mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-22 15:03:28 +00:00
07f09fcbbb
Also go back to the `GOBIN` hack in libwg. I don't know why it was
working before and not now, but 🤷
112 lines
3.0 KiB
Nix
112 lines
3.0 KiB
Nix
{ lib
|
|
, stdenv
|
|
, rustPlatform
|
|
, fetchFromGitHub
|
|
, pkg-config
|
|
, protobuf
|
|
, makeWrapper
|
|
, git
|
|
, dbus
|
|
, libnftnl
|
|
, libmnl
|
|
, libwg
|
|
, enableOpenvpn ? true
|
|
, openvpn-mullvad
|
|
, shadowsocks-rust
|
|
, installShellFiles
|
|
, writeShellScriptBin
|
|
}:
|
|
let
|
|
# NOTE(cole-h): This is necessary because wireguard-go-rs executes go in its build.rs (whose goal
|
|
# is to produce $OUT_DIR/libwg.a), and a mixed Rust-Go build is non-trivial (read: I didn't want
|
|
# to attempt it). So, we just fake the "go" binary and do what it would have done: put libwg.a
|
|
# under $OUT_DIR so that it can be linked against.
|
|
fakeGoCopyLibwg = writeShellScriptBin "go" ''
|
|
[ ! -e "$OUT_DIR"/libwg.a ] && cp ${libwg}/lib/libwg.a "$OUT_DIR"/libwg.a
|
|
'';
|
|
in
|
|
rustPlatform.buildRustPackage rec {
|
|
pname = "mullvad";
|
|
version = "2024.7";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "mullvad";
|
|
repo = "mullvadvpn-app";
|
|
rev = version;
|
|
fetchSubmodules = true;
|
|
hash = "sha256-me0e8Cb1dRrnAeiCmsXiclcDMruVLV3t0eGAM3RU1es=";
|
|
};
|
|
|
|
cargoLock = {
|
|
lockFile = ./Cargo.lock;
|
|
outputHashes = {
|
|
"udp-over-tcp-0.3.0" = "sha256-5PeaM7/zhux1UdlaKpnQ2yIdmFy1n2weV/ux9lSRha4=";
|
|
};
|
|
};
|
|
|
|
checkFlags = "--skip=version_check";
|
|
|
|
nativeBuildInputs = [
|
|
pkg-config
|
|
protobuf
|
|
makeWrapper
|
|
git
|
|
installShellFiles
|
|
fakeGoCopyLibwg
|
|
];
|
|
|
|
buildInputs = [
|
|
dbus.dev
|
|
libnftnl
|
|
libmnl
|
|
];
|
|
|
|
postInstall = ''
|
|
compdir=$(mktemp -d)
|
|
for shell in bash zsh fish; do
|
|
$out/bin/mullvad shell-completions $shell $compdir
|
|
done
|
|
installShellCompletion --cmd mullvad \
|
|
--bash $compdir/mullvad.bash \
|
|
--zsh $compdir/_mullvad \
|
|
--fish $compdir/mullvad.fish
|
|
'';
|
|
|
|
postFixup =
|
|
# Place all binaries in the 'mullvad-' namespace, even though these
|
|
# specific binaries aren't used in the lifetime of the program.
|
|
''
|
|
for bin in relay_list translations-converter tunnel-obfuscation; do
|
|
mv "$out/bin/$bin" "$out/bin/mullvad-$bin"
|
|
done
|
|
'' +
|
|
# Files necessary for OpenVPN tunnels to work.
|
|
lib.optionalString enableOpenvpn ''
|
|
mkdir -p $out/share/mullvad
|
|
cp dist-assets/ca.crt $out/share/mullvad
|
|
ln -s ${openvpn-mullvad}/bin/openvpn $out/share/mullvad
|
|
ln -s ${shadowsocks-rust}/bin/sslocal $out/share/mullvad
|
|
ln -s $out/lib/libtalpid_openvpn_plugin.so $out/share/mullvad
|
|
'' +
|
|
# Set the directory where Mullvad will look for its resources by default to
|
|
# `$out/share`, so that we can avoid putting the files in `$out/bin` --
|
|
# Mullvad defaults to looking inside the directory its binary is located in
|
|
# for its resources.
|
|
''
|
|
wrapProgram $out/bin/mullvad-daemon \
|
|
--set-default MULLVAD_RESOURCE_DIR "$out/share/mullvad"
|
|
'';
|
|
|
|
passthru = {
|
|
inherit libwg;
|
|
inherit openvpn-mullvad;
|
|
};
|
|
|
|
meta = with lib; {
|
|
description = "Mullvad VPN command-line client tools";
|
|
homepage = "https://github.com/mullvad/mullvadvpn-app";
|
|
license = licenses.gpl3Only;
|
|
maintainers = with maintainers; [ cole-h ];
|
|
};
|
|
}
|