make age-plugin-fido2-hmac work on darwin (#339299)

This commit is contained in:
lassulus 2024-09-05 22:06:12 +01:00 committed by GitHub
commit fa666a7ab9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,10 +1,27 @@
{ lib
, buildGoModule
, fetchFromGitHub
, libfido2
, stdenv
{
lib,
buildGoModule,
fetchFromGitHub,
stdenv,
libfido2,
openssl,
libcbor
}:
let
darwin_arch = if stdenv.hostPlatform.system == "aarch64-darwin" then "arm64" else "amd64";
darwin_configure = ''
chmod -R +w vendor/github.com/keys-pub/go-libfido2
cat << EOF > vendor/github.com/keys-pub/go-libfido2/fido2_static_${darwin_arch}.go
package libfido2
/*
#cgo darwin LDFLAGS: -framework CoreFoundation -framework IOKit -L${lib.getLib openssl}/lib -L${lib.getLib libcbor}/lib -lfido2
#cgo darwin CFLAGS: -I${libfido2.dev}/include -I${openssl.dev}/include
*/
import "C"
EOF
'';
in
buildGoModule rec {
pname = "age-plugin-fido2-hmac";
version = "0.2.3";
@ -18,11 +35,11 @@ buildGoModule rec {
vendorHash = "sha256-h4/tyq9oZt41IfRJmmsLHUpJiPJ7YuFu59ccM7jHsFo=";
ldflags = [ "-s" "-w" ];
ldflags = [ "-s" "-w" "-X main.version=v${version}" ];
buildInputs = [
libfido2
];
buildInputs = [ libfido2 ];
postConfigure = lib.optional stdenv.isDarwin darwin_configure;
meta = with lib; {
description = "Age plugin to encrypt files with fido2 tokens using the hmac-secret extension and non-discoverable credentials";
@ -30,6 +47,5 @@ buildGoModule rec {
license = licenses.mit;
maintainers = with maintainers; [ matthewcroughan ];
mainProgram = "age-plugin-fido2-hmac";
broken = stdenv.isDarwin;
};
}