Some initial packages for the spire-identity-exchange

examples/rpms/Dockerfile

@@ -21,6 +21,12 @@ RUN --mount=type=secret,id=gpg \
   rpmbuild -ba spire.spec && \
   spectool -g -R spire-controller-manager.spec && \
   rpmbuild -ba spire-controller-manager.spec && \
+  spectool -g -R spire-credentialcomposer-identity-exchange.spec && \
+  rpmbuild -ba spire-credentialcomposer-identity-exchange.spec && \
+  spectool -g -R spire-identity-exchange-server.spec && \
+  rpmbuild -ba spire-identity-exchange-server.spec && \
+  spectool -g -R spire-server-attestor-spiffe-workload-api.spec && \
+  rpmbuild -ba spire-server-attestor-spiffe-workload-api.spec && \
   spectool -g -R spiffe-helper.spec && \
   rpmbuild -ba spiffe-helper.spec && \
   spectool -g -R spiffe-step-ssh.spec && \

examples/rpms/spire-credentialcomposer-identity-exchange.spec

@@ -0,0 +1,53 @@
+##############################################################################
+#
+# To you, dear reader:
+#
+# If you are a normal user, we recommend not reading further. Its probably not
+# the file your looking for.
+#
+# If you are looking at using this file as a base for your own work, please
+# don't. It is a horrible example. Please look elsewhere.
+#
+# If you are a package maintainer, please read on. We recognize this spec file
+# is blasphemous, a terrible abomination, a crime against nature, and more. We
+# regret needing to produce it, but had to in order to attract enough users to
+# find you. We beseech thee, kind and generous package maintainer, please help
+# us mend our wicked ways by joining us and help us produce proper packaging.
+# You are our only hope.
+#
+##############################################################################
+
+%define ARCH %(echo %{_arch} | sed s/aarch64/arm64/)
+
+Summary:    SPIRE Credential Composer Identity Exchange
+Name:       spire-credentialcomposer-identity-exchange
+Version:    0.1.0
+Release:    1
+Group:      Applications/Internet
+License:    Apache-2.0
+URL:        https://spiffe.io
+Source0:    https://github.com/spiffe/spire-identity-exchange/releases/download/v%{version}/spire-credentialcomposer-identity-exchange_Linux_%{ARCH}.tar.gz
+
+%global __strip /bin/true
+
+%description
+SPIRE Credential Composer Identity Exchange
+
+%global _missing_build_ids_terminate_build 0
+%global debug_package %{nil}
+
+%prep
+
+%setup -c
+
+%build
+
+%install
+mkdir -p "%{buildroot}/usr/libexec/spire/plugins"
+cp -a spire-credentialcomposer-identity-exchange %{buildroot}/usr/libexec/spire/plugins/credentialcomposer-identity-exchange
+
+%clean
+rm -rf %{buildroot}
+
+%files
+/usr/libexec/spire/plugins/credentialcomposer-identity-exchange

examples/rpms/spire-identity-exchange-server.spec

@@ -0,0 +1,61 @@
+##############################################################################
+#
+# To you, dear reader:
+#
+# If you are a normal user, we recommend not reading further. Its probably not
+# the file your looking for.
+#
+# If you are looking at using this file as a base for your own work, please
+# don't. It is a horrible example. Please look elsewhere.
+#
+# If you are a package maintainer, please read on. We recognize this spec file
+# is blasphemous, a terrible abomination, a crime against nature, and more. We
+# regret needing to produce it, but had to in order to attract enough users to
+# find you. We beseech thee, kind and generous package maintainer, please help
+# us mend our wicked ways by joining us and help us produce proper packaging.
+# You are our only hope.
+#
+##############################################################################
+
+%define ARCH %(echo %{_arch} | sed s/aarch64/arm64/)
+
+Summary:    SPIRE Identity Exchange Server
+Name:       spire-identity-exchange-server
+Version:    0.1.0
+Release:    1
+Group:      Applications/Internet
+License:    Apache-2.0
+URL:        https://spiffe.io
+Source0:    https://github.com/spiffe/spire-identity-exchange/releases/download/v%{version}/spire-identity-exchange-server_Linux_%{ARCH}.tar.gz
+
+%global __strip /bin/true
+
+%description
+SPIRE Identity Exchange Server
+
+%global _missing_build_ids_terminate_build 0
+%global debug_package %{nil}
+
+%prep
+
+%setup -c
+
+%build
+
+%install
+mkdir -p "%{buildroot}/usr/bin"
+mkdir -p "%{buildroot}/usr/lib/systemd/system"
+mkdir -p "%{buildroot}/etc/spire/identity-exchange"
+cp -a spire-identity-exchange-server %{buildroot}/usr/bin/spire-identity-exchange-server
+cp -a systemd/spire-identity-exchange@.service %{buildroot}/usr/lib/systemd/system/spire-identity-exchange-server@.service
+cp -a config/* %{buildroot}/etc/spire/identity-exchange/
+
+%clean
+rm -rf %{buildroot}
+
+%files
+/usr/bin/spire-identity-exchange-server
+/usr/lib/systemd/system/spire-identity-exchange-server@.service
+%config(noreplace) /etc/spire/identity-exchange/default.conf
+%config(noreplace) /etc/spire/identity-exchange/default.env
+

examples/rpms/spire-server-attestor-spiffe-workload-api.spec

@@ -0,0 +1,57 @@
+##############################################################################
+#
+# To you, dear reader:
+#
+# If you are a normal user, we recommend not reading further. Its probably not
+# the file your looking for.
+#
+# If you are looking at using this file as a base for your own work, please
+# don't. It is a horrible example. Please look elsewhere.
+#
+# If you are a package maintainer, please read on. We recognize this spec file
+# is blasphemous, a terrible abomination, a crime against nature, and more. We
+# regret needing to produce it, but had to in order to attract enough users to
+# find you. We beseech thee, kind and generous package maintainer, please help
+# us mend our wicked ways by joining us and help us produce proper packaging.
+# You are our only hope.
+#
+##############################################################################
+
+%define ARCH %(echo %{_arch} | sed s/aarch64/arm64/)
+
+Summary:    SPIRE Server Attestor SPIFFE Workload API
+Name:       spire-server-attestor-spiffe-workload-api
+Version:    0.1.0
+Release:    1
+Group:      Applications/Internet
+License:    Apache-2.0
+URL:        https://spiffe.io
+Source0:    https://github.com/spiffe/spire-identity-exchange/releases/download/v%{version}/spire-server-attestor-spiffe-workload-api_Linux_%{ARCH}.tar.gz
+
+%global __strip /bin/true
+
+%description
+SPIRE Server Attestor SPIFFE Workload API
+
+%global _missing_build_ids_terminate_build 0
+%global debug_package %{nil}
+
+%prep
+
+%setup -c
+
+%build
+
+%install
+mkdir -p "%{buildroot}/usr/bin"
+mkdir -p "%{buildroot}/usr/lib/systemd/system"
+cp -a spire-server-attestor-spiffe-workload-api %{buildroot}/usr/bin/spire-server-attestor-spiffe-workload-api
+cp -a systemd/spire-server-attestor-spiffe-workload-api@.service %{buildroot}/usr/lib/systemd/system/spire-server-attestor-spiffe-workload-api@.service
+
+%clean
+rm -rf %{buildroot}
+
+%files
+/usr/bin/spire-server-attestor-spiffe-workload-api
+/usr/lib/systemd/system/spire-server-attestor-spiffe-workload-api@.service
+