commit f07205812cc90d15bea0b06a313b1c6720416bb5 · pyrox.dev/nixpkgs

+5 -1

nixos/modules/services/security/paretosecurity.nix

···

       12
       12
        
         options.services.paretosecurity = {

     

       13
       13
        
           enable = lib.mkEnableOption "[ParetoSecurity](https://paretosecurity.com) [agent](https://github.com/ParetoSecurity/agent) and its root helper";

     

       14
       14
        
           package = lib.mkPackageOption pkgs "paretosecurity" { };

     

       15
       15
       -
           trayIcon = lib.mkEnableOption "tray icon for ParetoSecurity";

     

       15
       15
       +
           trayIcon = lib.mkOption {

     

       16
       16
       +
             type = lib.types.bool;

     

       17
       17
       +
             default = true;

     

       18
       18
       +
             description = "Set to false to disable the tray icon and run as a CLI tool only.";

     

       19
       19
       +
           };

     

       16
       20
        
         };

     

       17
       21
        
       

     

       18
       22
        
         config = lib.mkIf cfg.enable {

+12 -4

nixos/tests/paretosecurity.nix

···

       46
       46
        
           {

     

       47
       47
        
             imports = [ ./common/user-account.nix ];

     

       48
       48
        
       

     

       49
       49
       -
             services.paretosecurity = {

     

       50
       50
       -
               enable = true;

     

       51
       51
       -
               trayIcon = true;

     

       52
       52
       -
             };

     

       49
       49
       +
             services.paretosecurity.enable = true;

     

       53
       50
        
       

     

       54
       51
        
             services.xserver.enable = true;

     

       55
       52
        
             services.xserver.displayManager.lightdm.enable = true;

     
···

       119
       116
        
           xfce.wait_for_text("Pareto Security")

     

       120
       117
        
           xfce.succeed("xdotool click 1")

     

       121
       118
        
           xfce.wait_for_text("Run Checks")

     

       119
       119
       +
       

     

       120
       120
       +
           # Test 5: paretosecurity:// URL handler is registered

     

       121
       121
       +
           xfce.succeed("su - alice -c 'xdg-open paretosecurity://foo'")

     

       122
       122
       +
       

     

       123
       123
       +
           # Test 6: Desktop entry

     

       124
       124
       +
           xfce.succeed("xdotool mousemove 10 10")

     

       125
       125
       +
           xfce.succeed("xdotool click 1")  # hide the tray icon window

     

       126
       126
       +
           xfce.succeed("xdotool click 1")  # show the Applications menu

     

       127
       127
       +
           xfce.succeed("xdotool mousemove 10 200")

     

       128
       128
       +
           xfce.succeed("xdotool click 1")

     

       129
       129
       +
           xfce.wait_for_text("Pareto Security")

     

       122
       130
        
         '';

     

       123
       131
        
       }

+19 -7

pkgs/by-name/pa/paretosecurity/package.nix

···

       17
       17
        
           webkitgtk_4_1

     

       18
       18
        
         ];

     

       19
       19
        
         pname = "paretosecurity";

     

       20
       20
       -
         version = "0.1.9";

     

       20
       20
       +
         version = "0.2.12";

     

       21
       21
        
       

     

       22
       22
        
         src = fetchFromGitHub {

     

       23
       23
        
           owner = "ParetoSecurity";

     

       24
       24
        
           repo = "agent";

     

       25
       25
        
           rev = finalAttrs.version;

     

       26
       26
       -
           hash = "sha256-KJs4xC3EtGG4116UE+oIEwAMcuDWIm9gqgZY+Bv14ac=";

     

       26
       26
       +
           hash = "sha256-skBxDPC+C8JU1CW6g3SA2C4IawaoPzVi8pdl5BCutUY=";

     

       27
       27
        
         };

     

       28
       28
        
       

     

       29
       29
       -
         vendorHash = "sha256-3plpvwLe32AsGuVzdM2fSmTPkKwRFmhi651NEIRdOxw=";

     

       29
       29
       +
         vendorHash = "sha256-YnyACP/hJYxi4AWMwr0We4YUTbWwahKAIYN6RnHmzls=";

     

       30
       30
        
         proxyVendor = true;

     

       31
       31
        
       

     

       32
       32
        
         ldflags = [

     
···

       51
       51
        
           install -Dm444 ${finalAttrs.src}/apt/paretosecurity-trayicon.service $out/lib/systemd/user/paretosecurity-trayicon.service

     

       52
       52
        
           substituteInPlace $out/lib/systemd/user/paretosecurity-trayicon.service \

     

       53
       53
        
               --replace-fail "/usr/bin/paretosecurity" "$out/bin/paretosecurity"

     

       54
       54
       +
       

     

       55
       55
       +
           # Install .desktop files

     

       56
       56
       +
           install -Dm444 ${finalAttrs.src}/apt/ParetoSecurity.desktop $out/share/applications/ParetoSecurity.desktop

     

       57
       57
       +
           substituteInPlace $out/share/applications/ParetoSecurity.desktop \

     

       58
       58
       +
               --replace-fail "/usr/bin/paretosecurity" "$out/bin/paretosecurity"

     

       59
       59
       +
           install -Dm444 ${finalAttrs.src}/apt/ParetoSecurityLink.desktop $out/share/applications/ParetoSecurityLink.desktop

     

       60
       60
       +
           substituteInPlace $out/share/applications/ParetoSecurityLink.desktop \

     

       61
       61
       +
               --replace-fail "/usr/bin/paretosecurity" "$out/bin/paretosecurity"

     

       62
       62
       +
       

     

       63
       63
       +
           # Install icon

     

       64
       64
       +
           install -Dm444 ${finalAttrs.src}/assets/icon.png $out/share/icons/hicolor/512x512/apps/ParetoSecurity.png

     

       54
       65
        
         '';

     

       55
       66
        
       

     

       56
       67
        
         passthru.tests = {

     
···

       74
       85
        
             root helper that allows you to run the checker in userspace. Some checks

     

       75
       86
        
             require root permissions, and the checker asks the helper to run those.

     

       76
       87
        
       

     

       77
       77
       -
             Additionally, if you enable `services.paretosecurity.trayIcon`, you get a

     

       78
       78
       -
             little Vilfredo Pareto living in your systray showing your the current

     

       79
       79
       -
             status of checks. This will also enable a systemd timer to update the

     

       80
       80
       -
             status of checks once per hour.

     

       88
       88
       +
             Additionally, using the NixOS module gets you a little Vilfredo Pareto

     

       89
       89
       +
             living in your systray showing your the current status of checks. The

     

       90
       90
       +
             NixOS Module also installs a systemd timer to update the status of checks

     

       91
       91
       +
             once per hour. If you want to use just the CLI mode, set

     

       92
       92
       +
             `services.paretosecurity.trayIcon` to `false`.

     

       81
       93
        
       

     

       82
       94
        
             Finally, you can run `paretosecurity link` to configure the agent

     

       83
       95
        
             to send the status of checks to https://dash.paretosecurity.com to make