efs-utils.yaml

package:
  name: efs-utils
  version: "2.3.0"
  epoch: 0
  description: Utilities for Amazon Elastic File System (EFS)
  copyright:
    - license: MIT
  dependencies:
    # Ref: https://github.com/aws/efs-utils/blob/master/amazon-efs-utils.spec#L49-L58
    runtime:
      - busybox
      - merged-sbin
      - nfs-utils
      - openssl
      - py${{vars.py-version}}-botocore
      - stunnel
      - systemd
      - util-linux
      - wolfi-baselayout

vars:
  # pick a version of python so we can add that version and boto as a dep.
  py-version: 3.13

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - cargo-auditable
      - make
      - openssl-dev
      - rust
      - wolfi-baselayout

pipeline:
  - uses: git-checkout
    with:
      repository: https://github.com/aws/efs-utils
      tag: v${{package.version}}
      expected-commit: 928325083135d5283a6a271589a88724d6d23b54

  - uses: patch
    with:
      patches: GHSA-857q-xmph-p2v5.patch

  - runs: |
      # This looks a little funny, but it aims to be easier to maintain, so we just
      # copy from the upstream `build-deb.sh` script the bits we need.
      # Ref: https://github.com/aws/efs-utils/blob/master/build-deb.sh
      cd src/proxy
      cargo auditable build --release
      cd ..
      cd ..
      export BUILD_ROOT="${{targets.destdir}}"
      mkdir -p ${BUILD_ROOT}

      echo 'Creating application directories'
      mkdir -p ${BUILD_ROOT}/etc/amazon/efs
      mkdir -p ${BUILD_ROOT}/etc/init/
      mkdir -p ${BUILD_ROOT}/etc/systemd/system
      mkdir -p ${BUILD_ROOT}/usr/bin
      mkdir -p ${BUILD_ROOT}/var/log/amazon/efs
      mkdir -p ${BUILD_ROOT}/usr/share/man/man8

      echo 'Copying application files'
      install -p -m 644 dist/amazon-efs-mount-watchdog.conf ${BUILD_ROOT}/etc/init
      install -p -m 644 dist/amazon-efs-mount-watchdog.service ${BUILD_ROOT}/etc/systemd/system
      install -p -m 444 dist/efs-utils.crt ${BUILD_ROOT}/etc/amazon/efs
      install -p -m 644 dist/efs-utils.conf ${BUILD_ROOT}/etc/amazon/efs
      install -p -m 755 src/mount_efs/__init__.py ${BUILD_ROOT}/usr/bin/mount.efs
      install -p -m 755 src/proxy/target/release/efs-proxy ${BUILD_ROOT}/usr/bin/efs-proxy
      install -p -m 755 src/watchdog/__init__.py ${BUILD_ROOT}/usr/bin/amazon-efs-mount-watchdog

  - name: edit shbang for python
    runs: |
      d=${{targets.destdir}}
      for p in $d/usr/bin/amazon-efs-mount-watchdog $d/usr/bin/mount.efs ; do
         sed -i -e '1s,^#!.*python3$,#!/usr/bin/python${{vars.py-version}},' "$p"
      done

update:
  enabled: true
  github:
    identifier: aws/efs-utils
    strip-prefix: v
    use-tag: true
    tag-filter: v

test:
  pipeline:
    - runs: |
        efs-proxy --help
    - name: test mount.efs
      uses: test/populated-etc-passwd
      with:
        content: |
          # uses pwd.getpwuid(os.getuid()) which needs existing user
          mount.efs --version
          mount.efs --help
          amazon-efs-mount-watchdog --version
          amazon-efs-mount-watchdog --help