# CoreFreq Akmod RPM Spec - NVIDIA-style approach
%global _debugsource_packages 0
%global _debuginfo_packages 0
%global debug_package %{nil}
%global _dracut_conf_d /usr/lib/dracut/dracut.conf.d
%global corefreq_version 2.0.8

Name:           corefreq
Version:        %{corefreq_version}
Release:        27%{?dist}
Summary:        CPU monitoring software with akmod kernel module

License:        GPL-2.0-only
URL:            https://github.com/cyring/CoreFreq
Source0:        %{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
Source1:        corefreqd.service
Source2:        Makefile.akmod
Source3:        corefreq-kmod.spec.in

# Akmod BuildRequires
BuildRequires:  kmodtool
BuildRequires:  akmods
BuildRequires:  gcc make rpm-build
BuildRequires:  systemd-rpm-macros
BuildRequires:  kernel-devel

# Runtime Requirements
Requires:       systemd
Suggests:       mokutil
Requires:       %{name}-kmod = %{?epoch:%{epoch}:}%{version}-%{release}
Requires:       %{name}-kmod-common = %{?epoch:%{epoch}:}%{version}-%{release}

# Generate akmod metadata
%{expand:%(kmodtool --target %{_target_cpu} --kmodname %{name} --pattern ".*" --akmod 2>/dev/null) }

%description
CoreFreq is a CPU monitoring software designed for 64-bit Processors.
This package provides the user-space tools and the akmod source for the
'corefreqk' kernel module with full automation including Secure Boot support.

IMPORTANT: After installation, a REBOOT is required for the kernel module
to be compiled and loaded automatically.

%package -n akmod-%{name}
Summary:        Akmod package for %{name} kernel module(s)
Requires:       kmodtool
Requires:       akmods
Provides:       %{name}-kmod = %{?epoch:%{epoch}:}%{version}-%{release}
Requires:       %{name}-kmod-common = %{?epoch:%{epoch}:}%{version}-%{release}

%description -n akmod-%{name}
This package provides the akmod package for the %{name} kernel modules.

%package kmod-common
Summary:        Common files for %{name} kernel module
Requires:       %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
Provides:       %{name}-kmod-common = %{?epoch:%{epoch}:}%{version}-%{release}

%description kmod-common
This package provides the common files for the %{name} kernel modules.

%prep
%autosetup -n CoreFreq-%{version} -p1
cp Makefile Makefile.orig
cp %{SOURCE2} Makefile

%build
make %{?_smp_mflags} userspace

%install
# --- Install userspace components ---
install -D -m 0755 build/corefreqd %{buildroot}%{_bindir}/corefreqd
install -D -m 0755 build/corefreq-cli %{buildroot}%{_bindir}/corefreq-cli
install -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/corefreqd.service

# --- Create and install the kmod SRPM for akmods ---
install -d %{buildroot}%{_usrsrc}/akmods/

SRPM_TOPDIR=$(mktemp -d)
mkdir -p "$SRPM_TOPDIR"/{SOURCES,SPECS}

sed -e 's|@COREFREQ_VERSION@|%{corefreq_version}|g' \
    -e 's|@RELEASE@|%{release}|g' \
    %{SOURCE3} > "$SRPM_TOPDIR"/SPECS/corefreq-kmod.spec

tar -czf "$SRPM_TOPDIR"/SOURCES/corefreq-kmod-%{version}.tar.gz \
    --transform "s|^CoreFreq-%{version}|corefreq-kmod-%{version}|" \
    -C %{_builddir} \
    CoreFreq-%{version}

rpmbuild -bs \
  --define "_topdir $SRPM_TOPDIR" \
  "$SRPM_TOPDIR"/SPECS/corefreq-kmod.spec

install -m 0644 "$SRPM_TOPDIR"/SRPMS/*.src.rpm %{buildroot}%{_usrsrc}/akmods/

SRPM_NAME=$(basename "$SRPM_TOPDIR"/SRPMS/*.src.rpm)
ln -s "$SRPM_NAME" %{buildroot}%{_usrsrc}/akmods/%{name}-kmod.latest

rm -rf "$SRPM_TOPDIR"

# --- Dracut configuration ---
install -d -m 0755 %{buildroot}%{_dracut_conf_d}
cat > %{buildroot}%{_dracut_conf_d}/99-corefreq.conf << EOF
# Do not include the corefreqk module in the initramfs.
omit_drivers+=" corefreqk "
EOF

%post
# === SMART MOK DETECTION ===
smart_mok_check() {
    local akmods_key="/etc/pki/akmods/certs/public_key.der"
    local secure_boot_enabled=false
    
    # Check if Secure Boot is enabled
    if [ -d /sys/firmware/efi/efivars ]; then
        if mokutil --sb-state 2>/dev/null | grep -q "SecureBoot enabled"; then
            secure_boot_enabled=true
        fi
    fi
    
    if [ "$secure_boot_enabled" = "false" ]; then
        return 0
    fi
    
    if [ ! -f "$akmods_key" ]; then
        return 1
    fi
    
    # Check if key is already enrolled
    if mokutil --list-enrolled 2>/dev/null | grep -q "CN=akmods" || \
       mokutil --test-key "$akmods_key" 2>&1 | grep -q "already enrolled\|SKIP.*already enrolled"; then
        return 0
    fi
    
    # Show enrollment instructions
    cat << 'EOF'

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔐 SECURE BOOT DETECTED - ACTION REQUIRED
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
To use CoreFreq with Secure Boot, enroll the MOK key:

  sudo mokutil --import /etc/pki/akmods/certs/public_key.der

Then reboot and follow the MOK Manager prompts.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

EOF
}

smart_mok_check

# Enable service (will start on next boot)
%systemd_post corefreqd.service
systemctl enable corefreqd.service >/dev/null 2>&1 || true

cat << 'EOF'

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ CoreFreq Installation Complete
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

⚠️  REBOOT REQUIRED

The kernel module will be compiled during the next boot.
After rebooting, CoreFreq will start automatically.

To use CoreFreq after reboot:
  corefreq-cli

To check service status:
  systemctl status corefreqd.service

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

EOF

%posttrans
# Rebuild initramfs for running kernel
/usr/bin/dracut --force --kver "$(uname -r)" >/dev/null 2>&1 || :

%preun
%systemd_preun corefreqd.service
if [ $1 -eq 0 ]; then
    echo "Removing CoreFreq..."
    /usr/bin/dracut --force --kver "$(uname -r)" >/dev/null 2>&1 || :
    systemctl stop corefreqd.service >/dev/null 2>&1 || true
    
    # Wait for service to stop
    for i in {1..5}; do
        if ! systemctl is-active --quiet corefreqd.service; then
            break
        fi
        sleep 1
    done
    
    # Unload module
    if lsmod | grep -q "^corefreqk\s"; then
        /sbin/modprobe -r corefreqk >/dev/null 2>&1 || true
    fi
fi

%postun
%systemd_postun_with_restart corefreqd.service

%post -n akmod-%{name}
# The akmods.service will automatically build the module on next boot.
# We just ensure the SRPM is in place and trigger a rebuild marker.

# Create a marker to ensure akmods processes this on next boot
touch /var/cache/akmods/%{name}-kmod-needs-build 2>/dev/null || true

echo ""
echo "Kernel module will be compiled automatically on next boot."
echo "The akmods.service handles this during system startup."
echo ""

%files
%license LICENSE
%doc README.md
%{_bindir}/corefreq-cli
%{_bindir}/corefreqd
%{_unitdir}/corefreqd.service
%{_dracut_conf_d}/99-corefreq.conf

%files -n akmod-%{name}
%{_usrsrc}/akmods/corefreq-kmod-%{version}-*.src.rpm
%{_usrsrc}/akmods/corefreq-kmod.latest

%files kmod-common
# Empty dependency anchor package

%changelog
* Sun Nov 09 2025 Package Maintainer <package@example.com> - 2.0.8-26
- Adopt NVIDIA-style approach: reboot required after installation
- Remove all attempts to start service immediately after install
- Simplified installation flow for better reliability
- Service will start automatically on next boot after module compilation