feat: migrate to woodpeckerci

- update build tool for kubernetes auth
- update build tool to build packages without docker (native + buildah)
- add woodpecker pre-commit and build jobs

.gitea/workflows/build.yaml

@@ -20,7 +20,7 @@ jobs:
         env:
           VAULT_ROLE_ID: ${{ secrets.RPMBUILDER_VAULT_ROLEID }}
         run: |
-          make all DISTRO=el/8
+          ./tools/build build-all --distro almalinux/el8
 
       - name: Show RPMs
         run: |
@@ -30,7 +30,7 @@ jobs:
         uses: actions/upload-artifact@v3
         with:
           name: rpms-8
-          path: /workspace/unkin/rpmbuilder/dist/*/*.rpm
+          path: /workspace/unkin/rpmbuilder/dist/*/*/*.rpm
 
   build-9:
     runs-on: almalinux-8
@@ -46,7 +46,7 @@ jobs:
         env:
           VAULT_ROLE_ID: ${{ secrets.RPMBUILDER_VAULT_ROLEID }}
         run: |
-          make all DISTRO=el/9
+          ./tools/build build-all --distro almalinux/el9
 
       - name: Show RPMs
         run: |
@@ -56,4 +56,4 @@ jobs:
         uses: actions/upload-artifact@v3
         with:
           name: rpms-9
-          path: /workspace/unkin/rpmbuilder/dist/*/*.rpm
+          path: /workspace/unkin/rpmbuilder/dist/*/*/*.rpm

.gitea/workflows/deploy.yaml

@@ -19,10 +19,10 @@ jobs:
 
       - name: Download Artifacts
         run: |
-          mkdir -p /workspace/unkin/rpmbuilder/dist/8
+          mkdir -p /workspace/unkin/rpmbuilder/dist/almalinux/el8
           export PREVIOUS_RUN_ID=$((GITHUB_RUN_NUMBER - 1))
           curl -L -o /workspace/rpms.zip "https://git.unkin.net/${GITHUB_REPOSITORY}/actions/runs/${PREVIOUS_RUN_ID}/artifacts/rpms-8"
-          unzip /workspace/rpms.zip -d /workspace/unkin/rpmbuilder/dist/8
+          unzip /workspace/rpms.zip -d /workspace/unkin/rpmbuilder/dist/almalinux/el8
 
       - name: Show RPMs
         run: |
@@ -32,7 +32,7 @@ jobs:
         env:
           DRONECI_PASSWORD: ${{ secrets.DRONECI_PASSWORD }}
         run: |
-          for rpm in $(find /workspace/unkin/rpmbuilder/dist/8 -type f -name "*.rpm"); do
+          for rpm in $(find /workspace/unkin/rpmbuilder/dist/almalinux/el8 -type f -name "*.rpm"); do
             curl --user droneci:${{ secrets.DRONECI_PASSWORD }} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/almalinux/el8/upload
           done
 
@@ -48,10 +48,10 @@ jobs:
 
       - name: Download Artifacts
         run: |
-          mkdir -p /workspace/unkin/rpmbuilder/dist/9
+          mkdir -p /workspace/unkin/rpmbuilder/dist/almalinux/el9
           export PREVIOUS_RUN_ID=$((GITHUB_RUN_NUMBER - 1))
           curl -L -o /workspace/rpms.zip "https://git.unkin.net/${GITHUB_REPOSITORY}/actions/runs/${PREVIOUS_RUN_ID}/artifacts/rpms-9"
-          unzip /workspace/rpms.zip -d /workspace/unkin/rpmbuilder/dist/9
+          unzip /workspace/rpms.zip -d /workspace/unkin/rpmbuilder/dist/almalinux/el9
 
       - name: Show RPMs
         run: |
@@ -61,6 +61,6 @@ jobs:
         env:
           DRONECI_PASSWORD: ${{ secrets.DRONECI_PASSWORD }}
         run: |
-          for rpm in $(find /workspace/unkin/rpmbuilder/dist/9 -type f -name "*.rpm"); do
+          for rpm in $(find /workspace/unkin/rpmbuilder/dist/almalinux/el9 -type f -name "*.rpm"); do
             curl --user droneci:${{ secrets.DRONECI_PASSWORD }} --upload-file $rpm https://git.unkin.net/api/packages/unkin/rpm/almalinux/el9/upload
           done

.gitignore

@@ -1,3 +1,4 @@
 dist
 env
 .claude
+.ruff_cache

.pre-commit-config.yaml

@@ -0,0 +1,28 @@
+---
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.5.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+        args: [--allow-multiple-documents]
+      - id: check-merge-conflict
+      - id: detect-private-key
+  - repo: https://github.com/adrienverge/yamllint.git
+    rev: v1.37.1
+    hooks:
+      - id: yamllint
+        args:
+          [
+            "-d {extends: relaxed, rules: {line-length: disable}}",
+            "-s",
+          ]
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.7
+    hooks:
+      # Run the linter.
+      - id: ruff-check
+        args: [--fix]
+      # Run the formatter.
+      - id: ruff-format

.woodpecker/build-almalinux8.yaml

@@ -0,0 +1,21 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /app/dist
+      - dnf install buildah -y
+      - ./tools/build build-all --distro almalinux/el8 --buildah
+    environment:
+      BUILDAH_ISOLATION: chroot
+    volumes:
+      - /dev/fuse:/dev/fuse
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+  - name: show rpms
+    image: git.unkin.net/unkin/almalinux8-base:latest
+    commands:
+      - find /app/dist -type f -name "*.rpm"

.woodpecker/build-almalinux9.yaml

@@ -0,0 +1,21 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: build rpms
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    commands:
+      - mkdir -p /app/dist/
+      - dnf install buildah -y
+      - ./tools/build build-all --distro almalinux/el9 --buildah
+    environment:
+      BUILDAH_ISOLATION: chroot
+    volumes:
+      - /dev/fuse:/dev/fuse
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+  - name: show rpms
+    image: git.unkin.net/unkin/almalinux9-base:latest
+    commands:
+      - find /app/dist -type f -name "*.rpm"

.woodpecker/pre-commit.yaml

@@ -0,0 +1,9 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: pre-commit
+    image: git.unkin.net/unkin/almalinux9-base:latest
+    commands:
+      - dnf install uv make -y
+      - uvx pre-commit run --all-files

Dockerfile

@@ -7,13 +7,28 @@ RUN mkdir -p /app/dist
 # Set working directory
 WORKDIR /app
 
-ARG PACKAGE_RELEASE
-ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
+# Accept all package metadata as build arguments and set as environment variables
+ARG PACKAGE_NAME
+ENV PACKAGE_NAME=${PACKAGE_NAME}
 ARG PACKAGE_VERSION
 ENV PACKAGE_VERSION=${PACKAGE_VERSION}
+ARG PACKAGE_RELEASE
+ENV PACKAGE_RELEASE=${PACKAGE_RELEASE}
+ARG PACKAGE_DESCRIPTION
+ENV PACKAGE_DESCRIPTION=${PACKAGE_DESCRIPTION}
+ARG PACKAGE_MAINTAINER
+ENV PACKAGE_MAINTAINER=${PACKAGE_MAINTAINER}
+ARG PACKAGE_HOMEPAGE
+ENV PACKAGE_HOMEPAGE=${PACKAGE_HOMEPAGE}
+ARG PACKAGE_LICENSE
+ENV PACKAGE_LICENSE=${PACKAGE_LICENSE}
+ARG PACKAGE_ARCH
+ENV PACKAGE_ARCH=${PACKAGE_ARCH}
+ARG PACKAGE_PLATFORM
+ENV PACKAGE_PLATFORM=${PACKAGE_PLATFORM}
 
 # Copy resources from the context into the container
 COPY resources /app/resources
 
 # Default command to build RPMs
-CMD /app/resources/build.sh
+CMD /app/resources/build.sh

Makefile

@@ -1,7 +1,11 @@
 # Variables
 ROOT_DIR := $(PWD)
 BUILD_TOOL := $(ROOT_DIR)/tools/build
-DISTRO ?= el/9  # Default to el/9 if not specified
+DISTRO ?= almalinux/el9
+
+# Authentication variables (optional)
+# VAULT_ROLE_ID - Use AppRole authentication if set
+# VAULT_ROLE - Kubernetes role for service account authentication (default: rpmbuilder)
 
 # Automatically find all packages with metadata.yaml
 PACKAGES := $(shell find $(ROOT_DIR)/rpms -mindepth 1 -maxdepth 1 -type d -exec test -f {}/metadata.yaml \; -print | xargs -n1 basename | sort)
@@ -20,33 +24,28 @@ list:
 # Build all packages using Python tool
 build-all:
 	@echo "Building all packages using Python tooling for distro $(DISTRO)..."
-	$(BUILD_TOOL) --all --distro $(DISTRO)
+	$(BUILD_TOOL) build-all --distro $(DISTRO)
+
+# Build all packages using native build (no Docker)
+build-all-native:
+	@echo "Building all packages natively (no Docker) for distro $(DISTRO)..."
+	$(BUILD_TOOL) build-all --distro $(DISTRO) --native
+
+# Build all packages using Buildah
+build-all-buildah:
+	@echo "Building all packages using Buildah for distro $(DISTRO)..."
+	$(BUILD_TOOL) build-all --distro $(DISTRO) --buildah
 
 # Build specific package using Python tool
 .PHONY: $(PACKAGES)
 $(PACKAGES):
 	@echo "Building package: $@ for distro $(DISTRO)"
-	$(BUILD_TOOL) --package $@ --distro $(DISTRO)
-
-# Build specific package with version/release override
-build:
-	@if [ -z "$(PACKAGE_NAME)" ]; then \
-		echo "Error: PACKAGE_NAME not specified"; \
-		echo "Usage: make build PACKAGE_NAME=package [PACKAGE_VERSION=version] [PACKAGE_RELEASE=release]"; \
-		exit 1; \
-	fi
-	@if [ -n "$(PACKAGE_VERSION)" ] && [ -n "$(PACKAGE_RELEASE)" ]; then \
-		echo "Building $(PACKAGE_NAME) with explicit version $(PACKAGE_VERSION)-$(PACKAGE_RELEASE) for distro $(DISTRO)"; \
-		$(BUILD_TOOL) --package $(PACKAGE_NAME) --version $(PACKAGE_VERSION) --release $(PACKAGE_RELEASE) --distro $(DISTRO); \
-	else \
-		echo "Building $(PACKAGE_NAME) using metadata.yaml for distro $(DISTRO)"; \
-		$(BUILD_TOOL) --package $(PACKAGE_NAME) --distro $(DISTRO); \
-	fi
+	$(BUILD_TOOL) build --distro $(DISTRO) $@
 
 # Dry run - show what would be built without building
 dry-run:
 	@echo "Dry run - showing what would be built for distro $(DISTRO):"
-	$(BUILD_TOOL) --all --distro $(DISTRO) --dry-run
+	$(BUILD_TOOL) build-all --distro $(DISTRO) --dry-run
 
 # Clean target
 clean:
@@ -62,24 +61,3 @@ update:
 update-%:
 	@echo "Checking for updates for package: $*"
 	$(ROOT_DIR)/tools/update-gh --package $*
-
-# Help target
-help:
-	@echo "Available targets:"
-	@echo "  all          - Build all packages (default)"
-	@echo "  list         - List all available packages"
-	@echo "  build-all    - Build all packages using Python tooling"
-	@echo "  <package>    - Build specific package (e.g., 'make consul')"
-	@echo "  build        - Build with explicit PACKAGE_NAME, PACKAGE_VERSION, PACKAGE_RELEASE"
-	@echo "  dry-run      - Show what would be built without building"
-	@echo "  clean        - Remove build artifacts"
-	@echo "  update       - Check all packages for GitHub release updates"
-	@echo "  update-<pkg> - Check specific package for GitHub release updates"
-	@echo "  help         - Show this help message"
-	@echo ""
-	@echo "Examples:"
-	@echo "  make consul                                    # Build consul using metadata.yaml"
-	@echo "  make build PACKAGE_NAME=consul                # Build consul using metadata.yaml"
-	@echo "  make build PACKAGE_NAME=consul PACKAGE_VERSION=1.21.1 PACKAGE_RELEASE=1"
-	@echo "  make update-consul                             # Check consul for GitHub updates"
-	@echo "  make dry-run                                   # Show what would be built"

rpms/act_runner/metadata.yaml

@@ -1,8 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 0.2.12
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 0.2.12
+description: A runner for Gitea based on act.
+github: unknown/act_runner
+homepage: https://gitea.com/gitea/act_runner
+license: MIT
+maintainer: Gitea
 name: act_runner
-release: 1
-version: 0.2.12
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+platform: linux

rpms/act_runner/resources/build.sh

@@ -1,3 +1,10 @@
 #!/usr/bin/bash
-curl --output act_runner-linux-amd64 https://dl.gitea.com/act_runner/${PACKAGE_VERSION}/act_runner-${PACKAGE_VERSION}-linux-amd64
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+
+set -e
+
+curl -L --output act_runner-linux-amd64 https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/gitea-dl/act_runner/${PACKAGE_VERSION}/act_runner-${PACKAGE_VERSION}-linux-amd64
+
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/act_runner/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: act_runner
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "A runner for Gitea based on act."
-maintainer: Gitea
-homepage: https://gitea.com/gitea/act_runner
-license: MIT
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/bind_exporter/metadata.yaml

@@ -1,8 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 0.8.0
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 0.8.0
+description: Prometheus exporter for BIND
+github: prometheus-community/bind_exporter
+homepage: https://github.com/prometheus-community/bind_exporter
+license: Apache-2.0 license
+maintainer: Prometheus
 name: bind_exporter
-release: 1
-version: 0.8.0
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+platform: linux

rpms/bind_exporter/resources/build.sh

@@ -1,6 +1,10 @@
 #!/usr/bin/bash
+set -e
 
 # Download the required files
-curl --output - -L https://github.com/prometheus-community/bind_exporter/releases/download/v${PACKAGE_VERSION}/bind_exporter-${PACKAGE_VERSION}.linux-amd64.tar.gz | tar --strip-components=1 -xzf -
+curl --output - -L https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/prometheus-community/bind_exporter/releases/download/v${PACKAGE_VERSION}/bind_exporter-${PACKAGE_VERSION}.linux-amd64.tar.gz | tar --strip-components=1 -xzf -
 
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/bind_exporter/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: bind_exporter
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Prometheus exporter for BIND"
-maintainer: Prometheus
-homepage: https://github.com/prometheus-community/bind_exporter
-license: Apache-2.0 license
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/boilerplate/metadata.yaml

@@ -1,9 +1,20 @@
 name: boilerplate
-release: 1
-version: 0.6.1
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: gruntwork-io/boilerplate
+description: Boilerplate is a tool for generating files and folders (boilerplate)
+  from a set of templates.
+arch: amd64
+platform: linux
+maintainer: Gruntwork
+homepage: https://github.com/gruntwork-io/boilerplate
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.10.1
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.10.1

rpms/boilerplate/resources/build.sh

@@ -1,7 +1,11 @@
 #!/usr/bin/bash
+set -e
 
 # Download the required files
-wget -O /app/boilerplate https://github.com/gruntwork-io/boilerplate/releases/download/v${PACKAGE_VERSION}/boilerplate_linux_amd64
+wget -O /app/boilerplate https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/gruntwork-io/boilerplate/releases/download/v${PACKAGE_VERSION}/boilerplate_linux_amd64
+
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
 
 # Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/boilerplate/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: boilerplate
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Boilerplate is a tool for generating files and folders (boilerplate) from a set of templates."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: Gruntwork
-homepage: https://github.com/gruntwork-io/boilerplate
-license: MIT
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/cni-plugins/metadata.yaml

@@ -1,9 +1,20 @@
 name: cni-plugins
-release: 1
-version: 1.7.1
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: containernetworking/plugins
+description: Some reference and example networking plugins, maintained by the CNI
+  team.
+arch: amd64
+platform: linux
+maintainer: ContainerNetworking
+homepage: https://github.com/containernetworking/plugins
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 1.9.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.9.0

rpms/cni-plugins/resources/build.sh

@@ -1,8 +1,12 @@
 #!/usr/bin/bash
+set -e
 
 # Download and extract cni-plugins
-wget -O /app/cni-plugins-linux-amd64.tgz https://github.com/containernetworking/plugins/releases/download/v${PACKAGE_VERSION}/cni-plugins-linux-amd64-v${PACKAGE_VERSION}.tgz
+wget -O /app/cni-plugins-linux-amd64.tgz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/containernetworking/plugins/releases/download/v${PACKAGE_VERSION}/cni-plugins-linux-amd64-v${PACKAGE_VERSION}.tgz
 tar xf cni-plugins-linux-amd64.tgz
 
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/cni-plugins/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: cni-plugins
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Some reference and example networking plugins, maintained by the CNI team."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: ContainerNetworking
-homepage: https://github.com/containernetworking/plugins
-license: Apache-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/consul-cni/metadata.yaml

@@ -1,8 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 1.7.1
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 1.7.1
+description: Plugin for Consul on Kubernetes to allow configuring traffic redirection rules without escalated container privileges.
+github: unknown/consul-cni
+homepage: https://hashicorp.com
+license: Mozilla Public License, version 2.0
+maintainer: Hashicorp
 name: consul-cni
-release: 1
-version: 1.7.1
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+platform: linux

rpms/consul-cni/resources/build.sh

@@ -1,11 +1,15 @@
 #!/usr/bin/bash
 
+set -e
+
 # Install dependencies
 dnf install -y unzip
 
 # Download and extract consul-cni
-curl -o /app/consul-cni.zip https://releases.hashicorp.com/consul-cni/${PACKAGE_VERSION}/consul-cni_${PACKAGE_VERSION}_linux_amd64.zip
+curl -L -o /app/consul-cni.zip https://releases.hashicorp.com/consul-cni/${PACKAGE_VERSION}/consul-cni_${PACKAGE_VERSION}_linux_amd64.zip
 unzip consul-cni.zip
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/consul-cni/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: consul-cni
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Plugin for Consul on Kubernetes to allow configuring traffic redirection rules without escalated container privileges."
-maintainer: Hashicorp
-homepage: https://hashicorp.com
-license: Mozilla Public License, version 2.0
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/consul/metadata.yaml

@@ -1,8 +1,20 @@
 name: consul
-release: 1
-version: 1.21.1
-build:
-- distro: el/8
+github: hashicorp/consul
+description: Consul is a distributed, highly available, and data center aware solution
+  to connect and configure applications across dynamic, distributed infrastructure.
+arch: amd64
+platform: linux
+maintainer: HashiCorp
+homepage: https://github.com/hashicorp/consul
+license: BUSL-1.1
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
+  release: 1
+  version: 1.22.2
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.22.2

rpms/consul/resources/build.sh

@@ -1,11 +1,16 @@
 #!/usr/bin/bash
 
+set -e
+
 # Install dependencies
 dnf install -y unzip
 
 # Download and extract consul
-curl -o /app/consul.zip https://releases.hashicorp.com/consul/${PACKAGE_VERSION}/consul_${PACKAGE_VERSION}_linux_amd64.zip
+curl -L -o /app/consul.zip https://releases.hashicorp.com/consul/${PACKAGE_VERSION}/consul_${PACKAGE_VERSION}_linux_amd64.zip
 unzip consul.zip
 
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/consul/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: consul
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: HashiCorp
-homepage: https://github.com/hashicorp/consul
-license: BUSL-1.1
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/etcd/metadata.yaml

@@ -1,9 +1,20 @@
 name: etcd
-release: 2
-version: 3.5.18
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: etcd-io/etcd
+description: A distributed, reliable key-value store for the most critical data of
+  a distributed system.
+arch: amd64
+platform: linux
+maintainer: https://etcd.io/
+homepage: https://etcd.io/
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 3.6.7
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 3.6.7

rpms/etcd/resources/build.sh

@@ -1,9 +1,13 @@
 #!/usr/bin/bash
+set -e
 
 # Download and extract etcd
-wget -O /app/etcd-v${PACKAGE_VERSION}-linux-amd64.tar.gz https://github.com/etcd-io/etcd/releases/download/v${PACKAGE_VERSION}/etcd-v${PACKAGE_VERSION}-linux-amd64.tar.gz
+wget -O /app/etcd-v${PACKAGE_VERSION}-linux-amd64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/etcd-io/etcd/releases/download/v${PACKAGE_VERSION}/etcd-v${PACKAGE_VERSION}-linux-amd64.tar.gz
 tar xf /app/etcd-v${PACKAGE_VERSION}-linux-amd64.tar.gz
 mv /app/etcd-v${PACKAGE_VERSION}-linux-amd64/* /app/
 
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/etcd/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: etcd
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "A distributed, reliable key-value store for the most critical data of a distributed system."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: https://etcd.io/
-homepage: https://etcd.io/
-license: Apache-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/exportarr/metadata.yaml

@@ -1,8 +1,20 @@
 name: exportarr
-release: 1
-version: 2.2.0
-build:
-- distro: el/8
+github: onedr0p/exportarr
+description: AIO Prometheus Exporter for Sabnzbd, Bazarr, Prowlarr, Lidarr, Readarr,
+  Radarr, and Sonarr
+arch: amd64
+platform: linux
+maintainer: onedr0p
+homepage: https://github.com/onedr0p/exportarr
+license: MIT license
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
+  release: 1
+  version: 2.3.0
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.3.0

rpms/exportarr/resources/build.sh

@@ -1,6 +1,10 @@
 #!/usr/bin/bash
+set -e
 
 # Download the required files
-curl --output - -L https://github.com/onedr0p/exportarr/releases/download/v${PACKAGE_VERSION}/exportarr_${PACKAGE_VERSION}_linux_amd64.tar.gz | tar --strip-components=1 -xzf -
+curl --output - -L https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/onedr0p/exportarr/releases/download/v${PACKAGE_VERSION}/exportarr_${PACKAGE_VERSION}_linux_amd64.tar.gz | tar --strip-components=1 -xzf -
 
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/exportarr/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: exportarr
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "AIO Prometheus Exporter for Sabnzbd, Bazarr, Prowlarr, Lidarr, Readarr, Radarr, and Sonarr"
-maintainer: onedr0p
-homepage: https://github.com/onedr0p/exportarr
-license: MIT license
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/frr_exporter/metadata.yaml

@@ -1,9 +1,19 @@
 name: frr_exporter
-release: 1
-version: 1.8.0
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: tynany/frr_exporter
+description: Prometheus exporter for Free Range Routing
+arch: amd64
+platform: linux
+maintainer: Prometheus
+homepage: https://github.com/tynany/frr_exporter
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 1.9.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.9.0

rpms/frr_exporter/resources/build.sh

@@ -1,3 +1,9 @@
 #!/usr/bin/bash
-curl --output - -L https://github.com/tynany/frr_exporter/releases/download/v${PACKAGE_VERSION}/frr_exporter-${PACKAGE_VERSION}.linux-amd64.tar.gz | tar --strip-components=1 -xzf -
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+set -e
+
+curl --output - -L https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/tynany/frr_exporter/releases/download/v${PACKAGE_VERSION}/frr_exporter-${PACKAGE_VERSION}.linux-amd64.tar.gz | tar --strip-components=1 -xzf -
+
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/frr_exporter/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: frr_exporter
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Prometheus exporter for Free Range Routing"
-maintainer: Prometheus
-homepage: https://github.com/tynany/frr_exporter
-license: MIT
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/g10k/metadata.yaml

@@ -1,9 +1,18 @@
-name: g10k
-release: 1
-version: 0.9.10
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 0.9.10
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 0.9.10
+description: An r10k fork written in Go, designed to work somwhat similar like puppetlabs/r10k.
 github: xorpaul/g10k
+homepage: https://github.com/xorpaul/g10k
+license: Apache2.0
+maintainer: xorpaul
+name: g10k
+platform: linux

rpms/g10k/resources/build.sh

@@ -1,10 +1,14 @@
 #!/usr/bin/bash
+set -e
 
 # Download and extract g10k
-wget -O /app/g10k.zip https://github.com/xorpaul/g10k/releases/download/v${PACKAGE_VERSION}/g10k-v${PACKAGE_VERSION}-linux-amd64.zip
+wget -O /app/g10k.zip https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/xorpaul/g10k/releases/download/v${PACKAGE_VERSION}/g10k-v${PACKAGE_VERSION}-linux-amd64.zip
 pushd /app
 unzip /app/g10k.zip
 popd
 
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/g10k/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: g10k
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "An r10k fork written in Go, designed to work somwhat similar like puppetlabs/r10k."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: xorpaul
-homepage: https://github.com/xorpaul/g10k
-license: Apache2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/helm/metadata.yaml

@@ -0,0 +1,19 @@
+name: helm
+github: helm/helm
+description: The Kubernetes Package Manager
+arch: amd64
+platform: linux
+maintainer: Helm Contributors
+homepage: https://github.com/helm/helm
+license: Apache-2.0 license
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 4.0.5
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 4.0.5

rpms/helm/resources/build.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/bash
+
+set -e
+
+# Download the required files
+curl -L -o /app/helm.tar.gz https://get.helm.sh/helm-v${PACKAGE_VERSION}-linux-amd64.tar.gz
+
+# Extract the binary
+cd /app
+tar -xzf helm.tar.gz
+
+# Make the binary executable
+chmod +x /app/linux-amd64/helm
+
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/helm/resources/nfpm.yaml

@@ -0,0 +1,39 @@
+---
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - helm
+
+provides:
+  - helm
+
+# Files to include in the package
+contents:
+  - src: /app/linux-amd64/helm
+    dst: /usr/bin/helm
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal (optional)
+# scripts:
+#   preinstall: ./scripts/preinstall.sh
+#   postinstall: ./scripts/postinstall.sh
+#   preremove: ./scripts/preremove.sh
+#   postremove: ./scripts/postremove.sh

rpms/helmfile/metadata.yaml

@@ -1,9 +1,21 @@
 name: helmfile
-release: 1
-version: 1.1.7
-build:
-- distro: el/8
+github: helmfile/helmfile
+description: A declarative spec for deploying Helm charts. It lets you keep a directory
+  of chart value files and maintain changes in version control; apply CI/CD to configuration
+  changes; and periodically sync to avoid skew in environments.
+arch: amd64
+platform: linux
+maintainer: Helmfile Contributors
+homepage: https://github.com/helmfile/helmfile
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
+  release: 1
+  version: 1.2.3
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-github: helmfile/helmfile
+  release: 1
+  version: 1.2.3

rpms/helmfile/resources/build.sh

@@ -1,7 +1,9 @@
 #!/usr/bin/bash
 
+set -e
+
 # Download the required files
-curl -L -o /app/helmfile.tar.gz https://github.com/helmfile/helmfile/releases/download/v${PACKAGE_VERSION}/helmfile_${PACKAGE_VERSION}_linux_amd64.tar.gz
+curl -L -o /app/helmfile.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/helmfile/helmfile/releases/download/v${PACKAGE_VERSION}/helmfile_${PACKAGE_VERSION}_linux_amd64.tar.gz
 
 # Extract the binary
 cd /app
@@ -10,5 +12,7 @@ tar -xzf helmfile.tar.gz
 # Make the binary executable
 chmod +x /app/helmfile
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/helmfile/resources/nfpm.yaml

@@ -1,17 +1,18 @@
+---
 # nfpm.yaml
 
-name: helmfile
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "A declarative spec for deploying Helm charts. It lets you keep a directory of chart value files and maintain changes in version control; apply CI/CD to configuration changes; and periodically sync to avoid skew in environments."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: Helmfile Contributors
-homepage: https://github.com/helmfile/helmfile
-license: MIT
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -35,4 +36,4 @@ contents:
 #   preinstall: ./scripts/preinstall.sh
 #   postinstall: ./scripts/postinstall.sh
 #   preremove: ./scripts/preremove.sh
-#   postremove: ./scripts/postremove.sh
+#   postremove: ./scripts/postremove.sh

rpms/incus/metadata.yaml

@@ -1,9 +1,14 @@
 name: incus
-release: 1
-version: 6.10.1
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: lxc/incus
+description: Powerful system container and virtual machine manager
+arch: amd64
+platform: linux
+maintainer: unkin
+homepage: https://linuxcontainers.org/incus/
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 6.20.0

rpms/incus/resources/build.sh

@@ -1,7 +1,9 @@
 #!/usr/bin/bash
 
+set -e
+
 # Install build dependencies
-dnf install -y \
+dnf makecache && dnf install -y \
       unzip \
       libtool \
       autoconf \
@@ -24,14 +26,14 @@ dnf install -y \
       bash-completion \
       gettext \
       help2man \
-      curl
+      curl-minimal
 
 # Download and extract incus source
-curl -o /app/incus.tar.gz https://github.com/lxc/incus/archive/refs/tags/v${PACKAGE_VERSION}.tar.gz
+curl -L -o /app/incus.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/lxc/incus/archive/refs/tags/v${PACKAGE_VERSION}.tar.gz
 tar -C /app -xf incus.tar.gz
 
 # Install specific Go version
-curl -O https://go.dev/dl/go1.24.1.linux-amd64.tar.gz
+curl -L -O https://go.dev/dl/go1.24.1.linux-amd64.tar.gz
 rm -rf /usr/local/go
 tar -C /usr/local -xzf go1.24.1.linux-amd64.tar.gz
 

rpms/incus/resources/nfpm_incus.yaml

@@ -92,7 +92,7 @@ contents:
 
 # Scripts to run during installation/removal (optional)
 scripts:
-  postinstall: ./scripts/postinstall.sh
-  preremove: ./scripts/preremove.sh
-  postremove: ./scripts/postremove.sh
-  preinstall: ./scripts/preinstall.sh
+  postinstall: ./resources/scripts/postinstall.sh
+  preremove: ./resources/scripts/preremove.sh
+  postremove: ./resources/scripts/postremove.sh
+  preinstall: ./resources/scripts/preinstall.sh

rpms/jellyfin-ffmpeg-bin/metadata.yaml

@@ -1,8 +1,19 @@
 name: jellyfin-ffmpeg-bin
-release: 3
-version: 7.1.1
-build:
-- distro: el/8
+github: jellyfin/jellyfin-ffmpeg
+description: FFmpeg binary package optimized for Jellyfin media server
+arch: amd64
+platform: linux
+maintainer: unkin
+homepage: https://github.com/jellyfin/jellyfin-ffmpeg
+license: GPL-3.0
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
+  release: 1.1
+  version: 7.1.3
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1.1
+  version: 7.1.3

rpms/jellyfin-ffmpeg-bin/resources/build.sh

@@ -3,12 +3,15 @@
 # Setup rpmbuild directory structure
 mkdir -p /root/rpmbuild/{BUILD,RPMS,SOURCES,SPECS,SRPMS}
 
+# Process the spec file template with environment variables
+envsubst < /app/resources/jellyfin-ffmpeg-bin.spec.template > /root/rpmbuild/SPECS/jellyfin-ffmpeg-bin.spec
+
 # Download source files using spectool
-spectool -g -R /app/resources/jellyfin-ffmpeg-bin_${PACKAGE_VERSION}.spec
+spectool -g -R /root/rpmbuild/SPECS/jellyfin-ffmpeg-bin.spec
 
 # Build the RPM
-rpmbuild -ba /app/resources/jellyfin-ffmpeg-bin_${PACKAGE_VERSION}.spec
+rpmbuild -ba /root/rpmbuild/SPECS/jellyfin-ffmpeg-bin.spec
 
 # Copy the built RPMs to output directory
-cp /root/rpmbuild/RPMS/x86_64/jellyfin-ffmpeg-bin-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.*.rpm /app/dist/
-cp /root/rpmbuild/SRPMS/jellyfin-ffmpeg-bin-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.*.rpm /app/dist
+cp /root/rpmbuild/RPMS/x86_64/jellyfin-ffmpeg-bin-*.rpm /app/dist/
+cp /root/rpmbuild/SRPMS/jellyfin-ffmpeg-bin-*.rpm /app/dist

rpms/jellyfin-ffmpeg-bin/resources/jellyfin-ffmpeg-bin.spec.template

@@ -1,20 +1,20 @@
 %global debug_package %{nil}
 %define _missing_build_ids_terminate_build 0
-%global jellyfin_release 3
+%global jellyfin_release 1
 
 
-Name:    jellyfin-ffmpeg-bin
-Version: 7.1.1
-Release: %{jellyfin_release}
+Name:    ${PACKAGE_NAME}
+Version: ${PACKAGE_VERSION}
+Release: ${PACKAGE_RELEASE}
 Summary: FFmpeg for Jellyfin with custom extensions and enhancements
 
 
 License: GPL-3.0-only
 URL:     https://github.com/jellyfin/jellyfin-ffmpeg
-Source0: https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v%{version}-%{jellyfin_release}/jellyfin-ffmpeg_%{version}-%{jellyfin_release}_portable_linux64-gpl.tar.xz
-Source1: https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v%{version}-%{jellyfin_release}/jellyfin-ffmpeg_%{version}-%{jellyfin_release}_portable_linuxarm64-gpl.tar.xz
-Source2: https://raw.githubusercontent.com/jellyfin/jellyfin-ffmpeg/v%{version}-%{jellyfin_release}/LICENSE.md
-Source3: https://raw.githubusercontent.com/jellyfin/jellyfin-ffmpeg/v%{version}-%{jellyfin_release}/README.md
+Source0: https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v${PACKAGE_VERSION}-1/jellyfin-ffmpeg_${PACKAGE_VERSION}-1_portable_linux64-gpl.tar.xz
+Source1: https://github.com/jellyfin/jellyfin-ffmpeg/releases/download/v${PACKAGE_VERSION}-1/jellyfin-ffmpeg_${PACKAGE_VERSION}-1_portable_linuxarm64-gpl.tar.xz
+Source2: https://raw.githubusercontent.com/jellyfin/jellyfin-ffmpeg/v${PACKAGE_VERSION}-1/LICENSE.md
+Source3: https://raw.githubusercontent.com/jellyfin/jellyfin-ffmpeg/v${PACKAGE_VERSION}-1/README.md
 
 
 ExclusiveArch: x86_64 aarch64

rpms/jellyfin-server/metadata.yaml

@@ -1,8 +1,13 @@
+---
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 10.10.7
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 10.10.7
+description: jellyfin-server package
+github: unknown/jellyfin-server
 name: jellyfin-server
-release: 1
-version: 10.10.7
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/jellyfin-server/resources/build.sh

@@ -18,4 +18,4 @@ rpmbuild -ba /app/resources/jellyfin-server_${PACKAGE_VERSION}.spec
 
 # Copy the built RPMs to output directory
 cp /root/rpmbuild/RPMS/x86_64/jellyfin-server-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm /app/dist/
-cp /root/rpmbuild/SRPMS/jellyfin-server-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.src.rpm /app/dist/
+cp /root/rpmbuild/SRPMS/jellyfin-server-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.src.rpm /app/dist/

rpms/jellyfin-web/metadata.yaml

@@ -1,8 +1,13 @@
+---
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 10.10.7
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 10.10.7
+description: jellyfin-web package
+github: unknown/jellyfin-web
 name: jellyfin-web
-release: 1
-version: 10.10.7
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest

rpms/jellyfin-web/resources/build.sh

@@ -15,4 +15,4 @@ rpmbuild -ba /app/resources/jellyfin-web_${PACKAGE_VERSION}.spec
 
 # Copy the built RPMs to output directory
 cp /root/rpmbuild/RPMS/noarch/jellyfin-web-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.noarch.rpm /app/dist/
-cp /root/rpmbuild/SRPMS/jellyfin-web-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.src.rpm /app/dist/
+cp /root/rpmbuild/SRPMS/jellyfin-web-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.src.rpm /app/dist/

rpms/jsonnet-language-server/metadata.yaml

@@ -1,9 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 0.16.0
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 0.16.0
+description: Jsonnet Language Server Protocol implementation for the Jsonnet templating language.
+github: grafana/jsonnet-language-server
+homepage: https://github.com/grafana/jsonnet-language-server
+license: Apache-2.0
+maintainer: Grafana Labs
 name: jsonnet-language-server
-release: 1
-version: 0.16.0
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-github: grafana/jsonnet-language-server
+platform: linux

rpms/jsonnet-language-server/resources/build.sh

@@ -1,10 +1,14 @@
 #!/usr/bin/bash
 
+set -e
+
 # Download the required files
-curl -L -o /app/jsonnet-language-server https://github.com/grafana/jsonnet-language-server/releases/download/v${PACKAGE_VERSION}/jsonnet-language-server_${PACKAGE_VERSION}_linux_amd64
+curl -L -o /app/jsonnet-language-server https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/grafana/jsonnet-language-server/releases/download/v${PACKAGE_VERSION}/jsonnet-language-server_${PACKAGE_VERSION}_linux_amd64
 
 # Make the binary executable
 chmod +x /app/jsonnet-language-server
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/jsonnet-language-server/resources/nfpm.yaml

@@ -1,17 +1,18 @@
+---
 # nfpm.yaml
 
-name: jsonnet-language-server
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Jsonnet Language Server Protocol implementation for the Jsonnet templating language."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: Grafana Labs
-homepage: https://github.com/grafana/jsonnet-language-server
-license: Apache-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -35,4 +36,4 @@ contents:
 #   preinstall: ./scripts/preinstall.sh
 #   postinstall: ./scripts/postinstall.sh
 #   preremove: ./scripts/preremove.sh
-#   postremove: ./scripts/postremove.sh
+#   postremove: ./scripts/postremove.sh

rpms/jsonnet-lint/metadata.yaml

@@ -1,9 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 0.21.0
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 0.21.0
+description: Linter for Jsonnet
+github: google/go-jsonnet
+homepage: https://github.com/google/go-jsonnet
+license: Apache-2.0
+maintainer: Google
 name: jsonnet-lint
-release: 1
-version: 0.21.0
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-github: google/go-jsonnet
+platform: linux

rpms/jsonnet-lint/resources/build.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/bash
+set -e
 
 # Install dependencies and Go 1.24
 dnf install -y wget git make
@@ -15,5 +16,8 @@ go version
 # Build jsonnet-lint binary
 GOBIN=/app go install github.com/google/go-jsonnet/cmd/jsonnet-lint@v${PACKAGE_VERSION}
 
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build RPM package
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/jsonnet-lint/resources/nfpm.yaml

@@ -1,16 +1,17 @@
+---
 # nfpm.yaml
 
-name: jsonnet-lint
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Linter for Jsonnet"
-maintainer: Google
-homepage: https://github.com/google/go-jsonnet
-license: Apache-2.0
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -27,4 +28,4 @@ contents:
     file_info:
       mode: 0755
       owner: root
-      group: root
+      group: root

rpms/jsonnet/metadata.yaml

@@ -1,9 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 0.21.0
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 0.21.0
+description: A data templating language
+github: google/go-jsonnet
+homepage: https://github.com/google/go-jsonnet
+license: Apache-2.0
+maintainer: Google
 name: jsonnet
-release: 1
-version: 0.21.0
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
-github: google/go-jsonnet
+platform: linux

rpms/jsonnet/resources/build.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/bash
+set -e
 
 # Install dependencies and Go 1.24
 dnf install -y wget git make
@@ -16,5 +17,8 @@ go version
 GOBIN=/app go install github.com/google/go-jsonnet/cmd/jsonnet@v${PACKAGE_VERSION}
 GOBIN=/app go install github.com/google/go-jsonnet/cmd/jsonnetfmt@v${PACKAGE_VERSION}
 
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build RPM package
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/jsonnet/resources/nfpm.yaml

@@ -1,16 +1,17 @@
+---
 # nfpm.yaml
 
-name: jsonnet
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "A data templating language"
-maintainer: Google
-homepage: https://github.com/google/go-jsonnet
-license: Apache-2.0
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -33,4 +34,4 @@ contents:
     file_info:
       mode: 0755
       owner: root
-      group: root
+      group: root

rpms/kubeconform/metadata.yaml

@@ -0,0 +1,19 @@
+name: kubeconform
+github: yannh/kubeconform
+description: A FAST Kubernetes manifests validator, with support for Custom Resources!
+arch: amd64
+platform: linux
+maintainer: Yann Hamon
+homepage: https://github.com/yannh/kubeconform
+license: Apache-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 0.7.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.7.0

rpms/kubeconform/resources/build.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/bash
+set -e
+
+# Download kubeconform binary
+wget -O /app/kubeconform-linux-amd64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/yannh/kubeconform/releases/download/v${PACKAGE_VERSION}/kubeconform-linux-amd64.tar.gz
+
+# Extract the binary
+tar -xzf /app/kubeconform-linux-amd64.tar.gz -C /app/
+
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+# Build the RPM
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/kubeconform/resources/nfpm.yaml

@@ -0,0 +1,39 @@
+---
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - kubeconform
+
+provides:
+  - kubeconform
+
+# Files to include in the package
+contents:
+  - src: /app/kubeconform
+    dst: /usr/bin/kubeconform
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal (optional)
+# scripts:
+#   preinstall: ./scripts/preinstall.sh
+#   postinstall: ./scripts/postinstall.sh
+#   preremove: ./scripts/preremove.sh
+#   postremove: ./scripts/postremove.sh

rpms/kustomize/metadata.yaml

@@ -0,0 +1,19 @@
+---
+name: kustomize
+github: kubernetes-sigs/kustomize
+description: Kubernetes native configuration management
+arch: amd64
+platform: linux
+maintainer: kubernetes-sigs
+homepage: https://github.com/kubernetes-sigs/kustomize
+license: Apache-2.0
+github_release_pattern: ^kustomize/v.*
+builds:
+  - repository: [almalinux/el8]
+    image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    version: 5.8.1
+  - repository: [almalinux/el9]
+    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    version: 5.8.1

rpms/kustomize/resources/build.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/bash
+set -e
+
+# Download kustomize binary
+wget -O /app/kustomize_v${PACKAGE_VERSION}_linux_amd64.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv${PACKAGE_VERSION}/kustomize_v${PACKAGE_VERSION}_linux_amd64.tar.gz
+
+# Extract the binary
+tar -xzf /app/kustomize_v${PACKAGE_VERSION}_linux_amd64.tar.gz -C /app/
+
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+# Build the RPM
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/kustomize/resources/nfpm.yaml

@@ -0,0 +1,39 @@
+---
+# nfpm.yaml
+
+name: ${PACKAGE_NAME}
+version: ${PACKAGE_VERSION}
+release: ${PACKAGE_RELEASE}
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
+section: default
+priority: extra
+description: "${PACKAGE_DESCRIPTION}"
+
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
+
+disable_globbing: false
+
+replaces:
+  - kustomize
+
+provides:
+  - kustomize
+
+# Files to include in the package
+contents:
+  - src: /app/kustomize
+    dst: /usr/bin/kustomize
+    file_info:
+      mode: 0755
+      owner: root
+      group: root
+
+# Scripts to run during installation/removal (optional)
+# scripts:
+#   preinstall: ./scripts/preinstall.sh
+#   postinstall: ./scripts/postinstall.sh
+#   preremove: ./scripts/preremove.sh
+#   postremove: ./scripts/postremove.sh

rpms/libfoundationdb/metadata.yaml

@@ -1,9 +1,18 @@
-name: libfoundationdb
-release: 1
-version: 7.3.71
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 7.3.71
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 7.3.71
+description: FoundationDB client library - Shared library for FoundationDB applications
 github: apple/foundationdb
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+homepage: https://github.com/apple/foundationdb
+license: Apache-2.0
+maintainer: FoundationDB Community
+name: libfoundationdb
+platform: linux

rpms/libfoundationdb/resources/build.sh

@@ -1,10 +1,14 @@
 #!/usr/bin/bash
 
+set -e
+
 # Download the required library
-curl -L -o /app/libfdb_c.so https://github.com/apple/foundationdb/releases/download/${PACKAGE_VERSION}/libfdb_c.x86_64.so
+curl -L -o /app/libfdb_c.so https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/apple/foundationdb/releases/download/${PACKAGE_VERSION}/libfdb_c.x86_64.so
 
 # Make the library readable
 chmod 755 /app/libfdb_c.so
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/libfoundationdb/resources/nfpm.yaml

@@ -1,17 +1,18 @@
+---
 # nfpm.yaml
 
-name: libfoundationdb
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "FoundationDB client library - Shared library for FoundationDB applications"
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: FoundationDB Community
-homepage: https://github.com/apple/foundationdb
-license: Apache-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -33,4 +34,4 @@ contents:
 
 # Scripts to run during installation/removal
 scripts:
-  postinstall: /app/resources/scripts/postinstall.sh
+  postinstall: /app/resources/scripts/postinstall.sh

rpms/libfoundationdb/resources/scripts/postinstall.sh

@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 
 # Update the dynamic linker cache to include the new library
-ldconfig
+ldconfig

rpms/nfpm/metadata.yaml

@@ -1,9 +1,20 @@
 name: nfpm
-release: 1
-version: 2.41.1
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: goreleaser/nfpm
+description: A zero dependencies, simple deb, rpm, apk, ipk, and arch linux packager
+  written in Go.
+arch: amd64
+platform: linux
+maintainer: GoReleaser
+homepage: https://nfpm.goreleaser.com/
+license: MIT
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 1
+  version: 2.44.1
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 2.44.1

rpms/nfpm/resources/build.sh

@@ -1,7 +1,14 @@
 #!/usr/bin/bash
+set -e
+
+# Set Go toolchain to support newer nfpm versions
+export GOTOOLCHAIN=go1.25.0
 
 # Compile nfpm binary using Go
 GOBIN=/app go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v${PACKAGE_VERSION}
 
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
 # Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/nfpm/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: nfpm
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "A zero dependencies, simple deb, rpm, apk, ipk, and arch linux packager written in Go."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: GoReleaser
-homepage: https://nfpm.goreleaser.com/
-license: MIT
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/node_exporter/metadata.yaml

@@ -1,8 +1,19 @@
 name: node_exporter
-release: 1
-version: 1.9.1
-build:
-- distro: el/8
+github: prometheus/node_exporter
+description: exporter for machine metrics
+arch: amd64
+platform: linux
+maintainer: Prometheus
+homepage: https://github.com/prometheus/node_exporter
+license: Apache-2.0 license
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
+  release: 1
+  version: 1.10.2
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 1.10.2

rpms/node_exporter/resources/build.sh

@@ -1,6 +1,11 @@
 #!/usr/bin/bash
 
-# Download the required files
-curl --output - -L https://github.com/prometheus/node_exporter/releases/download/v${PACKAGE_VERSION}/node_exporter-${PACKAGE_VERSION}.linux-amd64.tar.gz | tar --strip-components=1 -xzf -
+set -e
 
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Download the required files
+curl --output - -L https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/prometheus/node_exporter/releases/download/v${PACKAGE_VERSION}/node_exporter-${PACKAGE_VERSION}.linux-amd64.tar.gz | tar --strip-components=1 -xzf -
+
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/node_exporter/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: node_exporter
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "exporter for machine metrics"
-maintainer: Prometheus
-homepage: https://github.com/prometheus/node_exporter
-license: Apache-2.0 license
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/nomad-autoscaler/metadata.yaml

@@ -1,8 +1,21 @@
 name: nomad-autoscaler
-release: 1
-version: 0.4.6
-build:
-- distro: el/8
+github: hashicorp/nomad-autoscaler
+description: The Nomad Autoscaler is an autoscaling daemon for Nomad, architectured
+  around plug-ins to allow for easy extensibility in terms of supported metrics sources,
+  scaling targets and scaling algorithms.
+arch: amd64
+platform: linux
+maintainer: Hashicorp
+homepage: https://github.com/hashicorp/nomad-autoscaler
+license: Mozilla Public License, version 2.0
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
+  release: 1
+  version: 0.4.8
+- repository:
+  - almalinux/el9
   image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.4.8

rpms/nomad-autoscaler/resources/build.sh

@@ -1,11 +1,15 @@
 #!/usr/bin/bash
 
+set -e
+
 # Install dependencies
 dnf install -y unzip
 
 # Download and extract nomad-autoscaler
-curl -o /app/nomad-autoscaler.zip https://releases.hashicorp.com/nomad-autoscaler/${PACKAGE_VERSION}/nomad-autoscaler_${PACKAGE_VERSION}_linux_amd64.zip
+curl -L -o /app/nomad-autoscaler.zip https://releases.hashicorp.com/nomad-autoscaler/${PACKAGE_VERSION}/nomad-autoscaler_${PACKAGE_VERSION}_linux_amd64.zip
 unzip nomad-autoscaler.zip
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/nomad-autoscaler/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: nomad-autoscaler
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "The Nomad Autoscaler is an autoscaling daemon for Nomad, architectured around plug-ins to allow for easy extensibility in terms of supported metrics sources, scaling targets and scaling algorithms."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: Hashicorp
-homepage: https://github.com/hashicorp/nomad-autoscaler
-license: Mozilla Public License, version 2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/nomad/metadata.yaml

@@ -1,8 +1,18 @@
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 1.10.1
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 1.10.1
+description: A simple and flexible scheduler and orchestrator to deploy and manage containers and non-containerized applications across on-premises and clouds at scale.
+github: unknown/nomad
+homepage: https://www.nomadproject.io/
+license: BUSL-1.1
+maintainer: HashiCorp
 name: nomad
-release: 1
-version: 1.10.1
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+platform: linux

rpms/nomad/resources/build.sh

@@ -1,11 +1,15 @@
 #!/usr/bin/bash
 
+set -e
+
 # Install dependencies
 dnf install -y unzip
 
 # Download and extract nomad
-curl -o /app/nomad.zip https://releases.hashicorp.com/nomad/${PACKAGE_VERSION}/nomad_${PACKAGE_VERSION}_linux_amd64.zip
+curl -L -o /app/nomad.zip https://releases.hashicorp.com/nomad/${PACKAGE_VERSION}/nomad_${PACKAGE_VERSION}_linux_amd64.zip
 unzip nomad.zip
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/nomad/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: nomad
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "A simple and flexible scheduler and orchestrator to deploy and manage containers and non-containerized applications across on-premises and clouds at scale."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: HashiCorp
-homepage: https://www.nomadproject.io/
-license: BUSL-1.1
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/nzbget/metadata.yaml

@@ -1,9 +1,20 @@
 name: nzbget
-release: 1
-version: '25.0'
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
 github: nzbgetcom/nzbget
+description: NZBGet is a binary downloader, which downloads files from Usenet based-on
+  information given in nzb files.
+arch: amd64
+platform: linux
+maintainer: nzbgetcom
+homepage: https://github.com/nzbgetcom/nzbget
+license: GPL-2.0
+builds:
+- repository:
+  - almalinux/el8
+  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+  release: 2
+  version: '25.4'
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 2
+  version: '25.4'

rpms/nzbget/resources/build.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/bash
 
+set -e
+
 # Download the pre-built RPM from GitHub releases
-curl -o /app/dist/nzbget-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm \
-  https://github.com/nzbgetcom/nzbget/releases/download/v$PACKAGE_VERSION/nzbget-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm
+curl -L -o /app/dist/nzbget-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm \
+  https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/nzbgetcom/nzbget/releases/download/v$PACKAGE_VERSION/nzbget-${PACKAGE_VERSION}-${PACKAGE_RELEASE}.x86_64.rpm

rpms/nzbget/resources/nfpm.yaml

@@ -1,17 +1,17 @@
 # nfpm.yaml
 
-name: nzbget
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "NZBGet is a binary downloader, which downloads files from Usenet based-on information given in nzb files."
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: nzbgetcom
-homepage: https://github.com/nzbgetcom/nzbget
-license: GPL-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/nzbget_exporter/metadata.yaml

@@ -1,9 +1,18 @@
-name: nzbget_exporter
-release: 1
-version: 2025.08.03
+---
+arch: amd64
+builds:
+  - image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el8]
+    version: 2025.08.03
+  - image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+    release: '1'
+    repository: [almalinux/el9]
+    version: 2025.08.03
+description: Prometheus exporter for NZBGet
 github: frebib/nzbget-exporter
-build:
-- distro: el/8
-  image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+homepage: https://github.com/frebib/nzbget-exporter
+license: MIT
+maintainer: Prometheus
+name: nzbget_exporter
+platform: linux

rpms/nzbget_exporter/resources/build.sh

@@ -1,4 +1,6 @@
 #!/usr/bin/bash
+set -e
+
 cd /app
 git clone https://github.com/frebib/nzbget-exporter.git
 go install github.com/frebib/enumerx@latest
@@ -7,4 +9,8 @@ pushd /app/nzbget-exporter
 go generate
 go build -o ../nzbget_exporter
 popd
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+
+# Process nfpm.yaml with envsubst
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/nzbget_exporter/resources/nfpm.yaml

@@ -1,16 +1,16 @@
 # nfpm.yaml
 
-name: nzbget_exporter
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "Prometheus exporter for NZBGet"
-maintainer: Prometheus
-homepage: https://github.com/frebib/nzbget-exporter
-license: MIT
+description: "${PACKAGE_DESCRIPTION}"
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 

rpms/openbao-plugin-secret-consul/metadata.yaml

@@ -1,9 +1,20 @@
 name: openbao-plugin-secret-consul
-release: 1
-version: 0.1.0
 github: openbao/openbao-plugins
-build:
-- distro: el/8
+github_release_pattern: "^secrets-consul-v.*"
+description: OpenBao secrets engine plugin for HashiCorp Consul
+arch: amd64
+platform: linux
+maintainer: OpenBao Community
+homepage: https://github.com/openbao/openbao-plugins
+license: MPL-2.0
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.1.0
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.1.0

rpms/openbao-plugin-secret-consul/resources/build.sh

@@ -1,7 +1,9 @@
 #!/usr/bin/bash
 
+set -e
+
 # Download the required files
-curl -L -o /app/openbao-plugin-secrets-consul.tar.gz https://github.com/openbao/openbao-plugins/releases/download/secrets-consul-v${PACKAGE_VERSION}/openbao-plugin-secrets-consul_linux_amd64_v1.tar.gz
+curl -L -o /app/openbao-plugin-secrets-consul.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/openbao/openbao-plugins/releases/download/secrets-consul-v${PACKAGE_VERSION}/openbao-plugin-secrets-consul_linux_amd64_v1.tar.gz
 
 # Extract the binary
 tar -xzf /app/openbao-plugin-secrets-consul.tar.gz -C /app
@@ -12,5 +14,7 @@ mv /app/openbao-plugin-secrets-consul_linux_amd64_v1 /app/openbao-plugin-secrets
 # Make the binary executable
 chmod +x /app/openbao-plugin-secrets-consul
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/openbao-plugin-secret-consul/resources/nfpm.yaml

@@ -1,17 +1,18 @@
+---
 # nfpm.yaml
 
-name: openbao-plugin-secret-consul
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "OpenBao secrets engine plugin for HashiCorp Consul"
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: OpenBao Community
-homepage: https://github.com/openbao/openbao-plugins
-license: MPL-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -32,4 +33,4 @@ contents:
 
 # Scripts to run during installation/removal
 scripts:
-  preinstall: /app/resources/scripts/preinstall.sh
+  preinstall: /app/resources/scripts/preinstall.sh

rpms/openbao-plugin-secret-consul/resources/scripts/preinstall.sh

@@ -1,2 +1,2 @@
 #!/usr/bin/env bash
-mkdir -p /opt/openbao-plugins
+mkdir -p /opt/openbao-plugins

rpms/openbao-plugin-secret-nomad/metadata.yaml

@@ -1,9 +1,20 @@
 name: openbao-plugin-secret-nomad
-release: 1
-version: 0.1.4
 github: openbao/openbao-plugins
-build:
-- distro: el/8
+github_release_pattern: "^secrets-nomad-v.*"
+description: OpenBao secrets engine plugin for HashiCorp Nomad
+arch: amd64
+platform: linux
+maintainer: OpenBao Community
+homepage: https://github.com/openbao/openbao-plugins
+license: MPL-2.0
+builds:
+- repository:
+  - almalinux/el8
   image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
-- distro: el/9
-  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.1.5
+- repository:
+  - almalinux/el9
+  image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
+  release: 1
+  version: 0.1.5

rpms/openbao-plugin-secret-nomad/resources/build.sh

@@ -1,7 +1,9 @@
 #!/usr/bin/bash
 
+set -e
+
 # Download the required files
-curl -L -o /app/openbao-plugin-secrets-nomad.tar.gz https://github.com/openbao/openbao-plugins/releases/download/secrets-nomad-v${PACKAGE_VERSION}/openbao-plugin-secrets-nomad_linux_amd64_v1.tar.gz
+curl -L -o /app/openbao-plugin-secrets-nomad.tar.gz https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/openbao/openbao-plugins/releases/download/secrets-nomad-v${PACKAGE_VERSION}/openbao-plugin-secrets-nomad_linux_amd64_v1.tar.gz
 
 # Extract the binary
 tar -xzf /app/openbao-plugin-secrets-nomad.tar.gz -C /app
@@ -12,5 +14,7 @@ mv /app/openbao-plugin-secrets-nomad_linux_amd64_v1 /app/openbao-plugin-secrets-
 # Make the binary executable
 chmod +x /app/openbao-plugin-secrets-nomad
 
-# Build the RPM
-nfpm pkg --config /app/resources/nfpm.yaml --target /app/dist --packager rpm
+# Process the nfpm.yaml template with environment variables
+envsubst < /app/resources/nfpm.yaml > /app/nfpm.yaml
+
+nfpm pkg --config /app/nfpm.yaml --target /app/dist --packager rpm

rpms/openbao-plugin-secret-nomad/resources/nfpm.yaml

@@ -1,17 +1,18 @@
+---
 # nfpm.yaml
 
-name: openbao-plugin-secret-nomad
+name: ${PACKAGE_NAME}
 version: ${PACKAGE_VERSION}
 release: ${PACKAGE_RELEASE}
-arch: amd64
-platform: linux
+arch: ${PACKAGE_ARCH}
+platform: ${PACKAGE_PLATFORM}
 section: default
 priority: extra
-description: "OpenBao secrets engine plugin for HashiCorp Nomad"
+description: "${PACKAGE_DESCRIPTION}"
 
-maintainer: OpenBao Community
-homepage: https://github.com/openbao/openbao-plugins
-license: MPL-2.0
+maintainer: ${PACKAGE_MAINTAINER}
+homepage: ${PACKAGE_HOMEPAGE}
+license: ${PACKAGE_LICENSE}
 
 disable_globbing: false
 
@@ -32,4 +33,4 @@ contents:
 
 # Scripts to run during installation/removal
 scripts:
-  preinstall: /app/resources/scripts/preinstall.sh
+  preinstall: /app/resources/scripts/preinstall.sh

rpms/openbao-plugin-secret-nomad/resources/scripts/preinstall.sh

@@ -1,2 +1,2 @@
 #!/usr/bin/env bash
-mkdir -p /opt/openbao-plugins
+mkdir -p /opt/openbao-plugins