[ABLD-268] Start folding openscap dependencies into a unified build.

deps/BUILD.bazel

@@ -24,6 +24,7 @@ filegroup(
             "@gcrypt",
             "@gpg-error",
             "@libpcap//:pcap",
+            "@libselinux//:selinux",
             "@libsepol//:sepol",
             "@libxml2",
             "@libxslt",

deps/libselinux.BUILD.bazel

@@ -1,16 +1,44 @@
+load("@@//compliance/rules:purl.bzl", "purl_for_generic")
 load("@bazel_skylib//rules:expand_template.bzl", "expand_template")
+load("@package_metadata//rules:package_metadata.bzl", "package_metadata")
 load("@rules_cc//cc:defs.bzl", "cc_library")
+load("@rules_license//rules:license.bzl", "license")
 load("@rules_pkg//pkg:install.bzl", "pkg_install")
 load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
+package(
+    default_package_metadata = [":package_metadata"],
+    default_visibility = ["@@//packages:__subpackages__", "@@//deps:__pkg__"],
+)
+
+VERSION = "3.5"
+
+package_metadata(
+    name = "package_metadata",
+    attributes = [
+        ":license",
+    ],
+    purl = purl_for_generic(
+        package = "attr",
+        version = VERSION,
+        download_url = "https://github.com/SELinuxProject/selinux/releases/download/{version}/libselinux-{version}.tar.gz",
+    ),
+)
+
+license(
+    name = "license",
+    license_kinds = ["@rules_license//licenses/generic:unencumbered"],
+    license_text = "LICENSE",
+    visibility = ["//visibility:public"],
+)
+
 cc_library(
     name = "libselinux",
     hdrs = glob(["include/selinux/*.h"]),
-    srcs = glob(["src/*.c", "src/*.h"], exclude=[
+    srcs = glob(["src/*.c", "src/*.h"], exclude = [
         "src/audit2why.c",
         "src/label_backends_android.c",
-    ])
-    ,
+    ]),
     deps = [
         "@libsepol//:libsepol",
         "@pcre2//:pcre2",

deps/libsepol.BUILD.bazel

@@ -1,17 +1,37 @@
+load("@@//compliance/rules:purl.bzl", "purl_for_generic")
+load("@@//compliance/rules:ship_source_offer.bzl", "ship_source_offer")
 load("@bazel_skylib//rules:expand_template.bzl", "expand_template")
+load("@package_metadata//rules:package_metadata.bzl", "package_metadata")
 load("@rules_cc//cc:defs.bzl", "cc_library")
 load("@rules_license//rules:license.bzl", "license")
 load("@rules_pkg//pkg:install.bzl", "pkg_install")
 load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
+package(default_package_metadata = [":package_metadata", ":ship_source_offer"])
+
+VERSION = "3.5"
+
+package_metadata(
+    name = "package_metadata",
+    attributes = [
+        ":license",
+        ":ship_source_offer",
+    ],
+    purl = purl_for_generic(
+        package = "libsepol",
+        version = VERSION,
+        download_url = "https://github.com/SELinuxProject/selinux/releases/download/{version}/libsepol-{version}.tar.gz",
+    ),
+)
+
 license(
     name = "license",
     license_kinds = ["@rules_license//licenses/spdx:LGPL-2.1"],
     license_text = "LICENSE",
     visibility = ["//visibility:public"],
 )
 
-VERSION = "3.5"
+ship_source_offer(name = "ship_source_offer")
 
 genrule(
     name = "cil_lexer_src",

deps/pcre2.BUILD.bazel

@@ -1,12 +1,42 @@
 load("@@//bazel/rules:so_symlink.bzl", "so_symlink")
+load("@@//compliance/rules:purl.bzl", "purl_for_generic")
 load("@bazel_skylib//rules:copy_file.bzl", "copy_file")
 load("@bazel_skylib//rules:expand_template.bzl", "expand_template")
 load("@bazel_skylib//rules:native_binary.bzl", "native_test")
+load("@package_metadata//licenses/rules:license.bzl", "license")
+load("@package_metadata//rules:package_metadata.bzl", "package_metadata")
 load("@rules_cc//cc:defs.bzl", "cc_binary", "cc_library")
 load("@rules_pkg//pkg:install.bzl", "pkg_install")
 load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
-package(default_visibility = ["//packages:__subpackages__"])
+package(
+    default_package_metadata = [":package_metadata"],
+    default_visibility = ["@@//packages:__subpackages__", "@@//deps:__pkg__"],
+)
+
+VERSION = "10.46"
+
+package_metadata(
+    name = "package_metadata",
+    attributes = [
+        ":license",
+    ],
+    purl = purl_for_generic(
+        package = "libsepol",
+        version = VERSION,
+        # It is OK to point to the download URL where you retrieved the file, rather than the
+        # canonical upstream version. It might even be preferable. PURLs are pretty much an
+        # instance of https://xkcd.com/927.
+        download_url = "https://dd-agent-omnibus.s3.amazonaws.com/bazel/pcre2-{version}.tar.bz2",
+    ),
+)
+
+license(
+    name = "license",
+    kind = "@rules_license//licenses/spdx:BSD-3-Clause",
+    text = "LICENCE.md",
+    visibility = ["//visibility:public"],
+)
 
 copy_file(
     name = "config_h_generic",
@@ -186,7 +216,7 @@ expand_template(
         "@exec_prefix@": "${prefix}",
         "@libdir@": "${prefix}/lib",
         "@includedir@": "${prefix}/include",
-        "@PACKAGE_VERSION@": "10.46",
+        "@PACKAGE_VERSION@": VERSION,
         "@LIB_POSTFIX@": "",
         "@PTHREAD_CFLAGS@": "",
         "@PTHREAD_LIBS@": "",
@@ -203,7 +233,7 @@ expand_template(
         "@exec_prefix@": "${prefix}",
         "@libdir@": "${prefix}/lib",
         "@includedir@": "${prefix}/include",
-        "@PACKAGE_VERSION@": "10.46",
+        "@PACKAGE_VERSION@": VERSION,
         "@LIB_POSTFIX@": "",
         "@PTHREAD_CFLAGS@": "",
         "@PTHREAD_LIBS@": "",

omnibus/config/software/openscap.rb

@@ -20,18 +20,31 @@
   command_on_repo_root "bazelisk run -- //bazel/rules:replace_prefix --prefix '#{install_dir}/embedded'" \
     " #{install_dir}/embedded/lib/pkgconfig/libacl.pc" \
     " #{install_dir}/embedded/lib/libacl.so"
+
+  command_on_repo_root "bazelisk run -- @libselinux//:install --destdir='#{install_dir}/embedded'"
+  command_on_repo_root "bazelisk run -- //bazel/rules:replace_prefix --prefix '#{install_dir}/embedded'" \
+    " #{install_dir}/embedded/lib/pkgconfig/libselinux.pc" \
+    " #{install_dir}/embedded/lib/libselinux.so"
+
+  command_on_repo_root "bazelisk run -- @libsepol//:install --destdir='#{install_dir}/embedded'"
+  command_on_repo_root "bazelisk run -- //bazel/rules:replace_prefix --prefix '#{install_dir}/embedded'" \
+    " #{install_dir}/embedded/lib/pkgconfig/libsepol.pc" \
+    " #{install_dir}/embedded/lib/libsepol.so"
+
+  command_on_repo_root "bazelisk run -- @pcre2//:install --destdir=#{install_dir}/embedded"
+  command_on_repo_root "bazelisk run -- //bazel/rules:replace_prefix " \
+    "--prefix #{install_dir}/embedded " \
+    "#{install_dir}/embedded/lib/pkgconfig/libpcre2*.pc " \
+    "#{install_dir}/embedded/lib/libpcre2*.so"
 end
 
 dependency 'attr'
 dependency 'bzip2'
 dependency 'curl'
 dependency 'dbus'
 dependency 'libgcrypt'
-dependency 'libselinux'
-dependency 'libsepol'
 dependency 'libxslt'
 dependency 'libyaml'
-dependency 'pcre2'
 dependency 'popt'
 dependency 'rpm'
 dependency 'util-linux'

omnibus/config/software/rpm.rb

@@ -22,6 +22,7 @@
 skip_transitive_dependency_licensing true
 
 dependency "config_guess"
+dependency "popt"
 dependency "zstd"
 dependency "libsqlite3"
 dependency "lua"