203 lines
6.9 KiB
Nix
203 lines
6.9 KiB
Nix
{ stdenv
|
|
, lib
|
|
, buildGoModule
|
|
, fetchFromGitHub
|
|
, makeWrapper
|
|
, coreutils
|
|
, runCommand
|
|
, runtimeShell
|
|
, writeText
|
|
, terraform-providers
|
|
, installShellFiles
|
|
}:
|
|
|
|
let
|
|
generic = { version, hash, vendorHash ? null, ... }@attrs:
|
|
let attrs' = builtins.removeAttrs attrs [ "version" "hash" "vendorHash" ];
|
|
in
|
|
buildGoModule ({
|
|
pname = "terraform";
|
|
inherit version vendorHash;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "hashicorp";
|
|
repo = "terraform";
|
|
rev = "v${version}";
|
|
inherit hash;
|
|
};
|
|
|
|
ldflags = [ "-s" "-w" ];
|
|
|
|
postConfigure = ''
|
|
# speakeasy hardcodes /bin/stty https://github.com/bgentry/speakeasy/issues/22
|
|
substituteInPlace vendor/github.com/bgentry/speakeasy/speakeasy_unix.go \
|
|
--replace "/bin/stty" "${coreutils}/bin/stty"
|
|
'';
|
|
|
|
nativeBuildInputs = [ installShellFiles ];
|
|
|
|
postInstall = ''
|
|
# https://github.com/posener/complete/blob/9a4745ac49b29530e07dc2581745a218b646b7a3/cmd/install/bash.go#L8
|
|
installShellCompletion --bash --name terraform <(echo complete -C terraform terraform)
|
|
'';
|
|
|
|
preCheck = ''
|
|
export HOME=$TMPDIR
|
|
export TF_SKIP_REMOTE_TESTS=1
|
|
'';
|
|
|
|
subPackages = [ "." ];
|
|
|
|
meta = with lib; {
|
|
description =
|
|
"Tool for building, changing, and versioning infrastructure";
|
|
homepage = "https://www.terraform.io/";
|
|
changelog = "https://github.com/hashicorp/terraform/blob/v${version}/CHANGELOG.md";
|
|
license = licenses.mpl20;
|
|
maintainers = with maintainers; [
|
|
Chili-Man
|
|
babariviere
|
|
kalbasit
|
|
amaxine
|
|
timstott
|
|
zimbatm
|
|
zowoq
|
|
techknowlogick
|
|
qjoly
|
|
];
|
|
mainProgram = "terraform";
|
|
};
|
|
} // attrs');
|
|
|
|
pluggable = terraform:
|
|
let
|
|
withPlugins = plugins:
|
|
let
|
|
actualPlugins = plugins terraform.plugins;
|
|
|
|
# Wrap PATH of plugins propagatedBuildInputs, plugins may have runtime dependencies on external binaries
|
|
wrapperInputs = lib.unique (lib.flatten
|
|
(lib.catAttrs "propagatedBuildInputs"
|
|
(builtins.filter (x: x != null) actualPlugins)));
|
|
|
|
passthru = {
|
|
withPlugins = newplugins:
|
|
withPlugins (x: newplugins x ++ actualPlugins);
|
|
full = withPlugins (p: lib.filter lib.isDerivation (lib.attrValues p.actualProviders));
|
|
|
|
# Expose wrappers around the override* functions of the terraform
|
|
# derivation.
|
|
#
|
|
# Note that this does not behave as anyone would expect if plugins
|
|
# are specified. The overrides are not on the user-visible wrapper
|
|
# derivation but instead on the function application that eventually
|
|
# generates the wrapper. This means:
|
|
#
|
|
# 1. When using overrideAttrs, only `passthru` attributes will
|
|
# become visible on the wrapper derivation. Other overrides that
|
|
# modify the derivation *may* still have an effect, but it can be
|
|
# difficult to follow.
|
|
#
|
|
# 2. Other overrides may work if they modify the terraform
|
|
# derivation, or they may have no effect, depending on what
|
|
# exactly is being changed.
|
|
#
|
|
# 3. Specifying overrides on the wrapper is unsupported.
|
|
#
|
|
# See nixpkgs#158620 for details.
|
|
overrideDerivation = f:
|
|
(pluggable (terraform.overrideDerivation f)).withPlugins plugins;
|
|
overrideAttrs = f:
|
|
(pluggable (terraform.overrideAttrs f)).withPlugins plugins;
|
|
override = x:
|
|
(pluggable (terraform.override x)).withPlugins plugins;
|
|
};
|
|
# Don't bother wrapping unless we actually have plugins, since the wrapper will stop automatic downloading
|
|
# of plugins, which might be counterintuitive if someone just wants a vanilla Terraform.
|
|
in
|
|
if actualPlugins == [ ] then
|
|
terraform.overrideAttrs
|
|
(orig: { passthru = orig.passthru // passthru; })
|
|
else
|
|
lib.appendToName "with-plugins" (stdenv.mkDerivation {
|
|
inherit (terraform) meta pname version;
|
|
nativeBuildInputs = [ makeWrapper ];
|
|
|
|
# Expose the passthru set with the override functions
|
|
# defined above, as well as any passthru values already
|
|
# set on `terraform` at this point (relevant in case a
|
|
# user overrides attributes).
|
|
passthru = terraform.passthru // passthru;
|
|
|
|
buildCommand = ''
|
|
# Create wrappers for terraform plugins because Terraform only
|
|
# walks inside of a tree of files.
|
|
for providerDir in ${toString actualPlugins}
|
|
do
|
|
for file in $(find $providerDir/libexec/terraform-providers -type f)
|
|
do
|
|
relFile=''${file#$providerDir/}
|
|
mkdir -p $out/$(dirname $relFile)
|
|
cat <<WRAPPER > $out/$relFile
|
|
#!${runtimeShell}
|
|
exec "$file" "$@"
|
|
WRAPPER
|
|
chmod +x $out/$relFile
|
|
done
|
|
done
|
|
|
|
# Create a wrapper for terraform to point it to the plugins dir.
|
|
mkdir -p $out/bin/
|
|
makeWrapper "${terraform}/bin/terraform" "$out/bin/terraform" \
|
|
--set NIX_TERRAFORM_PLUGIN_DIR $out/libexec/terraform-providers \
|
|
--prefix PATH : "${lib.makeBinPath wrapperInputs}"
|
|
'';
|
|
});
|
|
in
|
|
withPlugins (_: [ ]);
|
|
|
|
plugins = removeAttrs terraform-providers [
|
|
"override"
|
|
"overrideDerivation"
|
|
"recurseForDerivations"
|
|
];
|
|
in
|
|
rec {
|
|
# Constructor for other terraform versions
|
|
mkTerraform = attrs: pluggable (generic attrs);
|
|
|
|
terraform_1 = mkTerraform {
|
|
version = "1.5.7";
|
|
hash = "sha256-pIhwJfa71/gW7lw/KRFBO4Q5Z5YMcTt3r9kD25k8cqM=";
|
|
vendorHash = "sha256-lQgWNMBf+ioNxzAV7tnTQSIS840XdI9fg9duuwoK+U4=";
|
|
patches = [ ./provider-path-0_15.patch ];
|
|
passthru = {
|
|
inherit plugins;
|
|
tests = { inherit terraform_plugins_test; };
|
|
};
|
|
};
|
|
|
|
# Tests that the plugins are being used. Terraform looks at the specific
|
|
# file pattern and if the plugin is not found it will try to download it
|
|
# from the Internet. With sandboxing enable this test will fail if that is
|
|
# the case.
|
|
terraform_plugins_test =
|
|
let
|
|
mainTf = writeText "main.tf" ''
|
|
resource "random_id" "test" {}
|
|
'';
|
|
terraform = terraform_1.withPlugins (p: [ p.random ]);
|
|
test =
|
|
runCommand "terraform-plugin-test" { buildInputs = [ terraform ]; } ''
|
|
set -e
|
|
# make it fail outside of sandbox
|
|
export HTTP_PROXY=http://127.0.0.1:0 HTTPS_PROXY=https://127.0.0.1:0
|
|
cp ${mainTf} main.tf
|
|
terraform init
|
|
touch $out
|
|
'';
|
|
in
|
|
test;
|
|
|
|
}
|