nixpkgs/pkgs/tools/security/sbsigntool/default.nix

{ lib, stdenv
, fetchgit, autoconf, automake, pkg-config, help2man
, openssl, libuuid, gnu-efi, libbfd
}:

stdenv.mkDerivation rec {
  pname = "sbsigntool";
  version = "0.9.4";

  src = fetchgit {
    url = "https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git";
    rev = "v${version}";
    sha256 = "sha256-dbjdA+hjII/k7wABTTJV5RBdy4KlNkFlBWEaX4zn5vg=";
  };

  patches = [ ./autoconf.patch ];

  prePatch = "patchShebangs .";

  nativeBuildInputs = [ autoconf automake pkg-config help2man ];
  buildInputs = [ openssl libuuid libbfd gnu-efi ];

  configurePhase = ''
    substituteInPlace configure.ac --replace "@@NIX_GNUEFI@@" "${gnu-efi}"

    lib/ccan.git/tools/create-ccan-tree --build-type=automake lib/ccan "talloc read_write_all build_assert array_size endian"
    touch AUTHORS
    touch ChangeLog

    echo "SUBDIRS = lib/ccan src docs" >> Makefile.am

    aclocal
    autoheader
    autoconf
    automake --add-missing -Wno-portability

    ./configure --prefix=$out
    '';

  installPhase = ''
    mkdir -p $out
    make install
    '';

  meta = with lib; {
    description = "Tools for maintaining UEFI signature databases";
    homepage    = "http://jk.ozlabs.org/docs/sbkeysync-maintaing-uefi-key-databases";
    maintainers = with maintainers; [ hmenke ];
    platforms   = [ "x86_64-linux" ]; # Broken on i686
    license     = licenses.gpl3;
  };
}
treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 08:54:33 +01:00			`{ lib, stdenv`
pkgs/tools: pkgconfig -> pkg-config 2021-01-17 04:51:22 +01:00			`, fetchgit, autoconf, automake, pkg-config, help2man`
treewide: remove unused variables (#63177) * treewide: remove unused variables * making ofborg happy 2019-06-16 21:59:06 +02:00			`, openssl, libuuid, gnu-efi, libbfd`
treewide: Try to avoid depending on binutils directly One should depend on - `stdenv.cc.bintools`: for executables at build time - `libbfd` or `libiberty`: for those libraries - `targetPackages.cc.bintools`: for exectuables at run time - `binutils`: only for specifically GNU Binutils's executables, regardless of the host platform, at run time. 2017-10-11 01:01:42 +02:00			`}:`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00
sbsigntool: 0.9.1 -> 0.9.4 2022-06-07 21:22:25 +02:00			`stdenv.mkDerivation rec {`
treewide: name -> pname (easy cases) (#66585) treewide replacement of stdenv.mkDerivation rec { name = "-${version}"; version = ""; to pname 2019-08-15 14:41:18 +02:00			`pname = "sbsigntool";`
sbsigntool: 0.9.1 -> 0.9.4 2022-06-07 21:22:25 +02:00			`version = "0.9.4";`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00
			`src = fetchgit {`
sbsigntool: 0.5 -> 0.9.1 2018-09-25 17:51:43 +02:00			`url = "https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git";`
sbsigntool: 0.9.1 -> 0.9.4 2022-06-07 21:22:25 +02:00			`rev = "v${version}";`
			`sha256 = "sha256-dbjdA+hjII/k7wABTTJV5RBdy4KlNkFlBWEaX4zn5vg=";`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00			`};`

			`patches = [ ./autoconf.patch ];`

sbsigntool: fix build (ZHF) 2015-07-12 23:41:10 +02:00			`prePatch = "patchShebangs .";`

pkgs/tools: pkgconfig -> pkg-config 2021-01-17 04:51:22 +01:00			`nativeBuildInputs = [ autoconf automake pkg-config help2man ];`
sbsigntool: 0.5 -> 0.9.1 2018-09-25 17:51:43 +02:00			`buildInputs = [ openssl libuuid libbfd gnu-efi ];`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00
			`configurePhase = ''`
			`substituteInPlace configure.ac --replace "@@NIX_GNUEFI@@" "${gnu-efi}"`

sbsigntool: 0.5 -> 0.9.1 2018-09-25 17:51:43 +02:00			`lib/ccan.git/tools/create-ccan-tree --build-type=automake lib/ccan "talloc read_write_all build_assert array_size endian"`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00			`touch AUTHORS`
			`touch ChangeLog`

			`echo "SUBDIRS = lib/ccan src docs" >> Makefile.am`

			`aclocal`
			`autoheader`
			`autoconf`
			`automake --add-missing -Wno-portability`

			`./configure --prefix=$out`
			`'';`

			`installPhase = ''`
			`mkdir -p $out`
			`make install`
			`'';`

treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 08:54:33 +01:00			`meta = with lib; {`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00			`description = "Tools for maintaining UEFI signature databases";`
treewide: Per RFC45, remove all unquoted URLs 2020-04-01 03:11:51 +02:00			`homepage = "http://jk.ozlabs.org/docs/sbkeysync-maintaing-uefi-key-databases";`
maintainers: remove tstrobel was ts468 on github afaict and was actually a committer, but that account hasn't been active since early 2018 2022-06-23 01:40:02 +02:00			`maintainers = with maintainers; [ hmenke ];`
sbsigntool: only build for x86_64-linux, it is broken on i686 2015-08-06 14:34:13 +02:00			`platforms = [ "x86_64-linux" ]; # Broken on i686`
sbsigntool: add license see issue #43716 2018-08-04 18:54:35 +02:00			`license = licenses.gpl3;`
sbsigntool: init at 0.5 2015-07-05 14:59:01 +02:00			`};`
			`}`