BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fetchfossil: support SRI hashes

Browse source
This commit is contained in:
Francesco Gazzetta 2023-11-22 09:47:57 +01:00
parent 34847de9d5
commit c034d14c41
1 changed files with 16 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
pkgs/build-support/fetchfossil/default.nix
View file

@ -1,7 +1,15 @@
{stdenv, lib, fossil, cacert}: {stdenv, lib, fossil, cacert}:
{name ? null, url, rev, sha256}: { name ? null
, url
, rev
, sha256 ? ""
, hash ? ""
}:
if hash != "" && sha256 != "" then
throw "Only one of sha256 or hash can be set"
else
stdenv.mkDerivation { stdenv.mkDerivation {
name = "fossil-archive" + (lib.optionalString (name != null) "-${name}"); name = "fossil-archive" + (lib.optionalString (name != null) "-${name}");
builder = ./builder.sh; builder = ./builder.sh;
@ -11,9 +19,14 @@ stdenv.mkDerivation {
# https://www.fossil-scm.org/index.html/doc/trunk/www/env-opts.md # https://www.fossil-scm.org/index.html/doc/trunk/www/env-opts.md
impureEnvVars = [ "http_proxy" ]; impureEnvVars = [ "http_proxy" ];
outputHashAlgo = "sha256"; outputHashAlgo = if hash != "" then null else "sha256";
outputHashMode = "recursive"; outputHashMode = "recursive";
outputHash = sha256; outputHash = if hash != "" then
hash
else if sha256 != "" then
sha256
else
lib.fakeSha256;
inherit url rev; inherit url rev;
preferLocalBuild = true; preferLocalBuild = true;