BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

oath-toolkit: replace update script with nix-update

Browse source 
nix-update supports GNU Savannah
see https://github.com/Mic92/nix-update/releases/tag/0.5.0
This commit is contained in:
schnusch 2022-02-16 18:29:28 +01:00
parent f0c470f5eb
commit 63227b483f
2 changed files with 2 additions and 52 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
pkgs/tools/security/oath-toolkit/default.nix
View file

@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl, pam, xmlsec }:
{ lib, stdenv, fetchurl, nix-update-script, pam, xmlsec }:
let
# TODO: Switch to OpenPAM once https://gitlab.com/oath-toolkit/oath-toolkit/-/issues/26 is addressed upstream
@ -19,7 +19,7 @@ in stdenv.mkDerivation rec {
configureFlags = lib.optionals stdenv.isDarwin [ "--disable-pam" ];
passthru.updateScript = ./update.sh;
passthru.updateScript = nix-update-script { attrPath = pname; };
meta = with lib; {
description = "Components for building one-time password authentication systems";

50
pkgs/tools/security/oath-toolkit/update.sh
View file

@ -1,50 +0,0 @@
#!/usr/bin/env nix-shell
#!nix-shell -i bash -p curl git gnugrep nix
set -euo pipefail
nixfile='default.nix'
release_url='https://download.savannah.nongnu.org/releases/oath-toolkit/'
attr='oath-toolkit'
command='oathtool --version'
color() {
printf '%s: \033[%sm%s\033[39m\n' "$0" "$1" "$2" >&2 || true
}
color 32 "downloading $release_url..."
if ! release_page=$(curl -Lf "$release_url"); then
color 31 "cannot download release page"
exit 1
fi
tarball_name=$(printf '%s\n' "$release_page" \
| grep -Po '(?<=href=").*?\.tar\.gz(?=")' \
| sort -n | tail -n1)
tarball_version="${tarball_name%.tar.*}"
tarball_version="${tarball_version##*-}"
tarball_url="mirror://savannah${release_url#https://*/releases}$tarball_name"
color 32 "nix-prefetch-url $tarball_url..."
if ! tarball_sha256=$(nix-prefetch-url --type sha256 "$tarball_url"); then
color 31 "cannot prefetch $tarball_url"
exit 1
fi
old_version=$(grep -Pom1 '(?<=version = ").*?(?=";)' "$nixfile")
version=$(printf 'version = "%s";\n' "$tarball_version")
sha256=$(printf 'sha256 = "%s";\n' "$tarball_sha256")
sed -e "s,version = .*,$version," -e "s,sha256 = .*,$sha256," -i "$nixfile"
if git diff --exit-code "$nixfile" > /dev/stderr; then
printf '\n' >&2 || true
color 32 "$tarball_version is up to date"
else
color 32 "running '$command' with nix-shell..."
nix-shell -p "callPackage ./$nixfile {}" --run "$command"
msg="$attr: $old_version -> $tarball_version"
printf '\n' >&2 || true
color 31 "$msg"
git commit -m "$msg" "$nixfile"
fi