···

       
204
       
204
       
 
       


     

       
205
       
205
       
 
       
In Nixpkgs, there are generally three different names associated with a package:

     

       
206
       
206
       
 
       


     

       
207
       
207
       
-
       
- The `name` attribute of the derivation (excluding the version part). This is what most users see, in particular when using `nix-env`.

     

       
207
       
207
       
+
       
- The `pname` attribute of the derivation. This is what most users see, in particular when using `nix-env`.

     

       
208
       
208
       
 
       


     

       
209
       
209
       
 
       
- The variable name used for the instantiated package in `all-packages.nix`, and when passing it as a dependency to other functions. Typically this is called the _package attribute name_. This is what Nix expression authors see. It can also be used when installing using `nix-env -iA`.

     

       
210
       
210
       
 
       


     

       
211
       
211
       
 
       
- The filename for (the directory containing) the Nix expression.

     

       
212
       
212
       
 
       


     

       
213
       
213
       
-
       
Most of the time, these are the same. For instance, the package `e2fsprogs` has a `name` attribute `"e2fsprogs-version"`, is bound to the variable name `e2fsprogs` in `all-packages.nix`, and the Nix expression is in `pkgs/os-specific/linux/e2fsprogs/default.nix`.

     

       
213
       
213
       
+
       
Most of the time, these are the same. For instance, the package `e2fsprogs` has a `pname` attribute `"e2fsprogs"`, is bound to the variable name `e2fsprogs` in `all-packages.nix`, and the Nix expression is in `pkgs/os-specific/linux/e2fsprogs/default.nix`.

     

       
214
       
214
       
 
       


     

       
215
       
215
       
 
       
There are a few naming guidelines:

     

       
216
       
216
       
 
       


     

···

       
21
       
21
       
 
       
    withManOptDedupPatch = true;

     

       
22
       
22
       
 
       
  };

     

       
23
       
23
       
 
       


     

       
24
       
24
       
+
       
  manpageUrls = pkgs.path + "/doc/manpage-urls.json";

     

       
25
       
25
       
+
       


     

       
24
       
26
       
 
       
  # We need to strip references to /nix/store/* from options,

     

       
25
       
27
       
 
       
  # including any `extraSources` if some modules came from elsewhere,

     

       
26
       
28
       
 
       
  # or else the build will fail.

     
···

       
72
       
74
       
 
       
    nativeBuildInputs = [ pkgs.nixos-render-docs ];

     

       
73
       
75
       
 
       
  } ''

     

       
74
       
76
       
 
       
    nixos-render-docs manual docbook \

     

       
75
       
75
       
-
       
      --manpage-urls ${pkgs.path + "/doc/manpage-urls.json"} \

     

       
77
       
77
       
+
       
      --manpage-urls ${manpageUrls} \

     

       
76
       
78
       
 
       
      "$out" \

     

       
77
       
79
       
 
       
      --section \

     

       
78
       
80
       
 
       
        --section-id modules \

     
···

       
255
       
257
       
 
       
  manpages = runCommand "nixos-manpages"

     

       
256
       
258
       
 
       
    { inherit sources;

     

       
257
       
259
       
 
       
      nativeBuildInputs = [

     

       
260
       
260
       
+
       
        buildPackages.installShellFiles

     

       
261
       
261
       
+
       
      ] ++ lib.optionals allowDocBook [

     

       
258
       
262
       
 
       
        buildPackages.libxml2.bin

     

       
259
       
263
       
 
       
        buildPackages.libxslt.bin

     

       
260
       
260
       
-
       
        buildPackages.installShellFiles

     

       
264
       
264
       
+
       
      ] ++ lib.optionals (! allowDocBook) [

     

       
265
       
265
       
+
       
        buildPackages.nixos-render-docs

     

       
261
       
266
       
 
       
      ];

     

       
262
       
267
       
 
       
      allowedReferences = ["out"];

     

       
263
       
268
       
 
       
    }

     
···

       
265
       
270
       
 
       
      # Generate manpages.

     

       
266
       
271
       
 
       
      mkdir -p $out/share/man/man8

     

       
267
       
272
       
 
       
      installManPage ${./manpages}/*

     

       
268
       
268
       
-
       
      xsltproc --nonet \

     

       
269
       
269
       
-
       
        --maxdepth 6000 \

     

       
270
       
270
       
-
       
        --param man.output.in.separate.dir 1 \

     

       
271
       
271
       
-
       
        --param man.output.base.dir "'$out/share/man/'" \

     

       
272
       
272
       
-
       
        --param man.endnotes.are.numbered 0 \

     

       
273
       
273
       
-
       
        --param man.break.after.slash 1 \

     

       
274
       
274
       
-
       
        ${docbook_xsl_ns}/xml/xsl/docbook/manpages/docbook.xsl \

     

       
275
       
275
       
-
       
        ${manual-combined}/man-pages-combined.xml

     

       
273
       
273
       
+
       
      ${if allowDocBook

     

       
274
       
274
       
+
       
        then ''

     

       
275
       
275
       
+
       
          xsltproc --nonet \

     

       
276
       
276
       
+
       
            --maxdepth 6000 \

     

       
277
       
277
       
+
       
            --param man.output.in.separate.dir 1 \

     

       
278
       
278
       
+
       
            --param man.output.base.dir "'$out/share/man/'" \

     

       
279
       
279
       
+
       
            --param man.endnotes.are.numbered 0 \

     

       
280
       
280
       
+
       
            --param man.break.after.slash 1 \

     

       
281
       
281
       
+
       
            ${docbook_xsl_ns}/xml/xsl/docbook/manpages/docbook.xsl \

     

       
282
       
282
       
+
       
            ${manual-combined}/man-pages-combined.xml

     

       
283
       
283
       
+
       
        ''

     

       
284
       
284
       
+
       
        else ''

     

       
285
       
285
       
+
       
          mkdir -p $out/share/man/man5

     

       
286
       
286
       
+
       
          nixos-render-docs options manpage \

     

       
287
       
287
       
+
       
            --revision ${lib.escapeShellArg revision} \

     

       
288
       
288
       
+
       
            ${optionsJSON}/share/doc/nixos/options.json \

     

       
289
       
289
       
+
       
            $out/share/man/man5/configuration.nix.5

     

       
290
       
290
       
+
       
        ''}

     

       
276
       
291
       
 
       
    '';

     

       
277
       
292
       
 
       


     

       
278
       
293
       
 
       
}

     

···

       
577
       
577
       
 
       
          </listitem>

     

       
578
       
578
       
 
       
          <listitem>

     

       
579
       
579
       
 
       
            <para>

     

       
580
       
580
       
-
       
              <literal>services.openssh.cyphers</literal> to

     

       
581
       
581
       
-
       
              <literal>services.openssh.settings.Cyphers</literal>

     

       
580
       
580
       
+
       
              <literal>services.openssh.ciphers</literal> to

     

       
581
       
581
       
+
       
              <literal>services.openssh.settings.Ciphers</literal>

     

       
582
       
582
       
 
       
            </para>

     

       
583
       
583
       
 
       
          </listitem>

     

       
584
       
584
       
 
       
          <listitem>

     

···

       
137
       
137
       
 
       
  - `services.openssh.logLevel` to `services.openssh.settings.LogLevel`

     

       
138
       
138
       
 
       
  - `services.openssh.kexAlgorithms` to `services.openssh.settings.KexAlgorithms`

     

       
139
       
139
       
 
       
  - `services.openssh.macs` to `services.openssh.settings.Macs`

     

       
140
       
140
       
-
       
  - `services.openssh.cyphers` to `services.openssh.settings.Cyphers`

     

       
140
       
140
       
+
       
  - `services.openssh.ciphers` to `services.openssh.settings.Ciphers`

     

       
141
       
141
       
 
       
  - `services.openssh.gatewayPorts` to `services.openssh.settings.GatewayPorts`

     

       
142
       
142
       
 
       


     

       
143
       
143
       
 
       
- `services.mastodon` gained a tootctl wrapped named `mastodon-tootctl` similar to `nextcloud-occ` which can be executed from any user and switches to the configured mastodon user with sudo and sources the environment variables.

     

···

       
78
       
78
       
 
       
          title = args.title or null;

     

       
79
       
79
       
 
       
          name = args.name or (lib.concatStringsSep "." args.path);

     

       
80
       
80
       
 
       
        in ''

     

       
81
       
81
       
-
       
          - [`${lib.optionalString (title != null) "${title} aka "}pkgs.${name}`](

     

       
81
       
81
       
+
       
          - [${lib.optionalString (title != null) "${title} aka "}`pkgs.${name}`](

     

       
82
       
82
       
 
       
              https://search.nixos.org/packages?show=${name}&sort=relevance&query=${name}

     

       
83
       
83
       
 
       
            )${

     

       
84
       
84
       
 
       
              lib.optionalString (args ? comment) "\n\n  ${args.comment}"

     

···

       
15
       
15
       
 
       
in

     

       
16
       
16
       
 
       
{

     

       
17
       
17
       
 
       
  options.networking.stevenblack = {

     

       
18
       
18
       
-
       
    enable = mkEnableOption (mdDoc "Enable the stevenblack hosts file blocklist.");

     

       
18
       
18
       
+
       
    enable = mkEnableOption (mdDoc "Enable the stevenblack hosts file blocklist");

     

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
    block = mkOption {

     

       
21
       
21
       
 
       
      type = types.listOf (types.enum [ "fakenews" "gambling" "porn" "social" ]);

     

···

       
28
       
28
       
 
       
      k3b

     

       
29
       
29
       
 
       
      dvdplusrwtools

     

       
30
       
30
       
 
       
      cdrdao

     

       
31
       
31
       
-
       
      cdrkit

     

       
31
       
31
       
+
       
      cdrtools

     

       
32
       
32
       
 
       
    ];

     

       
33
       
33
       
 
       


     

       
34
       
34
       
 
       
    security.wrappers = {

     
···

       
44
       
44
       
 
       
        owner = "root";

     

       
45
       
45
       
 
       
        group = "cdrom";

     

       
46
       
46
       
 
       
        permissions = "u+wrx,g+x";

     

       
47
       
47
       
-
       
        source = "${pkgs.cdrkit}/bin/cdrecord";

     

       
47
       
47
       
+
       
        source = "${pkgs.cdrtools}/bin/cdrecord";

     

       
48
       
48
       
 
       
      };

     

       
49
       
49
       
 
       
    };

     

       
50
       
50
       
 
       


     

···

       
86
       
86
       
 
       
        description = lib.mdDoc "Proxy DNS requests - no leak for DNS data.";

     

       
87
       
87
       
 
       
      };

     

       
88
       
88
       
 
       


     

       
89
       
89
       
-
       
      quietMode = mkEnableOption (lib.mdDoc "Quiet mode (no output from the library).");

     

       
89
       
89
       
+
       
      quietMode = mkEnableOption (lib.mdDoc "Quiet mode (no output from the library)");

     

       
90
       
90
       
 
       


     

       
91
       
91
       
 
       
      remoteDNSSubnet = mkOption {

     

       
92
       
92
       
 
       
        type = types.enum [ 10 127 224 ];

     

···

       
14
       
14
       
 
       


     

       
15
       
15
       
 
       
    security.polkit.enable = mkEnableOption (lib.mdDoc "polkit");

     

       
16
       
16
       
 
       


     

       
17
       
17
       
-
       
    security.polkit.debug = mkEnableOption (lib.mdDoc "debug logs from polkit. This is required in order to see log messages from rule definitions.");

     

       
17
       
17
       
+
       
    security.polkit.debug = mkEnableOption (lib.mdDoc "debug logs from polkit. This is required in order to see log messages from rule definitions");

     

       
18
       
18
       
 
       


     

       
19
       
19
       
 
       
    security.polkit.extraConfig = mkOption {

     

       
20
       
20
       
 
       
      type = types.lines;

     

···

       
9
       
9
       
 
       
in {

     

       
10
       
10
       
 
       
  options = {

     

       
11
       
11
       
 
       
    services.zfs.autoReplication = {

     

       
12
       
12
       
-
       
      enable = mkEnableOption (lib.mdDoc "ZFS snapshot replication.");

     

       
12
       
12
       
+
       
      enable = mkEnableOption (lib.mdDoc "ZFS snapshot replication");

     

       
13
       
13
       
 
       


     

       
14
       
14
       
 
       
      followDelete = mkOption {

     

       
15
       
15
       
 
       
        description = lib.mdDoc "Remove remote snapshots that don't have a local correspondent.";

     

···

       
62
       
62
       
 
       
      '';

     

       
63
       
63
       
 
       
    };

     

       
64
       
64
       
 
       


     

       
65
       
65
       
-
       
    enable = mkEnableOption (lib.mdDoc "Kubernetes addon manager.");

     

       
65
       
65
       
+
       
    enable = mkEnableOption (lib.mdDoc "Kubernetes addon manager");

     

       
66
       
66
       
 
       
  };

     

       
67
       
67
       
 
       


     

       
68
       
68
       
 
       
  ###### implementation

     

···

       
146
       
146
       
 
       
      default = "unix:///run/containerd/containerd.sock";

     

       
147
       
147
       
 
       
    };

     

       
148
       
148
       
 
       


     

       
149
       
149
       
-
       
    enable = mkEnableOption (lib.mdDoc "Kubernetes kubelet.");

     

       
149
       
149
       
+
       
    enable = mkEnableOption (lib.mdDoc "Kubernetes kubelet");

     

       
150
       
150
       
 
       


     

       
151
       
151
       
 
       
    extraOpts = mkOption {

     

       
152
       
152
       
 
       
      description = lib.mdDoc "Kubernetes kubelet extra command line options.";

     

···

       
27
       
27
       
 
       
  options = {

     

       
28
       
28
       
 
       


     

       
29
       
29
       
 
       
    services.gnome.evolution-data-server = {

     

       
30
       
30
       
-
       
      enable = mkEnableOption (lib.mdDoc "Evolution Data Server, a collection of services for storing addressbooks and calendars.");

     

       
30
       
30
       
+
       
      enable = mkEnableOption (lib.mdDoc "Evolution Data Server, a collection of services for storing addressbooks and calendars");

     

       
31
       
31
       
 
       
      plugins = mkOption {

     

       
32
       
32
       
 
       
        type = types.listOf types.package;

     

       
33
       
33
       
 
       
        default = [ ];

     
···

       
35
       
35
       
 
       
      };

     

       
36
       
36
       
 
       
    };

     

       
37
       
37
       
 
       
    programs.evolution = {

     

       
38
       
38
       
-
       
      enable = mkEnableOption (lib.mdDoc "Evolution, a Personal information management application that provides integrated mail, calendaring and address book functionality.");

     

       
38
       
38
       
+
       
      enable = mkEnableOption (lib.mdDoc "Evolution, a Personal information management application that provides integrated mail, calendaring and address book functionality");

     

       
39
       
39
       
 
       
      plugins = mkOption {

     

       
40
       
40
       
 
       
        type = types.listOf types.package;

     

       
41
       
41
       
 
       
        default = [ ];

     

···

       
28
       
28
       
 
       


     

       
29
       
29
       
 
       
  options = {

     

       
30
       
30
       
 
       
    services.zammad = {

     

       
31
       
31
       
-
       
      enable = mkEnableOption (lib.mdDoc "Zammad, a web-based, open source user support/ticketing solution.");

     

       
31
       
31
       
+
       
      enable = mkEnableOption (lib.mdDoc "Zammad, a web-based, open source user support/ticketing solution");

     

       
32
       
32
       
 
       


     

       
33
       
33
       
 
       
      package = mkOption {

     

       
34
       
34
       
 
       
        type = types.package;

     

···

       
54
       
54
       
 
       
            default = 0;

     

       
55
       
55
       
 
       
            description = lib.mdDoc "Set debug log level.";

     

       
56
       
56
       
 
       
          };

     

       
57
       
57
       
-
       
          options.exit-on-end = mkEnableOption (lib.mdDoc "exit instead of restarting when a game ends.");

     

       
57
       
57
       
+
       
          options.exit-on-end = mkEnableOption (lib.mdDoc "exit instead of restarting when a game ends");

     

       
58
       
58
       
 
       
          options.Guests = mkEnableOption (lib.mdDoc "guests to login if auth is enabled");

     

       
59
       
59
       
 
       
          options.Newusers = mkEnableOption (lib.mdDoc "new users to login if auth is enabled");

     

       
60
       
60
       
 
       
          options.port = mkOption {

     

···

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
    services.udisks2 = {

     

       
21
       
21
       
 
       


     

       
22
       
22
       
-
       
      enable = mkEnableOption (lib.mdDoc "udisks2, a DBus service that allows applications to query and manipulate storage devices.");

     

       
22
       
22
       
+
       
      enable = mkEnableOption (lib.mdDoc "udisks2, a DBus service that allows applications to query and manipulate storage devices");

     

       
23
       
23
       
 
       


     

       
24
       
24
       
 
       
      settings = mkOption rec {

     

       
25
       
25
       
 
       
        type = types.attrsOf settingsFormat.type;

     

···

       
171
       
171
       
 
       
  options.services.dovecot2 = {

     

       
172
       
172
       
 
       
    enable = mkEnableOption (lib.mdDoc "the dovecot 2.x POP3/IMAP server");

     

       
173
       
173
       
 
       


     

       
174
       
174
       
-
       
    enablePop3 = mkEnableOption (lib.mdDoc "starting the POP3 listener (when Dovecot is enabled).");

     

       
174
       
174
       
+
       
    enablePop3 = mkEnableOption (lib.mdDoc "starting the POP3 listener (when Dovecot is enabled)");

     

       
175
       
175
       
 
       


     

       
176
       
176
       
-
       
    enableImap = mkEnableOption (lib.mdDoc "starting the IMAP listener (when Dovecot is enabled).") // { default = true; };

     

       
176
       
176
       
+
       
    enableImap = mkEnableOption (lib.mdDoc "starting the IMAP listener (when Dovecot is enabled)") // { default = true; };

     

       
177
       
177
       
 
       


     

       
178
       
178
       
-
       
    enableLmtp = mkEnableOption (lib.mdDoc "starting the LMTP listener (when Dovecot is enabled).");

     

       
178
       
178
       
+
       
    enableLmtp = mkEnableOption (lib.mdDoc "starting the LMTP listener (when Dovecot is enabled)");

     

       
179
       
179
       
 
       


     

       
180
       
180
       
 
       
    protocols = mkOption {

     

       
181
       
181
       
 
       
      type = types.listOf types.str;

     
···

       
300
       
300
       
 
       
      description = lib.mdDoc "Path to the server's private key.";

     

       
301
       
301
       
 
       
    };

     

       
302
       
302
       
 
       


     

       
303
       
303
       
-
       
    enablePAM = mkEnableOption (lib.mdDoc "creating a own Dovecot PAM service and configure PAM user logins.") // { default = true; };

     

       
303
       
303
       
+
       
    enablePAM = mkEnableOption (lib.mdDoc "creating a own Dovecot PAM service and configure PAM user logins") // { default = true; };

     

       
304
       
304
       
 
       


     

       
305
       
305
       
-
       
    enableDHE = mkEnableOption (lib.mdDoc "enable ssl_dh and generation of primes for the key exchange.") // { default = true; };

     

       
305
       
305
       
+
       
    enableDHE = mkEnableOption (lib.mdDoc "enable ssl_dh and generation of primes for the key exchange") // { default = true; };

     

       
306
       
306
       
 
       


     

       
307
       
307
       
 
       
    sieveScripts = mkOption {

     

       
308
       
308
       
 
       
      type = types.attrsOf types.path;

     
···

       
310
       
310
       
 
       
      description = lib.mdDoc "Sieve scripts to be executed. Key is a sequence, e.g. 'before2', 'after' etc.";

     

       
311
       
311
       
 
       
    };

     

       
312
       
312
       
 
       


     

       
313
       
313
       
-
       
    showPAMFailure = mkEnableOption (lib.mdDoc "showing the PAM failure message on authentication error (useful for OTPW).");

     

       
313
       
313
       
+
       
    showPAMFailure = mkEnableOption (lib.mdDoc "showing the PAM failure message on authentication error (useful for OTPW)");

     

       
314
       
314
       
 
       


     

       
315
       
315
       
 
       
    mailboxes = mkOption {

     

       
316
       
316
       
 
       
      type = with types; coercedTo

     
···

       
326
       
326
       
 
       
      description = lib.mdDoc "Configure mailboxes and auto create or subscribe them.";

     

       
327
       
327
       
 
       
    };

     

       
328
       
328
       
 
       


     

       
329
       
329
       
-
       
    enableQuota = mkEnableOption (lib.mdDoc "the dovecot quota service.");

     

       
329
       
329
       
+
       
    enableQuota = mkEnableOption (lib.mdDoc "the dovecot quota service");

     

       
330
       
330
       
 
       


     

       
331
       
331
       
 
       
    quotaPort = mkOption {

     

       
332
       
332
       
 
       
      type = types.str;

     

···

       
8
       
8
       
 
       
{

     

       
9
       
9
       
 
       
  options = {

     

       
10
       
10
       
 
       
    services.atuin = {

     

       
11
       
11
       
-
       
      enable = mkEnableOption (mdDoc "Enable server for shell history sync with atuin.");

     

       
11
       
11
       
+
       
      enable = mkEnableOption (mdDoc "Enable server for shell history sync with atuin");

     

       
12
       
12
       
 
       


     

       
13
       
13
       
 
       
      openRegistration = mkOption {

     

       
14
       
14
       
 
       
        type = types.bool;

     

···

       
6
       
6
       
 
       
{

     

       
7
       
7
       
 
       
  options = {

     

       
8
       
8
       
 
       
    services.input-remapper = {

     

       
9
       
9
       
-
       
      enable = mkEnableOption (lib.mdDoc "input-remapper, an easy to use tool to change the mapping of your input device buttons.");

     

       
9
       
9
       
+
       
      enable = mkEnableOption (lib.mdDoc "input-remapper, an easy to use tool to change the mapping of your input device buttons");

     

       
10
       
10
       
 
       
      package = mkPackageOptionMD pkgs "input-remapper" { };

     

       
11
       
11
       
 
       
      enableUdevRules = mkEnableOption (lib.mdDoc "udev rules added by input-remapper to handle hotplugged devices. Currently disabled by default due to https://github.com/sezanzeb/input-remapper/issues/140");

     

       
12
       
12
       
 
       
      serviceWantedBy = mkOption {

     

···

       
438
       
438
       
 
       
        };

     

       
439
       
439
       
 
       


     

       
440
       
440
       
 
       
        options."lists.sr.ht" = commonServiceSettings "lists" // {

     

       
441
       
441
       
-
       
          allow-new-lists = mkEnableOption (lib.mdDoc "Allow creation of new lists.");

     

       
441
       
441
       
+
       
          allow-new-lists = mkEnableOption (lib.mdDoc "Allow creation of new lists");

     

       
442
       
442
       
 
       
          notify-from = mkOption {

     

       
443
       
443
       
 
       
            description = lib.mdDoc "Outgoing email for notifications generated by users.";

     

       
444
       
444
       
 
       
            type = types.str;

     

···

       
11
       
11
       
 
       


     

       
12
       
12
       
 
       
    # the upstream package runs as root, but doesn't seem to be strictly

     

       
13
       
13
       
 
       
    # necessary for basic functionality

     

       
14
       
14
       
-
       
    runAsRoot = mkEnableOption (lib.mdDoc "Whether to run as root.");

     

       
14
       
14
       
+
       
    runAsRoot = mkEnableOption (lib.mdDoc "Whether to run as root");

     

       
15
       
15
       
 
       


     

       
16
       
16
       
 
       
    autoRetirement = mkEnableOption (lib.mdDoc ''

     

       
17
       
17
       
 
       
      Whether to automatically retire the host upon OS shutdown.

     

···

       
24
       
24
       
 
       
    inherit (options.services.unpoller.unifi) controllers;

     

       
25
       
25
       
 
       
    inherit (options.services.unpoller) loki;

     

       
26
       
26
       
 
       
    log = {

     

       
27
       
27
       
-
       
      debug = mkEnableOption (lib.mdDoc "debug logging including line numbers, high resolution timestamps, per-device logs.");

     

       
28
       
28
       
-
       
      quiet = mkEnableOption (lib.mdDoc "startup and error logs only.");

     

       
29
       
29
       
-
       
      prometheusErrors = mkEnableOption (lib.mdDoc "emitting errors to prometheus.");

     

       
27
       
27
       
+
       
      debug = mkEnableOption (lib.mdDoc "debug logging including line numbers, high resolution timestamps, per-device logs");

     

       
28
       
28
       
+
       
      quiet = mkEnableOption (lib.mdDoc "startup and error logs only");

     

       
29
       
29
       
+
       
      prometheusErrors = mkEnableOption (lib.mdDoc "emitting errors to prometheus");

     

       
30
       
30
       
 
       
    };

     

       
31
       
31
       
 
       
  };

     

       
32
       
32
       
 
       


     

···

       
11
       
11
       
 
       


     

       
12
       
12
       
 
       
  options = {

     

       
13
       
13
       
 
       
    services.uptime-kuma = {

     

       
14
       
14
       
-
       
      enable = mkEnableOption (mdDoc "Uptime Kuma, this assumes a reverse proxy to be set.");

     

       
14
       
14
       
+
       
      enable = mkEnableOption (mdDoc "Uptime Kuma, this assumes a reverse proxy to be set");

     

       
15
       
15
       
 
       


     

       
16
       
16
       
 
       
      package = mkOption {

     

       
17
       
17
       
 
       
        type = types.package;

     
···

       
20
       
20
       
 
       
        description = lib.mdDoc "Uptime Kuma package to use.";

     

       
21
       
21
       
 
       
      };

     

       
22
       
22
       
 
       


     

       
23
       
23
       
-
       
      appriseSupport = mkEnableOption (mdDoc "apprise support for notifications.");

     

       
23
       
23
       
+
       
      appriseSupport = mkEnableOption (mdDoc "apprise support for notifications");

     

       
24
       
24
       
 
       


     

       
25
       
25
       
 
       
      settings = lib.mkOption {

     

       
26
       
26
       
 
       
        type = lib.types.submodule { freeformType = with lib.types; attrsOf str; };

     

···

       
85
       
85
       
 
       
        description = lib.mdDoc "Run daemons as user moosefs instead of root.";

     

       
86
       
86
       
 
       
      };

     

       
87
       
87
       
 
       


     

       
88
       
88
       
-
       
      client.enable = mkEnableOption (lib.mdDoc "Moosefs client.");

     

       
88
       
88
       
+
       
      client.enable = mkEnableOption (lib.mdDoc "Moosefs client");

     

       
89
       
89
       
 
       


     

       
90
       
90
       
 
       
      master = {

     

       
91
       
91
       
 
       
        enable = mkOption {

     
···

       
131
       
131
       
 
       
      };

     

       
132
       
132
       
 
       


     

       
133
       
133
       
 
       
      metalogger = {

     

       
134
       
134
       
-
       
        enable = mkEnableOption (lib.mdDoc "Moosefs metalogger daemon.");

     

       
134
       
134
       
+
       
        enable = mkEnableOption (lib.mdDoc "Moosefs metalogger daemon");

     

       
135
       
135
       
 
       


     

       
136
       
136
       
 
       
        settings = mkOption {

     

       
137
       
137
       
 
       
          type = types.submodule {

     
···

       
149
       
149
       
 
       
      };

     

       
150
       
150
       
 
       


     

       
151
       
151
       
 
       
      chunkserver = {

     

       
152
       
152
       
-
       
        enable = mkEnableOption (lib.mdDoc "Moosefs chunkserver daemon.");

     

       
152
       
152
       
+
       
        enable = mkEnableOption (lib.mdDoc "Moosefs chunkserver daemon");

     

       
153
       
153
       
 
       


     

       
154
       
154
       
 
       
        openFirewall = mkOption {

     

       
155
       
155
       
 
       
          type = types.bool;

     

···

       
10
       
10
       
 
       


     

       
11
       
11
       
 
       
    options = {

     

       
12
       
12
       
 
       


     

       
13
       
13
       
-
       
      enable = mkEnableOption (lib.mdDoc "blockbook-frontend application.");

     

       
13
       
13
       
+
       
      enable = mkEnableOption (lib.mdDoc "blockbook-frontend application");

     

       
14
       
14
       
 
       


     

       
15
       
15
       
 
       
      package = mkOption {

     

       
16
       
16
       
 
       
        type = types.package;

     

···

       
106
       
106
       
 
       
    (mkRenamedOptionModule [ "services" "openssh" "permitRootLogin" ] [  "services" "openssh" "settings" "PermitRootLogin" ])

     

       
107
       
107
       
 
       
    (mkRenamedOptionModule [ "services" "openssh" "logLevel" ] [  "services" "openssh" "settings" "LogLevel" ])

     

       
108
       
108
       
 
       
    (mkRenamedOptionModule [ "services" "openssh" "macs" ] [  "services" "openssh" "settings" "Macs" ])

     

       
109
       
109
       
-
       
    (mkRenamedOptionModule [ "services" "openssh" "cyphers" ] [  "services" "openssh" "settings" "Cyphers" ])

     

       
109
       
109
       
+
       
    (mkRenamedOptionModule [ "services" "openssh" "ciphers" ] [  "services" "openssh" "settings" "Ciphers" ])

     

       
110
       
110
       
 
       
    (mkRenamedOptionModule [ "services" "openssh" "kexAlgorithms" ] [  "services" "openssh" "settings" "KexAlgorithms" ])

     

       
111
       
111
       
 
       
    (mkRenamedOptionModule [ "services" "openssh" "gatewayPorts" ] [  "services" "openssh" "settings" "GatewayPorts" ])

     

       
112
       
112
       
 
       
    (mkRenamedOptionModule [ "services" "openssh" "forwardX11" ] [  "services" "openssh" "settings" "X11Forwarding" ])

     

···

       
55
       
55
       
 
       
  options.services.kanidm = {

     

       
56
       
56
       
 
       
    enableClient = lib.mkEnableOption (lib.mdDoc "the Kanidm client");

     

       
57
       
57
       
 
       
    enableServer = lib.mkEnableOption (lib.mdDoc "the Kanidm server");

     

       
58
       
58
       
-
       
    enablePam = lib.mkEnableOption (lib.mdDoc "the Kanidm PAM and NSS integration.");

     

       
58
       
58
       
+
       
    enablePam = lib.mkEnableOption (lib.mdDoc "the Kanidm PAM and NSS integration");

     

       
59
       
59
       
 
       


     

       
60
       
60
       
 
       
    serverSettings = lib.mkOption {

     

       
61
       
61
       
 
       
      type = lib.types.submodule {

     

···

       
68
       
68
       
 
       
in

     

       
69
       
69
       
 
       
{

     

       
70
       
70
       
 
       
  options.services.cloudlog = with types; {

     

       
71
       
71
       
-
       
    enable = mkEnableOption (mdDoc "Whether to enable Cloudlog.");

     

       
71
       
71
       
+
       
    enable = mkEnableOption (mdDoc "Whether to enable Cloudlog");

     

       
72
       
72
       
 
       
    dataDir = mkOption {

     

       
73
       
73
       
 
       
      type = str;

     

       
74
       
74
       
 
       
      default = "/var/lib/cloudlog";

     

···

       
148
       
148
       
 
       
      ];

     

       
149
       
149
       
 
       


     

       
150
       
150
       
 
       
      options = {

     

       
151
       
151
       
-
       
        enable = mkEnableOption (lib.mdDoc "DokuWiki web application.");

     

       
151
       
151
       
+
       
        enable = mkEnableOption (lib.mdDoc "DokuWiki web application");

     

       
152
       
152
       
 
       


     

       
153
       
153
       
 
       
        package = mkOption {

     

       
154
       
154
       
 
       
          type = types.package;

     

···

       
12
       
12
       
 
       
{

     

       
13
       
13
       
 
       
  options = {

     

       
14
       
14
       
 
       
    services.galene = {

     

       
15
       
15
       
-
       
      enable = mkEnableOption (lib.mdDoc "Galene Service.");

     

       
15
       
15
       
+
       
      enable = mkEnableOption (lib.mdDoc "Galene Service");

     

       
16
       
16
       
 
       


     

       
17
       
17
       
 
       
      stateDir = mkOption {

     

       
18
       
18
       
 
       
        default = defaultstateDir;

     

···

       
7
       
7
       
 
       


     

       
8
       
8
       
 
       
    enable = mkEnableOption (lib.mdDoc "hledger-web service");

     

       
9
       
9
       
 
       


     

       
10
       
10
       
-
       
    serveApi = mkEnableOption (lib.mdDoc "Serve only the JSON web API, without the web UI.");

     

       
10
       
10
       
+
       
    serveApi = mkEnableOption (lib.mdDoc "Serve only the JSON web API, without the web UI");

     

       
11
       
11
       
 
       


     

       
12
       
12
       
 
       
    host = mkOption {

     

       
13
       
13
       
 
       
      type = types.str;

     

···

       
36
       
36
       
 
       
      description = lib.mdDoc "Location of Jirafeau storage directory.";

     

       
37
       
37
       
 
       
    };

     

       
38
       
38
       
 
       


     

       
39
       
39
       
-
       
    enable = mkEnableOption (lib.mdDoc "Jirafeau file upload application.");

     

       
39
       
39
       
+
       
    enable = mkEnableOption (lib.mdDoc "Jirafeau file upload application");

     

       
40
       
40
       
 
       


     

       
41
       
41
       
 
       
    extraConfig = mkOption {

     

       
42
       
42
       
 
       
      type = types.lines;

     

···

       
32
       
32
       
 
       
  # interface

     

       
33
       
33
       
 
       


     

       
34
       
34
       
 
       
  options.services.limesurvey = {

     

       
35
       
35
       
-
       
    enable = mkEnableOption (lib.mdDoc "Limesurvey web application.");

     

       
35
       
35
       
+
       
    enable = mkEnableOption (lib.mdDoc "Limesurvey web application");

     

       
36
       
36
       
 
       


     

       
37
       
37
       
 
       
    database = {

     

       
38
       
38
       
 
       
      type = mkOption {

     

···

       
448
       
448
       
 
       
            dolphin-plugins

     

       
449
       
449
       
 
       
            ffmpegthumbs

     

       
450
       
450
       
 
       
            kdegraphics-thumbnailers

     

       
451
       
451
       
+
       
            pkgs.kio-admin

     

       
451
       
452
       
 
       
            kio-extras

     

       
452
       
453
       
 
       
          ];

     

       
453
       
454
       
 
       
          optionalPackages = [

     

···

       
106
       
106
       
 
       
      description = lib.mdDoc ''

     

       
107
       
107
       
 
       
        Extra custom layouts that will be included in the xkb configuration.

     

       
108
       
108
       
 
       
        Information on how to create a new layout can be found here:

     

       
109
       
109
       
-
       
        [](https://www.x.org/releases/current/doc/xorg-docs/input/XKB-Enhancing.html#Defining_New_Layouts).

     

       
109
       
109
       
+
       
        <https://www.x.org/releases/current/doc/xorg-docs/input/XKB-Enhancing.html#Defining_New_Layouts>.

     

       
110
       
110
       
 
       
        For more examples see

     

       
111
       
111
       
-
       
        [](https://wiki.archlinux.org/index.php/X_KeyBoard_extension#Basic_examples)

     

       
111
       
111
       
+
       
        <https://wiki.archlinux.org/index.php/X_KeyBoard_extension#Basic_examples>

     

       
112
       
112
       
 
       
      '';

     

       
113
       
113
       
 
       
    };

     

       
114
       
114
       
 
       


     

···

       
128
       
128
       
 
       
        HostKey ${initrdKeyPath path}

     

       
129
       
129
       
 
       
      '')}

     

       
130
       
130
       
 
       


     

       
131
       
131
       
-
       
      KexAlgorithms ${concatStringsSep "," sshdCfg.kexAlgorithms}

     

       
132
       
132
       
-
       
      Ciphers ${concatStringsSep "," sshdCfg.ciphers}

     

       
133
       
133
       
-
       
      MACs ${concatStringsSep "," sshdCfg.macs}

     

       
131
       
131
       
+
       
      KexAlgorithms ${concatStringsSep "," sshdCfg.settings.KexAlgorithms}

     

       
132
       
132
       
+
       
      Ciphers ${concatStringsSep "," sshdCfg.settings.Ciphers}

     

       
133
       
133
       
+
       
      MACs ${concatStringsSep "," sshdCfg.settings.Macs}

     

       
134
       
134
       
 
       


     

       
135
       
135
       
-
       
      LogLevel ${sshdCfg.logLevel}

     

       
135
       
135
       
+
       
      LogLevel ${sshdCfg.settings.LogLevel}

     

       
136
       
136
       
 
       


     

       
137
       
137
       
-
       
      ${if sshdCfg.useDns then ''

     

       
137
       
137
       
+
       
      ${if sshdCfg.settings.UseDns then ''

     

       
138
       
138
       
 
       
        UseDNS yes

     

       
139
       
139
       
 
       
      '' else ''

     

       
140
       
140
       
 
       
        UseDNS no

     

···

       
20
       
20
       
 
       
  ###### interface

     

       
21
       
21
       
 
       


     

       
22
       
22
       
 
       
  options = {

     

       
23
       
23
       
-
       
    boot.kernel.enable = mkEnableOption (lib.mdDoc "the Linux kernel. This is useful for systemd-like containers which do not require a kernel.") // {

     

       
23
       
23
       
+
       
    boot.kernel.enable = mkEnableOption (lib.mdDoc "the Linux kernel. This is useful for systemd-like containers which do not require a kernel") // {

     

       
24
       
24
       
 
       
      default = true;

     

       
25
       
25
       
 
       
    };

     

       
26
       
26
       
 
       


     

···

       
929
       
929
       
 
       
      ++ (if builtins.elem "xts" luks.cryptoModules then ["ecb"] else []);

     

       
930
       
930
       
 
       


     

       
931
       
931
       
 
       
    # copy the cryptsetup binary and it's dependencies

     

       
932
       
932
       
-
       
    boot.initrd.extraUtilsCommands = mkIf (!config.boot.initrd.systemd.enable) ''

     

       
932
       
932
       
+
       
    boot.initrd.extraUtilsCommands = let

     

       
933
       
933
       
+
       
      pbkdf2-sha512 = pkgs.runCommandCC "pbkdf2-sha512" { buildInputs = [ pkgs.openssl ]; } ''

     

       
934
       
934
       
+
       
        mkdir -p "$out/bin"

     

       
935
       
935
       
+
       
        cc -O3 -lcrypto ${./pbkdf2-sha512.c} -o "$out/bin/pbkdf2-sha512"

     

       
936
       
936
       
+
       
        strip -s "$out/bin/pbkdf2-sha512"

     

       
937
       
937
       
+
       
      '';

     

       
938
       
938
       
+
       
    in

     

       
939
       
939
       
+
       
    mkIf (!config.boot.initrd.systemd.enable) ''

     

       
933
       
940
       
 
       
      copy_bin_and_libs ${pkgs.cryptsetup}/bin/cryptsetup

     

       
934
       
941
       
 
       
      copy_bin_and_libs ${askPass}/bin/cryptsetup-askpass

     

       
935
       
942
       
 
       
      sed -i s,/bin/sh,$out/bin/sh, $out/bin/cryptsetup-askpass

     
···

       
939
       
946
       
 
       
        copy_bin_and_libs ${pkgs.yubikey-personalization}/bin/ykinfo

     

       
940
       
947
       
 
       
        copy_bin_and_libs ${pkgs.openssl.bin}/bin/openssl

     

       
941
       
948
       
 
       


     

       
942
       
942
       
-
       
        cc -O3 -I${pkgs.openssl.dev}/include -L${lib.getLib pkgs.openssl}/lib ${./pbkdf2-sha512.c} -o pbkdf2-sha512 -lcrypto

     

       
943
       
943
       
-
       
        strip -s pbkdf2-sha512

     

       
944
       
944
       
-
       
        copy_bin_and_libs pbkdf2-sha512

     

       
949
       
949
       
+
       
        copy_bin_and_libs ${pbkdf2-sha512}/bin/pbkdf2-sha512

     

       
945
       
950
       
 
       


     

       
946
       
951
       
 
       
        mkdir -p $out/etc/ssl

     

       
947
       
952
       
 
       
        cp -pdv ${pkgs.openssl.out}/etc/ssl/openssl.cnf $out/etc/ssl

     

···

       
7
       
7
       
 
       
      device = "none";

     

       
8
       
8
       
 
       
      fsType = "envfs";

     

       
9
       
9
       
 
       
      options = [

     

       
10
       
10
       
-
       
        "fallback-path=${pkgs.runCommand "fallback-path" {} ''

     

       
10
       
10
       
+
       
        "fallback-path=${pkgs.runCommand "fallback-path" {} (''

     

       
11
       
11
       
 
       
          mkdir -p $out

     

       
12
       
12
       
-
       
          ln -s ${pkgs.coreutils}/bin/env $out/env

     

       
13
       
13
       
-
       
          ln -s ${config.system.build.binsh}/bin/sh $out/sh

     

       
14
       
14
       
-
       
        ''}"

     

       
12
       
12
       
+
       
          ln -s ${config.environment.usrbinenv} $out/env

     

       
13
       
13
       
+
       
          ln -s ${config.environment.binsh} $out/sh

     

       
14
       
14
       
+
       
        '' + cfg.extraFallbackPathCommands)}"

     

       
15
       
15
       
 
       
      ];

     

       
16
       
16
       
 
       
    };

     

       
17
       
17
       
 
       
    "/bin" = {

     
···

       
31
       
31
       
 
       
          etc.

     

       
32
       
32
       
 
       
        '';

     

       
33
       
33
       
 
       
      };

     

       
34
       
34
       
+
       


     

       
34
       
35
       
 
       
      package = lib.mkOption {

     

       
35
       
36
       
 
       
        type = lib.types.package;

     

       
36
       
36
       
-
       
        description = lib.mdDoc "Which package to use for the envfs.";

     

       
37
       
37
       
 
       
        default = pkgs.envfs;

     

       
38
       
38
       
 
       
        defaultText = lib.literalExpression "pkgs.envfs";

     

       
39
       
39
       
+
       
        description = lib.mdDoc "Which package to use for the envfs.";

     

       
40
       
40
       
+
       
      };

     

       
41
       
41
       
+
       


     

       
42
       
42
       
+
       
      extraFallbackPathCommands = lib.mkOption {

     

       
43
       
43
       
+
       
        type = lib.types.lines;

     

       
44
       
44
       
+
       
        default = "";

     

       
45
       
45
       
+
       
        example = "ln -s $''{pkgs.bash}/bin/bash $out/bash";

     

       
46
       
46
       
+
       
        description = lib.mdDoc "Extra commands to run in the package that contains fallback executables in case not other executable is found";

     

       
39
       
47
       
 
       
      };

     

       
40
       
48
       
 
       
    };

     

       
41
       
49
       
 
       
  };

     

···

       
11
       
11
       
 
       


     

       
12
       
12
       
 
       
stdenv.mkDerivation rec {

     

       
13
       
13
       
 
       
  pname = "callaudiod";

     

       
14
       
14
       
-
       
  version = "0.1.4";

     

       
14
       
14
       
+
       
  version = "0.1.7";

     

       
15
       
15
       
 
       


     

       
16
       
16
       
 
       
  src = fetchFromGitLab {

     

       
17
       
17
       
 
       
    domain = "gitlab.com";

     

       
18
       
18
       
 
       
    owner = "mobian1";

     

       
19
       
19
       
 
       
    repo = pname;

     

       
20
       
20
       
 
       
    rev = version;

     

       
21
       
21
       
-
       
    sha256 = "sha256-71+9ALz55aqxXRBRwOcs9fwiQK31pJ9E72pGRmt0OkE=";

     

       
21
       
21
       
+
       
    sha256 = "sha256-BDEu3ASlnovMK0lQC+CQvpXvtdt33BRntstPAWaAnsg=";

     

       
22
       
22
       
 
       
  };

     

       
23
       
23
       
 
       


     

       
24
       
24
       
 
       
  strictDeps = true;

     

···

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
stdenv.mkDerivation rec {

     

       
11
       
11
       
 
       
  pname = "snapcast";

     

       
12
       
12
       
-
       
  version = "0.26.0";

     

       
12
       
12
       
+
       
  version = "0.27.0";

     

       
13
       
13
       
 
       


     

       
14
       
14
       
 
       
  src = fetchFromGitHub {

     

       
15
       
15
       
 
       
    owner  = "badaix";

     

       
16
       
16
       
 
       
    repo   = "snapcast";

     

       
17
       
17
       
 
       
    rev    = "v${version}";

     

       
18
       
18
       
-
       
    sha256 = "sha256-CCifn9OEFM//Hk1PJj8T3MXIV8pXCTdBBXPsHuZwLyQ=";

     

       
18
       
18
       
+
       
    sha256 = "sha256-dlK1xQQqst4VQjioC7MZzqXwMC+JfqtvnD5lrOqGhYI=";

     

       
19
       
19
       
 
       
  };

     

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  nativeBuildInputs = [ cmake pkg-config ];

     

···

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
let

     

       
4
       
4
       
 
       
  pname = "erigon";

     

       
5
       
5
       
-
       
  version = "2.37.0";

     

       
5
       
5
       
+
       
  version = "2.38.1";

     

       
6
       
6
       
 
       
in

     

       
7
       
7
       
 
       
buildGoModule {

     

       
8
       
8
       
 
       
  inherit pname version;

     
···

       
11
       
11
       
 
       
    owner = "ledgerwatch";

     

       
12
       
12
       
 
       
    repo = pname;

     

       
13
       
13
       
 
       
    rev = "v${version}";

     

       
14
       
14
       
-
       
    sha256 = "sha256-r/mumt/f0wrOsXyEHo/NX0lJGt8zqXEVNC+9DWDkHAM=";

     

       
14
       
14
       
+
       
    sha256 = "sha256-sLJMmSEUQNsodZ9Ms0ipDwN2QOYa9pZTlEqt4CF23Sc=";

     

       
15
       
15
       
 
       
    fetchSubmodules = true;

     

       
16
       
16
       
 
       
  };

     

       
17
       
17
       
 
       


     

       
18
       
18
       
-
       
  vendorSha256 = "sha256-vSJZ1wIx1CiLE04ZBDnQDQqM2v8BBLxw5qbAsixC3/U=";

     

       
18
       
18
       
+
       
  vendorSha256 = "sha256-KESY+PSbWQHPJphop4GnVF4T8Q/MPb2GFDEko0ieXEM=";

     

       
19
       
19
       
 
       
  proxyVendor = true;

     

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  # Build errors in mdbx when format hardening is enabled:

     

···

       
1
       
1
       
 
       
{ lib

     

       
2
       
2
       
 
       
, buildGoModule

     

       
3
       
3
       
+
       
, buildNpmPackage

     

       
3
       
4
       
 
       
, fetchFromGitHub

     

       
4
       
5
       
 
       
}:

     

       
5
       
6
       
 
       


     

       
6
       
6
       
-
       
buildGoModule rec {

     

       
7
       
7
       
+
       
let

     

       
7
       
8
       
 
       
  pname = "torq";

     

       
8
       
9
       
 
       
  version = "0.17.3";

     

       
9
       
10
       
 
       


     
···

       
14
       
15
       
 
       
    hash = "sha256-fqHJZi1NQCrZqsa+N+FVYZ8s9o0D555Sqn5qNlJ1MmI=";

     

       
15
       
16
       
 
       
  };

     

       
16
       
17
       
 
       


     

       
18
       
18
       
+
       
  web = buildNpmPackage {

     

       
19
       
19
       
+
       
    pname = "${pname}-frontend";

     

       
20
       
20
       
+
       
    inherit version;

     

       
21
       
21
       
+
       
    src = "${src}/web";

     

       
22
       
22
       
+
       
    npmDepsHash = "sha256-8mUfTFzPjQlQvhC3zZf+WruDBkYnmGt3yckNi0CPWs0=";

     

       
23
       
23
       
+
       


     

       
24
       
24
       
+
       
    # copied from upstream Dockerfile

     

       
25
       
25
       
+
       
    npmInstallFlags = [ "--legacy-peer-deps" ];

     

       
26
       
26
       
+
       
    TSX_COMPILE_ON_ERROR="true";

     

       
27
       
27
       
+
       
    ESLINT_NO_DEV_ERRORS="true";

     

       
28
       
28
       
+
       


     

       
29
       
29
       
+
       
    # override npmInstallHook, we only care about the build/ directory

     

       
30
       
30
       
+
       
    installPhase = ''

     

       
31
       
31
       
+
       
      mkdir $out

     

       
32
       
32
       
+
       
      cp -r build $out/

     

       
33
       
33
       
+
       
    '';

     

       
34
       
34
       
+
       
  };

     

       
35
       
35
       
+
       
in

     

       
36
       
36
       
+
       
buildGoModule rec {

     

       
37
       
37
       
+
       
  inherit pname version src;

     

       
38
       
38
       
+
       


     

       
17
       
39
       
 
       
  vendorHash = "sha256-HETN2IMnpxnTyg6bQDpoD0saJu+gKocdEf0VzEi12Gs=";

     

       
18
       
40
       
 
       


     

       
19
       
41
       
 
       
  subPackages = [ "cmd/torq" ];

     
···

       
23
       
45
       
 
       
    "-w"

     

       
24
       
46
       
 
       
    "-X github.com/lncapital/torq/build.version=v${version}"

     

       
25
       
47
       
 
       
  ];

     

       
48
       
48
       
+
       


     

       
49
       
49
       
+
       
  postInstall = ''

     

       
50
       
50
       
+
       
    ln -s ${web} $out/web

     

       
51
       
51
       
+
       
  '';

     

       
26
       
52
       
 
       


     

       
27
       
53
       
 
       
  meta = with lib; {

     

       
28
       
54
       
 
       
    description = "Capital management tool for lightning network nodes";

     

···

       
2580
       
2580
       
 
       
        mktplcRef = {

     

       
2581
       
2581
       
 
       
          name = "code-spell-checker";

     

       
2582
       
2582
       
 
       
          publisher = "streetsidesoftware";

     

       
2583
       
2583
       
-
       
          version = "2.15.0";

     

       
2584
       
2584
       
-
       
          sha256 = "sha256-YfcO/01nO+92xZEJgYyLYAkqXMqfV/QDkcN9Dnjp5ZA=";

     

       
2583
       
2583
       
+
       
          version = "2.16.0";

     

       
2584
       
2584
       
+
       
          sha256 = "sha256-Qr4cYAEvAkvvE6KytVeInJzcMQJZqr/e/KPfelVzjUA=";

     

       
2585
       
2585
       
 
       
        };

     

       
2586
       
2586
       
 
       
        meta = with lib; {

     

       
2587
       
2587
       
 
       
          changelog = "https://marketplace.visualstudio.com/items/streetsidesoftware.code-spell-checker/changelog";

     

···

       
21
       
21
       
 
       
, libde265Support ? true, libde265

     

       
22
       
22
       
 
       
, fftw

     

       
23
       
23
       
 
       
, ApplicationServices, Foundation

     

       
24
       
24
       
+
       
, testers

     

       
24
       
25
       
 
       
}:

     

       
25
       
26
       
 
       


     

       
26
       
27
       
 
       
let

     
···

       
33
       
34
       
 
       
    else null;

     

       
34
       
35
       
 
       
in

     

       
35
       
36
       
 
       


     

       
36
       
36
       
-
       
stdenv.mkDerivation rec {

     

       
37
       
37
       
+
       
stdenv.mkDerivation (finalAttrs: {

     

       
37
       
38
       
 
       
  pname = "imagemagick";

     

       
38
       
39
       
 
       
  version = "6.9.12-68";

     

       
39
       
40
       
 
       


     

       
40
       
41
       
 
       
  src = fetchFromGitHub {

     

       
41
       
42
       
 
       
    owner = "ImageMagick";

     

       
42
       
43
       
 
       
    repo = "ImageMagick6";

     

       
43
       
43
       
-
       
    rev = version;

     

       
44
       
44
       
+
       
    rev = finalAttrs.version;

     

       
44
       
45
       
 
       
    sha256 = "sha256-slQcA0cblxtG/1DiJx5swUh7Kfwgz5HG70eqJFLaQJI=";

     

       
45
       
46
       
 
       
  };

     

       
46
       
47
       
 
       


     
···

       
109
       
110
       
 
       
    done

     

       
110
       
111
       
 
       
  '';

     

       
111
       
112
       
 
       


     

       
113
       
113
       
+
       
  passthru.tests.pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;

     

       
114
       
114
       
+
       


     

       
112
       
115
       
 
       
  meta = with lib; {

     

       
113
       
116
       
 
       
    homepage = "https://legacy.imagemagick.org/";

     

       
114
       
117
       
 
       
    changelog = "https://legacy.imagemagick.org/script/changelog.php";

     

       
115
       
118
       
 
       
    description = "A software suite to create, edit, compose, or convert bitmap images";

     

       
119
       
119
       
+
       
    pkgConfigModules = [ "ImageMagick" "MagickWand" ];

     

       
116
       
120
       
 
       
    platforms = platforms.linux ++ platforms.darwin;

     

       
117
       
121
       
 
       
    maintainers = with maintainers; [ ];

     

       
118
       
122
       
 
       
    license = licenses.asl20;

     
···

       
137
       
141
       
 
       
      "CVE-2022-2719"

     

       
138
       
142
       
 
       
    ];

     

       
139
       
143
       
 
       
  };

     

       
140
       
140
       
-
       
}

     

       
144
       
144
       
+
       
})

     

···

       
45
       
45
       
 
       
    else null;

     

       
46
       
46
       
 
       
in

     

       
47
       
47
       
 
       


     

       
48
       
48
       
-
       
stdenv.mkDerivation rec {

     

       
48
       
48
       
+
       
stdenv.mkDerivation (finalAttrs: {

     

       
49
       
49
       
 
       
  pname = "imagemagick";

     

       
50
       
50
       
 
       
  version = "7.1.0-61";

     

       
51
       
51
       
 
       


     

       
52
       
52
       
 
       
  src = fetchFromGitHub {

     

       
53
       
53
       
 
       
    owner = "ImageMagick";

     

       
54
       
54
       
 
       
    repo = "ImageMagick";

     

       
55
       
55
       
-
       
    rev = version;

     

       
55
       
55
       
+
       
    rev = finalAttrs.version;

     

       
56
       
56
       
 
       
    hash = "sha256-g7WeqPpPd1gceU+s+vRDpb41IX1lzpiqh3cAYeFdUlg=";

     

       
57
       
57
       
 
       
  };

     

       
58
       
58
       
 
       


     
···

       
126
       
126
       
 
       
  passthru.tests = {

     

       
127
       
127
       
 
       
    version = testers.testVersion { package = imagemagick; };

     

       
128
       
128
       
 
       
    inherit (python3.pkgs) img2pdf;

     

       
129
       
129
       
+
       
    pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;

     

       
129
       
130
       
 
       
  };

     

       
130
       
131
       
 
       


     

       
131
       
132
       
 
       
  meta = with lib; {

     

       
132
       
133
       
 
       
    homepage = "http://www.imagemagick.org/";

     

       
133
       
134
       
 
       
    description = "A software suite to create, edit, compose, or convert bitmap images";

     

       
135
       
135
       
+
       
    pkgConfigModules = [ "ImageMagick" "MagickWand" ];

     

       
134
       
136
       
 
       
    platforms = platforms.linux ++ platforms.darwin;

     

       
135
       
137
       
 
       
    maintainers = with maintainers; [ erictapen dotlambda ];

     

       
136
       
138
       
 
       
    license = licenses.asl20;

     

       
137
       
139
       
 
       
    mainProgram = "magick";

     

       
138
       
140
       
 
       
  };

     

       
139
       
139
       
-
       
}

     

       
141
       
141
       
+
       
})

     

···

       
11
       
11
       
 
       


     

       
12
       
12
       
 
       
stdenv.mkDerivation rec {

     

       
13
       
13
       
 
       
  pname = "drawio";

     

       
14
       
14
       
-
       
  version = "20.8.10";

     

       
14
       
14
       
+
       
  version = "20.8.16";

     

       
15
       
15
       
 
       


     

       
16
       
16
       
 
       
  src = fetchurl {

     

       
17
       
17
       
 
       
    url = "https://github.com/jgraph/drawio-desktop/releases/download/v${version}/drawio-x86_64-${version}.rpm";

     

       
18
       
18
       
-
       
    sha256 = "118e9c9a328c92aeeda3c5925c8d8ed50d0993c07715726447ee720699958626";

     

       
18
       
18
       
+
       
    sha256 = "sha256-FBnyogqf5BHLRInjJzC2dENnAwFcWMHDvJ+F0I3ffVg=";

     

       
19
       
19
       
 
       
  };

     

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  nativeBuildInputs = [

     

···

       
9
       
9
       
 
       
let

     

       
10
       
10
       
 
       


     

       
11
       
11
       
 
       
  pname = "1password";

     

       
12
       
12
       
-
       
  version = if channel == "stable" then "8.9.10" else "8.9.12-4.BETA";

     

       
12
       
12
       
+
       
  version = if channel == "stable" then "8.9.14" else "8.10.0-20.BETA";

     

       
13
       
13
       
 
       


     

       
14
       
14
       
 
       
  sources = {

     

       
15
       
15
       
 
       
    stable = {

     

       
16
       
16
       
 
       
      x86_64-linux = {

     

       
17
       
17
       
 
       
        url = "https://downloads.1password.com/linux/tar/stable/x86_64/1password-${version}.x64.tar.gz";

     

       
18
       
18
       
-
       
        sha256 = "sha256-aoa00W5zvZQeHKd2Eqyrxl5Z1PwLMHc5lkMUskLiD74=";

     

       
18
       
18
       
+
       
        sha256 = "sha256-rlLzPDPOmzamDnRxuvgrpAW0QrMINw/PsdLxOiBpMnA=";

     

       
19
       
19
       
 
       
      };

     

       
20
       
20
       
 
       
      aarch64-linux = {

     

       
21
       
21
       
 
       
        url = "https://downloads.1password.com/linux/tar/stable/aarch64/1password-${version}.arm64.tar.gz";

     

       
22
       
22
       
-
       
        sha256 = "sha256-Zt64UGKI3+DayS6XP7jTE+pxv52tUUZbUHiuzjcm1JI=";

     

       
22
       
22
       
+
       
        sha256 = "sha256-hJTqFr6/KOl4C+1oyo/zrnCbqvRQin6HjyLKOppUl/M=";

     

       
23
       
23
       
 
       
      };

     

       
24
       
24
       
 
       
      x86_64-darwin = {

     

       
25
       
25
       
 
       
        url = "https://downloads.1password.com/mac/1Password-${version}-x86_64.zip";

     

       
26
       
26
       
-
       
        sha256 = "sha256-sx9eASpMcgkIH1GRzJMqSQa5Y5GJlYU/20CZFyFK+OU=";

     

       
26
       
26
       
+
       
        sha256 = "sha256-3/aiUj+WYZfPItYrYNQKsUSpkRTgOhyb8L5gURt1O74=";

     

       
27
       
27
       
 
       
      };

     

       
28
       
28
       
 
       
      aarch64-darwin = {

     

       
29
       
29
       
 
       
        url = "https://downloads.1password.com/mac/1Password-${version}-aarch64.zip";

     

       
30
       
30
       
-
       
        sha256 = "sha256-Z1cEynO9iWZra542CVGmefrTNerMe13OcTAzWXNi8jI=";

     

       
30
       
30
       
+
       
        sha256 = "sha256-n0xqD5WbcC9B6spisa5V7JJRXGZubBwzJFUS8edvz/Q=";

     

       
31
       
31
       
 
       
      };

     

       
32
       
32
       
 
       
    };

     

       
33
       
33
       
 
       
    beta = {

     

       
34
       
34
       
 
       
      x86_64-linux = {

     

       
35
       
35
       
 
       
        url = "https://downloads.1password.com/linux/tar/beta/x86_64/1password-${version}.x64.tar.gz";

     

       
36
       
36
       
-
       
        sha256 = "sha256-/WXaLINqLFLft+wrmr+fV0kM9qS5w4etFiGltnzoVdo=";

     

       
36
       
36
       
+
       
        sha256 = "sha256-r2MRyw0dfD3vGnCcPW624K5rSaNSCjTVW4cWFgPAIaY=";

     

       
37
       
37
       
 
       
      };

     

       
38
       
38
       
 
       
      aarch64-linux = {

     

       
39
       
39
       
 
       
        url = "https://downloads.1password.com/linux/tar/beta/aarch64/1password-${version}.arm64.tar.gz";

     

       
40
       
40
       
-
       
        sha256 = "sha256-Zv9uHkFCZ0flBMAwQBjNhqFWhAXKyHBfZk733hbSag4=";

     

       
40
       
40
       
+
       
        sha256 = "sha256-98sv4yLvLw8J5uQBB66qTV3lRWnyeZiifhEOW7shz8s=";

     

       
41
       
41
       
 
       
      };

     

       
42
       
42
       
 
       
      x86_64-darwin = {

     

       
43
       
43
       
 
       
        url = "https://downloads.1password.com/mac/1Password-${version}-x86_64.zip";

     

       
44
       
44
       
-
       
        sha256 = "sha256-Vryk6nMQY+0NIgwJkZ2j3vrxyhrzxbe96jbyoNbPIR0=";

     

       
44
       
44
       
+
       
        sha256 = "sha256-ezHk6OgUsmFfMfsY+yyWqn+6JgHSmpkFWGNCCaBv/Bo=";

     

       
45
       
45
       
 
       
      };

     

       
46
       
46
       
 
       
      aarch64-darwin = {

     

       
47
       
47
       
 
       
        url = "https://downloads.1password.com/mac/1Password-${version}-aarch64.zip";

     

       
48
       
48
       
-
       
        sha256 = "sha256-74iOaNkuPRKUsTNNd7UTpy5ahjoMmxiNT84Op5ztRGk=";

     

       
48
       
48
       
+
       
        sha256 = "sha256-JmCrEBucXGPpGbiKOxA8vu6bUVYsavfsYA5QY58Grnw=";

     

       
49
       
49
       
 
       
      };

     

       
50
       
50
       
 
       
    };

     

       
51
       
51
       
 
       
  };

     

···

       
1
       
1
       
+
       
#!/usr/bin/env nix-shell

     

       
2
       
2
       
+
       
#!nix-shell -i bash -p jq

     

       
3
       
3
       
+
       
#shellcheck shell=bash

     

       
4
       
4
       
+
       


     

       
5
       
5
       
+
       
CURRENT_HASH=""

     

       
6
       
6
       
+
       


     

       
7
       
7
       
+
       
print_hash() {

     

       
8
       
8
       
+
       
    OS="$1"

     

       
9
       
9
       
+
       
    CHANNEL="$2"

     

       
10
       
10
       
+
       
    ARCH="$3"

     

       
11
       
11
       
+
       
    VERSION="$4"

     

       
12
       
12
       
+
       


     

       
13
       
13
       
+
       
    if [[ "$OS" == "linux" ]]; then

     

       
14
       
14
       
+
       
        if [[ "$ARCH" == "x86_64" ]]; then

     

       
15
       
15
       
+
       
            EXT="x64.tar.gz"

     

       
16
       
16
       
+
       
        else

     

       
17
       
17
       
+
       
            EXT="arm64.tar.gz"

     

       
18
       
18
       
+
       
        fi

     

       
19
       
19
       
+
       
        URL="https://downloads.1password.com/${OS}/tar/${CHANNEL}/${ARCH}/1password-${VERSION}.${EXT}"

     

       
20
       
20
       
+
       
    else

     

       
21
       
21
       
+
       
        EXT="$ARCH.zip"

     

       
22
       
22
       
+
       
        URL="https://downloads.1password.com/${OS}/1Password-${VERSION}-${EXT}"

     

       
23
       
23
       
+
       
    fi

     

       
24
       
24
       
+
       


     

       
25
       
25
       
+
       
    CURRENT_HASH=$(nix store prefetch-file "$URL" --json | jq -r '.hash')

     

       
26
       
26
       
+
       


     

       
27
       
27
       
+
       
    echo "$CHANNEL ${ARCH}-${OS}: $CURRENT_HASH"

     

       
28
       
28
       
+
       
}

     

       
29
       
29
       
+
       


     

       
30
       
30
       
+
       
if [[ -z "$STABLE_VER" ]]; then

     

       
31
       
31
       
+
       
    echo "No 'STABLE_VER' environment variable provided, skipping"

     

       
32
       
32
       
+
       
else

     

       
33
       
33
       
+
       
    print_hash "linux" "stable" "x86_64" "$STABLE_VER"

     

       
34
       
34
       
+
       
    print_hash "linux" "stable" "aarch64" "$STABLE_VER"

     

       
35
       
35
       
+
       
    print_hash "mac" "stable" "x86_64" "$STABLE_VER"

     

       
36
       
36
       
+
       
    print_hash "mac" "stable" "aarch64" "$STABLE_VER"

     

       
37
       
37
       
+
       
fi

     

       
38
       
38
       
+
       


     

       
39
       
39
       
+
       
if [[ -z "$BETA_VER" ]]; then

     

       
40
       
40
       
+
       
    echo "No 'BETA_VER' environment variable provided, skipping"

     

       
41
       
41
       
+
       
else

     

       
42
       
42
       
+
       
    print_hash "linux" "beta" "x86_64" "$BETA_VER"

     

       
43
       
43
       
+
       
    print_hash "linux" "beta" "aarch64" "$BETA_VER"

     

       
44
       
44
       
+
       
    print_hash "mac" "beta" "x86_64" "$BETA_VER"

     

       
45
       
45
       
+
       
    print_hash "mac" "beta" "aarch64" "$BETA_VER"

     

       
46
       
46
       
+
       
fi

     

···

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
stdenv.mkDerivation rec {

     

       
11
       
11
       
 
       
  pname = "cubiomes-viewer";

     

       
12
       
12
       
-
       
  version = "3.0.1";

     

       
12
       
12
       
+
       
  version = "3.1.0";

     

       
13
       
13
       
 
       


     

       
14
       
14
       
 
       
  src = fetchFromGitHub {

     

       
15
       
15
       
 
       
    owner = "Cubitect";

     

       
16
       
16
       
 
       
    repo = pname;

     

       
17
       
17
       
 
       
    rev = version;

     

       
18
       
18
       
-
       
    sha256 = "sha256-UPphXaxq/Hnt1U3J+lgwa0lp3vX1B/Ou8eqD9rHe3sw=";

     

       
18
       
18
       
+
       
    sha256 = "sha256-pA+SWktSjgH7lRqK14yJX2ziLoKpxMCpEIh0H6slpxw=";

     

       
19
       
19
       
 
       
    fetchSubmodules = true;

     

       
20
       
20
       
 
       
  };

     

       
21
       
21
       
 
       


     

···

       
1
       
1
       
+
       
{ lib

     

       
2
       
2
       
+
       
, stdenv

     

       
3
       
3
       
+
       
, fetchFromGitHub

     

       
4
       
4
       
+
       
, pkg-config

     

       
5
       
5
       
+
       
, libgpiod

     

       
6
       
6
       
+
       
, cmake

     

       
7
       
7
       
+
       
}:

     

       
8
       
8
       
+
       


     

       
9
       
9
       
+
       
stdenv.mkDerivation rec {

     

       
10
       
10
       
+
       
  pname = "gcfflasher";

     

       
11
       
11
       
+
       
  version = "4.0.3-beta";

     

       
12
       
12
       
+
       


     

       
13
       
13
       
+
       
  src = fetchFromGitHub {

     

       
14
       
14
       
+
       
    owner = "dresden-elektronik";

     

       
15
       
15
       
+
       
    repo = pname;

     

       
16
       
16
       
+
       
    rev = "refs/tags/v${version}";

     

       
17
       
17
       
+
       
    hash = "sha256-m+iDBfsHo+PLYd3K8JaKwhIXcnj+Q8w7gIgmHp+0plk=";

     

       
18
       
18
       
+
       
  };

     

       
19
       
19
       
+
       


     

       
20
       
20
       
+
       
  nativeBuildInputs = [

     

       
21
       
21
       
+
       
    pkg-config

     

       
22
       
22
       
+
       
    cmake

     

       
23
       
23
       
+
       
  ];

     

       
24
       
24
       
+
       


     

       
25
       
25
       
+
       
  postPatch = ''

     

       
26
       
26
       
+
       
    substituteInPlace CMakeLists.txt \

     

       
27
       
27
       
+
       
      --replace 'main_windows.c' 'main_posix.c'

     

       
28
       
28
       
+
       
    '';

     

       
29
       
29
       
+
       


     

       
30
       
30
       
+
       
  buildInputs = lib.optionals stdenv.isLinux [

     

       
31
       
31
       
+
       
    libgpiod

     

       
32
       
32
       
+
       
  ];

     

       
33
       
33
       
+
       


     

       
34
       
34
       
+
       
  installPhase = ''

     

       
35
       
35
       
+
       
    runHook preInstall

     

       
36
       
36
       
+
       
    install -Dm0755 GCFFlasher $out/bin/GCFFlasher

     

       
37
       
37
       
+
       
    runHook postInstall

     

       
38
       
38
       
+
       
  '';

     

       
39
       
39
       
+
       


     

       
40
       
40
       
+
       
  meta = with lib; {

     

       
41
       
41
       
+
       
    description = "CFFlasher is the tool to program the firmware of dresden elektronik's Zigbee products";

     

       
42
       
42
       
+
       
    license = licenses.bsd3;

     

       
43
       
43
       
+
       
    homepage = "https://github.com/dresden-elektronik/gcfflasher";

     

       
44
       
44
       
+
       
    maintainers = with maintainers; [ fleaz ];

     

       
45
       
45
       
+
       
  };

     

       
46
       
46
       
+
       
}

     

···

       
5
       
5
       
 
       


     

       
6
       
6
       
 
       
mkDerivation rec {

     

       
7
       
7
       
 
       
  pname = "klayout";

     

       
8
       
8
       
-
       
  version = "0.28.4";

     

       
8
       
8
       
+
       
  version = "0.28.5";

     

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
  src = fetchFromGitHub {

     

       
11
       
11
       
 
       
    owner = "KLayout";

     

       
12
       
12
       
 
       
    repo = "klayout";

     

       
13
       
13
       
 
       
    rev = "v${version}";

     

       
14
       
14
       
-
       
    hash = "sha256-6RIzgC/PA2DqO24vKu+d/+GttufUbIH+k9GZe09M0vM=";

     

       
14
       
14
       
+
       
    hash = "sha256-fjKxQ3oVtnFwzLeeE6kN0jKE5PIfBZubTF54KO+k/DE=";

     

       
15
       
15
       
 
       
  };

     

       
16
       
16
       
 
       


     

       
17
       
17
       
 
       
  postPatch = ''

     

···

       
14
       
14
       
 
       


     

       
15
       
15
       
 
       
python3Packages.buildPythonApplication rec {

     

       
16
       
16
       
 
       
  pname = "nwg-panel";

     

       
17
       
17
       
-
       
  version = "0.7.11";

     

       
17
       
17
       
+
       
  version = "0.7.16";

     

       
18
       
18
       
 
       


     

       
19
       
19
       
 
       
  src = fetchFromGitHub {

     

       
20
       
20
       
 
       
    owner = "nwg-piotr";

     

       
21
       
21
       
 
       
    repo = "nwg-panel";

     

       
22
       
22
       
 
       
    rev = "refs/tags/v${version}";

     

       
23
       
23
       
-
       
    sha256 = "sha256-Esr1OPyQCCQIOfgkl6RIn93ZaJkF0O2RM9ObIgBlPi4=";

     

       
23
       
23
       
+
       
    sha256 = "sha256-dwnDrFQZVz6Vxa8bX0gFPBZFQwRJ3+wUy6Rsxvb2dhw=";

     

       
24
       
24
       
 
       
  };

     

       
25
       
25
       
 
       


     

       
26
       
26
       
 
       
  # No tests

     
···

       
56
       
56
       
 
       
    description = "GTK3-based panel for Sway window manager";

     

       
57
       
57
       
 
       
    license = licenses.mit;

     

       
58
       
58
       
 
       
    platforms = platforms.linux;

     

       
59
       
59
       
-
       
    maintainers = with maintainers; [ berbiche ];

     

       
59
       
59
       
+
       
    maintainers = with maintainers; [ ];

     

       
60
       
60
       
 
       
  };

     

       
61
       
61
       
 
       
}

     

···

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
rustPlatform.buildRustPackage rec {

     

       
4
       
4
       
 
       
  pname = "oxker";

     

       
5
       
5
       
-
       
  version = "0.2.1";

     

       
5
       
5
       
+
       
  version = "0.2.3";

     

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
  src = fetchCrate {

     

       
8
       
8
       
 
       
    inherit pname version;

     

       
9
       
9
       
-
       
    sha256 = "sha256-CsfzQN7n/LsNIivJShDG02cHwPktkXl/0udBSPz0i2U=";

     

       
9
       
9
       
+
       
    sha256 = "sha256-J+3wi1nqkxR3ZDfR+F3rvFjUz1DJ7/jhjmcvFdMzWYc=";

     

       
10
       
10
       
 
       
  };

     

       
11
       
11
       
 
       


     

       
12
       
12
       
-
       
  cargoHash = "sha256-FSuhG+ZSQzwj1YB3xs3A1uFWPhwK8FIfVfUY9V/J2Z8=";

     

       
12
       
12
       
+
       
  cargoHash = "sha256-oQPCUm/X2vt6wN5AKhtgq8tzQQrp0H42bBK7Az+I9BE=";

     

       
13
       
13
       
 
       


     

       
14
       
14
       
 
       
  meta = with lib; {

     

       
15
       
15
       
 
       
    description = "A simple tui to view & control docker containers";

     

···

       
10
       
10
       
 
       
}:

     

       
11
       
11
       
 
       
let

     

       
12
       
12
       
 
       
  vendorHashes = {

     

       
13
       
13
       
-
       
    x86_64-linux = "sha256-BwhWA8N0S55XkljDKPNkDhsj0QSpmJJ5MwEnrPjymS8=";

     

       
14
       
14
       
-
       
    aarch64-linux = "sha256-T1aGz3+2Sls+rkUVDUo39Ky2igg+dxGSUaf3qpV7ovQ=";

     

       
13
       
13
       
+
       
    x86_64-linux = "sha256-Upe0cEDG02RJD50Ht9VNMwkelsJHX8zOuJZssAhMuMY=";

     

       
14
       
14
       
+
       
    aarch64-linux = "sha256-lKER4+gcyFqnCvgBl/qdVBCbUpocWUnXGLXsX82MSy4=";

     

       
15
       
15
       
 
       
  };

     

       
16
       
16
       
 
       
in

     

       
17
       
17
       
 
       
flutter.mkFlutterApp rec {

     

       
18
       
18
       
 
       
  pname = "yubioath-flutter";

     

       
19
       
19
       
-
       
  version = "6.0.2";

     

       
19
       
19
       
+
       
  version = "6.1.0";

     

       
20
       
20
       
 
       


     

       
21
       
21
       
 
       
  src = fetchFromGitHub {

     

       
22
       
22
       
 
       
    owner = "Yubico";

     

       
23
       
23
       
 
       
    repo = "yubioath-flutter";

     

       
24
       
24
       
 
       
    rev = version;

     

       
25
       
25
       
-
       
    sha256 = "13nh5qpq02c6azfdh4cbzhlrq0hs9is45q5z5cnxg84hrx26hd4k";

     

       
25
       
25
       
+
       
    sha256 = "sha256-N9/qwC79mG9r+zMPLHSPjNSQ+srGtnXuKsf0ijtH7CI=";

     

       
26
       
26
       
 
       
  };

     

       
27
       
27
       
 
       


     

       
28
       
28
       
 
       
  passthru.helper = python3.pkgs.callPackage ./helper.nix { inherit src version meta; };

     

···

       
1
       
1
       
+
       
From 6f53bd36a40da4c71486e3b79f6e32d53d6eea5d Mon Sep 17 00:00:00 2001

     

       
2
       
2
       
+
       
From: Euan Kemp <euank@euank.com>

     

       
3
       
3
       
+
       
Date: Thu, 3 Feb 2022 23:50:40 -0800

     

       
4
       
4
       
+
       
Subject: [PATCH 2/2] scrips/download: strip downloading, just package CRD

     

       
5
       
5
       
+
       


     

       
6
       
6
       
+
       
The CRD packaging is a complicated set of commands, so let's reuse it.

     

       
7
       
7
       
+
       
---

     

       
8
       
8
       
+
       
 scripts/download | 10 ++--------

     

       
9
       
9
       
+
       
 1 file changed, 2 insertions(+), 8 deletions(-)

     

       
10
       
10
       
+
       


     

       
11
       
11
       
+
       
diff --git a/scripts/download b/scripts/download

     

       
12
       
12
       
+
       
index 5effc0562a..82361803ee 100755

     

       
13
       
13
       
+
       
--- a/scripts/download

     

       
14
       
14
       
+
       
+++ b/scripts/download

     

       
15
       
15
       
+
       
@@ -24,12 +24,6 @@ rm -rf ${CONTAINERD_DIR}

     

       
16
       
16
       
+
       
 mkdir -p ${CHARTS_DIR}

     

       
17
       
17
       
+
       
 mkdir -p ${DATA_DIR}

     

       
18
       
18
       
+
       
 

     

       
19
       
19
       
+
       
-curl --compressed -sfL https://github.com/k3s-io/k3s-root/releases/download/${VERSION_ROOT}/k3s-root-${ARCH}.tar | tar xf - --exclude=bin/socat

     

       
20
       
20
       
+
       
-

     

       
21
       
21
       
+
       
-git clone --single-branch --branch=${VERSION_RUNC} --depth=1 https://github.com/opencontainers/runc ${RUNC_DIR}

     

       
22
       
22
       
+
       
-

     

       
23
       
23
       
+
       
-git clone --single-branch --branch=${VERSION_CONTAINERD} --depth=1 https://github.com/k3s-io/containerd ${CONTAINERD_DIR}

     

       
24
       
24
       
+
       
-

     

       
25
       
25
       
+
       
 setup_tmp() {

     

       
26
       
26
       
+
       
     TMP_DIR=$(mktemp -d --tmpdir=${CHARTS_DIR})

     

       
27
       
27
       
+
       
     cleanup() {

     

       
28
       
28
       
+
       
@@ -44,8 +38,8 @@ setup_tmp() {

     

       
29
       
29
       
+
       
 

     

       
30
       
30
       
+
       
 download_and_package_traefik () {

     

       
31
       
31
       
+
       
   echo "Downloading Traefik Helm chart from ${TRAEFIK_URL}"

     

       
32
       
32
       
+
       
-  curl -sfL ${TRAEFIK_URL} -o ${TMP_DIR}/${TRAEFIK_FILE}

     

       
33
       
33
       
+
       
-  code=$?

     

       
34
       
34
       
+
       
+  # nixpkgs: copy in our known traefik chart instead

     

       
35
       
35
       
+
       
+  cp $TRAEFIK_CHART_FILE ${TMP_DIR}/${TRAEFIK_FILE}

     

       
36
       
36
       
+
       
 

     

       
37
       
37
       
+
       
   if [ $code -ne 0 ]; then

     

       
38
       
38
       
+
       
     echo "Error: Failed to download Traefik Helm chart!"

     

       
39
       
39
       
+
       
-- 

     

       
40
       
40
       
+
       
2.34.1

     

       
41
       
41
       
+
       


     

···

       
1
       
1
       
+
       
{ stdenv

     

       
2
       
2
       
+
       
, lib

     

       
3
       
3
       
+
       
, makeWrapper

     

       
4
       
4
       
+
       
, socat

     

       
5
       
5
       
+
       
, iptables

     

       
6
       
6
       
+
       
, iproute2

     

       
7
       
7
       
+
       
, bridge-utils

     

       
8
       
8
       
+
       
, btrfs-progs

     

       
9
       
9
       
+
       
, conntrack-tools

     

       
10
       
10
       
+
       
, buildGoModule

     

       
11
       
11
       
+
       
, runc

     

       
12
       
12
       
+
       
, rsync

     

       
13
       
13
       
+
       
, kmod

     

       
14
       
14
       
+
       
, libseccomp

     

       
15
       
15
       
+
       
, pkg-config

     

       
16
       
16
       
+
       
, ethtool

     

       
17
       
17
       
+
       
, util-linux

     

       
18
       
18
       
+
       
, fetchFromGitHub

     

       
19
       
19
       
+
       
, fetchurl

     

       
20
       
20
       
+
       
, fetchzip

     

       
21
       
21
       
+
       
, fetchgit

     

       
22
       
22
       
+
       
, zstd

     

       
23
       
23
       
+
       
, yq-go

     

       
24
       
24
       
+
       
, nixosTests

     

       
25
       
25
       
+
       
, k3s

     

       
26
       
26
       
+
       
, pkgsBuildBuild

     

       
27
       
27
       
+
       
}:

     

       
28
       
28
       
+
       


     

       
29
       
29
       
+
       
with lib;

     

       
30
       
30
       
+
       


     

       
31
       
31
       
+
       
# k3s is a kinda weird derivation. One of the main points of k3s is the

     

       
32
       
32
       
+
       
# simplicity of it being one binary that can perform several tasks.

     

       
33
       
33
       
+
       
# However, when you have a good package manager (like nix), that doesn't

     

       
34
       
34
       
+
       
# actually make much of a difference; you don't really care if it's one binary

     

       
35
       
35
       
+
       
# or 10 since with a good package manager, installing and running it is

     

       
36
       
36
       
+
       
# identical.

     

       
37
       
37
       
+
       
# Since upstream k3s packages itself as one large binary with several

     

       
38
       
38
       
+
       
# "personalities" (in the form of subcommands like 'k3s agent' and 'k3s

     

       
39
       
39
       
+
       
# kubectl'), it ends up being easiest to mostly mimic upstream packaging, with

     

       
40
       
40
       
+
       
# some exceptions.

     

       
41
       
41
       
+
       
# K3s also carries patches to some packages (such as containerd and cni

     

       
42
       
42
       
+
       
# plugins), so we intentionally use the k3s versions of those binaries for k3s,

     

       
43
       
43
       
+
       
# even if the upstream version of those binaries exist in nixpkgs already. In

     

       
44
       
44
       
+
       
# the end, that means we have a thick k3s binary that behaves like the upstream

     

       
45
       
45
       
+
       
# one for the most part.

     

       
46
       
46
       
+
       
# However, k3s also bundles several pieces of unpatched software, from the

     

       
47
       
47
       
+
       
# strongswan vpn software, to iptables, to socat, conntrack, busybox, etc.

     

       
48
       
48
       
+
       
# Those pieces of software we entirely ignore upstream's handling of, and just

     

       
49
       
49
       
+
       
# make sure they're in the path if desired.

     

       
50
       
50
       
+
       
let

     

       
51
       
51
       
+
       
  k3sVersion = "1.23.6+k3s1";     # k3s git tag

     

       
52
       
52
       
+
       
  k3sCommit = "418c3fa858b69b12b9cefbcff0526f666a6236b9"; # k3s git commit at the above version

     

       
53
       
53
       
+
       
  k3sRepoSha256 = "0fmw491dn5mpi058mr7sij51i5m4qg2grx30cnl3h2v4s0sdkx2i";

     

       
54
       
54
       
+
       
  k3sVendorSha256 = "sha256-iHg5ySMaiSWXs98YGmxPwdZr4zdBIFma12dNEuf30Hs=";

     

       
55
       
55
       
+
       


     

       
56
       
56
       
+
       
  # taken from ./manifests/traefik.yaml, extracted from '.spec.chart' https://github.com/k3s-io/k3s/blob/v1.23.3%2Bk3s1/scripts/download#L9

     

       
57
       
57
       
+
       
  # The 'patch' and 'minor' versions are currently hardcoded as single digits only, so ignore the trailing two digits. Weird, I know.

     

       
58
       
58
       
+
       
  traefikChartVersion = "10.19.3";

     

       
59
       
59
       
+
       
  traefikChartSha256 = "04zg5li957svgscdmkzmzjkwljaljyav68rzxmhakkwgav6q9058";

     

       
60
       
60
       
+
       


     

       
61
       
61
       
+
       
  # taken from ./scripts/version.sh VERSION_ROOT https://github.com/k3s-io/k3s/blob/v1.23.3%2Bk3s1/scripts/version.sh#L47

     

       
62
       
62
       
+
       
  k3sRootVersion = "0.11.0";

     

       
63
       
63
       
+
       
  k3sRootSha256 = "016n56vi09xkvjph7wgzb2m86mhd5x65fs4d11pmh20hl249r620";

     

       
64
       
64
       
+
       


     

       
65
       
65
       
+
       
  # taken from ./scripts/version.sh VERSION_CNIPLUGINS https://github.com/k3s-io/k3s/blob/v1.23.3%2Bk3s1/scripts/version.sh#L45

     

       
66
       
66
       
+
       
  k3sCNIVersion = "1.0.1-k3s1";

     

       
67
       
67
       
+
       
  k3sCNISha256 = "11ihlzzdnqf9p21y0a4ckpbxac016nm7746dcykhj26ym9zxyv92";

     

       
68
       
68
       
+
       


     

       
69
       
69
       
+
       
  # taken from go.mod, the 'github.com/containerd/containerd' line

     

       
70
       
70
       
+
       
  # run `grep github.com/containerd/containerd go.mod | head -n1 | awk '{print $4}'`

     

       
71
       
71
       
+
       
  containerdVersion = "1.5.11-k3s2";

     

       
72
       
72
       
+
       
  containerdSha256 = "16132snvrg8r0vwm6c0lz0q6fx686s2ix53nm3aka9a83xs75vf2";

     

       
73
       
73
       
+
       


     

       
74
       
74
       
+
       
  # run `grep github.com/kubernetes-sigs/cri-tools go.mod | head -n1 | awk '{print $4}'` in the k3s repo at the tag

     

       
75
       
75
       
+
       
  criCtlVersion = "1.22.0-k3s1";

     

       
76
       
76
       
+
       


     

       
77
       
77
       
+
       
  baseMeta = k3s.meta;

     

       
78
       
78
       
+
       


     

       
79
       
79
       
+
       
  # https://github.com/k3s-io/k3s/blob/5fb370e53e0014dc96183b8ecb2c25a61e891e76/scripts/build#L19-L40

     

       
80
       
80
       
+
       
  versionldflags = [

     

       
81
       
81
       
+
       
    "-X github.com/rancher/k3s/pkg/version.Version=v${k3sVersion}"

     

       
82
       
82
       
+
       
    "-X github.com/rancher/k3s/pkg/version.GitCommit=${lib.substring 0 8 k3sCommit}"

     

       
83
       
83
       
+
       
    "-X k8s.io/client-go/pkg/version.gitVersion=v${k3sVersion}"

     

       
84
       
84
       
+
       
    "-X k8s.io/client-go/pkg/version.gitCommit=${k3sCommit}"

     

       
85
       
85
       
+
       
    "-X k8s.io/client-go/pkg/version.gitTreeState=clean"

     

       
86
       
86
       
+
       
    "-X k8s.io/client-go/pkg/version.buildDate=1970-01-01T01:01:01Z"

     

       
87
       
87
       
+
       
    "-X k8s.io/component-base/version.gitVersion=v${k3sVersion}"

     

       
88
       
88
       
+
       
    "-X k8s.io/component-base/version.gitCommit=${k3sCommit}"

     

       
89
       
89
       
+
       
    "-X k8s.io/component-base/version.gitTreeState=clean"

     

       
90
       
90
       
+
       
    "-X k8s.io/component-base/version.buildDate=1970-01-01T01:01:01Z"

     

       
91
       
91
       
+
       
    "-X github.com/kubernetes-sigs/cri-tools/pkg/version.Version=v${criCtlVersion}"

     

       
92
       
92
       
+
       
    "-X github.com/containerd/containerd/version.Version=v${containerdVersion}"

     

       
93
       
93
       
+
       
    "-X github.com/containerd/containerd/version.Package=github.com/k3s-io/containerd"

     

       
94
       
94
       
+
       
  ];

     

       
95
       
95
       
+
       


     

       
96
       
96
       
+
       
  # bundled into the k3s binary

     

       
97
       
97
       
+
       
  traefikChart = fetchurl {

     

       
98
       
98
       
+
       
    url = "https://helm.traefik.io/traefik/traefik-${traefikChartVersion}.tgz";

     

       
99
       
99
       
+
       
    sha256 = traefikChartSha256;

     

       
100
       
100
       
+
       
  };

     

       
101
       
101
       
+
       
  # so, k3s is a complicated thing to package

     

       
102
       
102
       
+
       
  # This derivation attempts to avoid including any random binaries from the

     

       
103
       
103
       
+
       
  # internet. k3s-root is _mostly_ binaries built to be bundled in k3s (which

     

       
104
       
104
       
+
       
  # we don't care about doing, we can add those as build or runtime

     

       
105
       
105
       
+
       
  # dependencies using a real package manager).

     

       
106
       
106
       
+
       
  # In addition to those binaries, it's also configuration though (right now

     

       
107
       
107
       
+
       
  # mostly strongswan configuration), and k3s does use those files.

     

       
108
       
108
       
+
       
  # As such, we download it in order to grab 'etc' and bundle it into the final

     

       
109
       
109
       
+
       
  # k3s binary.

     

       
110
       
110
       
+
       
  k3sRoot = fetchzip {

     

       
111
       
111
       
+
       
    # Note: marked as apache 2.0 license

     

       
112
       
112
       
+
       
    url = "https://github.com/k3s-io/k3s-root/releases/download/v${k3sRootVersion}/k3s-root-amd64.tar";

     

       
113
       
113
       
+
       
    sha256 = k3sRootSha256;

     

       
114
       
114
       
+
       
    stripRoot = false;

     

       
115
       
115
       
+
       
  };

     

       
116
       
116
       
+
       
  k3sCNIPlugins = buildGoModule rec {

     

       
117
       
117
       
+
       
    pname = "k3s-cni-plugins";

     

       
118
       
118
       
+
       
    version = k3sCNIVersion;

     

       
119
       
119
       
+
       
    vendorSha256 = null;

     

       
120
       
120
       
+
       


     

       
121
       
121
       
+
       
    subPackages = [ "." ];

     

       
122
       
122
       
+
       


     

       
123
       
123
       
+
       
    src = fetchFromGitHub {

     

       
124
       
124
       
+
       
      owner = "rancher";

     

       
125
       
125
       
+
       
      repo = "plugins";

     

       
126
       
126
       
+
       
      rev = "v${version}";

     

       
127
       
127
       
+
       
      sha256 = k3sCNISha256;

     

       
128
       
128
       
+
       
    };

     

       
129
       
129
       
+
       


     

       
130
       
130
       
+
       
    postInstall = ''

     

       
131
       
131
       
+
       
      mv $out/bin/plugins $out/bin/cni

     

       
132
       
132
       
+
       
    '';

     

       
133
       
133
       
+
       


     

       
134
       
134
       
+
       
    meta = baseMeta // {

     

       
135
       
135
       
+
       
      description = "CNI plugins, as patched by rancher for k3s";

     

       
136
       
136
       
+
       
    };

     

       
137
       
137
       
+
       
  };

     

       
138
       
138
       
+
       
  # Grab this separately from a build because it's used by both stages of the

     

       
139
       
139
       
+
       
  # k3s build.

     

       
140
       
140
       
+
       
  k3sRepo = fetchgit {

     

       
141
       
141
       
+
       
    url = "https://github.com/k3s-io/k3s";

     

       
142
       
142
       
+
       
    rev = "v${k3sVersion}";

     

       
143
       
143
       
+
       
    sha256 = k3sRepoSha256;

     

       
144
       
144
       
+
       
  };

     

       
145
       
145
       
+
       
  # Stage 1 of the k3s build:

     

       
146
       
146
       
+
       
  # Let's talk about how k3s is structured.

     

       
147
       
147
       
+
       
  # One of the ideas of k3s is that there's the single "k3s" binary which can

     

       
148
       
148
       
+
       
  # do everything you need, from running a k3s server, to being a worker node,

     

       
149
       
149
       
+
       
  # to running kubectl.

     

       
150
       
150
       
+
       
  # The way that actually works is that k3s is a single go binary that contains

     

       
151
       
151
       
+
       
  # a bunch of bindata that it unpacks at runtime into directories (either the

     

       
152
       
152
       
+
       
  # user's home directory or /var/lib/rancher if run as root).

     

       
153
       
153
       
+
       
  # This bindata includes both binaries and configuration.

     

       
154
       
154
       
+
       
  # In order to let nixpkgs do all its autostripping/patching/etc, we split this into two derivations.

     

       
155
       
155
       
+
       
  # First, we build all the binaries that get packed into the thick k3s binary

     

       
156
       
156
       
+
       
  # (and output them from one derivation so they'll all be suitably patched up).

     

       
157
       
157
       
+
       
  # Then, we bundle those binaries into our thick k3s binary and use that as

     

       
158
       
158
       
+
       
  # the final single output.

     

       
159
       
159
       
+
       
  # This approach was chosen because it ensures the bundled binaries all are

     

       
160
       
160
       
+
       
  # correctly built to run with nix (we can lean on the existing buildGoModule

     

       
161
       
161
       
+
       
  # stuff), and we can again lean on that tooling for the final k3s binary too.

     

       
162
       
162
       
+
       
  # Other alternatives would be to manually run the

     

       
163
       
163
       
+
       
  # strip/patchelf/remove-references step ourselves in the installPhase of the

     

       
164
       
164
       
+
       
  # derivation when we've built all the binaries, but haven't bundled them in

     

       
165
       
165
       
+
       
  # with generated bindata yet.

     

       
166
       
166
       
+
       


     

       
167
       
167
       
+
       
  k3sServer = buildGoModule rec {

     

       
168
       
168
       
+
       
    pname = "k3s-server";

     

       
169
       
169
       
+
       
    version = k3sVersion;

     

       
170
       
170
       
+
       


     

       
171
       
171
       
+
       
    src = k3sRepo;

     

       
172
       
172
       
+
       
    vendorSha256 = k3sVendorSha256;

     

       
173
       
173
       
+
       


     

       
174
       
174
       
+
       
    nativeBuildInputs = [ pkg-config ];

     

       
175
       
175
       
+
       
    buildInputs = [ libseccomp ];

     

       
176
       
176
       
+
       


     

       
177
       
177
       
+
       
    subPackages = [ "cmd/server" ];

     

       
178
       
178
       
+
       
    ldflags = versionldflags;

     

       
179
       
179
       
+
       


     

       
180
       
180
       
+
       
    # create the multicall symlinks for k3s

     

       
181
       
181
       
+
       
    postInstall = ''

     

       
182
       
182
       
+
       
      mv $out/bin/server $out/bin/k3s

     

       
183
       
183
       
+
       
      pushd $out

     

       
184
       
184
       
+
       
      # taken verbatim from https://github.com/k3s-io/k3s/blob/v1.23.3%2Bk3s1/scripts/build#L105-L113

     

       
185
       
185
       
+
       
      ln -s k3s ./bin/k3s-agent

     

       
186
       
186
       
+
       
      ln -s k3s ./bin/k3s-server

     

       
187
       
187
       
+
       
      ln -s k3s ./bin/k3s-etcd-snapshot

     

       
188
       
188
       
+
       
      ln -s k3s ./bin/k3s-secrets-encrypt

     

       
189
       
189
       
+
       
      ln -s k3s ./bin/k3s-certificate

     

       
190
       
190
       
+
       
      ln -s k3s ./bin/kubectl

     

       
191
       
191
       
+
       
      ln -s k3s ./bin/crictl

     

       
192
       
192
       
+
       
      ln -s k3s ./bin/ctr

     

       
193
       
193
       
+
       
      popd

     

       
194
       
194
       
+
       
    '';

     

       
195
       
195
       
+
       


     

       
196
       
196
       
+
       
    meta = baseMeta // {

     

       
197
       
197
       
+
       
      description = "The various binaries that get packaged into the final k3s binary";

     

       
198
       
198
       
+
       
    };

     

       
199
       
199
       
+
       
  };

     

       
200
       
200
       
+
       
  k3sContainerd = buildGoModule {

     

       
201
       
201
       
+
       
    pname = "k3s-containerd";

     

       
202
       
202
       
+
       
    version = containerdVersion;

     

       
203
       
203
       
+
       
    src = fetchFromGitHub {

     

       
204
       
204
       
+
       
      owner = "k3s-io";

     

       
205
       
205
       
+
       
      repo = "containerd";

     

       
206
       
206
       
+
       
      rev = "v${containerdVersion}";

     

       
207
       
207
       
+
       
      sha256 = containerdSha256;

     

       
208
       
208
       
+
       
    };

     

       
209
       
209
       
+
       
    vendorSha256 = null;

     

       
210
       
210
       
+
       
    buildInputs = [ btrfs-progs ];

     

       
211
       
211
       
+
       
    subPackages = [ "cmd/containerd" "cmd/containerd-shim-runc-v2" ];

     

       
212
       
212
       
+
       
    ldflags = versionldflags;

     

       
213
       
213
       
+
       
  };

     

       
214
       
214
       
+
       
in

     

       
215
       
215
       
+
       
buildGoModule rec {

     

       
216
       
216
       
+
       
  pname = "k3s";

     

       
217
       
217
       
+
       
  version = k3sVersion;

     

       
218
       
218
       
+
       


     

       
219
       
219
       
+
       
  src = k3sRepo;

     

       
220
       
220
       
+
       
  vendorSha256 = k3sVendorSha256;

     

       
221
       
221
       
+
       


     

       
222
       
222
       
+
       
  patches = [

     

       
223
       
223
       
+
       
    ./0001-script-download-strip-downloading-just-package-CRD.patch

     

       
224
       
224
       
+
       
  ];

     

       
225
       
225
       
+
       


     

       
226
       
226
       
+
       
  postPatch = ''

     

       
227
       
227
       
+
       
    # Nix prefers dynamically linked binaries over static binary.

     

       
228
       
228
       
+
       


     

       
229
       
229
       
+
       
    substituteInPlace scripts/package-cli \

     

       
230
       
230
       
+
       
      --replace '"$LDFLAGS $STATIC" -o' \

     

       
231
       
231
       
+
       
                '"$LDFLAGS" -o' \

     

       
232
       
232
       
+
       
      --replace "STATIC=\"-extldflags \'-static\'\"" \

     

       
233
       
233
       
+
       
                ""

     

       
234
       
234
       
+
       


     

       
235
       
235
       
+
       
    # Upstream codegen fails with trimpath set. Removes "trimpath" for 'go generate':

     

       
236
       
236
       
+
       


     

       
237
       
237
       
+
       
    substituteInPlace scripts/package-cli \

     

       
238
       
238
       
+
       
      --replace '"''${GO}" generate' \

     

       
239
       
239
       
+
       
                'GOFLAGS="" \

     

       
240
       
240
       
+
       
                 GOOS="${pkgsBuildBuild.go.GOOS}" \

     

       
241
       
241
       
+
       
                 GOARCH="${pkgsBuildBuild.go.GOARCH}" \

     

       
242
       
242
       
+
       
                 CC="${pkgsBuildBuild.stdenv.cc}/bin/cc" \

     

       
243
       
243
       
+
       
                 "''${GO}" generate'

     

       
244
       
244
       
+
       
  '';

     

       
245
       
245
       
+
       


     

       
246
       
246
       
+
       
  # Important utilities used by the kubelet, see

     

       
247
       
247
       
+
       
  # https://github.com/kubernetes/kubernetes/issues/26093#issuecomment-237202494

     

       
248
       
248
       
+
       
  # Note the list in that issue is stale and some aren't relevant for k3s.

     

       
249
       
249
       
+
       
  k3sRuntimeDeps = [

     

       
250
       
250
       
+
       
    kmod

     

       
251
       
251
       
+
       
    socat

     

       
252
       
252
       
+
       
    iptables

     

       
253
       
253
       
+
       
    iproute2

     

       
254
       
254
       
+
       
    bridge-utils

     

       
255
       
255
       
+
       
    ethtool

     

       
256
       
256
       
+
       
    util-linux # kubelet wants 'nsenter' from util-linux: https://github.com/kubernetes/kubernetes/issues/26093#issuecomment-705994388

     

       
257
       
257
       
+
       
    conntrack-tools

     

       
258
       
258
       
+
       
  ];

     

       
259
       
259
       
+
       


     

       
260
       
260
       
+
       
  buildInputs = k3sRuntimeDeps;

     

       
261
       
261
       
+
       


     

       
262
       
262
       
+
       
  nativeBuildInputs = [

     

       
263
       
263
       
+
       
    makeWrapper

     

       
264
       
264
       
+
       
    rsync

     

       
265
       
265
       
+
       
    yq-go

     

       
266
       
266
       
+
       
    zstd

     

       
267
       
267
       
+
       
  ];

     

       
268
       
268
       
+
       


     

       
269
       
269
       
+
       
  # embedded in the final k3s cli

     

       
270
       
270
       
+
       
  propagatedBuildInputs = [

     

       
271
       
271
       
+
       
    k3sCNIPlugins

     

       
272
       
272
       
+
       
    k3sContainerd

     

       
273
       
273
       
+
       
    k3sServer

     

       
274
       
274
       
+
       
    runc

     

       
275
       
275
       
+
       
  ];

     

       
276
       
276
       
+
       


     

       
277
       
277
       
+
       
  # We override most of buildPhase due to peculiarities in k3s's build.

     

       
278
       
278
       
+
       
  # Specifically, it has a 'go generate' which runs part of the package. See

     

       
279
       
279
       
+
       
  # this comment:

     

       
280
       
280
       
+
       
  # https://github.com/NixOS/nixpkgs/pull/158089#discussion_r799965694

     

       
281
       
281
       
+
       
  # So, why do we use buildGoModule at all? For the `vendorSha256` / `go mod download` stuff primarily.

     

       
282
       
282
       
+
       
  buildPhase = ''

     

       
283
       
283
       
+
       
    patchShebangs ./scripts/package-cli ./scripts/download ./scripts/build-upload

     

       
284
       
284
       
+
       


     

       
285
       
285
       
+
       
    # copy needed 'go generate' inputs into place

     

       
286
       
286
       
+
       
    mkdir -p ./bin/aux

     

       
287
       
287
       
+
       
    rsync -a --no-perms ${k3sServer}/bin/ ./bin/

     

       
288
       
288
       
+
       
    ln -vsf ${runc}/bin/runc ./bin/runc

     

       
289
       
289
       
+
       
    ln -vsf ${k3sCNIPlugins}/bin/cni ./bin/cni

     

       
290
       
290
       
+
       
    ln -vsf ${k3sContainerd}/bin/* ./bin/

     

       
291
       
291
       
+
       
    rsync -a --no-perms --chmod u=rwX ${k3sRoot}/etc/ ./etc/

     

       
292
       
292
       
+
       
    mkdir -p ./build/static/charts

     

       
293
       
293
       
+
       
    # Note, upstream's chart has a 00 suffix. This seems to not matter though, so we're ignoring that naming detail.

     

       
294
       
294
       
+
       
    export TRAEFIK_CHART_FILE=${traefikChart}

     

       
295
       
295
       
+
       
    # place the traefik chart using their code since it's complicated

     

       
296
       
296
       
+
       
    # We trim the actual download, see patches

     

       
297
       
297
       
+
       
    ./scripts/download

     

       
298
       
298
       
+
       


     

       
299
       
299
       
+
       
    export ARCH=$GOARCH

     

       
300
       
300
       
+
       
    export DRONE_TAG="v${k3sVersion}"

     

       
301
       
301
       
+
       
    export DRONE_COMMIT="${k3sCommit}"

     

       
302
       
302
       
+
       
    # use ./scripts/package-cli to run 'go generate' + 'go build'

     

       
303
       
303
       
+
       


     

       
304
       
304
       
+
       
    ./scripts/package-cli

     

       
305
       
305
       
+
       
    mkdir -p $out/bin

     

       
306
       
306
       
+
       
  '';

     

       
307
       
307
       
+
       


     

       
308
       
308
       
+
       
  # Otherwise it depends on 'getGoDirs', which is normally set in buildPhase

     

       
309
       
309
       
+
       
  doCheck = false;

     

       
310
       
310
       
+
       


     

       
311
       
311
       
+
       
  installPhase = ''

     

       
312
       
312
       
+
       
    # wildcard to match the arm64 build too

     

       
313
       
313
       
+
       
    install -m 0755 dist/artifacts/k3s* -D $out/bin/k3s

     

       
314
       
314
       
+
       
    wrapProgram $out/bin/k3s \

     

       
315
       
315
       
+
       
      --prefix PATH : ${lib.makeBinPath k3sRuntimeDeps} \

     

       
316
       
316
       
+
       
      --prefix PATH : "$out/bin"

     

       
317
       
317
       
+
       
  '';

     

       
318
       
318
       
+
       


     

       
319
       
319
       
+
       
  doInstallCheck = true;

     

       
320
       
320
       
+
       
  installCheckPhase = ''

     

       
321
       
321
       
+
       
    $out/bin/k3s --version | grep -F "v${k3sVersion}" >/dev/null

     

       
322
       
322
       
+
       
  '';

     

       
323
       
323
       
+
       


     

       
324
       
324
       
+
       
  # Fix-Me: Needs to be adapted specifically for 1.23

     

       
325
       
325
       
+
       
  # passthru.updateScript = ./update.sh;

     

       
326
       
326
       
+
       


     

       
327
       
327
       
+
       
  # Fix-Me: Needs to be adapted specifically for 1.23

     

       
328
       
328
       
+
       
  # passthru.tests = { inherit (nixosTests) k3s-single-node k3s-single-node-docker; };

     

       
329
       
329
       
+
       


     

       
330
       
330
       
+
       
  meta = baseMeta;

     

       
331
       
331
       
+
       
}