%global debug_package %{nil}
Name: uke-boot-integration
Version: 0.1.0
Release: 22%{?dist}
Summary: Uke image configuration and native boot integration
License: MIT
URL: https://github.com/MCC45TR/uke-linux-hardware-support/tree/main/uke-boot
Source0: %{name}-%{version}.tar.xz
ExclusiveArch: aarch64
BuildRequires: gcc-c++ make systemd-rpm-macros
BuildRequires: pkgconfig(libsystemd) pkgconfig(wayland-client) pkgconfig(wayland-server)
BuildRequires: openssl-devel
BuildRequires: pkgconfig(libdrm)
BuildRequires: jq
Requires: senemos-native-runtime(libstdc++)
Requires: kmod bash systemd NetworkManager openssh-server chrony
Requires: util-linux-core coreutils grep
Provides: uke-usb-gadget-ownership-api = 2
Provides: uke-usb-manual-cdc-api = 2

%description
Reviewed Uke partition-role, command-line and dracut input templates, with a
native read-only prerequisite inspection command. Templates require explicit
host-composer application; installation does not regenerate initramfs, select
a default boot entry, alter EFI variables or write Android partitions.
No UEFI firmware or proprietary firmware blob is included. Package success
does not establish RAM/UFS/firmware handoff or physical tablet boot.

%package -n uke-esp32-cdc
Summary: Native ESP32-S3 CDC journal forwarding for the Uke Core debug profile
Requires: %{name} = %{version}-%{release}
Requires: systemd senemos-native-runtime(libstdc++)
%description -n uke-esp32-cdc
Native raw-TTY configuration and real-root journal forwarding to an explicitly
configured ttyACM USB-host port. Core composition may apply the separate original
systemd debug-shell override for HID-driven VT2 commands and journal output.
Installation activates no service, gadget, boot entry or partition write.

%package -n uke-boot-recovery
Summary: Native Uke reboot commands and a three-minute startup recovery guard
Requires: %{name} = %{version}-%{release}
Requires: systemd systemd-udev
%description -n uke-boot-recovery
C++ recovery/bootloader commands and a native readiness observer. Installing
this optional development package enables the guard on subsequent boots and
provides local reboot aliases without replacing Fedora-owned executables.
The host composer must include its dracut module to cover initramfs stalls.
No Android, boot, EFI or partition data is written by package installation.

%package -n uke-cdc-debug
Summary: Explicit local USB serial development console for Uke
Requires: %{name} = %{version}-%{release}
Requires: bash systemd
%description -n uke-cdc-debug
Original Bash development console over the standard CDC ACM gadget. It requires
the explicit senemos.debug=cdc-acm kernel argument and manual service enablement.
The console grants local root access over USB. USB networking stays optional.

%package -n uke-wifi-factory
Summary: Read-only Uke factory WLAN identity for NetworkManager
Requires: systemd NetworkManager senemos-native-runtime(libstdc++)
%description -n uke-wifi-factory
Reads and validates each installation's factory WLAN address from its physical
read-only persist partition. Publishes a private runtime NetworkManager default
before network startup. No device address or factory record is redistributed.
The image must provide the protected persist mount and enable the service.

%package -n uke-kernel-update
Summary: Native checked installation of matched Uke stock-ABL kernel bundles
Requires: senemos-native-runtime(libstdc++) openssl-libs systemd rpm
%description -n uke-kernel-update
Validates an installed matched boot-v4 payload and module inventory before
updating only the physical boot_b partition. Retains the running kernel modules
and a synced backup, then verifies the complete partition after writing.
Automatic updates require explicit local enablement and compatible boot-bundle
RPMs. Installation alone does not activate partition writes or reboot.

%prep
%setup -q
%build
%{__cxx} %{optflags} -std=c++17 -ffile-prefix-map=$PWD=. src/boot-status.cpp -o uke-boot-status %{build_ldflags}
%{__cxx} %{optflags} -std=c++17 -Wall -Wextra -Werror -ffile-prefix-map=$PWD=. src/usb-port.cpp -o uke-usb-port $(pkg-config --cflags --libs libsystemd libdrm) %{build_ldflags}
%{__cxx} %{optflags} -std=c++17 -ffile-prefix-map=$PWD=. src/esp32-cdc.cpp -o uke-esp32-cdc %{build_ldflags}
%{__cxx} %{optflags} -std=c++17 -Wall -Wextra -Werror -ffile-prefix-map=$PWD=. src/wifi-factory.cpp -o uke-wifi-factory %{build_ldflags}
%{__cxx} %{optflags} -std=c++17 -Wall -Wextra -Werror -ffile-prefix-map=$PWD=. src/boot-guard.cpp -o uke-boot-guard $(pkg-config --cflags --libs libsystemd wayland-client) %{build_ldflags}
%{__cxx} %{optflags} -std=c++17 -Wall -Wextra -Werror -ffile-prefix-map=$PWD=. src/reboot.cpp -o uke-reboot $(pkg-config --cflags --libs libsystemd) %{build_ldflags}
%{__cxx} %{optflags} -std=c++20 -Wall -Wextra -Werror -ffile-prefix-map=$PWD=. src/kernel-update.cpp -o uke-kernel-update $(pkg-config --cflags --libs openssl libsystemd) %{build_ldflags}
%check
%{__cxx} -std=c++17 -O2 -Wall -Wextra -Werror tests/usb-port.cpp -o usb-port-contract
./usb-port-contract
bash tests/usb-inventory.sh
bash tests/usb-auto.sh
bash tests/usb-ownership.sh
%{__cxx} -std=c++17 -Wall -Wextra -Werror -O2 tests/wifi-factory.cpp -o wifi-factory-contract
./wifi-factory-contract
bash tests/startup-contract.sh
bash tests/startup-native.sh
%{__cxx} -std=c++20 -O2 -Wall -Wextra -Werror tests/kernel-update.cpp -o kernel-update-contract $(pkg-config --cflags --libs openssl libsystemd)
./kernel-update-contract
%install
install -Dm644 src/units/70-uke-chronyd-clock.conf %{buildroot}%{_unitdir}/chronyd.service.d/70-uke-clock.conf
install -Dm755 uke-boot-status %{buildroot}%{_bindir}/uke-boot-status
install -Dm755 uke-usb-port %{buildroot}%{_bindir}/uke-usb-port
install -Dm644 src/units/uke-usb-observer.service %{buildroot}%{_unitdir}/uke-usb-observer.service
install -Dm644 src/profiles/org.senemos.Uke.USB1.conf %{buildroot}%{_datadir}/dbus-1/system.d/org.senemos.Uke.USB1.conf
install -Dm755 uke-wifi-factory %{buildroot}%{_libexecdir}/senemos-uke/uke-wifi-factory
install -Dm644 src/units/uke-wifi-factory.service %{buildroot}%{_unitdir}/uke-wifi-factory.service
install -d %{buildroot}%{_datadir}/senemos/boot/uke
install -m644 src/profiles/* %{buildroot}%{_datadir}/senemos/boot/uke/
install -Dm644 src/units/uke-cdc-acm.service %{buildroot}%{_unitdir}/uke-cdc-acm.service
install -Dm644 src/units/uke-cdc-shell.service %{buildroot}%{_unitdir}/uke-cdc-shell.service
install -Dm755 src/uke-usb-network.sh %{buildroot}%{_libexecdir}/senemos-uke/uke-usb-network
install -Dm644 src/profiles/usb-sharing %{buildroot}%{_sysconfdir}/senemos/usb-sharing
install -Dm644 src/profiles/80-uke-usb.preset %{buildroot}%{_presetdir}/80-uke-usb.preset
install -Dm644 src/units/uke-usb-network.service %{buildroot}%{_unitdir}/uke-usb-network.service
install -Dm644 src/units/uke-usb-network-shell.service %{buildroot}%{_unitdir}/uke-usb-network-shell.service
install -Dm644 src/profiles/uke-coresight-bringup.conf %{buildroot}%{_prefix}/lib/modprobe.d/uke-coresight-bringup.conf
install -Dm755 uke-esp32-cdc %{buildroot}%{_libexecdir}/senemos-uke/uke-esp32-cdc
install -Dm644 src/units/uke-esp32-cdc-log.service %{buildroot}%{_unitdir}/uke-esp32-cdc-log.service
install -Dm755 uke-reboot %{buildroot}%{_bindir}/uke-reboot
install -Dm755 uke-kernel-update %{buildroot}%{_bindir}/uke-kernel-update
install -Dm644 src/profiles/kernel-update.conf %{buildroot}%{_sysconfdir}/senemos/kernel-update.conf
install -Dm755 uke-boot-guard %{buildroot}%{_libexecdir}/senemos-uke/uke-boot-guard
install -Dm644 src/units/uke-boot-guard.service %{buildroot}%{_unitdir}/uke-boot-guard.service
install -Dm644 src/profiles/uke-reboot.conf %{buildroot}%{_prefix}/lib/modules-load.d/uke-reboot.conf
install -Dm755 src/dracut/93uke-boot-guard/module-setup.sh %{buildroot}%{_prefix}/lib/dracut/modules.d/93uke-boot-guard/module-setup.sh
install -d %{buildroot}%{_unitdir}/sysinit.target.wants %{buildroot}/usr/local/{bin,sbin}
ln -s ../uke-boot-guard.service %{buildroot}%{_unitdir}/sysinit.target.wants/uke-boot-guard.service
ln -s ../../../usr/bin/uke-reboot %{buildroot}/usr/local/bin/reboot
ln -s ../../../usr/bin/uke-reboot %{buildroot}/usr/local/sbin/reboot
%files
%license LICENSE
%doc README.md
%doc docs/USB-TYPEC.md
%{_bindir}/uke-boot-status
%{_bindir}/uke-usb-port
%{_unitdir}/uke-usb-observer.service
%{_datadir}/dbus-1/system.d/org.senemos.Uke.USB1.conf
%{_unitdir}/chronyd.service.d/70-uke-clock.conf
%{_datadir}/senemos/boot/uke
%{_unitdir}/uke-cdc-acm.service
%{_libexecdir}/senemos-uke/uke-usb-network
%config(noreplace) %{_sysconfdir}/senemos/usb-sharing
%{_presetdir}/80-uke-usb.preset
%{_unitdir}/uke-usb-network.service
%{_unitdir}/uke-usb-network-shell.service
%{_prefix}/lib/modprobe.d/uke-coresight-bringup.conf

%files -n uke-esp32-cdc
%license LICENSE
%{_libexecdir}/senemos-uke/uke-esp32-cdc
%{_unitdir}/uke-esp32-cdc-log.service

%files -n uke-cdc-debug
%{_unitdir}/uke-cdc-shell.service

%files -n uke-wifi-factory
%license LICENSE
%{_libexecdir}/senemos-uke/uke-wifi-factory
%{_unitdir}/uke-wifi-factory.service

%files -n uke-kernel-update
%license LICENSE
%doc docs/KERNEL-UPDATES.md
%{_bindir}/uke-kernel-update
%dir %{_sysconfdir}/senemos
%config(noreplace) %{_sysconfdir}/senemos/kernel-update.conf

%files -n uke-boot-recovery
%license LICENSE
%{_bindir}/uke-reboot
/usr/local/bin/reboot
/usr/local/sbin/reboot
%{_libexecdir}/senemos-uke/uke-boot-guard
%{_unitdir}/uke-boot-guard.service
%{_unitdir}/sysinit.target.wants/uke-boot-guard.service
%{_prefix}/lib/modules-load.d/uke-reboot.conf
%{_prefix}/lib/dracut/modules.d/93uke-boot-guard

%changelog
* Mon Oct 19 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-21
- Use noatime and remount-ro error handling in the root filesystem template.
- Preserve normal ext4 journaling and administrator fstab ownership.

* Sun Oct 18 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-20
- Replace the CDC watcher with explicit one-shot manual API2 commands.
- Preserve device-role, attachment, inhibitor and gadget ownership guards.

* Sun Oct 18 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-19
- Default CDC to disabled and admit explicit manual opt-in on the full Type-C profile.

* Sun Oct 18 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-17
- Add a read-only USB-C class observer and independent role/power planning code.
- Serialize explicit debug gadget ownership and inhibit stale legacy fallback.
- Match configfs's mA descriptor with the configured 500 mA USB2 budget.
- Keep new protocol and hardware validation pending; installation activates no USB service.

* Sun Oct 18 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-16
- Restore saved drift-file time before chronyd readiness on Uke.

* Sat Oct 17 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-13
- Report detected GPU and display capabilities through the original fastfetch modules.

* Thu Oct 15 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-12
- Add a native matched-boot updater with module, root, partition, power and durable backup checks.
- Require explicit local enablement for matching boot-bundle transaction hooks.

* Wed Oct 14 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-11
- Read the local factory WLAN identity from protected persist before NetworkManager.
- Validate unicast records without shipping device-specific addresses.

* Wed Oct 14 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-10
- Package the opt-in serial development console without readline or TTY resets.

* Wed Oct 14 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-9
- Add native reboot routing and a three-minute initramfs/real-root readiness guard.
- Keep Fedora reboot executables and the stock Uke reboot-mode mapping intact.
* Wed Oct 14 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-8
- Recognize the reviewed 7.2.10 kernel while retaining the 7.2.9 fallback.
- Keep foreign and unreviewed kernel releases outside the identity check.
* Mon Oct 12 2026 Mürşit Can Cihan <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-7
- Avoid blocking readline and terminal resets on the development gadget shell.
- Preserve the bounded Uke identity and USB TTY prerequisite check.
* Sun Oct 11 2026 Mürşit Can Cihan <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-6
- Allow native boot helpers to coexist with original Fedora KDE dependencies.
- Keep the Core image's independent no-Python payload audit unchanged.
* Sun Oct 11 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-5
- Contain unqualified CoreSight autoload during initial stock-ABL bring-up.
- Add opt-in USB ACM/ECM units and explicit identity/image input templates.
- Accept the physical linux partition name in read-only root inspection.
* Tue Oct 06 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-4
- Accept the filesystem label used by dynamically sized Core images.
- Preserve rejection of a later foreign root command-line override.
* Mon Oct 05 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-3
- Add native ESP32-S3 USB-host journal forwarding and HID/VT2 Core inputs.
* Mon Oct 05 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-2
- Add native CDC prerequisite inspection and opt-in Core debug integration.
* Mon Oct 05 2026 Senemos Maintainers <75160848+MCC45TR@users.noreply.github.com> - 0.1.0-1
- Provide explicit image inputs and native read-only prerequisite inspection.