3ddfa29f51
Changelogs: https://github.com/latchset/tang/releases/tag/v12 https://github.com/latchset/tang/releases/tag/v11 https://github.com/latchset/tang/releases/tag/v10 https://github.com/latchset/tang/releases/tag/v9 https://github.com/latchset/tang/releases/tag/v8
76 lines
1.4 KiB
Nix
76 lines
1.4 KiB
Nix
{ lib
|
|
, stdenv
|
|
, asciidoc
|
|
, coreutils
|
|
, cryptsetup
|
|
, curl
|
|
, fetchFromGitHub
|
|
, gnugrep
|
|
, gnused
|
|
, jansson
|
|
, jose
|
|
, libpwquality
|
|
, luksmeta
|
|
, makeWrapper
|
|
, meson
|
|
, ninja
|
|
, pkg-config
|
|
, tpm2-tools
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "clevis";
|
|
version = "19";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "latchset";
|
|
repo = pname;
|
|
rev = "refs/tags/v${version}";
|
|
hash = "sha256-3J3ti/jRiv+p3eVvJD7u0ko28rPd8Gte0mCJaVaqyOs=";
|
|
};
|
|
|
|
postPatch = ''
|
|
for f in $(find src/ -type f); do
|
|
grep -q "/bin/cat" "$f" && substituteInPlace "$f" \
|
|
--replace '/bin/cat' '${coreutils}/bin/cat' || true
|
|
done
|
|
'';
|
|
|
|
postInstall = ''
|
|
# We wrap the main clevis binary entrypoint but not the sub-binaries.
|
|
wrapProgram $out/bin/clevis \
|
|
--prefix PATH ':' "${lib.makeBinPath [tpm2-tools jose cryptsetup libpwquality luksmeta gnugrep gnused coreutils]}:${placeholder "out"}/bin"
|
|
'';
|
|
|
|
nativeBuildInputs = [
|
|
asciidoc
|
|
makeWrapper
|
|
meson
|
|
ninja
|
|
pkg-config
|
|
];
|
|
|
|
buildInputs = [
|
|
cryptsetup
|
|
curl
|
|
jansson
|
|
jose
|
|
libpwquality
|
|
luksmeta
|
|
tpm2-tools
|
|
];
|
|
|
|
outputs = [
|
|
"out"
|
|
"man"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "Automated Encryption Framework";
|
|
homepage = "https://github.com/latchset/clevis";
|
|
changelog = "https://github.com/latchset/clevis/releases/tag/v${version}";
|
|
license = licenses.gpl3Plus;
|
|
maintainers = with maintainers; [ ];
|
|
};
|
|
}
|