f667c13b66
This also fixes using the "clevis" entrypoint binary without making sure that all the other tooling is in the PATH.
41 lines
1.2 KiB
Nix
41 lines
1.2 KiB
Nix
{ lib, stdenv, fetchFromGitHub, meson, ninja, pkg-config, asciidoc
|
|
, makeWrapper, jansson, jose, cryptsetup, curl, libpwquality, luksmeta
|
|
, coreutils, tpm2-tools
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "clevis";
|
|
version = "18";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "latchset";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
sha256 = "sha256-m1UhyjD5ydSgCTBu6sECLlxFx0rnQxFnBA7frbdUqU8=";
|
|
};
|
|
|
|
postPatch = ''
|
|
for f in $(find src/ -type f); do
|
|
grep -q "/bin/cat" "$f" && substituteInPlace "$f" \
|
|
--replace '/bin/cat' '${coreutils}/bin/cat' || true
|
|
done
|
|
'';
|
|
|
|
postInstall = ''
|
|
# We wrap the main clevis binary entrypoint but not the sub-binaries.
|
|
wrapProgram $out/bin/clevis \
|
|
--prefix PATH ':' "${tpm2-tools}/bin:${jose}/bin:${placeholder "out"}/bin"
|
|
'';
|
|
|
|
nativeBuildInputs = [ meson ninja pkg-config asciidoc makeWrapper ];
|
|
buildInputs = [ jansson jose cryptsetup curl libpwquality luksmeta tpm2-tools ];
|
|
|
|
outputs = [ "out" "man" ];
|
|
|
|
meta = {
|
|
description = "Automated Encryption Framework";
|
|
homepage = "https://github.com/latchset/clevis";
|
|
maintainers = with lib.maintainers; [ fpletz ];
|
|
license = lib.licenses.gpl3Plus;
|
|
};
|
|
}
|