2021-01-25 08:26:54 +00:00
|
|
|
{ lib
|
2019-12-01 11:57:05 +00:00
|
|
|
, rustPlatform
|
|
|
|
|
, fetchFromGitHub
|
|
|
|
|
, cryptsetup
|
|
|
|
|
, pkg-config
|
2020-10-13 09:01:23 +00:00
|
|
|
, clang
|
|
|
|
|
, llvmPackages
|
2022-09-08 09:29:47 +00:00
|
|
|
, fetchpatch
|
2019-12-01 11:57:05 +00:00
|
|
|
}:
|
|
|
|
|
|
|
|
|
|
rustPlatform.buildRustPackage rec {
|
|
|
|
|
pname = "fido2luks";
|
2022-04-28 10:50:21 +00:00
|
|
|
version = "0.2.20";
|
2019-12-01 11:57:05 +00:00
|
|
|
|
|
|
|
|
src = fetchFromGitHub {
|
|
|
|
|
owner = "shimunn";
|
|
|
|
|
repo = pname;
|
|
|
|
|
rev = version;
|
2022-04-28 10:50:21 +00:00
|
|
|
sha256 = "04gl7wn38f42mapmkf026rya668vvhm03yi8iqnz31xgggbr2irm";
|
2019-12-01 11:57:05 +00:00
|
|
|
};
|
|
|
|
|
|
2022-09-08 09:29:47 +00:00
|
|
|
cargoPatches = [
|
|
|
|
|
#https://github.com/shimunn/fido2luks/pull/50
|
|
|
|
|
(fetchpatch {
|
|
|
|
|
name = "libcryptsetup-rs.patch";
|
|
|
|
|
url = "https://github.com/shimunn/fido2luks/commit/c87a9bbb4cbbe90be7385d4bc2946716c593b91d.diff";
|
|
|
|
|
sha256 = "2IWz9gcEbXhHlz7VWoJNBZfwnJm/J3RRuXg91xH9Pl4=";
|
|
|
|
|
})
|
|
|
|
|
];
|
|
|
|
|
|
2019-12-01 11:57:05 +00:00
|
|
|
buildInputs = [ cryptsetup ];
|
2020-10-13 09:01:23 +00:00
|
|
|
nativeBuildInputs = [ pkg-config clang ];
|
2019-12-01 11:57:05 +00:00
|
|
|
|
2020-10-13 09:01:23 +00:00
|
|
|
configurePhase = ''
|
llvmPackages: Multuple outputs for everythting
Also begin to start work on cross compilation, though that will have to
be finished later.
The patches are based on the first version of
https://reviews.llvm.org/D99484. It's very annoying to do the
back-porting but the review has uncovered nothing super major so I'm
fine sticking with what I've got.
Beyond making the outputs work, I also strove to re-sync the packages,
as they have been drifting pointlessly apart for some time.
----
Other misc notes, highly incomplete
- lvm-config-native and llvm-config are put in `dev` because they are
tools just for build time.
- Clang no longer has an lld dep. That was introduced in
db29857eb391ed002046090851a44c452b80bdbd, but if clang needs help
finding lld when it is used we should just pass it flags / put in the
resource dir. Providing it at build time increases critical path
length for no good reason.
----
A note on `nativeCC`:
`stdenv` takes tools from the previous stage, so:
1. `pkgsBuildBuild`: `(?1, x, x)`
2. `pkgsBuildBuild.stdenv.cc`: `(?0, ?1, x)`
while:
1. `pkgsBuildBuild`: `(?1, x, x)`
2. `pkgsBuildBuild.targetPackages`: `(x, x, ?2)`
3. `pkgsBuildBuild.targetPackages.stdenv.cc`: `(?1, x, x)`
2020-10-15 08:23:57 +00:00
|
|
|
export LIBCLANG_PATH="${llvmPackages.libclang.lib}/lib"
|
2020-10-13 09:01:23 +00:00
|
|
|
'';
|
|
|
|
|
|
2022-09-08 09:29:47 +00:00
|
|
|
cargoSha256 = "U/2dAmFmW6rQvojaKSDdO+/WzajBJmhOZWvzwdiYBm0=";
|
2019-12-01 11:57:05 +00:00
|
|
|
|
2021-01-11 07:54:33 +00:00
|
|
|
meta = with lib; {
|
2019-12-01 11:57:05 +00:00
|
|
|
description = "Decrypt your LUKS partition using a FIDO2 compatible authenticator";
|
|
|
|
|
homepage = "https://github.com/shimunn/fido2luks";
|
|
|
|
|
license = licenses.gpl3;
|
|
|
|
|
maintainers = with maintainers; [ prusnak mmahut ];
|
|
|
|
|
platforms = platforms.linux;
|
|
|
|
|
};
|
|
|
|
|
}
|