Package vespa-crypto-cli-standalone as RPM subpackage

- Install fat JAR + standalone script via CMake
- Add vespa-crypto-cli-standalone subpackage; no Vespa dep, JRE only
- Allows running the crypto CLI without a Vespa install

Author: gjoranv

dist/vespa.spec

@@ -330,6 +330,24 @@ Requires: %{name}-base-libs = %{version}-%{release}
 
 Vespa - The open big data serving engine - devel package
 
+%package crypto-cli-standalone
+
+Summary: Vespa - standalone crypto CLI
+
+# Self-contained: the fat JAR bundles all provided-scope deps, so no Vespa install is required.
+# Mirrors the java requirement conditional in %package base, but pulls the headless runtime
+# instead of the full JDK since this is a runtime-only CLI.
+%if 0%{?amzn2023}
+Requires: java-17-amazon-corretto-headless
+%else
+Requires: java-%{_vespa_java_version}-openjdk-headless
+%endif
+
+%description crypto-cli-standalone
+
+The vespa-crypto-cli-standalone tool for key/secret operations (e.g. core dump
+resealing), runnable without a full Vespa installation.
+
 %prep
 %if 0%{?installdir:1}
 %if 0%{?source_base:1}
@@ -507,6 +525,7 @@ fi
 %dir %{_prefix}
 %{_prefix}/bin
 %exclude %{_prefix}/bin/vespa
+%exclude %{_prefix}/bin/vespa-crypto-cli-standalone
 %exclude %{_prefix}/bin/vespa-curl
 %exclude %{_prefix}/bin/vespa-destination
 %exclude %{_prefix}/bin/vespa-fbench
@@ -767,4 +786,15 @@ fi
 %{_prefix}/include
 %{_prefix}/share/cmake
 
+%files crypto-cli-standalone
+%if %{_defattr_is_vespa_vespa}
+%defattr(-,%{_vespa_user},%{_vespa_group},-)
+%endif
+%dir %{_prefix}
+%dir %{_prefix}/bin
+%{_prefix}/bin/vespa-crypto-cli-standalone
+%dir %{_prefix}/lib
+%dir %{_prefix}/lib/jars
+%{_prefix}/lib/jars/vespaclient-java-fat-with-provided.jar
+
 %changelog

vespaclient-java/CMakeLists.txt

@@ -1,7 +1,10 @@
 # Copyright Vespa.ai. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
 install_jar(vespaclient-java-jar-with-dependencies.jar)
+# Fat JAR bundling provided-scope deps, for the standalone crypto CLI (no Vespa install required)
+install_jar(vespaclient-java-fat-with-provided.jar)
 
 vespa_install_script(src/main/sh/vespa-crypto-cli.sh vespa-crypto-cli bin)
+vespa_install_script(src/main/sh/vespa-crypto-cli-standalone.sh vespa-crypto-cli-standalone bin)
 vespa_install_script(src/main/sh/vespa-stat.sh vespa-stat bin)
 vespa_install_script(src/main/sh/vespa-query-profile-dump-tool.sh vespa-query-profile-dump-tool bin)
 vespa_install_script(src/main/sh/vespa-summary-benchmark.sh vespa-summary-benchmark bin)