···

       
50
       
 
       
## `symlinkJoin` {#trivial-builder-symlinkJoin}

     

       
51
       
 
       


     

       
52
       
 
       
This can be used to put many derivations into the same directory structure. It works by creating a new derivation and adding symlinks to each of the paths listed. It expects two arguments, `name`, and `paths`. `name` is the name used in the Nix store path for the created derivation. `paths` is a list of paths that will be symlinked. These paths can be to Nix store derivations or any other subdirectory contained within.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
50
       
 
       
## `symlinkJoin` {#trivial-builder-symlinkJoin}

     

       
51
       
 
       


     

       
52
       
 
       
This can be used to put many derivations into the same directory structure. It works by creating a new derivation and adding symlinks to each of the paths listed. It expects two arguments, `name`, and `paths`. `name` is the name used in the Nix store path for the created derivation. `paths` is a list of paths that will be symlinked. These paths can be to Nix store derivations or any other subdirectory contained within.

     

       
53
       
+
       


     

       
54
       
+
       
## `writeReferencesToFile` {#trivial-builder-writeReferencesToFile}

     

       
55
       
+
       


     

       
56
       
+
       
Writes the closure of transitive dependencies to a file.

     

       
57
       
+
       


     

       
58
       
+
       
This produces the equivalent of `nix-store -q --requisites`.

     

       
59
       
+
       


     

       
60
       
+
       
For example,

     

       
61
       
+
       


     

       
62
       
+
       
```nix

     

       
63
       
+
       
writeReferencesToFile (writeScriptBin "hi" ''${hello}/bin/hello'')

     

       
64
       
+
       
```

     

       
65
       
+
       


     

       
66
       
+
       
produces an output path `/nix/store/<hash>-runtime-deps` containing

     

       
67
       
+
       


     

       
68
       
+
       
```nix

     

       
69
       
+
       
/nix/store/<hash>-hello-2.10

     

       
70
       
+
       
/nix/store/<hash>-hi

     

       
71
       
+
       
/nix/store/<hash>-libidn2-2.3.0

     

       
72
       
+
       
/nix/store/<hash>-libunistring-0.9.10

     

       
73
       
+
       
/nix/store/<hash>-glibc-2.32-40

     

       
74
       
+
       
```

     

       
75
       
+
       


     

       
76
       
+
       
You can see that this includes `hi`, the original input path,

     

       
77
       
+
       
`hello`, which is a direct reference, but also

     

       
78
       
+
       
the other paths that are indirectly required to run `hello`.

     

       
79
       
+
       


     

       
80
       
+
       
## `writeDirectReferencesToFile` {#trivial-builder-writeDirectReferencesToFile}

     

       
81
       
+
       


     

       
82
       
+
       
Writes the set of references to the output file, that is, their immediate dependencies.

     

       
83
       
+
       


     

       
84
       
+
       
This produces the equivalent of `nix-store -q --references`.

     

       
85
       
+
       


     

       
86
       
+
       
For example,

     

       
87
       
+
       


     

       
88
       
+
       
```nix

     

       
89
       
+
       
writeDirectReferencesToFile (writeScriptBin "hi" ''${hello}/bin/hello'')

     

       
90
       
+
       
```

     

       
91
       
+
       


     

       
92
       
+
       
produces an output path `/nix/store/<hash>-runtime-references` containing

     

       
93
       
+
       


     

       
94
       
+
       
```nix

     

       
95
       
+
       
/nix/store/<hash>-hello-2.10

     

       
96
       
+
       
```

     

       
97
       
+
       


     

       
98
       
+
       
but none of `hello`'s dependencies, because those are not referenced directly

     

       
99
       
+
       
by `hi`'s output.

     

···

       
5
       
 
       


     

       
6
       
 
       
* [`dhall-lang.org` - Installing packages](https://docs.dhall-lang.org/tutorials/Language-Tour.html#installing-packages)

     

       
7
       
 
       


     

       
8
       
-
       
## Remote imports

     

       
9
       
 
       


     

       
10
       
 
       
Nixpkgs bypasses Dhall's support for remote imports using Dhall's

     

       
11
       
 
       
semantic integrity checks.  Specifically, any Dhall import can be protected by

     
···

       
32
       
 
       
to fetch Dhall code ensures that Dhall packages built using Nix remain pure and

     

       
33
       
 
       
also behave well when built within a sandbox.

     

       
34
       
 
       


     

       
35
       
-
       
## Packaging a Dhall expression from scratch

     

       
36
       
 
       


     

       
37
       
 
       
We can illustrate how Nixpkgs integrates Dhall by beginning from the following

     

       
38
       
 
       
trivial Dhall expression with one dependency (the Prelude):

     
···

       
117
       
 
       
$ nix build --file ./example.nix dhallPackages.true

     

       
118
       
 
       
```

     

       
119
       
 
       


     

       
120
       
-
       
## Contents of a Dhall package

     

       
121
       
 
       


     

       
122
       
 
       
The above package produces the following directory tree:

     

       
123
       
 
       


     
···

       
224
       
 
       
…

     

       
225
       
 
       
```

     

       
226
       
 
       


     

       
227
       
-
       
## Packaging functions

     

       
228
       
 
       


     

       
229
       
 
       
We already saw an example of using `buildDhallPackage` to create a Dhall

     

       
230
       
 
       
package from a single file, but most Dhall packages consist of more than one

     
···

       
297
       
 
       
Additionally, `buildDhallGitHubPackage` accepts the same arguments as

     

       
298
       
 
       
`fetchFromGitHub`, such as `sha256` or `fetchSubmodules`.

     

       
299
       
 
       


     

       
300
       
-
       
## `dhall-to-nixpkgs`

     

       
301
       
 
       


     

       
302
       
 
       
You can use the `dhall-to-nixpkgs` command-line utility to automate

     

       
303
       
 
       
packaging Dhall code.  For example:

     
···

       
342
       
 
       
    }

     

       
343
       
 
       
```

     

       
344
       
 
       


     

       
345
       
-
       
## Overriding dependency versions

     

       
346
       
 
       


     

       
347
       
 
       
Suppose that we change our `true.dhall` example expression to depend on an older

     

       
348
       
 
       
version of the Prelude (19.0.0):

     
···

       
415
       
 
       
  };

     

       
416
       
 
       
```

     

       
417
       
 
       


     

       
418
       
-
       
## Overrides

     

       
419
       
 
       


     

       
420
       
 
       
You can override any of the arguments to `buildDhallGitHubPackage` or

     

       
421
       
 
       
`buildDhallDirectoryPackage` using the `overridePackage` attribute of a package.

     

···

       
5
       
 
       


     

       
6
       
 
       
* [`dhall-lang.org` - Installing packages](https://docs.dhall-lang.org/tutorials/Language-Tour.html#installing-packages)

     

       
7
       
 
       


     

       
8
       
+
       
## Remote imports {#ssec-dhall-remote-imports}

     

       
9
       
 
       


     

       
10
       
 
       
Nixpkgs bypasses Dhall's support for remote imports using Dhall's

     

       
11
       
 
       
semantic integrity checks.  Specifically, any Dhall import can be protected by

     
···

       
32
       
 
       
to fetch Dhall code ensures that Dhall packages built using Nix remain pure and

     

       
33
       
 
       
also behave well when built within a sandbox.

     

       
34
       
 
       


     

       
35
       
+
       
## Packaging a Dhall expression from scratch {#ssec-dhall-packaging-expression}

     

       
36
       
 
       


     

       
37
       
 
       
We can illustrate how Nixpkgs integrates Dhall by beginning from the following

     

       
38
       
 
       
trivial Dhall expression with one dependency (the Prelude):

     
···

       
117
       
 
       
$ nix build --file ./example.nix dhallPackages.true

     

       
118
       
 
       
```

     

       
119
       
 
       


     

       
120
       
+
       
## Contents of a Dhall package {#ssec-dhall-package-contents}

     

       
121
       
 
       


     

       
122
       
 
       
The above package produces the following directory tree:

     

       
123
       
 
       


     
···

       
224
       
 
       
…

     

       
225
       
 
       
```

     

       
226
       
 
       


     

       
227
       
+
       
## Packaging functions {#ssec-dhall-packaging-functions}

     

       
228
       
 
       


     

       
229
       
 
       
We already saw an example of using `buildDhallPackage` to create a Dhall

     

       
230
       
 
       
package from a single file, but most Dhall packages consist of more than one

     
···

       
297
       
 
       
Additionally, `buildDhallGitHubPackage` accepts the same arguments as

     

       
298
       
 
       
`fetchFromGitHub`, such as `sha256` or `fetchSubmodules`.

     

       
299
       
 
       


     

       
300
       
+
       
## `dhall-to-nixpkgs` {#ssec-dhall-dhall-to-nixpkgs}

     

       
301
       
 
       


     

       
302
       
 
       
You can use the `dhall-to-nixpkgs` command-line utility to automate

     

       
303
       
 
       
packaging Dhall code.  For example:

     
···

       
342
       
 
       
    }

     

       
343
       
 
       
```

     

       
344
       
 
       


     

       
345
       
+
       
## Overriding dependency versions {#ssec-dhall-overriding-dependency-versions}

     

       
346
       
 
       


     

       
347
       
 
       
Suppose that we change our `true.dhall` example expression to depend on an older

     

       
348
       
 
       
version of the Prelude (19.0.0):

     
···

       
415
       
 
       
  };

     

       
416
       
 
       
```

     

       
417
       
 
       


     

       
418
       
+
       
## Overrides {#ssec-dhall-overrides}

     

       
419
       
 
       


     

       
420
       
 
       
You can override any of the arguments to `buildDhallGitHubPackage` or

     

       
421
       
 
       
`buildDhallDirectoryPackage` using the `overridePackage` attribute of a package.

     

···

       
2511
       
 
       
    githubId = 1316469;

     

       
2512
       
 
       
    name = "Naomi Morse";

     

       
2513
       
 
       
  };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
2514
       
 
       
  dmalikov = {

     

       
2515
       
 
       
    email = "malikov.d.y@gmail.com";

     

       
2516
       
 
       
    github = "dmalikov";

     

···

       
2511
       
 
       
    githubId = 1316469;

     

       
2512
       
 
       
    name = "Naomi Morse";

     

       
2513
       
 
       
  };

     

       
2514
       
+
       
  dlesl = {

     

       
2515
       
+
       
    email = "dlesl@dlesl.com";

     

       
2516
       
+
       
    github = "dlesl";

     

       
2517
       
+
       
    githubId = 28980797;

     

       
2518
       
+
       
    name = "David Leslie";

     

       
2519
       
+
       
  };

     

       
2520
       
 
       
  dmalikov = {

     

       
2521
       
 
       
    email = "malikov.d.y@gmail.com";

     

       
2522
       
 
       
    github = "dmalikov";

     

···

       
54
       
 
       


     

       
55
       
 
       
    services.dbus.packages = [ pkgs.dconf ];

     

       
56
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
57
       
 
       
    # For dconf executable

     

       
58
       
 
       
    environment.systemPackages = [ pkgs.dconf ];

     

       
59
       
 
       


     

···

       
54
       
 
       


     

       
55
       
 
       
    services.dbus.packages = [ pkgs.dconf ];

     

       
56
       
 
       


     

       
57
       
+
       
    systemd.packages = [ pkgs.dconf ];

     

       
58
       
+
       


     

       
59
       
 
       
    # For dconf executable

     

       
60
       
 
       
    environment.systemPackages = [ pkgs.dconf ];

     

       
61
       
 
       


     

···

       
10
       
 
       
    blacklist = cfg.caCertificateBlacklist;

     

       
11
       
 
       
  };

     

       
12
       
 
       


     

       
13
       
-
       
  caCertificates = pkgs.runCommand "ca-certificates.crt"

     

       
14
       
-
       
    { files =

     

       
15
       
-
       
        cfg.certificateFiles ++

     

       
16
       
-
       
        [ (builtins.toFile "extra.crt" (concatStringsSep "\n" cfg.certificates)) ];

     

       
17
       
-
       
      preferLocalBuild = true;

     

       
18
       
-
       
     }

     

       
19
       
-
       
    ''

     

       
20
       
-
       
      cat $files > $out

     

       
21
       
-
       
    '';

     

       
22
       
 
       


     

       
23
       
 
       
in

     

       
24
       
 
       


     

···

       
10
       
 
       
    blacklist = cfg.caCertificateBlacklist;

     

       
11
       
 
       
  };

     

       
12
       
 
       


     

       
13
       
+
       
  caCertificates = pkgs.runCommand "ca-certificates.crt" {

     

       
14
       
+
       
    files = cfg.certificateFiles ++ [ (builtins.toFile "extra.crt" (concatStringsSep "\n" cfg.certificates)) ];

     

       
15
       
+
       
    preferLocalBuild = true;

     

       
16
       
+
       
  } "awk 1 $files > $out";  # awk ensures a newline between each pair of consecutive files

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
17
       
 
       


     

       
18
       
 
       
in

     

       
19
       
 
       


     

···

       
159
       
 
       
                For more information on how to specify the target

     

       
160
       
 
       
                and on which privileges exist, see the

     

       
161
       
 
       
                <link xlink:href="https://www.postgresql.org/docs/current/sql-grant.html">GRANT syntax</link>.

     

       
162
       
-
       
                The attributes are used as <code>GRANT ''${attrName} ON ''${attrValue}</code>.

     

       
163
       
 
       
              '';

     

       
164
       
 
       
              example = literalExample ''

     

       
165
       
 
       
                {

     

···

       
159
       
 
       
                For more information on how to specify the target

     

       
160
       
 
       
                and on which privileges exist, see the

     

       
161
       
 
       
                <link xlink:href="https://www.postgresql.org/docs/current/sql-grant.html">GRANT syntax</link>.

     

       
162
       
+
       
                The attributes are used as <code>GRANT ''${attrValue} ON ''${attrName}</code>.

     

       
163
       
 
       
              '';

     

       
164
       
 
       
              example = literalExample ''

     

       
165
       
 
       
                {

     

···

       
331
       
 
       
        PrivateMounts = true;

     

       
332
       
 
       
        # System Call Filtering

     

       
333
       
 
       
        SystemCallArchitectures = "native";

     

       
334
       
-
       
        SystemCallFilter = "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap";

     

       
335
       
 
       
      };

     

       
336
       
 
       
    };

     

       
337
       
 
       
  };

     

···

       
331
       
 
       
        PrivateMounts = true;

     

       
332
       
 
       
        # System Call Filtering

     

       
333
       
 
       
        SystemCallArchitectures = "native";

     

       
334
       
+
       
        SystemCallFilter = "~@cpu-emulation @debug @keyring @memlock @mount @obsolete @privileged @resources @setuid";

     

       
335
       
 
       
      };

     

       
336
       
 
       
    };

     

       
337
       
 
       
  };

     

···

       
131
       
 
       
            env = (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [

     

       
132
       
 
       
                    ipykernel

     

       
133
       
 
       
                    pandas

     

       
134
       
-
       
                    scikitlearn

     

       
135
       
 
       
                  ]));

     

       
136
       
 
       
          in {

     

       
137
       
 
       
            displayName = "Python 3 for machine learning";

     

···

       
131
       
 
       
            env = (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [

     

       
132
       
 
       
                    ipykernel

     

       
133
       
 
       
                    pandas

     

       
134
       
+
       
                    scikit-learn

     

       
135
       
 
       
                  ]));

     

       
136
       
 
       
          in {

     

       
137
       
 
       
            displayName = "Python 3 for machine learning";

     

···

       
117
       
 
       
            env = (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [

     

       
118
       
 
       
                    ipykernel

     

       
119
       
 
       
                    pandas

     

       
120
       
-
       
                    scikitlearn

     

       
121
       
 
       
                  ]));

     

       
122
       
 
       
          in {

     

       
123
       
 
       
            displayName = "Python 3 for machine learning";

     

···

       
117
       
 
       
            env = (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [

     

       
118
       
 
       
                    ipykernel

     

       
119
       
 
       
                    pandas

     

       
120
       
+
       
                    scikit-learn

     

       
121
       
 
       
                  ]));

     

       
122
       
 
       
          in {

     

       
123
       
 
       
            displayName = "Python 3 for machine learning";

     

···

       
31
       
 
       


     

       
32
       
 
       
  config = mkIf cfg.enable {

     

       
33
       
 
       


     

       
34
       
-
       
    users = {

     

       
35
       
-
       
      groups.lm_sensors = {};

     

       
36
       
-
       


     

       
37
       
-
       
      users.fancontrol = {

     

       
38
       
-
       
        isSystemUser = true;

     

       
39
       
-
       
        group = "lm_sensors";

     

       
40
       
-
       
        description = "fan speed controller";

     

       
41
       
-
       
      };

     

       
42
       
-
       
    };

     

       
43
       
-
       


     

       
44
       
 
       
    systemd.services.fancontrol = {

     

       
45
       
 
       
      documentation = [ "man:fancontrol(8)" ];

     

       
46
       
 
       
      description = "software fan control";

     
···

       
49
       
 
       


     

       
50
       
 
       
      serviceConfig = {

     

       
51
       
 
       
        ExecStart = "${pkgs.lm_sensors}/sbin/fancontrol ${configFile}";

     

       
52
       
-
       
        Group = "lm_sensors";

     

       
53
       
-
       
        User = "fancontrol";

     

       
54
       
 
       
      };

     

       
55
       
 
       
    };

     

       
56
       
 
       
  };

     

···

       
31
       
 
       


     

       
32
       
 
       
  config = mkIf cfg.enable {

     

       
33
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
34
       
 
       
    systemd.services.fancontrol = {

     

       
35
       
 
       
      documentation = [ "man:fancontrol(8)" ];

     

       
36
       
 
       
      description = "software fan control";

     
···

       
39
       
 
       


     

       
40
       
 
       
      serviceConfig = {

     

       
41
       
 
       
        ExecStart = "${pkgs.lm_sensors}/sbin/fancontrol ${configFile}";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
42
       
 
       
      };

     

       
43
       
 
       
    };

     

       
44
       
 
       
  };

     

···

       
92
       
 
       
        SystemCallErrorNumber = "EPERM";

     

       
93
       
 
       
        SystemCallFilter = [

     

       
94
       
 
       
          "@system-service"

     

       
95
       
-
       


     

       
96
       
-
       
          "~@chown" "~@cpu-emulation" "~@debug" "~@keyring" "~@memlock" "~@module"

     

       
97
       
-
       
          "~@obsolete" "~@privileged" "~@setuid"

     

       
98
       
 
       
        ];

     

       
99
       
 
       
      };

     

       
100
       
 
       
    };

     

···

       
92
       
 
       
        SystemCallErrorNumber = "EPERM";

     

       
93
       
 
       
        SystemCallFilter = [

     

       
94
       
 
       
          "@system-service"

     

       
95
       
+
       
          "~@cpu-emulation" "~@debug" "~@keyring" "~@memlock" "~@obsolete" "~@privileged" "~@setuid"

     

       
0
       
 
       

     

       
0
       
 
       

     

       
96
       
 
       
        ];

     

       
97
       
 
       
      };

     

       
98
       
 
       
    };

     

···

       
117
       
 
       
        PrivateMounts = true;

     

       
118
       
 
       
        # System Call Filtering

     

       
119
       
 
       
        SystemCallArchitectures = "native";

     

       
120
       
-
       
        SystemCallFilter = "~@clock @cpu-emulation @debug @module @mount @obsolete @privileged @raw-io @reboot @resources @swap";

     

       
121
       
 
       
      };

     

       
122
       
 
       
    };

     

       
123
       
 
       
  };

     

···

       
117
       
 
       
        PrivateMounts = true;

     

       
118
       
 
       
        # System Call Filtering

     

       
119
       
 
       
        SystemCallArchitectures = "native";

     

       
120
       
+
       
        SystemCallFilter = "~@cpu-emulation @debug @mount @obsolete @privileged @resources";

     

       
121
       
 
       
      };

     

       
122
       
 
       
    };

     

       
123
       
 
       
  };

     

···

       
72
       
 
       
        RuntimeDirectoryMode = "700";

     

       
73
       
 
       
        SystemCallFilter = [

     

       
74
       
 
       
          "@system-service"

     

       
75
       
-
       
          "~@aio" "~@chown" "~@keyring" "~@memlock"

     

       
76
       
-
       
          "~@privileged" "~@resources" "~@setuid"

     

       
77
       
-
       
          "~@sync" "~@timer"

     

       
78
       
 
       
        ];

     

       
79
       
 
       
        SystemCallArchitectures = "native";

     

       
80
       
 
       
        SystemCallErrorNumber = "EPERM";

     

···

       
72
       
 
       
        RuntimeDirectoryMode = "700";

     

       
73
       
 
       
        SystemCallFilter = [

     

       
74
       
 
       
          "@system-service"

     

       
75
       
+
       
          "~@aio" "~@keyring" "~@memlock" "~@privileged" "~@resources" "~@setuid" "~@sync" "~@timer"

     

       
0
       
 
       

     

       
0
       
 
       

     

       
76
       
 
       
        ];

     

       
77
       
 
       
        SystemCallArchitectures = "native";

     

       
78
       
 
       
        SystemCallErrorNumber = "EPERM";

     

···

       
86
       
 
       
        SystemCallErrorNumber = "EPERM";

     

       
87
       
 
       
        SystemCallFilter = [

     

       
88
       
 
       
          "@system-service"

     

       
89
       
-
       


     

       
90
       
-
       
          "~@chown" "~@cpu-emulation" "~@debug" "~@keyring" "~@memlock"

     

       
91
       
-
       
          "~@module" "~@obsolete" "~@privileged" "~@raw-io"

     

       
92
       
-
       
          "~@resources" "~@setuid"

     

       
93
       
 
       
        ];

     

       
94
       
 
       
      };

     

       
95
       
 
       
    };

     

···

       
86
       
 
       
        SystemCallErrorNumber = "EPERM";

     

       
87
       
 
       
        SystemCallFilter = [

     

       
88
       
 
       
          "@system-service"

     

       
89
       
+
       
          "~@cpu-emulation" "~@debug" "~@keyring" "~@memlock" "~@obsolete" "~@privileged" "~@resources" "~@setuid"

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
90
       
 
       
        ];

     

       
91
       
 
       
      };

     

       
92
       
 
       
    };

     

···

       
41
       
 
       


     

       
42
       
 
       
        As an example:

     

       
43
       
 
       
        <programlisting>

     

       
44
       
-
       
        security.acme.certs."example.com".allowKeysForGroup = true;

     

       
45
       
 
       
        systemd.services.molly-brown.serviceConfig.SupplementaryGroups =

     

       
46
       
 
       
          [ config.security.acme.certs."example.com".group ];

     

       
47
       
 
       
        </programlisting>

     

···

       
41
       
 
       


     

       
42
       
 
       
        As an example:

     

       
43
       
 
       
        <programlisting>

     

       
0
       
 
       

     

       
44
       
 
       
        systemd.services.molly-brown.serviceConfig.SupplementaryGroups =

     

       
45
       
 
       
          [ config.security.acme.certs."example.com".group ];

     

       
46
       
 
       
        </programlisting>

     

···

       
859
       
 
       
        PrivateMounts = true;

     

       
860
       
 
       
        # System Call Filtering

     

       
861
       
 
       
        SystemCallArchitectures = "native";

     

       
862
       
-
       
        SystemCallFilter = "~@chown @cpu-emulation @debug @keyring @ipc @module @mount @obsolete @privileged @raw-io @reboot @setuid @swap";

     

       
863
       
 
       
      };

     

       
864
       
 
       
    };

     

       
865
       
 
       


     
···

       
867
       
 
       
      source = configFile;

     

       
868
       
 
       
    };

     

       
869
       
 
       


     

       
870
       
-
       
    # postRun hooks on cert renew can't be used to restart Nginx since renewal

     

       
871
       
-
       
    # runs as the unprivileged acme user. sslTargets are added to wantedBy + before

     

       
0
       
 
       

     

       
872
       
 
       
    # which allows the acme-finished-$cert.target to signify the successful updating

     

       
873
       
 
       
    # of certs end-to-end.

     

       
874
       
 
       
    systemd.services.nginx-config-reload = let

     

···

       
859
       
 
       
        PrivateMounts = true;

     

       
860
       
 
       
        # System Call Filtering

     

       
861
       
 
       
        SystemCallArchitectures = "native";

     

       
862
       
+
       
        SystemCallFilter = "~@cpu-emulation @debug @keyring @ipc @mount @obsolete @privileged @setuid";

     

       
863
       
 
       
      };

     

       
864
       
 
       
    };

     

       
865
       
 
       


     
···

       
867
       
 
       
      source = configFile;

     

       
868
       
 
       
    };

     

       
869
       
 
       


     

       
870
       
+
       
    # This service waits for all certificates to be available

     

       
871
       
+
       
    # before reloading nginx configuration.

     

       
872
       
+
       
    # sslTargets are added to wantedBy + before

     

       
873
       
 
       
    # which allows the acme-finished-$cert.target to signify the successful updating

     

       
874
       
 
       
    # of certs end-to-end.

     

       
875
       
 
       
    systemd.services.nginx-config-reload = let

     

···

       
309
       
 
       
        "mount-pstore" = {

     

       
310
       
 
       
          serviceConfig = {

     

       
311
       
 
       
            Type = "oneshot";

     

       
312
       
-
       
            ExecStart = "${pkgs.utillinux}/bin/mount -t pstore -o nosuid,noexec,nodev pstore /sys/fs/pstore";

     

       
313
       
 
       
            ExecStartPost = pkgs.writeShellScript "wait-for-pstore.sh" ''

     

       
314
       
 
       
              set -eu

     

       
315
       
 
       
              TRIES=0

     

···

       
309
       
 
       
        "mount-pstore" = {

     

       
310
       
 
       
          serviceConfig = {

     

       
311
       
 
       
            Type = "oneshot";

     

       
312
       
+
       
            ExecStart = "${pkgs.util-linux}/bin/mount -t pstore -o nosuid,noexec,nodev pstore /sys/fs/pstore";

     

       
313
       
 
       
            ExecStartPost = pkgs.writeShellScript "wait-for-pstore.sh" ''

     

       
314
       
 
       
              set -eu

     

       
315
       
 
       
              TRIES=0

     

···

       
9
       
 
       


     

       
10
       
 
       
mkDerivation rec {

     

       
11
       
 
       
   pname = "spotify-qt";

     

       
12
       
-
       
   version = "3.5";

     

       
13
       
 
       


     

       
14
       
 
       
   src = fetchFromGitHub {

     

       
15
       
 
       
      owner = "kraxarn";

     

       
16
       
 
       
      repo = pname;

     

       
17
       
 
       
      rev = "v${version}";

     

       
18
       
-
       
      sha256 = "1bgd0q4sbbww3lbrx2zwgaz0sl7qh195s4kvgsq16gv7ij82bskn";

     

       
19
       
 
       
   };

     

       
20
       
 
       


     

       
21
       
 
       
   buildInputs = [ libxcb qtbase qtsvg ];

     

···

       
9
       
 
       


     

       
10
       
 
       
mkDerivation rec {

     

       
11
       
 
       
   pname = "spotify-qt";

     

       
12
       
+
       
   version = "3.6";

     

       
13
       
 
       


     

       
14
       
 
       
   src = fetchFromGitHub {

     

       
15
       
 
       
      owner = "kraxarn";

     

       
16
       
 
       
      repo = pname;

     

       
17
       
 
       
      rev = "v${version}";

     

       
18
       
+
       
      sha256 = "mKHyE6ZffMYYRLMpzMX53chyJyWxhTAaGvtBI3l6wkI=";

     

       
19
       
 
       
   };

     

       
20
       
 
       


     

       
21
       
 
       
   buildInputs = [ libxcb qtbase qtsvg ];

     

···

       
2
       
 
       


     

       
3
       
 
       
mkDerivation rec {

     

       
4
       
 
       
  pname = "ghostwriter";

     

       
5
       
-
       
  version = "2.0.0";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "wereturtle";

     

       
9
       
 
       
    repo = pname;

     

       
10
       
 
       
    rev = version;

     

       
11
       
-
       
    sha256 = "sha256-5O2W7ZQeDkNzwi6t9MfNbv4fmNvak1AcMnzJTE1F9L8=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
 
       
  nativeBuildInputs = [ qmake pkg-config qttools ];

     

···

       
2
       
 
       


     

       
3
       
 
       
mkDerivation rec {

     

       
4
       
 
       
  pname = "ghostwriter";

     

       
5
       
+
       
  version = "2.0.1";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "wereturtle";

     

       
9
       
 
       
    repo = pname;

     

       
10
       
 
       
    rev = version;

     

       
11
       
+
       
    sha256 = "sha256-bNVhYwX60F3lrP9UmZSntfz83vbmHe9tu/4nUgzUWR4=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
 
       
  nativeBuildInputs = [ qmake pkg-config qttools ];

     

···

       
23
       
 
       
, qtsvg

     

       
24
       
 
       
, qtx11extras

     

       
25
       
 
       
, quazip

     

       
0
       
 
       

     

       
26
       
 
       
, wrapQtAppsHook

     

       
27
       
 
       
, yubikey-personalization

     

       
28
       
 
       
, zlib

     
···

       
51
       
 
       
    sha256 = "02ajfkw818cmalvkl0kqvza85rgdgs59kw2v7b3c4v8kv00c41j3";

     

       
52
       
 
       
  };

     

       
53
       
 
       


     

       
54
       
-
       
  NIX_CFLAGS_COMPILE = lib.optionalString stdenv.cc.isClang [

     

       
55
       
 
       
    "-Wno-old-style-cast"

     

       
56
       
 
       
    "-Wno-error"

     

       
57
       
 
       
    "-D__BIG_ENDIAN__=${if stdenv.isBigEndian then "1" else "0"}"

     

       
58
       
 
       
  ];

     

       
59
       
 
       


     

       
60
       
-
       
  NIX_LDFLAGS = lib.optionalString stdenv.isDarwin "-rpath ${libargon2}/lib";

     

       
61
       
 
       


     

       
62
       
 
       
  patches = [

     

       
63
       
 
       
    ./darwin.patch

     
···

       
108
       
 
       
    qtbase

     

       
109
       
 
       
    qtsvg

     

       
110
       
 
       
    qtx11extras

     

       
0
       
 
       

     

       
111
       
 
       
    yubikey-personalization

     

       
112
       
 
       
    zlib

     

       
113
       
 
       
  ]

     

       
114
       
-
       
  ++ lib.optional withKeePassKeeShareSecure quazip

     

       
115
       
-
       
  ++ lib.optional stdenv.isDarwin qtmacextras

     

       
116
       
-
       
  ++ lib.optional (stdenv.isDarwin && withKeePassTouchID) darwin.apple_sdk.frameworks.LocalAuthentication;

     

       
0
       
 
       

     

       
117
       
 
       


     

       
118
       
 
       
  preFixup = optionalString stdenv.isDarwin ''

     

       
119
       
 
       
    # Make it work without Qt in PATH.

     
···

       
123
       
 
       
  passthru.tests = nixosTests.keepassxc;

     

       
124
       
 
       


     

       
125
       
 
       
  meta = {

     

       
126
       
-
       
    description = "Password manager to store your passwords safely and auto-type them into your everyday websites and applications";

     

       
127
       
-
       
    longDescription = "A community fork of KeePassX, which is itself a port of KeePass Password Safe. The goal is to extend and improve KeePassX with new features and bugfixes to provide a feature-rich, fully cross-platform and modern open-source password manager. Accessible via native cross-platform GUI, CLI, and browser integration with the KeePassXC Browser Extension (https://github.com/keepassxreboot/keepassxc-browser).";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
128
       
 
       
    homepage = "https://keepassxc.org/";

     

       
129
       
 
       
    license = licenses.gpl2Plus;

     

       
130
       
 
       
    maintainers = with maintainers; [ jonafato turion ];

     

···

       
23
       
 
       
, qtsvg

     

       
24
       
 
       
, qtx11extras

     

       
25
       
 
       
, quazip

     

       
26
       
+
       
, readline

     

       
27
       
 
       
, wrapQtAppsHook

     

       
28
       
 
       
, yubikey-personalization

     

       
29
       
 
       
, zlib

     
···

       
52
       
 
       
    sha256 = "02ajfkw818cmalvkl0kqvza85rgdgs59kw2v7b3c4v8kv00c41j3";

     

       
53
       
 
       
  };

     

       
54
       
 
       


     

       
55
       
+
       
  NIX_CFLAGS_COMPILE = optionalString stdenv.cc.isClang [

     

       
56
       
 
       
    "-Wno-old-style-cast"

     

       
57
       
 
       
    "-Wno-error"

     

       
58
       
 
       
    "-D__BIG_ENDIAN__=${if stdenv.isBigEndian then "1" else "0"}"

     

       
59
       
 
       
  ];

     

       
60
       
 
       


     

       
61
       
+
       
  NIX_LDFLAGS = optionalString stdenv.isDarwin "-rpath ${libargon2}/lib";

     

       
62
       
 
       


     

       
63
       
 
       
  patches = [

     

       
64
       
 
       
    ./darwin.patch

     
···

       
109
       
 
       
    qtbase

     

       
110
       
 
       
    qtsvg

     

       
111
       
 
       
    qtx11extras

     

       
112
       
+
       
    readline

     

       
113
       
 
       
    yubikey-personalization

     

       
114
       
 
       
    zlib

     

       
115
       
 
       
  ]

     

       
116
       
+
       
  ++ optional withKeePassKeeShareSecure quazip

     

       
117
       
+
       
  ++ optional stdenv.isDarwin qtmacextras

     

       
118
       
+
       
  ++ optional (stdenv.isDarwin && withKeePassTouchID)

     

       
119
       
+
       
    darwin.apple_sdk.frameworks.LocalAuthentication;

     

       
120
       
 
       


     

       
121
       
 
       
  preFixup = optionalString stdenv.isDarwin ''

     

       
122
       
 
       
    # Make it work without Qt in PATH.

     
···

       
126
       
 
       
  passthru.tests = nixosTests.keepassxc;

     

       
127
       
 
       


     

       
128
       
 
       
  meta = {

     

       
129
       
+
       
    description = "Offline password manager with many features.";

     

       
130
       
+
       
    longDescription = ''

     

       
131
       
+
       
      A community fork of KeePassX, which is itself a port of KeePass Password Safe.

     

       
132
       
+
       
      The goal is to extend and improve KeePassX with new features and bugfixes,

     

       
133
       
+
       
      to provide a feature-rich, fully cross-platform and modern open-source password manager.

     

       
134
       
+
       
      Accessible via native cross-platform GUI, CLI, has browser integration

     

       
135
       
+
       
      using the KeePassXC Browser Extension (https://github.com/keepassxreboot/keepassxc-browser)

     

       
136
       
+
       
    '';

     

       
137
       
 
       
    homepage = "https://keepassxc.org/";

     

       
138
       
 
       
    license = licenses.gpl2Plus;

     

       
139
       
 
       
    maintainers = with maintainers; [ jonafato turion ];

     

···

       
1
       
-
       
{ lib, stdenv, fetchFromGitHub, cmake, pkg-config, wxGTK, gtk2, sfml, fluidsynth, curl, freeimage, ftgl, glew, zip }:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
2
       
 
       


     

       
3
       
 
       
stdenv.mkDerivation {

     

       
4
       
-
       
  name = "slade-git-3.1.2.2018.01.29";

     

       
5
       
 
       


     

       
6
       
 
       
  src = fetchFromGitHub {

     

       
7
       
 
       
    owner = "sirjuddington";

     

       
8
       
 
       
    repo = "SLADE";

     

       
9
       
-
       
    rev = "f7409c504b40c4962f419038db934c32688ddd2e";

     

       
10
       
-
       
    sha256 = "14icxiy0r9rlcc10skqs1ylnxm1f0f3irhzfmx4sazq0pjv5ivld";

     

       
11
       
 
       
  };

     

       
12
       
 
       


     

       
13
       
-
       
  cmakeFlags = ["-DNO_WEBVIEW=1"];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
14
       
 
       
  nativeBuildInputs = [ cmake pkg-config zip ];

     

       
15
       
-
       
  buildInputs = [ wxGTK gtk2 sfml fluidsynth curl freeimage ftgl glew ];

     

       
16
       
 
       


     

       
17
       
 
       
  meta = with lib; {

     

       
18
       
 
       
    description = "Doom editor";

     

···

       
1
       
+
       
{ lib, stdenv, fetchFromGitHub

     

       
2
       
+
       
, cmake

     

       
3
       
+
       
, pkg-config

     

       
4
       
+
       
, wxGTK

     

       
5
       
+
       
, sfml

     

       
6
       
+
       
, fluidsynth

     

       
7
       
+
       
, curl

     

       
8
       
+
       
, freeimage

     

       
9
       
+
       
, ftgl

     

       
10
       
+
       
, glew

     

       
11
       
+
       
, zip

     

       
12
       
+
       
, lua

     

       
13
       
+
       
, fmt

     

       
14
       
+
       
, mpg123

     

       
15
       
+
       
}:

     

       
16
       
 
       


     

       
17
       
 
       
stdenv.mkDerivation {

     

       
18
       
+
       
  name = "slade-git-3.2.0.2021.05.13";

     

       
19
       
 
       


     

       
20
       
 
       
  src = fetchFromGitHub {

     

       
21
       
 
       
    owner = "sirjuddington";

     

       
22
       
 
       
    repo = "SLADE";

     

       
23
       
+
       
    rev = "d2e249c89062a44c912a9b86951526edc8735ba0";

     

       
24
       
+
       
    sha256 = "08dsvx7m7c97jm8fxzivmi1fr47hj53y0lv57clqc35bh2gi62dg";

     

       
25
       
 
       
  };

     

       
26
       
 
       


     

       
27
       
+
       
  cmakeFlags = [

     

       
28
       
+
       
    "-DwxWidgets_CONFIG_EXECUTABLE=${wxGTK}/bin/wx-config"

     

       
29
       
+
       
    "-DWX_GTK3=OFF"

     

       
30
       
+
       
    "-DNO_WEBVIEW=1"

     

       
31
       
+
       
  ];

     

       
32
       
 
       
  nativeBuildInputs = [ cmake pkg-config zip ];

     

       
33
       
+
       
  buildInputs = [ wxGTK wxGTK.gtk sfml fluidsynth curl freeimage ftgl glew lua fmt mpg123 ];

     

       
34
       
 
       


     

       
35
       
 
       
  meta = with lib; {

     

       
36
       
 
       
    description = "Doom editor";

     

···

       
33
       
 
       
, libXrandr

     

       
34
       
 
       
, libXrender

     

       
35
       
 
       
, libXtst

     

       
0
       
 
       

     

       
36
       
 
       
, libsecret

     

       
37
       
 
       
, libuuid

     

       
38
       
 
       
, libxcb

     
···

       
81
       
 
       
    libXrandr

     

       
82
       
 
       
    libXrender

     

       
83
       
 
       
    libXtst

     

       
0
       
 
       

     

       
84
       
 
       
    libsecret

     

       
85
       
 
       
    libuuid

     

       
86
       
 
       
    libxcb

     
···

       
97
       
 
       
in

     

       
98
       
 
       
stdenv.mkDerivation rec {

     

       
99
       
 
       
  pname = "appgate-sdp";

     

       
100
       
-
       
  version = "5.3.3";

     

       
101
       
 
       


     

       
102
       
 
       
  src = fetchurl {

     

       
103
       
 
       
    url = "https://bin.appgate-sdp.com/${lib.versions.majorMinor version}/client/appgate-sdp_${version}_amd64.deb";

     

       
104
       
-
       
    sha256 = "1854m93mr2crg68zhh1pgwwis0dqdv0778wqrb8dz9sdz940rza8";

     

       
105
       
 
       
  };

     

       
106
       
 
       


     

       
107
       
 
       
  dontConfigure = true;

     
···

       
170
       
 
       
      patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" --set-rpath "$ORIGIN:$out/opt/appgate/service/:$out/opt/appgate/:${rpath}" $binary

     

       
171
       
 
       
    done

     

       
172
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
173
       
 
       
    wrapProgram $out/opt/appgate/appgate-driver --prefix PATH : ${lib.makeBinPath [ iproute2 networkmanager dnsmasq ]}

     

       
174
       
 
       
    wrapProgram $out/opt/appgate/linux/set_dns --set PYTHONPATH $PYTHONPATH

     

       
175
       
-
       
    wrapProgram $out/bin/appgate --prefix PATH : ${xdg-utils}/bin

     

       
176
       
 
       
  '';

     

       
177
       
 
       
  meta = with lib; {

     

       
178
       
 
       
    description = "Appgate SDP (Software Defined Perimeter) desktop client";

     

···

       
33
       
 
       
, libXrandr

     

       
34
       
 
       
, libXrender

     

       
35
       
 
       
, libXtst

     

       
36
       
+
       
, libxkbcommon

     

       
37
       
 
       
, libsecret

     

       
38
       
 
       
, libuuid

     

       
39
       
 
       
, libxcb

     
···

       
82
       
 
       
    libXrandr

     

       
83
       
 
       
    libXrender

     

       
84
       
 
       
    libXtst

     

       
85
       
+
       
    libxkbcommon

     

       
86
       
 
       
    libsecret

     

       
87
       
 
       
    libuuid

     

       
88
       
 
       
    libxcb

     
···

       
99
       
 
       
in

     

       
100
       
 
       
stdenv.mkDerivation rec {

     

       
101
       
 
       
  pname = "appgate-sdp";

     

       
102
       
+
       
  version = "5.4.0";

     

       
103
       
 
       


     

       
104
       
 
       
  src = fetchurl {

     

       
105
       
 
       
    url = "https://bin.appgate-sdp.com/${lib.versions.majorMinor version}/client/appgate-sdp_${version}_amd64.deb";

     

       
106
       
+
       
    sha256 = "sha256-2DzZ5JnFGBeaHtDf7CAXb/qv6kVI+sYMW5Nc25E3eNA=";

     

       
107
       
 
       
  };

     

       
108
       
 
       


     

       
109
       
 
       
  dontConfigure = true;

     
···

       
172
       
 
       
      patchelf --set-interpreter "$(cat $NIX_CC/nix-support/dynamic-linker)" --set-rpath "$ORIGIN:$out/opt/appgate/service/:$out/opt/appgate/:${rpath}" $binary

     

       
173
       
 
       
    done

     

       
174
       
 
       


     

       
175
       
+
       
    # fail if there are missing dependencies

     

       
176
       
+
       
    ldd $out/opt/appgate/appgate | grep -i 'not found' && exit 1

     

       
177
       
+
       
    ldd $out/opt/appgate/service/appgateservice.bin | grep -i 'not found' && exit 1

     

       
178
       
+
       
    ldd $out/opt/appgate/appgate-driver | grep -i 'not found' && exit 1

     

       
179
       
+
       


     

       
180
       
 
       
    wrapProgram $out/opt/appgate/appgate-driver --prefix PATH : ${lib.makeBinPath [ iproute2 networkmanager dnsmasq ]}

     

       
181
       
 
       
    wrapProgram $out/opt/appgate/linux/set_dns --set PYTHONPATH $PYTHONPATH

     

       
182
       
+
       
    wrapProgram $out/bin/appgate --prefix PATH : ${lib.makeBinPath [ xdg-utils ]}

     

       
183
       
 
       
  '';

     

       
184
       
 
       
  meta = with lib; {

     

       
185
       
 
       
    description = "Appgate SDP (Software Defined Perimeter) desktop client";

     

···

       
11
       
 
       
    sha256 = "1iqgpmljqx6rhmvsir2675waj78amcfiw08knwvlmavjgpxx2ysw";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
14
       
 
       
  vendorSha256 = "1jh2f66ys6rmrrwrf5zqfprgcvziyq6l4z8bfqwxgf1ysnxx525h";

     

       
15
       
 
       


     

       
16
       
 
       
  doCheck = false;

     
···

       
25
       
 
       
  ];

     

       
26
       
 
       


     

       
27
       
 
       
  postInstall = ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
28
       
 
       
    $out/bin/hetzner-kube completion bash > hetzner-kube

     

       
29
       
 
       
    $out/bin/hetzner-kube completion zsh > _hetzner-kube

     

       
30
       
 
       
    installShellCompletion --zsh _hetzner-kube

     

···

       
11
       
 
       
    sha256 = "1iqgpmljqx6rhmvsir2675waj78amcfiw08knwvlmavjgpxx2ysw";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
+
       
  patches = [

     

       
15
       
+
       
    # Use $HOME instead of the OS user database.

     

       
16
       
+
       
    # Upstream PR: https://github.com/xetys/hetzner-kube/pull/346

     

       
17
       
+
       
    # Unfortunately, the PR patch does not apply against release.

     

       
18
       
+
       
    ./fix-home.patch

     

       
19
       
+
       
  ];

     

       
20
       
+
       


     

       
21
       
 
       
  vendorSha256 = "1jh2f66ys6rmrrwrf5zqfprgcvziyq6l4z8bfqwxgf1ysnxx525h";

     

       
22
       
 
       


     

       
23
       
 
       
  doCheck = false;

     
···

       
32
       
 
       
  ];

     

       
33
       
 
       


     

       
34
       
 
       
  postInstall = ''

     

       
35
       
+
       
    # Need a writable home, because it fails if unable to write config.

     

       
36
       
+
       
    export HOME=$TMP

     

       
37
       
 
       
    $out/bin/hetzner-kube completion bash > hetzner-kube

     

       
38
       
 
       
    $out/bin/hetzner-kube completion zsh > _hetzner-kube

     

       
39
       
 
       
    installShellCompletion --zsh _hetzner-kube

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
diff --git a/cmd/cluster_kubeconfig.go b/cmd/cluster_kubeconfig.go

     

       
2
       
+
       
index 54cc0c9..fab288a 100644

     

       
3
       
+
       
--- a/cmd/cluster_kubeconfig.go

     

       
4
       
+
       
+++ b/cmd/cluster_kubeconfig.go

     

       
5
       
+
       
@@ -6,7 +6,7 @@ import (

     

       
6
       
+
       
 	"io/ioutil"

     

       
7
       
+
       
 	"log"

     

       
8
       
+
       
 	"os"

     

       
9
       
+
       
-	"os/user"

     

       
10
       
+
       
+	"path/filepath"

     

       
11
       
+
       
 	"strings"

     

       
12
       
+
       
 

     

       
13
       
+
       
 	"github.com/spf13/cobra"

     

       
14
       
+
       
@@ -52,9 +52,8 @@ Example 4: hetzner-kube cluster kubeconfig -n my-cluster -p > my-conf.yaml # pri

     

       
15
       
+
       
 		} else {

     

       
16
       
+
       
 			fmt.Println("create file")

     

       
17
       
+
       
 

     

       
18
       
+
       
-			usr, _ := user.Current()

     

       
19
       
+
       
-			dir := usr.HomeDir

     

       
20
       
+
       
-			path := fmt.Sprintf("%s/.kube", dir)

     

       
21
       
+
       
+			dir, _ := os.UserHomeDir()

     

       
22
       
+
       
+			path := filepath.Join(dir, ".kube")

     

       
23
       
+
       
 

     

       
24
       
+
       
 			if _, err := os.Stat(path); os.IsNotExist(err) {

     

       
25
       
+
       
 				os.MkdirAll(path, 0755)

     

       
26
       
+
       
diff --git a/cmd/config.go b/cmd/config.go

     

       
27
       
+
       
index ce0f3e5..a03c4ba 100644

     

       
28
       
+
       
--- a/cmd/config.go

     

       
29
       
+
       
+++ b/cmd/config.go

     

       
30
       
+
       
@@ -8,7 +8,6 @@ import (

     

       
31
       
+
       
 	"io/ioutil"

     

       
32
       
+
       
 	"log"

     

       
33
       
+
       
 	"os"

     

       
34
       
+
       
-	"os/user"

     

       
35
       
+
       
 	"path/filepath"

     

       
36
       
+
       
 

     

       
37
       
+
       
 	"github.com/hetznercloud/hcloud-go/hcloud"

     

       
38
       
+
       
@@ -28,13 +27,8 @@ type AppSSHClient struct {

     

       
39
       
+
       
 // NewAppConfig creates a new AppConfig struct using the locally saved configuration file. If no local

     

       
40
       
+
       
 // configuration file is found a new config will be created.

     

       
41
       
+
       
 func NewAppConfig() AppConfig {

     

       
42
       
+
       
-	usr, err := user.Current()

     

       
43
       
+
       
-	if err != nil {

     

       
44
       
+
       
-		return AppConfig{}

     

       
45
       
+
       
-	}

     

       
46
       
+
       
-	if usr.HomeDir != "" {

     

       
47
       
+
       
-		DefaultConfigPath = filepath.Join(usr.HomeDir, ".hetzner-kube")

     

       
48
       
+
       
-	}

     

       
49
       
+
       
+	dir, _ := os.UserHomeDir()

     

       
50
       
+
       
+	DefaultConfigPath = filepath.Join(dir, ".hetzner-kube")

     

       
51
       
+
       
 

     

       
52
       
+
       
 	appConf := AppConfig{

     

       
53
       
+
       
 		Context: context.Background(),

     

···

       
436
       
 
       
    "sha256": "0jhx9rap4128j8sfkvpp8lbdmvdba0rkd3nxvy38wr3n18m7v1xg",

     

       
437
       
 
       
    "version": "1.2.0"

     

       
438
       
 
       
  },

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
439
       
 
       
  "ibm": {

     

       
440
       
 
       
    "owner": "IBM-Cloud",

     

       
441
       
 
       
    "provider-source-address": "registry.terraform.io/IBM-Cloud/ibm",

     

···

       
436
       
 
       
    "sha256": "0jhx9rap4128j8sfkvpp8lbdmvdba0rkd3nxvy38wr3n18m7v1xg",

     

       
437
       
 
       
    "version": "1.2.0"

     

       
438
       
 
       
  },

     

       
439
       
+
       
  "hydra": {

     

       
440
       
+
       
    "owner": "DeterminateSystems",

     

       
441
       
+
       
    "provider-source-address": "registry.terraform.io/DeterminateSystems/hydra",

     

       
442
       
+
       
    "repo": "terraform-provider-hydra",

     

       
443
       
+
       
    "rev": "v0.1.0",

     

       
444
       
+
       
    "sha256": "18c9j54fy1f2sfz317rlv8z7fb18bpc1a0baw1bgl72x5sgil5kv",

     

       
445
       
+
       
    "vendorSha256": null,

     

       
446
       
+
       
    "version": "0.1.0"

     

       
447
       
+
       
  },

     

       
448
       
 
       
  "ibm": {

     

       
449
       
 
       
    "owner": "IBM-Cloud",

     

       
450
       
 
       
    "provider-source-address": "registry.terraform.io/IBM-Cloud/ibm",

     

···

       
2
       
 
       


     

       
3
       
 
       
buildGoModule rec {

     

       
4
       
 
       
  pname = "nextdns";

     

       
5
       
-
       
  version = "1.10.1";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "nextdns";

     

       
9
       
 
       
    repo = "nextdns";

     

       
10
       
 
       
    rev = "v${version}";

     

       
11
       
-
       
    sha256 = "sha256-hMI6zq176p7MI4cjMSeQ8T8UvibJW60lzsPmeAOi3ow=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
 
       
  vendorSha256 = "sha256-kmszMqkDMaL+Z6GcZmQyeRShKKS/VGdn9vabYPW/kCc=";

     

···

       
2
       
 
       


     

       
3
       
 
       
buildGoModule rec {

     

       
4
       
 
       
  pname = "nextdns";

     

       
5
       
+
       
  version = "1.11.0";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "nextdns";

     

       
9
       
 
       
    repo = "nextdns";

     

       
10
       
 
       
    rev = "v${version}";

     

       
11
       
+
       
    sha256 = "sha256-gnWFgzfMMnn8O7zDN5LW3cMIz5/wmgEW9fI9aJBEah8=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
 
       
  vendorSha256 = "sha256-kmszMqkDMaL+Z6GcZmQyeRShKKS/VGdn9vabYPW/kCc=";

     

···

       
21
       
 
       
    changelog = "https://git.savannah.gnu.org/cgit/gnucap.git/plain/NEWS?h=v${version}";

     

       
22
       
 
       
    license = licenses.gpl3Plus;

     

       
23
       
 
       
    platforms = platforms.all;

     

       
0
       
 
       

     

       
24
       
 
       
    maintainers = [ maintainers.raboof ];

     

       
25
       
 
       
  };

     

       
26
       
 
       
}

     

···

       
21
       
 
       
    changelog = "https://git.savannah.gnu.org/cgit/gnucap.git/plain/NEWS?h=v${version}";

     

       
22
       
 
       
    license = licenses.gpl3Plus;

     

       
23
       
 
       
    platforms = platforms.all;

     

       
24
       
+
       
    broken = stdenv.isDarwin; # Relies on LD_LIBRARY_PATH

     

       
25
       
 
       
    maintainers = [ maintainers.raboof ];

     

       
26
       
 
       
  };

     

       
27
       
 
       
}

     

···

       
104
       
 
       
    tllist

     

       
105
       
 
       
    wayland-protocols

     

       
106
       
 
       
    pkg-config

     

       
107
       
-
       
  ] ++ lib.optional stdenv.cc.isClang stdenv.cc.cc.llvm;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
108
       
 
       


     

       
109
       
 
       
  buildInputs = [

     

       
110
       
 
       
    fontconfig

     

···

       
104
       
 
       
    tllist

     

       
105
       
 
       
    wayland-protocols

     

       
106
       
 
       
    pkg-config

     

       
107
       
+
       
  ] ++ lib.optionals (compilerName == "clang") [

     

       
108
       
+
       
    stdenv.cc.cc.libllvm.out

     

       
109
       
+
       
  ];

     

       
110
       
 
       


     

       
111
       
 
       
  buildInputs = [

     

       
112
       
 
       
    fontconfig

     

···

       
13
       
 
       
in

     

       
14
       
 
       
stdenv.mkDerivation rec {

     

       
15
       
 
       
  pname = "gitkraken";

     

       
16
       
-
       
  version = "7.5.5";

     

       
17
       
 
       


     

       
18
       
 
       
  src = fetchzip {

     

       
19
       
 
       
    url = "https://release.axocdn.com/linux/GitKraken-v${version}.tar.gz";

     

       
20
       
-
       
    sha256 = "0l40ap0ck2ywjarmn7lmpw4qbsdkx717d9kmx67p4qlmbwpimqhg";

     

       
21
       
 
       
  };

     

       
22
       
 
       


     

       
23
       
 
       
  dontBuild = true;

     

···

       
13
       
 
       
in

     

       
14
       
 
       
stdenv.mkDerivation rec {

     

       
15
       
 
       
  pname = "gitkraken";

     

       
16
       
+
       
  version = "7.6.0";

     

       
17
       
 
       


     

       
18
       
 
       
  src = fetchzip {

     

       
19
       
 
       
    url = "https://release.axocdn.com/linux/GitKraken-v${version}.tar.gz";

     

       
20
       
+
       
    sha256 = "11818d8ph9qqisdpkv46afhr79qq128gaz5d0n7b48dx25ih1jb9";

     

       
21
       
 
       
  };

     

       
22
       
 
       


     

       
23
       
 
       
  dontBuild = true;

     

···

       
438
       
 
       
      done < graph

     

       
439
       
 
       
    '';

     

       
440
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
441
       
 
       


     

       
442
       
 
       
  /* Print an error message if the file with the specified name and

     

       
443
       
 
       
   * hash doesn't exist in the Nix store. This function should only

     

···

       
438
       
 
       
      done < graph

     

       
439
       
 
       
    '';

     

       
440
       
 
       


     

       
441
       
+
       
  /*

     

       
442
       
+
       
    Write the set of references to a file, that is, their immediate dependencies.

     

       
443
       
+
       


     

       
444
       
+
       
    This produces the equivalent of `nix-store -q --references`.

     

       
445
       
+
       
   */

     

       
446
       
+
       
  writeDirectReferencesToFile = path: runCommand "runtime-references"

     

       
447
       
+
       
    {

     

       
448
       
+
       
      exportReferencesGraph = ["graph" path];

     

       
449
       
+
       
      inherit path;

     

       
450
       
+
       
    }

     

       
451
       
+
       
    ''

     

       
452
       
+
       
      touch ./references

     

       
453
       
+
       
      while read p; do

     

       
454
       
+
       
        read dummy

     

       
455
       
+
       
        read nrRefs

     

       
456
       
+
       
        if [[ $p == $path ]]; then

     

       
457
       
+
       
          for ((i = 0; i < nrRefs; i++)); do

     

       
458
       
+
       
            read ref;

     

       
459
       
+
       
            echo $ref >>./references

     

       
460
       
+
       
          done

     

       
461
       
+
       
        else

     

       
462
       
+
       
          for ((i = 0; i < nrRefs; i++)); do

     

       
463
       
+
       
            read ref;

     

       
464
       
+
       
          done

     

       
465
       
+
       
        fi

     

       
466
       
+
       
      done < graph

     

       
467
       
+
       
      sort ./references >$out

     

       
468
       
+
       
    '';

     

       
469
       
+
       


     

       
470
       
 
       


     

       
471
       
 
       
  /* Print an error message if the file with the specified name and

     

       
472
       
 
       
   * hash doesn't exist in the Nix store. This function should only

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
{ lib, nixosTest, path, writeText, hello, figlet, stdenvNoCC }:

     

       
2
       
+
       


     

       
3
       
+
       
nixosTest {

     

       
4
       
+
       
  name = "nixpkgs-trivial-builders";

     

       
5
       
+
       
  nodes.machine = { ... }: {

     

       
6
       
+
       
    virtualisation.writableStore = true;

     

       
7
       
+
       


     

       
8
       
+
       
    # Test runs without network, so we don't substitute and prepare our deps

     

       
9
       
+
       
    nix.binaryCaches = lib.mkForce [];

     

       
10
       
+
       
    environment.etc."pre-built-paths".source = writeText "pre-built-paths" (

     

       
11
       
+
       
      builtins.toJSON [hello figlet stdenvNoCC]

     

       
12
       
+
       
    );

     

       
13
       
+
       
  };

     

       
14
       
+
       
  testScript = ''

     

       
15
       
+
       
    machine.succeed("""

     

       
16
       
+
       
      cd ${lib.cleanSource path}

     

       
17
       
+
       
      ./pkgs/build-support/trivial-builders/test.sh 2>/dev/console

     

       
18
       
+
       
    """)

     

       
19
       
+
       
  '';

     

       
20
       
+
       
}

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
#!/usr/bin/env bash

     

       
2
       
+
       


     

       
3
       
+
       
# -------------------------------------------------------------------------- #

     

       
4
       
+
       
#

     

       
5
       
+
       
#                         trivial-builders test

     

       
6
       
+
       
#

     

       
7
       
+
       
# -------------------------------------------------------------------------- #

     

       
8
       
+
       
#

     

       
9
       
+
       
#  This file can be run independently (quick):

     

       
10
       
+
       
#

     

       
11
       
+
       
#      $ pkgs/build-support/trivial-builders/test.sh

     

       
12
       
+
       
#

     

       
13
       
+
       
#  or in the build sandbox with a ~20s VM overhead

     

       
14
       
+
       
#

     

       
15
       
+
       
#      $ nix-build -A tests.trivial-builders

     

       
16
       
+
       
#

     

       
17
       
+
       
# -------------------------------------------------------------------------- #

     

       
18
       
+
       


     

       
19
       
+
       
# strict bash

     

       
20
       
+
       
set -euo pipefail

     

       
21
       
+
       


     

       
22
       
+
       
# debug

     

       
23
       
+
       
# set -x

     

       
24
       
+
       
# PS4='+(${BASH_SOURCE}:${LINENO}): ${FUNCNAME[0]:+${FUNCNAME[0]}(): }'

     

       
25
       
+
       


     

       
26
       
+
       
cd "$(dirname ${BASH_SOURCE[0]})"  # nixpkgs root

     

       
27
       
+
       


     

       
28
       
+
       
testDirectReferences() {

     

       
29
       
+
       
  expr="$1"

     

       
30
       
+
       
  diff -U3 \

     

       
31
       
+
       
    <(sort <$(nix-build --no-out-link --expr "with import ../../.. {}; writeDirectReferencesToFile ($expr)")) \

     

       
32
       
+
       
    <(nix-store -q --references $(nix-build --no-out-link --expr "with import ../../.. {}; ($expr)") | sort)

     

       
33
       
+
       
}

     

       
34
       
+
       


     

       
35
       
+
       
testDirectReferences 'hello'

     

       
36
       
+
       
testDirectReferences 'figlet'

     

       
37
       
+
       
testDirectReferences 'writeText "hi" "hello"'

     

       
38
       
+
       
testDirectReferences 'writeText "hi" "hello ${hello}"'

     

       
39
       
+
       
testDirectReferences 'writeText "hi" "hello ${hello} ${figlet}"'

     

       
40
       
+
       


     

       
41
       
+
       


     

       
42
       
+
       


     

       
43
       
+
       
testClosure() {

     

       
44
       
+
       
  expr="$1"

     

       
45
       
+
       
  diff -U3 \

     

       
46
       
+
       
    <(sort <$(nix-build --no-out-link --expr "with import ../../.. {}; writeReferencesToFile ($expr)")) \

     

       
47
       
+
       
    <(nix-store -q --requisites $(nix-build --no-out-link --expr "with import ../../.. {}; ($expr)") | sort)

     

       
48
       
+
       
}

     

       
49
       
+
       


     

       
50
       
+
       
testClosure 'hello'

     

       
51
       
+
       
testClosure 'figlet'

     

       
52
       
+
       
testClosure 'writeText "hi" "hello"'

     

       
53
       
+
       
testClosure 'writeText "hi" "hello ${hello}"'

     

       
54
       
+
       
testClosure 'writeText "hi" "hello ${hello} ${figlet}"'

     

       
55
       
+
       


     

       
56
       
+
       


     

       
57
       
+
       
echo 'OK!'

     

···

       
1
       
-
       
{ stdenv, lib, buildPythonApplication, bottle

     

       
2
       
-
       
, click, click-completion, colorama, semantic-version

     

       
3
       
-
       
, lockfile, pyserial, requests

     

       
4
       
-
       
, tabulate, pyelftools, marshmallow

     

       
5
       
-
       
, pytest, tox, jsondiff

     

       
6
       
-
       
, git, spdx-license-list-data

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
7
       
 
       
, version, src

     

       
8
       
 
       
}:

     

       
9
       
 
       


     
···

       
78
       
 
       
  pname = "platformio";

     

       
79
       
 
       
  inherit version src;

     

       
80
       
 
       


     

       
81
       
-
       
  propagatedBuildInputs =  [

     

       
82
       
-
       
    bottle click click-completion colorama git

     

       
83
       
-
       
    lockfile pyserial requests semantic-version

     

       
84
       
-
       
    tabulate pyelftools marshmallow

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
85
       
 
       
  ];

     

       
86
       
 
       


     

       
87
       
 
       
  HOME = "/tmp";

     

···

       
1
       
+
       
{ stdenv, lib, buildPythonApplication

     

       
2
       
+
       
, ajsonrpc

     

       
3
       
+
       
, bottle

     

       
4
       
+
       
, click

     

       
5
       
+
       
, click-completion

     

       
6
       
+
       
, colorama

     

       
7
       
+
       
, git

     

       
8
       
+
       
, jsondiff

     

       
9
       
+
       
, lockfile

     

       
10
       
+
       
, marshmallow

     

       
11
       
+
       
, pyelftools

     

       
12
       
+
       
, pyserial

     

       
13
       
+
       
, pytest

     

       
14
       
+
       
, requests

     

       
15
       
+
       
, semantic-version

     

       
16
       
+
       
, spdx-license-list-data

     

       
17
       
+
       
, starlette

     

       
18
       
+
       
, tabulate

     

       
19
       
+
       
, tox

     

       
20
       
+
       
, uvicorn

     

       
21
       
+
       
, wsproto

     

       
22
       
+
       
, zeroconf

     

       
23
       
 
       
, version, src

     

       
24
       
 
       
}:

     

       
25
       
 
       


     
···

       
94
       
 
       
  pname = "platformio";

     

       
95
       
 
       
  inherit version src;

     

       
96
       
 
       


     

       
97
       
+
       
  propagatedBuildInputs = [

     

       
98
       
+
       
    ajsonrpc

     

       
99
       
+
       
    bottle

     

       
100
       
+
       
    click

     

       
101
       
+
       
    click-completion

     

       
102
       
+
       
    colorama

     

       
103
       
+
       
    git

     

       
104
       
+
       
    lockfile

     

       
105
       
+
       
    marshmallow

     

       
106
       
+
       
    pyelftools

     

       
107
       
+
       
    pyserial

     

       
108
       
+
       
    requests

     

       
109
       
+
       
    semantic-version

     

       
110
       
+
       
    starlette

     

       
111
       
+
       
    tabulate

     

       
112
       
+
       
    uvicorn

     

       
113
       
+
       
    wsproto

     

       
114
       
+
       
    zeroconf

     

       
115
       
 
       
  ];

     

       
116
       
 
       


     

       
117
       
 
       
  HOME = "/tmp";