figsoda 2023-03-20 11:14:30 -04:00
parent 8501a1645a
commit 5a35e7ea4a

View file

@ -3,31 +3,35 @@
, fetchFromGitHub
, bubblewrap
, nix-output-monitor
, cacert
, git
, nix
, withSandboxSupport ? false
, withNom ? false
}:
python3.pkgs.buildPythonApplication rec {
pname = "nixpkgs-review";
version = "2.8.0";
version = "2.9.0";
src = fetchFromGitHub {
owner = "Mic92";
repo = "nixpkgs-review";
rev = version;
sha256 = "sha256-v8IRRmONb10sPndfsuaUYMrGbbosj48cbfgANZCtIN0=";
sha256 = "sha256-SNAroKkPXiX5baGPRYnzqiVwPwko/Uari/tvjIU7/4k=";
};
makeWrapperArgs =
let
binPath = [ nix git ] ++ lib.optional withSandboxSupport bubblewrap;
binPath = [ nix git ]
++ lib.optional withSandboxSupport bubblewrap
++ lib.optional withNom nix-output-monitor;
in
[
"--prefix PATH : ${lib.makeBinPath binPath}"
"--set NIX_SSL_CERT_FILE ${cacert}/etc/ssl/certs/ca-bundle.crt"
"--set-default NIX_SSL_CERT_FILE ${cacert}/etc/ssl/certs/ca-bundle.crt"
# we don't have any runtime deps but nix-review shells might inject unwanted dependencies
"--unset PYTHONPATH"
];