mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-21 05:04:00 +00:00
0a89a79460
Fixes CVE-2023-40225. Changelog: https://www.haproxy.org/download/2.8/src/CHANGELOG
82 lines
2.3 KiB
Nix
82 lines
2.3 KiB
Nix
{ useLua ? true
|
|
, usePcre ? true
|
|
, withPrometheusExporter ? true
|
|
, stdenv
|
|
, lib
|
|
, fetchurl
|
|
, nixosTests
|
|
, openssl
|
|
, zlib
|
|
, libxcrypt
|
|
, lua5_3 ? null
|
|
, pcre ? null
|
|
, systemd ? null
|
|
}:
|
|
|
|
assert useLua -> lua5_3 != null;
|
|
assert usePcre -> pcre != null;
|
|
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "haproxy";
|
|
version = "2.8.2";
|
|
|
|
src = fetchurl {
|
|
url = "https://www.haproxy.org/download/${lib.versions.majorMinor finalAttrs.version}/src/haproxy-${finalAttrs.version}.tar.gz";
|
|
hash = "sha256-aY1pBtFwlGqGl2mWTleBa6PaOt9h/3XomXKxN/RljbA=";
|
|
};
|
|
|
|
buildInputs = [ openssl zlib libxcrypt ]
|
|
++ lib.optional useLua lua5_3
|
|
++ lib.optional usePcre pcre
|
|
++ lib.optional stdenv.isLinux systemd;
|
|
|
|
# TODO: make it work on bsd as well
|
|
makeFlags = [
|
|
"PREFIX=${placeholder "out"}"
|
|
("TARGET=" + (if stdenv.isSunOS then "solaris"
|
|
else if stdenv.isLinux then "linux-glibc"
|
|
else if stdenv.isDarwin then "osx"
|
|
else "generic"))
|
|
];
|
|
|
|
buildFlags = [
|
|
"USE_OPENSSL=yes"
|
|
"USE_ZLIB=yes"
|
|
] ++ lib.optionals usePcre [
|
|
"USE_PCRE=yes"
|
|
"USE_PCRE_JIT=yes"
|
|
] ++ lib.optionals useLua [
|
|
"USE_LUA=yes"
|
|
"LUA_LIB_NAME=lua"
|
|
"LUA_LIB=${lua5_3}/lib"
|
|
"LUA_INC=${lua5_3}/include"
|
|
] ++ lib.optionals stdenv.isLinux [
|
|
"USE_SYSTEMD=yes"
|
|
"USE_GETADDRINFO=1"
|
|
] ++ lib.optionals withPrometheusExporter [
|
|
"USE_PROMEX=yes"
|
|
] ++ [ "CC=${stdenv.cc.targetPrefix}cc" ];
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
passthru.tests.haproxy = nixosTests.haproxy;
|
|
|
|
meta = {
|
|
changelog = "https://www.haproxy.org/download/${lib.versions.majorMinor finalAttrs.version}/src/CHANGELOG";
|
|
description = "Reliable, high performance TCP/HTTP load balancer";
|
|
homepage = "https://haproxy.org";
|
|
license = with lib.licenses; [ gpl2Plus lgpl21Only ];
|
|
longDescription = ''
|
|
HAProxy is a free, very fast and reliable solution offering high
|
|
availability, load balancing, and proxying for TCP and HTTP-based
|
|
applications. It is particularly suited for web sites crawling under very
|
|
high loads while needing persistence or Layer7 processing. Supporting
|
|
tens of thousands of connections is clearly realistic with todays
|
|
hardware.
|
|
'';
|
|
maintainers = with lib.maintainers; [ ];
|
|
platforms = with lib.platforms; linux ++ darwin;
|
|
mainProgram = "haproxy";
|
|
};
|
|
})
|