nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-23 04:25:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #274770 from fabaff/step-ca-bump

Browse Source 
step-ca: 0.25.0 -> 0.25.2
This commit is contained in:
Fabian Affolter 2023-12-18 21:33:40 +01:00 committed by GitHub
commit 4bfea513e2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
pkgs/tools/security/step-ca/default.nix
View File

@ -12,20 +12,24 @@
buildGoModule rec { buildGoModule rec {
pname = "step-ca"; pname = "step-ca";
version = "0.25.0"; version = "0.25.2";
src = fetchFromGitHub { src = fetchFromGitHub {
owner = "smallstep"; owner = "smallstep";
repo = "certificates"; repo = "certificates";
rev = "refs/tags/v${version}"; rev = "refs/tags/v${version}";
hash = "sha256-CO9Qjx4D6qNGjOdva88KRCJOQq85r5U5nwmXC1G94dY="; hash = "sha256-cP3QypBNWGbr7R7lJLfaoBh6C37ubGuaxnxWlZ1Z000=";
}; };
vendorHash = "sha256-Weq8sS+8gsfdoVSBDm8E2DCrngfNsolqQR2/yd9etPo="; vendorHash = "sha256-AXMMpzXEhdKSGeVg/KK2NEgalxIXP6DUTcoxOQVqow4=";
ldflags = [ "-buildid=" ]; ldflags = [
"-buildid="
];
nativeBuildInputs = lib.optionals hsmSupport [ pkg-config ]; nativeBuildInputs = lib.optionals hsmSupport [
pkg-config
];
buildInputs = buildInputs =
lib.optionals (hsmSupport && stdenv.isLinux) [ pcsclite ] lib.optionals (hsmSupport && stdenv.isLinux) [ pcsclite ]
@ -43,9 +47,14 @@ buildGoModule rec {
install -Dm444 -t $out/lib/systemd/system systemd/step-ca.service install -Dm444 -t $out/lib/systemd/system systemd/step-ca.service
''; '';
preCheck = ''
export HOME=$(mktemp -d)
'';
# Tests start http servers which need to bind to local addresses: # Tests start http servers which need to bind to local addresses:
# panic: httptest: failed to listen on a port: listen tcp6 [::1]:0: bind: operation not permitted # panic: httptest: failed to listen on a port: listen tcp6 [::1]:0: bind: operation not permitted
__darwinAllowLocalNetworking = true; __darwinAllowLocalNetworking = true;
# Tests need to run in a reproducible order, otherwise they run unreliably on # Tests need to run in a reproducible order, otherwise they run unreliably on
# (at least) x86_64-linux. # (at least) x86_64-linux.
checkFlags = [ "-p 1" ]; checkFlags = [ "-p 1" ];