nixpkgs/pkgs/tools/security/isolate/default.nix
2024-01-25 09:50:51 +00:00

50 lines
849 B
Nix

{ lib
, stdenv
, fetchFromGitHub
, asciidoc
, libcap
, installShellFiles
}:
stdenv.mkDerivation rec {
pname = "isolate";
version = "1.10.1";
src = fetchFromGitHub {
owner = "ioi";
repo = "isolate";
rev = "v${version}";
hash = "sha256-xY2omzqIJYElLtzj4byy/QG4pW4erCxc+cD2X9nA2jM=";
};
nativeBuildInputs = [
asciidoc
installShellFiles
];
buildInputs = [
libcap.dev
];
buildFlags = [
"isolate"
"isolate.1"
];
installPhase = ''
runHook preInstall
install -Dm755 ./isolate $out/bin/isolate
installManPage isolate.1
runHook postInstall
'';
meta = {
description = "Sandbox for securely executing untrusted programs";
homepage = "https://github.com/ioi/isolate";
license = lib.licenses.gpl2Plus;
maintainers = with lib.maintainers; [ virchau13 ];
};
}