app-id: io.github.arn-c0de.GPGMeister
runtime: org.kde.Platform
runtime-version: "6.7"
sdk: org.kde.Sdk
command: gpgmeister
finish-args:
  - --share=ipc
  - --socket=wayland
  - --device=dri
  - --filesystem=xdg-config/gpg-meister
  - --filesystem=xdg-data/gpg-meister
  - --filesystem=xdg-state/gpg-meister
  # Read-only access to the system keyring so the first-launch wizard can import
  # from it. The app otherwise uses its own isolated keyring under xdg-data.
  # NOTE: ":ro" still exposes the *private* keyring files to the sandbox, even
  # though only public keys are imported. A future revision should narrow this
  # to portal-based file selection so private key material is never mounted.
  - --filesystem=~/.gnupg:ro
modules:
  - name: gnupg
    buildsystem: autotools
    sources:
      - type: archive
        url: https://gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.5.tar.bz2
        sha256: f68f7d75d06cb1635c336d34d844af97436c3f64ea14bcb7c869782f96f44277
    config-opts:
      - --disable-gpgsm
      - --disable-gpgtar
      - --disable-wks-tools
      - --with-pinentry-pgm=/bin/true

  - name: gpg-meister
    buildsystem: simple
    build-commands:
      - python3 scripts/build_translations.py
      - pip3 install --no-deps --prefix=/app .
      - install -Dm644 packaging/linux/io.github.arn-c0de.GPGMeister.desktop /app/share/applications/io.github.arn-c0de.GPGMeister.desktop
      - install -Dm644 packaging/linux/io.github.arn-c0de.GPGMeister.metainfo.xml /app/share/metainfo/io.github.arn-c0de.GPGMeister.metainfo.xml
      - install -Dm644 packaging/linux/io.github.arn-c0de.GPGMeister.svg /app/share/icons/hicolor/scalable/apps/io.github.arn-c0de.GPGMeister.svg
    sources:
      - type: dir
        path: ../../