Add RPM rebuild to CI

Signed-off-by: Jakub Jelen <[email protected]>

Author: Jakuje

.github/workflows/rpm.yml

@@ -0,0 +1,39 @@
+---
+name: RPM build
+
+on:
+  pull_request:
+    branches: ["main"]
+
+jobs:
+  rpmbuild:
+    name: Generate crate and run RPM Build
+    runs-on: ubuntu-22.04
+    container: fedora:rawhide
+    steps:
+      - name: Install Dependencies
+        run: |
+          dnf -y install rustc cargo-rpm-macros openssl-devel \
+              'crate(asn1/default)' 'crate(bimap/default)' \
+              'crate(bindgen/default)' 'crate(bitflags/default)' 'crate(cfg-if/default)' \
+              'crate(clap)' 'crate(clap/cargo)' 'crate(clap/derive)' 'crate(clap/help)' \
+              'crate(clap/std)' 'crate(clap/usage)' 'crate(constant_time_eq/default)' \
+              'crate(data-encoding/default)' 'crate(getrandom/default)' 'crate(hex/default)' \
+              'crate(itertools/default)' 'crate(libc/default)' 'crate(num-bigint/default)' \
+              'crate(num-integer/default)' 'crate(num-traits/default)' 'crate(once_cell/default)' \
+              'crate(paste/default)' 'crate(pkg-config/default)' 'crate(rusqlite/default)' \
+              'crate(serde/default)' 'crate(serde/derive)' 'crate(serde_json/default)' \
+              'crate(serial_test/default)' 'crate(toml)' 'crate(toml/display)' 'crate(toml/parse)' \
+              'crate(uuid/default)' 'crate(uuid/v4)'
+
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: RPM Build
+        run: |
+          cargo package --features=standard,dynamic,nssdb
+          mkdir -p rpmbuild/SOURCES
+          cp target/package/kryoptic-*.crate rpmbuild/SOURCES/
+          rpmbuild --define "_topdir $PWD/rpmbuild" -ba \
+              packaging/kryoptic.spec
+

packaging/kryoptic.spec

@@ -4,12 +4,8 @@
 # prevent library files from being installed
 %global cargo_install_lib 0
 
-%global commit b37f7ee15473f0b7c9546855136d8b5ec3db1750
-%global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global revision_date 20250225
-
 Name:           kryoptic
-Version:        0.1.0^%{revision_date}.git%{shortcommit}
+Version:        0.1.0
 Release:        %autorelease
 Summary:        PKCS #11 software token written in Rust
 
@@ -28,7 +24,7 @@ License: Apache-2.0 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (BSD
 # LICENSE.dependencies contains a full license breakdown
 
 URL:            https://github.com/latchset/kryoptic
-Source:         https://github.com/latchset/%{name}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
+Source:         https://github.com/latchset/%{name}/archive/%{commit}/%{name}-%{version}.crate
 
 BuildRequires:  cargo-rpm-macros >= 26
 BuildRequires:  openssl-devel
@@ -47,7 +43,7 @@ Supporting tools for kryoptic software token.
 Most notably a migration tool for the SoftHSM database.
 
 %prep
-%autosetup -n kryoptic-%{commit} -p1
+%autosetup -n kryoptic-%{version} -p1
 %cargo_prep
 
 %generate_buildrequires