mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-02 03:43:06 +00:00
ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
62 lines
1.2 KiB
Nix
62 lines
1.2 KiB
Nix
{ lib
|
|
, buildGoModule
|
|
, fetchFromGitHub
|
|
, go-md2man
|
|
, installShellFiles
|
|
, pkg-config
|
|
, bcc
|
|
, libseccomp
|
|
}:
|
|
|
|
buildGoModule rec {
|
|
pname = "oci-seccomp-bpf-hook";
|
|
version = "1.2.10";
|
|
src = fetchFromGitHub {
|
|
owner = "containers";
|
|
repo = "oci-seccomp-bpf-hook";
|
|
rev = "v${version}";
|
|
sha256 = "sha256-bWlm+JYNf7+faKSQfW5fhxoH/D2I8ujjakswH+1r49o=";
|
|
};
|
|
vendorHash = null;
|
|
|
|
outputs = [ "out" "man" ];
|
|
nativeBuildInputs = [
|
|
go-md2man
|
|
installShellFiles
|
|
pkg-config
|
|
];
|
|
buildInputs = [
|
|
bcc
|
|
libseccomp
|
|
];
|
|
|
|
checkPhase = ''
|
|
go test -v ./...
|
|
'';
|
|
|
|
buildPhase = ''
|
|
make
|
|
'';
|
|
|
|
postBuild = ''
|
|
substituteInPlace oci-seccomp-bpf-hook.json --replace HOOK_BIN_DIR "$out/bin"
|
|
'';
|
|
|
|
installPhase = ''
|
|
install -Dm755 bin/* -t $out/bin
|
|
install -Dm644 oci-seccomp-bpf-hook.json -t $out
|
|
installManPage docs/*.[1-9]
|
|
'';
|
|
|
|
meta = with lib; {
|
|
homepage = "https://github.com/containers/oci-seccomp-bpf-hook";
|
|
description = ''
|
|
OCI hook to trace syscalls and generate a seccomp profile
|
|
'';
|
|
mainProgram = "oci-seccomp-bpf-hook";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ saschagrunert ];
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|