···

       
162
       
 
       


     

       
163
       
 
       
# C compilers

     

       
164
       
 
       
/pkgs/development/compilers/gcc

     

       
165
       
-
       
/pkgs/development/compilers/llvm @RossComputerGuy

     

       
166
       
 
       
/pkgs/development/compilers/emscripten @raitobezarius

     

       
167
       
 
       
/doc/languages-frameworks/emscripten.section.md @raitobezarius

     

       
168
       
 
       


     

···

       
162
       
 
       


     

       
163
       
 
       
# C compilers

     

       
164
       
 
       
/pkgs/development/compilers/gcc

     

       
165
       
+
       
/pkgs/development/compilers/llvm @alyssais @RossComputerGuy

     

       
166
       
 
       
/pkgs/development/compilers/emscripten @raitobezarius

     

       
167
       
 
       
/doc/languages-frameworks/emscripten.section.md @raitobezarius

     

       
168
       
 
       


     

···

       
14
       
 
       
}:

     

       
15
       
 
       
stdenv.mkDerivation rec {

     

       
16
       
 
       
  pname = "vdr-softhddevice";

     

       
17
       
-
       
  version = "2.3.7";

     

       
18
       
 
       


     

       
19
       
 
       
  src = fetchFromGitHub {

     

       
20
       
 
       
    owner = "ua0lnj";

     

       
21
       
 
       
    repo = "vdr-plugin-softhddevice";

     

       
22
       
-
       
    sha256 = "sha256-gn1Z3pw8f0Tpo8Ot0hP9+p/KbK/EGOInE34BCH3aVp0=";

     

       
23
       
 
       
    rev = "v${version}";

     

       
24
       
 
       
  };

     

       
25
       
 
       


     

···

       
14
       
 
       
}:

     

       
15
       
 
       
stdenv.mkDerivation rec {

     

       
16
       
 
       
  pname = "vdr-softhddevice";

     

       
17
       
+
       
  version = "2.3.8";

     

       
18
       
 
       


     

       
19
       
 
       
  src = fetchFromGitHub {

     

       
20
       
 
       
    owner = "ua0lnj";

     

       
21
       
 
       
    repo = "vdr-plugin-softhddevice";

     

       
22
       
+
       
    sha256 = "sha256-/eNPhkrLpxXeX/5EitMJUgZCPy1Ked3oKuMdD6OuEYc=";

     

       
23
       
 
       
    rev = "v${version}";

     

       
24
       
 
       
  };

     

       
25
       
 
       


     

···

       
164
       
 
       
  # New-style output content requirements.

     

       
165
       
 
       
  inherit (hash_) outputHashAlgo outputHash;

     

       
166
       
 
       


     

       
167
       
-
       
  SSL_CERT_FILE = if (hash_.outputHash == "" || hash_.outputHash == lib.fakeSha256 || hash_.outputHash == lib.fakeSha512 || hash_.outputHash == lib.fakeHash)

     

       
0
       
 
       

     

       
168
       
 
       
                  then "${cacert}/etc/ssl/certs/ca-bundle.crt"

     

       
169
       
 
       
                  else "/no-cert-file.crt";

     

       
170
       
 
       


     

···

       
164
       
 
       
  # New-style output content requirements.

     

       
165
       
 
       
  inherit (hash_) outputHashAlgo outputHash;

     

       
166
       
 
       


     

       
167
       
+
       
  # Disable TLS verification only when we know the hash and no credentials are needed to access the ressource

     

       
168
       
+
       
  SSL_CERT_FILE = if (hash_.outputHash == "" || hash_.outputHash == lib.fakeSha256 || hash_.outputHash == lib.fakeSha512 || hash_.outputHash == lib.fakeHash || netrcPhase != null)

     

       
169
       
 
       
                  then "${cacert}/etc/ssl/certs/ca-bundle.crt"

     

       
170
       
 
       
                  else "/no-cert-file.crt";

     

       
171
       
 
       


     

···

       
6
       
 
       
  cargo-shear,

     

       
7
       
 
       
}:

     

       
8
       
 
       
let

     

       
9
       
-
       
  version = "1.1.2";

     

       
10
       
 
       
in

     

       
11
       
 
       
rustPlatform.buildRustPackage {

     

       
12
       
 
       
  pname = "cargo-shear";

     
···

       
16
       
 
       
    owner = "Boshen";

     

       
17
       
 
       
    repo = "cargo-shear";

     

       
18
       
 
       
    rev = "v${version}";

     

       
19
       
-
       
    hash = "sha256-JnQrQBx9VuXI0wj1mMLfl15lxC85f1kUBucgC3Q8F0c=";

     

       
20
       
 
       
  };

     

       
21
       
 
       


     

       
22
       
-
       
  cargoHash = "sha256-iFcW9REkEolrDDbEwoepUSO79OgUdsLUhSkk12y4yxk=";

     

       
23
       
 
       


     

       
24
       
 
       
  # https://github.com/Boshen/cargo-shear/blob/a0535415a3ea94c86642f39f343f91af5cdc3829/src/lib.rs#L20-L23

     

       
25
       
 
       
  SHEAR_VERSION = version;

     

···

       
6
       
 
       
  cargo-shear,

     

       
7
       
 
       
}:

     

       
8
       
 
       
let

     

       
9
       
+
       
  version = "1.1.3";

     

       
10
       
 
       
in

     

       
11
       
 
       
rustPlatform.buildRustPackage {

     

       
12
       
 
       
  pname = "cargo-shear";

     
···

       
16
       
 
       
    owner = "Boshen";

     

       
17
       
 
       
    repo = "cargo-shear";

     

       
18
       
 
       
    rev = "v${version}";

     

       
19
       
+
       
    hash = "sha256-xKO/57yvHSGzjWyDPu1DmI9eeDESyFgMschqK+OLUMs=";

     

       
20
       
 
       
  };

     

       
21
       
 
       


     

       
22
       
+
       
  cargoHash = "sha256-lwPD46irkBg+Xg9/d07Q6BPk2rzKYkj3114EiMbbd+U=";

     

       
23
       
 
       


     

       
24
       
 
       
  # https://github.com/Boshen/cargo-shear/blob/a0535415a3ea94c86642f39f343f91af5cdc3829/src/lib.rs#L20-L23

     

       
25
       
 
       
  SHEAR_VERSION = version;

     

···

       
53
       
 
       
in

     

       
54
       
 
       
effectiveStdenv.mkDerivation (finalAttrs: {

     

       
55
       
 
       
  pname = "koboldcpp";

     

       
56
       
-
       
  version = "1.74";

     

       
57
       
 
       


     

       
58
       
 
       
  src = fetchFromGitHub {

     

       
59
       
 
       
    owner = "LostRuins";

     

       
60
       
 
       
    repo = "koboldcpp";

     

       
61
       
 
       
    rev = "refs/tags/v${finalAttrs.version}";

     

       
62
       
-
       
    hash = "sha256-tGG1+EGlCUmFpx/axijonOXydurwFxqjuoeDwHxC+pc=";

     

       
63
       
 
       
  };

     

       
64
       
 
       


     

       
65
       
 
       
  enableParallelBuilding = true;

     

···

       
53
       
 
       
in

     

       
54
       
 
       
effectiveStdenv.mkDerivation (finalAttrs: {

     

       
55
       
 
       
  pname = "koboldcpp";

     

       
56
       
+
       
  version = "1.75.2";

     

       
57
       
 
       


     

       
58
       
 
       
  src = fetchFromGitHub {

     

       
59
       
 
       
    owner = "LostRuins";

     

       
60
       
 
       
    repo = "koboldcpp";

     

       
61
       
 
       
    rev = "refs/tags/v${finalAttrs.version}";

     

       
62
       
+
       
    hash = "sha256-olMlYzde97RSx0OmDULSOFlM3imUq3AVxQdXyYBPd3Q=";

     

       
63
       
 
       
  };

     

       
64
       
 
       


     

       
65
       
 
       
  enableParallelBuilding = true;

     

···

       
6
       
 
       


     

       
7
       
 
       
let

     

       
8
       
 
       
  pname = "lefthook";

     

       
9
       
-
       
  version = "1.7.15";

     

       
10
       
 
       
in

     

       
11
       
 
       
buildGoModule {

     

       
12
       
 
       
  inherit pname version;

     
···

       
15
       
 
       
    owner = "evilmartians";

     

       
16
       
 
       
    repo = "lefthook";

     

       
17
       
 
       
    rev = "v${version}";

     

       
18
       
-
       
    hash = "sha256-N79unpeeOwcdHJo9IbsGa/gmTyg+QQCJF599cshV3sc=";

     

       
19
       
 
       
  };

     

       
20
       
 
       


     

       
21
       
 
       
  vendorHash = "sha256-rJdtax3r5Nwew+ptY4kIAUtxqPguwrFMMRk78zrZUcU=";

     

···

       
6
       
 
       


     

       
7
       
 
       
let

     

       
8
       
 
       
  pname = "lefthook";

     

       
9
       
+
       
  version = "1.7.16";

     

       
10
       
 
       
in

     

       
11
       
 
       
buildGoModule {

     

       
12
       
 
       
  inherit pname version;

     
···

       
15
       
 
       
    owner = "evilmartians";

     

       
16
       
 
       
    repo = "lefthook";

     

       
17
       
 
       
    rev = "v${version}";

     

       
18
       
+
       
    hash = "sha256-SAFrtiSISW5QhFq9fow0CA5qvBY1RIfzZGvvfhOqxbY=";

     

       
19
       
 
       
  };

     

       
20
       
 
       


     

       
21
       
 
       
  vendorHash = "sha256-rJdtax3r5Nwew+ptY4kIAUtxqPguwrFMMRk78zrZUcU=";

     

···

       
32
       
 
       
in

     

       
33
       
 
       
stdenv.mkDerivation (finalAttrs: {

     

       
34
       
 
       
  pname = "pixelorama";

     

       
35
       
-
       
  version = "1.0.2";

     

       
36
       
 
       


     

       
37
       
 
       
  src = fetchFromGitHub {

     

       
38
       
 
       
    owner = "Orama-Interactive";

     

       
39
       
 
       
    repo = "Pixelorama";

     

       
40
       
 
       
    rev = "v${finalAttrs.version}";

     

       
41
       
-
       
    hash = "sha256-rFXUy6fvGKmB+aaNgiI+NNRG0xlj1migdetnU4iVDDQ=";

     

       
42
       
 
       
  };

     

       
43
       
 
       


     

       
44
       
 
       
  strictDeps = true;

     

···

       
32
       
 
       
in

     

       
33
       
 
       
stdenv.mkDerivation (finalAttrs: {

     

       
34
       
 
       
  pname = "pixelorama";

     

       
35
       
+
       
  version = "1.0.3";

     

       
36
       
 
       


     

       
37
       
 
       
  src = fetchFromGitHub {

     

       
38
       
 
       
    owner = "Orama-Interactive";

     

       
39
       
 
       
    repo = "Pixelorama";

     

       
40
       
 
       
    rev = "v${finalAttrs.version}";

     

       
41
       
+
       
    hash = "sha256-IMHv5pOLxj7sqRtWmddziCiOX3T20bcMp2+ZzyhcIFg=";

     

       
42
       
 
       
  };

     

       
43
       
 
       


     

       
44
       
 
       
  strictDeps = true;

     

···

       
12
       
 
       
in

     

       
13
       
 
       
rustPlatform.buildRustPackage rec {

     

       
14
       
 
       
  pname = "railway";

     

       
15
       
-
       
  version = "3.14.0";

     

       
16
       
 
       


     

       
17
       
 
       
  src = fetchFromGitHub {

     

       
18
       
 
       
    owner = "railwayapp";

     

       
19
       
 
       
    repo = "cli";

     

       
20
       
 
       
    rev = "v${version}";

     

       
21
       
-
       
    hash = "sha256-W9p987yn04Ije6JXFndHXB4rENGBTIiRmCh6fDhXJ4I=";

     

       
22
       
 
       
  };

     

       
23
       
 
       


     

       
24
       
-
       
  cargoHash = "sha256-/Lot/Cxg/BUp4MFp6VkJHR7jy7mUe7qwJDhPS8kOeUk=";

     

       
25
       
 
       


     

       
26
       
 
       
  nativeBuildInputs = [ pkg-config ];

     

       
27
       
 
       


     

···

       
12
       
 
       
in

     

       
13
       
 
       
rustPlatform.buildRustPackage rec {

     

       
14
       
 
       
  pname = "railway";

     

       
15
       
+
       
  version = "3.14.1";

     

       
16
       
 
       


     

       
17
       
 
       
  src = fetchFromGitHub {

     

       
18
       
 
       
    owner = "railwayapp";

     

       
19
       
 
       
    repo = "cli";

     

       
20
       
 
       
    rev = "v${version}";

     

       
21
       
+
       
    hash = "sha256-w52PzDRApKuRgJLYxY8ikqNOo6rC0kLCKWh8tgFzcIY=";

     

       
22
       
 
       
  };

     

       
23
       
 
       


     

       
24
       
+
       
  cargoHash = "sha256-6VjloZ8s5LqyYPz1uMwdkwvHIhXjmifjd46PIx5d8xQ=";

     

       
25
       
 
       


     

       
26
       
 
       
  nativeBuildInputs = [ pkg-config ];

     

       
27
       
 
       


     

···

       
18
       
 
       
}:

     

       
19
       
 
       
stdenv.mkDerivation (finalAttrs: {

     

       
20
       
 
       
  pname = "shotcut";

     

       
21
       
-
       
  version = "24.08.29";

     

       
22
       
 
       


     

       
23
       
 
       
  src = fetchFromGitHub {

     

       
24
       
 
       
    owner = "mltframework";

     

       
25
       
 
       
    repo = "shotcut";

     

       
26
       
 
       
    rev = "v${finalAttrs.version}";

     

       
27
       
-
       
    hash = "sha256-iWXq9IdXfARe9h3Habe0rr0ohdxBARiwg5g7F53bhRg=";

     

       
28
       
 
       
  };

     

       
29
       
 
       


     

       
30
       
 
       
  nativeBuildInputs = [

     

···

       
18
       
 
       
}:

     

       
19
       
 
       
stdenv.mkDerivation (finalAttrs: {

     

       
20
       
 
       
  pname = "shotcut";

     

       
21
       
+
       
  version = "24.09.13";

     

       
22
       
 
       


     

       
23
       
 
       
  src = fetchFromGitHub {

     

       
24
       
 
       
    owner = "mltframework";

     

       
25
       
 
       
    repo = "shotcut";

     

       
26
       
 
       
    rev = "v${finalAttrs.version}";

     

       
27
       
+
       
    hash = "sha256-hYpb3ZCRXd07KQVZ3xpNeEJY5HFLNDsqpPJp3b9UXtE=";

     

       
28
       
 
       
  };

     

       
29
       
 
       


     

       
30
       
 
       
  nativeBuildInputs = [

     

···

       
2
       
 
       


     

       
3
       
 
       
stdenvNoCC.mkDerivation rec {

     

       
4
       
 
       
  pname = "wd";

     

       
5
       
-
       
  version = "0.8.0";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "mfaerevaag";

     

       
9
       
 
       
    repo = "wd";

     

       
10
       
 
       
    rev = "v${version}";

     

       
11
       
-
       
    hash = "sha256-rHHCnHa0/t2ij+6rExgvNt2EFBnkgs6l7oE6zL+xc58=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
 
       
  nativeBuildInputs = [ installShellFiles ];

     

···

       
2
       
 
       


     

       
3
       
 
       
stdenvNoCC.mkDerivation rec {

     

       
4
       
 
       
  pname = "wd";

     

       
5
       
+
       
  version = "0.9.0";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "mfaerevaag";

     

       
9
       
 
       
    repo = "wd";

     

       
10
       
 
       
    rev = "v${version}";

     

       
11
       
+
       
    hash = "sha256-8gL0+SZwVCQRokcYwSljDHtSusYY79/T9hqJGgAK1EU=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
 
       
  nativeBuildInputs = [ installShellFiles ];

     

···

       
1
       
-
       
{ lib

     

       
2
       
-
       
, stdenv

     

       
3
       
-
       
, fetchFromGitLab

     

       
4
       
-
       
, cmake

     

       
0
       
 
       

     

       
0
       
 
       

     

       
5
       
 
       


     

       
6
       
-
       
, arpa2cm

     

       
7
       
-
       
, doxygen

     

       
8
       
-
       
, e2fsprogs

     

       
9
       
-
       
, graphviz

     

       
10
       
-
       
, lmdb

     

       
11
       
-
       
, openssl

     

       
12
       
-
       
, pkg-config

     

       
13
       
-
       
, ragel

     

       
0
       
 
       

     

       
14
       
 
       
}:

     

       
15
       
 
       


     

       
16
       
-
       
stdenv.mkDerivation rec {

     

       
17
       
 
       
  pname = "arpa2common";

     

       
18
       
-
       
  version = "2.2.18";

     

       
19
       
 
       


     

       
20
       
 
       
  src = fetchFromGitLab {

     

       
21
       
 
       
    owner = "arpa2";

     

       
22
       
-
       
    repo = pname;

     

       
23
       
-
       
    rev = "v${version}";

     

       
24
       
-
       
    hash = "sha256-UpAVyDXCe07ZwjD307t6G9f/Nny4QYXxGxft1KsiYYg=";

     

       
25
       
 
       
  };

     

       
26
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
27
       
 
       
  nativeBuildInputs = [

     

       
28
       
 
       
    cmake

     

       
29
       
 
       
    arpa2cm

     
···

       
34
       
 
       


     

       
35
       
 
       
  propagatedBuildInputs = [

     

       
36
       
 
       
    e2fsprogs

     

       
0
       
 
       

     

       
37
       
 
       
    lmdb

     

       
38
       
 
       
    openssl

     

       
39
       
 
       
    ragel

     

       
40
       
 
       
  ];

     

       
41
       
 
       


     

       
42
       
-
       
  # the project uses single argument `printf` throughout the program

     

       
43
       
-
       
  hardeningDisable = [ "format" ];

     

       
44
       
-
       


     

       
45
       
 
       
  meta = {

     

       
46
       
-
       
    description =

     

       
47
       
-
       
      "ARPA2 ID and ACL libraries and other core data structures for ARPA2";

     

       
48
       
 
       
    longDescription = ''

     

       
49
       
 
       
      The ARPA2 Common Library package offers elementary services that can

     

       
50
       
 
       
      benefit many software packages.  They are designed to be easy to

     
···

       
53
       
 
       
      liberate users.

     

       
54
       
 
       
    '';

     

       
55
       
 
       
    homepage = "https://gitlab.com/arpa2/arpa2common";

     

       
56
       
-
       
    license = with lib.licenses; [ bsd2 cc-by-sa-40 cc0 isc ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
57
       
 
       
    maintainers = with lib.maintainers; [ fufexan ];

     

       
58
       
 
       
    platforms = lib.platforms.linux;

     

       
59
       
 
       
  };

     

       
60
       
-
       
}

     

···

       
1
       
+
       
{

     

       
2
       
+
       
  lib,

     

       
3
       
+
       
  stdenv,

     

       
4
       
+
       
  fetchFromGitLab,

     

       
5
       
+
       
  fetchpatch,

     

       
6
       
+
       
  cmake,

     

       
7
       
 
       


     

       
8
       
+
       
  arpa2cm,

     

       
9
       
+
       
  doxygen,

     

       
10
       
+
       
  e2fsprogs,

     

       
11
       
+
       
  graphviz,

     

       
12
       
+
       
  libsodium,

     

       
13
       
+
       
  lmdb,

     

       
14
       
+
       
  openssl,

     

       
15
       
+
       
  pkg-config,

     

       
16
       
+
       
  ragel,

     

       
17
       
 
       
}:

     

       
18
       
 
       


     

       
19
       
+
       
stdenv.mkDerivation (finalAttrs: {

     

       
20
       
 
       
  pname = "arpa2common";

     

       
21
       
+
       
  version = "2.6.2";

     

       
22
       
 
       


     

       
23
       
 
       
  src = fetchFromGitLab {

     

       
24
       
 
       
    owner = "arpa2";

     

       
25
       
+
       
    repo = "arpa2common";

     

       
26
       
+
       
    rev = "v${finalAttrs.version}";

     

       
27
       
+
       
    hash = "sha256-eWfWaO6URCK2FWQ+NYAoeCONkovgsVDPSRQVCGFnW3s=";

     

       
28
       
 
       
  };

     

       
29
       
 
       


     

       
30
       
+
       
  patches = [

     

       
31
       
+
       
    (fetchpatch {

     

       
32
       
+
       
      url = "https://gitlab.com/arpa2/arpa2common/-/commit/13ea82df60b87a5367db00a8c6f3502e8ecb7298.patch";

     

       
33
       
+
       
      hash = "sha256-V9Dhr6PeArqXnuXmFuDjcirlGl7xovq7VQZsrbbMFSk=";

     

       
34
       
+
       
    })

     

       
35
       
+
       
  ];

     

       
36
       
+
       


     

       
37
       
 
       
  nativeBuildInputs = [

     

       
38
       
 
       
    cmake

     

       
39
       
 
       
    arpa2cm

     
···

       
44
       
 
       


     

       
45
       
 
       
  propagatedBuildInputs = [

     

       
46
       
 
       
    e2fsprogs

     

       
47
       
+
       
    libsodium

     

       
48
       
 
       
    lmdb

     

       
49
       
 
       
    openssl

     

       
50
       
 
       
    ragel

     

       
51
       
 
       
  ];

     

       
52
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
53
       
 
       
  meta = {

     

       
54
       
+
       
    changelog = "https://gitlab.com/arpa2/arpa2common/-/blob/v${finalAttrs.version}/CHANGES";

     

       
55
       
+
       
    description = "ARPA2 ID and ACL libraries and other core data structures for ARPA2";

     

       
56
       
 
       
    longDescription = ''

     

       
57
       
 
       
      The ARPA2 Common Library package offers elementary services that can

     

       
58
       
 
       
      benefit many software packages.  They are designed to be easy to

     
···

       
61
       
 
       
      liberate users.

     

       
62
       
 
       
    '';

     

       
63
       
 
       
    homepage = "https://gitlab.com/arpa2/arpa2common";

     

       
64
       
+
       
    license = with lib.licenses; [

     

       
65
       
+
       
      bsd2

     

       
66
       
+
       
      cc-by-sa-40

     

       
67
       
+
       
      cc0

     

       
68
       
+
       
      isc

     

       
69
       
+
       
    ];

     

       
70
       
 
       
    maintainers = with lib.maintainers; [ fufexan ];

     

       
71
       
 
       
    platforms = lib.platforms.linux;

     

       
72
       
 
       
  };

     

       
73
       
+
       
})

     

···

       
6
       
 
       
in

     

       
7
       
 
       
stdenv.mkDerivation rec {

     

       
8
       
 
       
  name = "ocaml-${pname}-${version}";

     

       
9
       
-
       
  version = "15.1.0";

     

       
10
       
 
       


     

       
11
       
 
       
  src = fetchurl {

     

       
12
       
 
       
    url = "${webpage}/releases/${pname}-${version}.tbz";

     

       
13
       
-
       
    hash = "sha256-HIANZ5SDJcytlpw/W9Ae2eFTutrutJj2PgJCfByobfI=";

     

       
14
       
 
       
  };

     

       
15
       
 
       


     

       
16
       
 
       
  nativeBuildInputs = [ ocaml findlib ocamlbuild topkg ];

     

···

       
6
       
 
       
in

     

       
7
       
 
       
stdenv.mkDerivation rec {

     

       
8
       
 
       
  name = "ocaml-${pname}-${version}";

     

       
9
       
+
       
  version = "16.0.0";

     

       
10
       
 
       


     

       
11
       
 
       
  src = fetchurl {

     

       
12
       
 
       
    url = "${webpage}/releases/${pname}-${version}.tbz";

     

       
13
       
+
       
    hash = "sha256-VVGPG6ZjchUqo8xMCJRahqCCF5WheDBpK1stuts+orM=";

     

       
14
       
 
       
  };

     

       
15
       
 
       


     

       
16
       
 
       
  nativeBuildInputs = [ ocaml findlib ocamlbuild topkg ];

     

···

       
13
       
 
       


     

       
14
       
 
       
buildPythonPackage rec {

     

       
15
       
 
       
  pname = "aiostreammagic";

     

       
16
       
-
       
  version = "2.3.1";

     

       
17
       
 
       
  pyproject = true;

     

       
18
       
 
       


     

       
19
       
 
       
  disabled = pythonOlder "3.11";

     
···

       
22
       
 
       
    owner = "noahhusby";

     

       
23
       
 
       
    repo = "aiostreammagic";

     

       
24
       
 
       
    rev = "refs/tags/${version}";

     

       
25
       
-
       
    hash = "sha256-IMCs4EgOign56mThQ3ljnHs7/lt5874Ni1kavkHnKws=";

     

       
26
       
 
       
  };

     

       
27
       
 
       


     

       
28
       
 
       
  pythonRelaxDeps = [ "websockets" ];

     

···

       
13
       
 
       


     

       
14
       
 
       
buildPythonPackage rec {

     

       
15
       
 
       
  pname = "aiostreammagic";

     

       
16
       
+
       
  version = "2.4.0";

     

       
17
       
 
       
  pyproject = true;

     

       
18
       
 
       


     

       
19
       
 
       
  disabled = pythonOlder "3.11";

     
···

       
22
       
 
       
    owner = "noahhusby";

     

       
23
       
 
       
    repo = "aiostreammagic";

     

       
24
       
 
       
    rev = "refs/tags/${version}";

     

       
25
       
+
       
    hash = "sha256-TWGDviQ1SYLlzuIsot7JgB5XIEZES54ERJ3tv7+9DNc=";

     

       
26
       
 
       
  };

     

       
27
       
 
       


     

       
28
       
 
       
  pythonRelaxDeps = [ "websockets" ];

     

···

       
9
       
 
       


     

       
10
       
 
       
buildPythonPackage rec {

     

       
11
       
 
       
  pname = "fastcore";

     

       
12
       
-
       
  version = "1.7.8";

     

       
13
       
 
       
  pyproject = true;

     

       
14
       
 
       


     

       
15
       
 
       
  disabled = pythonOlder "3.8";

     
···

       
18
       
 
       
    owner = "fastai";

     

       
19
       
 
       
    repo = "fastcore";

     

       
20
       
 
       
    rev = "refs/tags/${version}";

     

       
21
       
-
       
    hash = "sha256-pBmtNrXincaOBADKgTaq7OmcrFlz6q7HROsUSRN0w8k=";

     

       
22
       
 
       
  };

     

       
23
       
 
       


     

       
24
       
 
       
  build-system = [ setuptools ];

     

···

       
9
       
 
       


     

       
10
       
 
       
buildPythonPackage rec {

     

       
11
       
 
       
  pname = "fastcore";

     

       
12
       
+
       
  version = "1.7.9";

     

       
13
       
 
       
  pyproject = true;

     

       
14
       
 
       


     

       
15
       
 
       
  disabled = pythonOlder "3.8";

     
···

       
18
       
 
       
    owner = "fastai";

     

       
19
       
 
       
    repo = "fastcore";

     

       
20
       
 
       
    rev = "refs/tags/${version}";

     

       
21
       
+
       
    hash = "sha256-OGqd+pLM3THcPD3JtccjH6sgpVEhcNVnGbIbyMFfqTU=";

     

       
22
       
 
       
  };

     

       
23
       
 
       


     

       
24
       
 
       
  build-system = [ setuptools ];

     

···

       
10
       
 
       


     

       
11
       
 
       
buildPythonPackage rec {

     

       
12
       
 
       
  pname = "svg-py";

     

       
13
       
-
       
  version = "1.4.3";

     

       
14
       
 
       
  pyproject = true;

     

       
15
       
 
       


     

       
16
       
 
       
  disabled = pythonOlder "3.7";

     
···

       
19
       
 
       
    owner = "orsinium-labs";

     

       
20
       
 
       
    repo = "svg.py";

     

       
21
       
 
       
    rev = "refs/tags/${version}";

     

       
22
       
-
       
    hash = "sha256-rnxznJM3ihuEJrD3ba6uMdGMozIrLw/QyGzA3JPygH4=";

     

       
23
       
 
       
  };

     

       
24
       
 
       


     

       
25
       
 
       
  nativeBuildInputs = [ flit-core ];

     

···

       
10
       
 
       


     

       
11
       
 
       
buildPythonPackage rec {

     

       
12
       
 
       
  pname = "svg-py";

     

       
13
       
+
       
  version = "1.5.0";

     

       
14
       
 
       
  pyproject = true;

     

       
15
       
 
       


     

       
16
       
 
       
  disabled = pythonOlder "3.7";

     
···

       
19
       
 
       
    owner = "orsinium-labs";

     

       
20
       
 
       
    repo = "svg.py";

     

       
21
       
 
       
    rev = "refs/tags/${version}";

     

       
22
       
+
       
    hash = "sha256-Lxzk3IVCD4PG36Pozz2crccwxCAAAM2QfS4rgwbjs6g=";

     

       
23
       
 
       
  };

     

       
24
       
 
       


     

       
25
       
 
       
  nativeBuildInputs = [ flit-core ];

     

···

       
10
       
 
       


     

       
11
       
 
       
buildPythonPackage rec {

     

       
12
       
 
       
  pname = "tencentcloud-sdk-python";

     

       
13
       
-
       
  version = "3.0.1235";

     

       
14
       
 
       
  pyproject = true;

     

       
15
       
 
       


     

       
16
       
 
       
  disabled = pythonOlder "3.9";

     
···

       
19
       
 
       
    owner = "TencentCloud";

     

       
20
       
 
       
    repo = "tencentcloud-sdk-python";

     

       
21
       
 
       
    rev = "refs/tags/${version}";

     

       
22
       
-
       
    hash = "sha256-OiifyoM9rMnLK3B/xdC/0grSLUKH1IZh4CDI1Yur3/8=";

     

       
23
       
 
       
  };

     

       
24
       
 
       


     

       
25
       
 
       
  build-system = [ setuptools ];

     

···

       
10
       
 
       


     

       
11
       
 
       
buildPythonPackage rec {

     

       
12
       
 
       
  pname = "tencentcloud-sdk-python";

     

       
13
       
+
       
  version = "3.0.1237";

     

       
14
       
 
       
  pyproject = true;

     

       
15
       
 
       


     

       
16
       
 
       
  disabled = pythonOlder "3.9";

     
···

       
19
       
 
       
    owner = "TencentCloud";

     

       
20
       
 
       
    repo = "tencentcloud-sdk-python";

     

       
21
       
 
       
    rev = "refs/tags/${version}";

     

       
22
       
+
       
    hash = "sha256-5pzdj+Es0JunISOCID5KJ+cR42EjD+c0Pt/B9dVJw2k=";

     

       
23
       
 
       
  };

     

       
24
       
 
       


     

       
25
       
 
       
  build-system = [ setuptools ];

     

···

       
5
       
 
       


     

       
6
       
 
       
rustPlatform.buildRustPackage rec {

     

       
7
       
 
       
  pname = "jql";

     

       
8
       
-
       
  version = "7.1.13";

     

       
9
       
 
       


     

       
10
       
 
       
  src = fetchFromGitHub {

     

       
11
       
 
       
    owner = "yamafaktory";

     

       
12
       
 
       
    repo = pname;

     

       
13
       
 
       
    rev = "jql-v${version}";

     

       
14
       
-
       
    hash = "sha256-JJV/r64TQecj2Sa/sjxaddiVFCGmtjEn+wfobUbN1OU=";

     

       
15
       
 
       
  };

     

       
16
       
 
       


     

       
17
       
-
       
  cargoHash = "sha256-w3MF4FcBCq5gQnhVVlcXOeGH4r2cA6kWwIzGVeLY5zg=";

     

       
18
       
 
       


     

       
19
       
 
       
  meta = with lib; {

     

       
20
       
 
       
    description = "JSON Query Language CLI tool built with Rust";

     

···

       
5
       
 
       


     

       
6
       
 
       
rustPlatform.buildRustPackage rec {

     

       
7
       
 
       
  pname = "jql";

     

       
8
       
+
       
  version = "7.2.0";

     

       
9
       
 
       


     

       
10
       
 
       
  src = fetchFromGitHub {

     

       
11
       
 
       
    owner = "yamafaktory";

     

       
12
       
 
       
    repo = pname;

     

       
13
       
 
       
    rev = "jql-v${version}";

     

       
14
       
+
       
    hash = "sha256-UyZ7unIbKRn/5WsoYxkHWQ5k0Tb5NcC+UGpiyvpShBo=";

     

       
15
       
 
       
  };

     

       
16
       
 
       


     

       
17
       
+
       
  cargoHash = "sha256-gJQsap31twigZT5n5w7oHATdNf0DfqoNfdS7cMU/hiA=";

     

       
18
       
 
       


     

       
19
       
 
       
  meta = with lib; {

     

       
20
       
 
       
    description = "JSON Query Language CLI tool built with Rust";

     

···

       
2
       
 
       


     

       
3
       
 
       
rustPlatform.buildRustPackage rec {

     

       
4
       
 
       
  pname = "cargo-chef";

     

       
5
       
-
       
  version = "0.1.67";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchCrate {

     

       
8
       
 
       
    inherit pname version;

     

       
9
       
-
       
    hash = "sha256-5bvA3lss+F2Wx0SSx5KRCmpERdIXUkUhFP+zRn8aZH0=";

     

       
10
       
 
       
  };

     

       
11
       
 
       


     

       
12
       
-
       
  cargoHash = "sha256-EIpi1k5GffGCk+fzHSW32T+ZLkRfswnEGZdER95TyBk=";

     

       
13
       
 
       


     

       
14
       
 
       
  meta = with lib; {

     

       
15
       
 
       
    description = "Cargo-subcommand to speed up Rust Docker builds using Docker layer caching";

     

···

       
2
       
 
       


     

       
3
       
 
       
rustPlatform.buildRustPackage rec {

     

       
4
       
 
       
  pname = "cargo-chef";

     

       
5
       
+
       
  version = "0.1.68";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchCrate {

     

       
8
       
 
       
    inherit pname version;

     

       
9
       
+
       
    hash = "sha256-NTFrNSEIzHppwOOjI3VadjhdV6EgGUmJzyX5JmTsJoI=";

     

       
10
       
 
       
  };

     

       
11
       
 
       


     

       
12
       
+
       
  cargoHash = "sha256-DoIkK/tj3AYt0vm7u7f4SmgOKbdQZv3ZunMFT68+37E=";

     

       
13
       
 
       


     

       
14
       
 
       
  meta = with lib; {

     

       
15
       
 
       
    description = "Cargo-subcommand to speed up Rust Docker builds using Docker layer caching";

     

···

       
1
       
 
       
{

     

       
2
       
-
       
    "4.19": {

     

       
3
       
-
       
        "patch": {

     

       
4
       
-
       
            "extra": "-hardened1",

     

       
5
       
-
       
            "name": "linux-hardened-4.19.315-hardened1.patch",

     

       
6
       
-
       
            "sha256": "1w17mwsv618pw5bkahmz6in0i5zjjxd3d14gggafqdd3dgfr1h8q",

     

       
7
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/4.19.315-hardened1/linux-hardened-4.19.315-hardened1.patch"

     

       
8
       
-
       
        },

     

       
9
       
-
       
        "sha256": "1j1j8awy0237jp2r211qpa305c10y7rlcbkxkzdvzbgyhwy4spkc",

     

       
10
       
-
       
        "version": "4.19.315"

     

       
11
       
-
       
    },

     

       
12
       
 
       
    "5.10": {

     

       
13
       
 
       
        "patch": {

     

       
14
       
 
       
            "extra": "-hardened1",

     

       
15
       
-
       
            "name": "linux-hardened-5.10.218-hardened1.patch",

     

       
16
       
-
       
            "sha256": "1ah4pznha17ngg3w7l0j74h4910gjv8qj503adrap7plvapf82m4",

     

       
17
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/5.10.218-hardened1/linux-hardened-5.10.218-hardened1.patch"

     

       
18
       
 
       
        },

     

       
19
       
-
       
        "sha256": "1mmj5hwm5i16gc1y4nzr1cs882vi6vrihrincdcivv63x11v4dlw",

     

       
20
       
-
       
        "version": "5.10.218"

     

       
21
       
 
       
    },

     

       
22
       
 
       
    "5.15": {

     

       
23
       
 
       
        "patch": {

     

       
24
       
 
       
            "extra": "-hardened1",

     

       
25
       
-
       
            "name": "linux-hardened-5.15.160-hardened1.patch",

     

       
26
       
-
       
            "sha256": "1r10ylx886rslsmrixlijjm4crhwzkl3wj6kpyn2344qik1gxpqr",

     

       
27
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/5.15.160-hardened1/linux-hardened-5.15.160-hardened1.patch"

     

       
28
       
 
       
        },

     

       
29
       
-
       
        "sha256": "018v19a7rhzc4szybzzn86jlnk42x7jm6xkadfd2d3xq6f7727pl",

     

       
30
       
-
       
        "version": "5.15.160"

     

       
31
       
 
       
    },

     

       
32
       
 
       
    "5.4": {

     

       
33
       
 
       
        "patch": {

     

       
34
       
 
       
            "extra": "-hardened1",

     

       
35
       
-
       
            "name": "linux-hardened-5.4.277-hardened1.patch",

     

       
36
       
-
       
            "sha256": "1zjw5wl8lj69j402qm8dg3m4dxgq3ppx2jyz8jks976vyhh8fsg4",

     

       
37
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/5.4.277-hardened1/linux-hardened-5.4.277-hardened1.patch"

     

       
38
       
 
       
        },

     

       
39
       
-
       
        "sha256": "0l8zq3k07hdprfpvw69ykkf2pdg8wiv28xz733yxsjcfb0l5n7vy",

     

       
40
       
-
       
        "version": "5.4.277"

     

       
41
       
 
       
    },

     

       
42
       
 
       
    "6.1": {

     

       
43
       
 
       
        "patch": {

     

       
44
       
 
       
            "extra": "-hardened1",

     

       
45
       
-
       
            "name": "linux-hardened-6.1.92-hardened1.patch",

     

       
46
       
-
       
            "sha256": "0cw87ygmisi823y3f7xrck12b6zh3mq1qmb7lcmr3hg6w3xskmn3",

     

       
47
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.1.92-hardened1/linux-hardened-6.1.92-hardened1.patch"

     

       
48
       
 
       
        },

     

       
49
       
-
       
        "sha256": "1j9n8gk76nn4gw42iba5zgghr360gb9n1mslr5dyv76wpwkz86ch",

     

       
50
       
-
       
        "version": "6.1.92"

     

       
51
       
 
       
    },

     

       
52
       
-
       
    "6.6": {

     

       
53
       
 
       
        "patch": {

     

       
54
       
 
       
            "extra": "-hardened1",

     

       
55
       
-
       
            "name": "linux-hardened-6.6.32-hardened1.patch",

     

       
56
       
-
       
            "sha256": "19362a6lxs3cnaw19jvda7n791y95lfgn9ki4wmaxnw2qbpi0bgg",

     

       
57
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.6.32-hardened1/linux-hardened-6.6.32-hardened1.patch"

     

       
58
       
-
       
        },

     

       
59
       
-
       
        "sha256": "1qbc8dqmk2xs1cz968rysw5xvhq3lj8g0pxp48fr2qbzy3m29a5a",

     

       
60
       
-
       
        "version": "6.6.32"

     

       
61
       
-
       
    },

     

       
62
       
-
       
    "6.8": {

     

       
63
       
-
       
        "patch": {

     

       
64
       
-
       
            "extra": "-hardened1",

     

       
65
       
-
       
            "name": "linux-hardened-6.8.11-hardened1.patch",

     

       
66
       
-
       
            "sha256": "08i03dmri9h6jxcjd9g6s7pv0spqi3f4fgch1ars68cgngikvbpq",

     

       
67
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.8.11-hardened1/linux-hardened-6.8.11-hardened1.patch"

     

       
68
       
 
       
        },

     

       
69
       
-
       
        "sha256": "1di8kr596sf68sm61kp5rz6bn3sb0q5ag1qc5hm8f9dpyq4wv3dp",

     

       
70
       
-
       
        "version": "6.8.11"

     

       
71
       
 
       
    },

     

       
72
       
-
       
    "6.9": {

     

       
73
       
 
       
        "patch": {

     

       
74
       
 
       
            "extra": "-hardened1",

     

       
75
       
-
       
            "name": "linux-hardened-6.9.2-hardened1.patch",

     

       
76
       
-
       
            "sha256": "0ph1m0pnlqrhvddz2mjgcwvs0ddcpzigz8kgi9zi063qinlfbm3q",

     

       
77
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/6.9.2-hardened1/linux-hardened-6.9.2-hardened1.patch"

     

       
78
       
 
       
        },

     

       
79
       
-
       
        "sha256": "1yg5j284y1gz7zwxjz2abvlnas259m1y1vzd9lmcqqar5kgmnv6l",

     

       
80
       
-
       
        "version": "6.9.2"

     

       
81
       
 
       
    }

     

       
82
       
 
       
}

     

···

       
1
       
 
       
{

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
2
       
 
       
    "5.10": {

     

       
3
       
 
       
        "patch": {

     

       
4
       
 
       
            "extra": "-hardened1",

     

       
5
       
+
       
            "name": "linux-hardened-v5.10.226-hardened1.patch",

     

       
6
       
+
       
            "sha256": "1vxcr0f3ikkg10wcvq76djxzmhlc6h5fv34xf8vm48wfi7ryajbk",

     

       
7
       
+
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.10.226-hardened1/linux-hardened-v5.10.226-hardened1.patch"

     

       
8
       
 
       
        },

     

       
9
       
+
       
        "sha256": "19hwwl5sbya65mch7fwmji2cli9b8796zjqbmkybjrarg1j9m8gn",

     

       
10
       
+
       
        "version": "5.10.226"

     

       
11
       
 
       
    },

     

       
12
       
 
       
    "5.15": {

     

       
13
       
 
       
        "patch": {

     

       
14
       
 
       
            "extra": "-hardened1",

     

       
15
       
+
       
            "name": "linux-hardened-v5.15.167-hardened1.patch",

     

       
16
       
+
       
            "sha256": "1mwww490bf5i1njzyprnamfn8n471r94klgn7wghwi2f5vsn6j9g",

     

       
17
       
+
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.15.167-hardened1/linux-hardened-v5.15.167-hardened1.patch"

     

       
18
       
 
       
        },

     

       
19
       
+
       
        "sha256": "0c6s6l5sz9ibws7bymb393ww0z9i3amsk1yx0bahipz3xhc1yxdi",

     

       
20
       
+
       
        "version": "5.15.167"

     

       
21
       
 
       
    },

     

       
22
       
 
       
    "5.4": {

     

       
23
       
 
       
        "patch": {

     

       
24
       
 
       
            "extra": "-hardened1",

     

       
25
       
+
       
            "name": "linux-hardened-v5.4.284-hardened1.patch",

     

       
26
       
+
       
            "sha256": "1skqaq90bigrxg0w075nssqbdq868ii62r8asx0m6wcvd5cl50af",

     

       
27
       
+
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.4.284-hardened1/linux-hardened-v5.4.284-hardened1.patch"

     

       
28
       
 
       
        },

     

       
29
       
+
       
        "sha256": "0axkwfhvq3w2072xjqww476qa3rjglxyqmf72mlp9b5ymswil8kp",

     

       
30
       
+
       
        "version": "5.4.284"

     

       
31
       
 
       
    },

     

       
32
       
 
       
    "6.1": {

     

       
33
       
 
       
        "patch": {

     

       
34
       
 
       
            "extra": "-hardened1",

     

       
35
       
+
       
            "name": "linux-hardened-v6.1.110-hardened1.patch",

     

       
36
       
+
       
            "sha256": "1v43n3h9d3y3xjjyf6r8n7a3fh3zpqw4f925bn2z5vwzblmg4bhf",

     

       
37
       
+
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.1.110-hardened1/linux-hardened-v6.1.110-hardened1.patch"

     

       
38
       
 
       
        },

     

       
39
       
+
       
        "sha256": "0slgvwldjdyi5vzhgriamkmrj4p942yacclgcw29331gfjs39gly",

     

       
40
       
+
       
        "version": "6.1.110"

     

       
41
       
 
       
    },

     

       
42
       
+
       
    "6.10": {

     

       
43
       
 
       
        "patch": {

     

       
44
       
 
       
            "extra": "-hardened1",

     

       
45
       
+
       
            "name": "linux-hardened-v6.10.10-hardened1.patch",

     

       
46
       
+
       
            "sha256": "13hlk1qd9inq711bz2sw4rq6r2lcagdl7mwxkx6rq8iimic758f2",

     

       
47
       
+
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.10.10-hardened1/linux-hardened-v6.10.10-hardened1.patch"

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
48
       
 
       
        },

     

       
49
       
+
       
        "sha256": "1kcvh1g3p1sj4q34ylcmm43824f97z4k695lcxnzp7pbnlsyg1z6",

     

       
50
       
+
       
        "version": "6.10.10"

     

       
51
       
 
       
    },

     

       
52
       
+
       
    "6.6": {

     

       
53
       
 
       
        "patch": {

     

       
54
       
 
       
            "extra": "-hardened1",

     

       
55
       
+
       
            "name": "linux-hardened-v6.6.51-hardened1.patch",

     

       
56
       
+
       
            "sha256": "03m82lylflnk466ixz3dywnj7scp6ynif4qhbx67ak3f0n44f738",

     

       
57
       
+
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.6.51-hardened1/linux-hardened-v6.6.51-hardened1.patch"

     

       
58
       
 
       
        },

     

       
59
       
+
       
        "sha256": "1cq8l3n12gnk6kgms5c7v71l199ip8lc9fpx7s8w8y88cla9l30w",

     

       
60
       
+
       
        "version": "6.6.51"

     

       
61
       
 
       
    }

     

       
62
       
 
       
}

     

···

       
145
       
 
       
    if not sig_ok:

     

       
146
       
 
       
        return None

     

       
147
       
 
       


     

       
148
       
-
       
    kernel_ver = re.sub(r"(.*)(-hardened[\d]+)$", r'\1', release_info.release.tag_name)

     

       
149
       
 
       
    major = kernel_ver.split('.')[0]

     

       
150
       
 
       
    sha256_kernel, _ = nix_prefetch_url(f"mirror://kernel/linux/kernel/v{major}.x/linux-{kernel_ver}.tar.xz")

     

       
151
       
 
       


     
···

       
157
       
 
       


     

       
158
       
 
       


     

       
159
       
 
       
def parse_version(version_str: str) -> Version:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
160
       
 
       
    version: Version = []

     

       
161
       
-
       
    for component in re.split(r'\.|\-', version_str):

     

       
0
       
 
       

     

       
162
       
 
       
        try:

     

       
163
       
 
       
            version.append(int(component))

     

       
164
       
 
       
        except ValueError:

     
···

       
227
       
 
       
    # It's not reliable to exit earlier because not every kernel minor may

     

       
228
       
 
       
    # have hardened patches, hence the naive search below.

     

       
229
       
 
       
    i += 1

     

       
230
       
-
       
    if i > 500:

     

       
231
       
 
       
        break

     

       
232
       
 
       


     

       
233
       
 
       
    version = parse_version(release.tag_name)

     

···

       
145
       
 
       
    if not sig_ok:

     

       
146
       
 
       
        return None

     

       
147
       
 
       


     

       
148
       
+
       
    kernel_ver = re.sub(r"v?(.*)(-hardened[\d]+)$", r'\1', release_info.release.tag_name)

     

       
149
       
 
       
    major = kernel_ver.split('.')[0]

     

       
150
       
 
       
    sha256_kernel, _ = nix_prefetch_url(f"mirror://kernel/linux/kernel/v{major}.x/linux-{kernel_ver}.tar.xz")

     

       
151
       
 
       


     
···

       
157
       
 
       


     

       
158
       
 
       


     

       
159
       
 
       
def parse_version(version_str: str) -> Version:

     

       
160
       
+
       
    # There have been two variants v6.10[..] and 6.10[..], drop the v

     

       
161
       
+
       
    version_str_without_v = version_str[1:] if not version_str[0].isdigit() else version_str

     

       
162
       
 
       
    version: Version = []

     

       
163
       
+
       


     

       
164
       
+
       
    for component in re.split(r'\.|\-', version_str_without_v):

     

       
165
       
 
       
        try:

     

       
166
       
 
       
            version.append(int(component))

     

       
167
       
 
       
        except ValueError:

     
···

       
230
       
 
       
    # It's not reliable to exit earlier because not every kernel minor may

     

       
231
       
 
       
    # have hardened patches, hence the naive search below.

     

       
232
       
 
       
    i += 1

     

       
233
       
+
       
    if i > 100:

     

       
234
       
 
       
        break

     

       
235
       
 
       


     

       
236
       
 
       
    version = parse_version(release.tag_name)

     

···

       
19
       
 
       
        "version": "5.4.284",

     

       
20
       
 
       
        "hash": "sha256:0axkwfhvq3w2072xjqww476qa3rjglxyqmf72mlp9b5ymswil8kp"

     

       
21
       
 
       
    },

     

       
22
       
-
       
    "4.19": {

     

       
23
       
-
       
        "version": "4.19.322",

     

       
24
       
-
       
        "hash": "sha256:0qj106lj554y1kdqj8kwyf7pk9bvrrpgz6s8zyh7d61mk7wws9sf"

     

       
25
       
-
       
    },

     

       
26
       
 
       
    "6.6": {

     

       
27
       
 
       
        "version": "6.6.52",

     

       
28
       
 
       
        "hash": "sha256:1f5l6y7abscm01dr740fzvq8r756ar854n0i299smm4rhcsap48m"

     

       
29
       
-
       
    },

     

       
30
       
-
       
    "6.8": {

     

       
31
       
-
       
        "version": "6.8.12",

     

       
32
       
-
       
        "hash": "sha256:0fb0m0fv4521g63gq04d7lm6hy8169s1rykiav5bkd99s9b1kcqr"

     

       
33
       
-
       
    },

     

       
34
       
-
       
    "6.9": {

     

       
35
       
-
       
        "version": "6.9.12",

     

       
36
       
-
       
        "hash": "sha256:08ngskni7d9wi93vlwcmbdg7sb2jl1drhhzn62k9nsrg1r7crrss"

     

       
37
       
 
       
    },

     

       
38
       
 
       
    "6.10": {

     

       
39
       
 
       
        "version": "6.10.11",

     

···

       
19
       
 
       
        "version": "5.4.284",

     

       
20
       
 
       
        "hash": "sha256:0axkwfhvq3w2072xjqww476qa3rjglxyqmf72mlp9b5ymswil8kp"

     

       
21
       
 
       
    },

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
22
       
 
       
    "6.6": {

     

       
23
       
 
       
        "version": "6.6.52",

     

       
24
       
 
       
        "hash": "sha256:1f5l6y7abscm01dr740fzvq8r756ar854n0i299smm4rhcsap48m"

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
25
       
 
       
    },

     

       
26
       
 
       
    "6.10": {

     

       
27
       
 
       
        "version": "6.10.11",

     

···

       
40
       
 
       
    "--without-included-regex"

     

       
41
       
 
       
  ];

     

       
42
       
 
       


     

       
0
       
 
       

     

       
43
       
 
       
  doCheck = true;

     

       
44
       
 
       
  preCheck = ''

     

       
45
       
 
       
    patchShebangs tests fuzz

     

···

       
40
       
 
       
    "--without-included-regex"

     

       
41
       
 
       
  ];

     

       
42
       
 
       


     

       
43
       
+
       
  __darwinAllowLocalNetworking = true;

     

       
44
       
 
       
  doCheck = true;

     

       
45
       
 
       
  preCheck = ''

     

       
46
       
 
       
    patchShebangs tests fuzz

     

···

       
2
       
 
       


     

       
3
       
 
       
buildGoModule rec {

     

       
4
       
 
       
  pname = "ssh-to-age";

     

       
5
       
-
       
  version = "1.1.8";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "Mic92";

     

       
9
       
 
       
    repo = "ssh-to-age";

     

       
10
       
 
       
    rev = version;

     

       
11
       
-
       
    sha256 = "sha256-wGtNaejzAOgOuYDEKz6xMCaoaHsiDuQZj0KKpcejphE=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
-
       
  vendorHash = "sha256-w/REcFeH58DTQwgotxSBVR4y7aQ9rBDX2U0A4vJno7s=";

     

       
15
       
 
       


     

       
16
       
 
       
  checkPhase = ''

     

       
17
       
 
       
    runHook preCheck

     

···

       
2
       
 
       


     

       
3
       
 
       
buildGoModule rec {

     

       
4
       
 
       
  pname = "ssh-to-age";

     

       
5
       
+
       
  version = "1.1.9";

     

       
6
       
 
       


     

       
7
       
 
       
  src = fetchFromGitHub {

     

       
8
       
 
       
    owner = "Mic92";

     

       
9
       
 
       
    repo = "ssh-to-age";

     

       
10
       
 
       
    rev = version;

     

       
11
       
+
       
    sha256 = "sha256-cEEFz/iVhvfo8CffC9wkIRnF26xL+roaqKsLmUgfUiA=";

     

       
12
       
 
       
  };

     

       
13
       
 
       


     

       
14
       
+
       
  vendorHash = "sha256-FH+etKil0oiiB5tvDYS2nu1HG4yZTWZuRhtYnbq4Os4=";

     

       
15
       
 
       


     

       
16
       
 
       
  checkPhase = ''

     

       
17
       
 
       
    runHook preCheck

     

···

       
26
       
 
       
    linux = kernel;

     

       
27
       
 
       
  };

     

       
28
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
29
       
 
       
  # Hardened Linux

     

       
30
       
 
       
  hardenedKernelFor = kernel': overrides:

     

       
31
       
 
       
    let

     
···

       
259
       
 
       


     

       
260
       
 
       
    linux_hardened = hardenedKernelFor packageAliases.linux_default.kernel { };

     

       
261
       
 
       


     

       
262
       
-
       
    linux_5_4_hardened = hardenedKernelFor kernels.linux_5_4 {

     

       
263
       
 
       
      stdenv = gcc10Stdenv;

     

       
264
       
 
       
      buildPackages = buildPackages // { stdenv = buildPackages.gcc10Stdenv; };

     

       
265
       
-
       
    };

     

       
266
       
 
       
    linux_5_10_hardened = hardenedKernelFor kernels.linux_5_10 { };

     

       
267
       
 
       
    linux_5_15_hardened = hardenedKernelFor kernels.linux_5_15 { };

     

       
268
       
 
       
    linux_6_1_hardened = hardenedKernelFor kernels.linux_6_1 { };

     

···

       
26
       
 
       
    linux = kernel;

     

       
27
       
 
       
  };

     

       
28
       
 
       


     

       
29
       
+
       
  markBroken = drv: drv.overrideAttrs ({ meta ? {}, ... }: {

     

       
30
       
+
       
    meta = meta // { broken = true; };

     

       
31
       
+
       
  });

     

       
32
       
+
       


     

       
33
       
 
       
  # Hardened Linux

     

       
34
       
 
       
  hardenedKernelFor = kernel': overrides:

     

       
35
       
 
       
    let

     
···

       
263
       
 
       


     

       
264
       
 
       
    linux_hardened = hardenedKernelFor packageAliases.linux_default.kernel { };

     

       
265
       
 
       


     

       
266
       
+
       
    linux_5_4_hardened = markBroken (hardenedKernelFor kernels.linux_5_4 {

     

       
267
       
 
       
      stdenv = gcc10Stdenv;

     

       
268
       
 
       
      buildPackages = buildPackages // { stdenv = buildPackages.gcc10Stdenv; };

     

       
269
       
+
       
    });

     

       
270
       
 
       
    linux_5_10_hardened = hardenedKernelFor kernels.linux_5_10 { };

     

       
271
       
 
       
    linux_5_15_hardened = hardenedKernelFor kernels.linux_5_15 { };

     

       
272
       
 
       
    linux_6_1_hardened = hardenedKernelFor kernels.linux_6_1 { };