwart-foundationdb/resources/scripts/preremove.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# Stop and disable the service if it's running
+if systemctl is-enabled stalwart-foundationdb.service >/dev/null 2>&1; then
+    systemctl stop stalwart-foundationdb.service
+    systemctl disable stalwart-foundationdb.service
+fi

rpms/stalwart-foundationdb/resources/stalwart-foundationdb.service

@@ -0,0 +1,26 @@
+[Unit]
+Description=Stalwart Mail Server with FoundationDB
+After=network.target foundationdb.service
+Requires=foundationdb.service
+
+[Service]
+Type=simple
+User=stalwart
+Group=stalwart
+ExecStart=/opt/stalwart/bin/stalwart-foundationdb --config=/opt/stalwart/etc/config.toml
+Restart=always
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=stalwart-foundationdb
+
+# Security settings
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/stalwart /var/log/stalwart /opt/stalwart/data
+
+[Install]
+WantedBy=multi-user.target

rpms/stalwart/metadata.yaml

@@ -0,0 +1,9 @@
+name: stalwart
+release: 1
+version: 0.13.4
+github: stalwartlabs/stalwart
+build:
+- distro: el/8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+- distro: el/9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/stalwart/resources/build.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/bash
+
+# Download the required files
+curl -L -o /app/stalwart.tar.gz https://github.com/stalwartlabs/stalwart/releases/download/v${PACKAGE_VERSION}/stalwart-x86_64-unknown-linux-gnu.tar.gz
+
+# Extract the binary
+tar -xzf /app/stalwart.tar.gz -C /app
+
+# Make the binary executable
+chmod +x /app/stalwart
+
+# Build the RPM
+nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm

rpms/stalwart/resources/nfpm.yaml

@@ -0,0 +1,47 @@
+# nfpm.yaml
+
+name: stalwart
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: amd64
+platform: linux
+section: default
+priority: extra
+description: "Stalwart Mail Server - A modern, secure JMAP, IMAP and SMTP mail server"
+
+maintainer: Stalwart Labs
+homepage: https://stalw.art
+license: AGPL-3.0
+
+disable_globbing: false
+
+replaces:
+  - stalwart
+
+provides:
+  - stalwart
+
+conflicts:
+  - stalwart-foundationdb
+
+# Files to include in the package
+contents:
+  - src: /app/stalwart
+    dst: /opt/stalwart/bin/stalwart
+    file_info:
+      mode: 0755
+      owner: stalwart
+      group: stalwart
+  - src: /app/resources/stalwart.service
+    dst: /usr/lib/systemd/system/stalwart.service
+    file_info:
+      mode: 0644
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal
+scripts:
+  preinstall: /app/resources/scripts/preinstall.sh
+  postinstall: /app/resources/scripts/postinstall.sh
+  preremove: /app/resources/scripts/preremove.sh
+  postremove: /app/resources/scripts/postremove.sh

rpms/stalwart/resources/scripts/postinstall.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+
+# Create default configuration if it doesn't exist
+if [ ! -f /opt/stalwart/etc/config.toml ]; then
+    cat > /opt/stalwart/etc/config.toml << 'EOF'
+# Stalwart Mail Server Configuration
+# This is a minimal configuration file. Please customize according to your needs.
+# Full documentation: https://stalw.art/docs/
+
+[server]
+hostname = "localhost"
+
+[server.listener.smtp]
+bind = ["127.0.0.1:25"]
+protocol = "smtp"
+
+[server.listener.submission]
+bind = ["127.0.0.1:587"]
+protocol = "smtp"
+
+[server.listener.imap]
+bind = ["127.0.0.1:143"]
+protocol = "imap"
+
+[server.listener.http]
+bind = ["[::]:8080"]
+protocol = "http"
+
+[storage]
+data = "sqlite"
+fts = "sqlite"
+blob = "fs"
+lookup = "sqlite"
+directory = "internal"
+
+[store."sqlite"]
+type = "sqlite"
+path = "/var/lib/stalwart/stalwart.db"
+
+[store."fs"]
+type = "fs"
+path = "/var/lib/stalwart/blobs"
+
+[directory."internal"]
+type = "internal"
+store = "sqlite"
+
+[authentication.fallback-admin]
+user = "admin"
+secret = "$6$PAEtTGE/jbt9B/FQ$lYXn/whSh7rzegMdA6W8vuw2E/3IDFjpb0edXRqrl1d8i2KQF6Qm.ESmZ3j5jIHCTPSIH3JYBvIgvIbk9sH3p1"
+EOF
+
+    chown stalwart:stalwart /opt/stalwart/etc/config.toml
+    chmod 600 /opt/stalwart/etc/config.toml
+fi
+
+# Reload systemd
+systemctl daemon-reload

rpms/stalwart/resources/scripts/postremove.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# Reload systemd after service file removal
+systemctl daemon-reload
+
+# Note: We don't remove user data, logs, or configuration files
+# to preserve user data in case of reinstallation

rpms/stalwart/resources/scripts/preinstall.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+# Create stalwart user and group
+if ! getent group stalwart >/dev/null; then
+    groupadd -r stalwart
+fi
+
+if ! getent passwd stalwart >/dev/null; then
+    useradd -r -g stalwart -d /opt/stalwart -s /sbin/nologin -c "Stalwart Mail Server" stalwart
+fi
+
+# Create required directories
+mkdir -p /opt/stalwart/{bin,etc,data,logs}
+mkdir -p /var/lib/stalwart
+mkdir -p /var/log/stalwart
+
+# Set ownership
+chown -R stalwart:stalwart /opt/stalwart
+chown -R stalwart:stalwart /var/lib/stalwart
+chown -R stalwart:stalwart /var/log/stalwart

rpms/stalwart/resources/scripts/preremove.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# Stop and disable the service if it's running
+if systemctl is-enabled stalwart.service >/dev/null 2>&1; then
+    systemctl stop stalwart.service
+    systemctl disable stalwart.service
+fi

rpms/stalwart/resources/stalwart.service

@@ -0,0 +1,25 @@
+[Unit]
+Description=Stalwart Mail Server
+After=network.target
+
+[Service]
+Type=simple
+User=stalwart
+Group=stalwart
+ExecStart=/opt/stalwart/bin/stalwart --config=/opt/stalwart/etc/config.toml
+Restart=always
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=stalwart
+
+# Security settings
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/stalwart /var/log/stalwart /opt/stalwart/data
+
+[Install]
+WantedBy=multi-user.target

rpms/terraform/1.12.1/release

@@ -1 +0,0 @@
-1