mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-26 08:53:21 +00:00
cb5946cd93
Envoy 1.32 has added some more dependencies on rules_rust bits, so we need to support that now. In particular, for some reason, we always fail with a message about needing repinning, so we repin during the IFD phase, but we need to point rules_rust at the nixpkgs Rust toolchain, make it build the cargo-bazel tool (because the one in nixpkgs is the wrong version), and then clean up afterwards.
255 lines
8.6 KiB
Nix
255 lines
8.6 KiB
Nix
{
|
|
lib,
|
|
bazel_6,
|
|
bazel-gazelle,
|
|
buildBazelPackage,
|
|
fetchFromGitHub,
|
|
stdenv,
|
|
cacert,
|
|
cargo,
|
|
rustc,
|
|
rustPlatform,
|
|
cmake,
|
|
gn,
|
|
go,
|
|
jdk,
|
|
ninja,
|
|
patchelf,
|
|
python3,
|
|
linuxHeaders,
|
|
nixosTests,
|
|
|
|
# v8 (upstream default), wavm, wamr, wasmtime, disabled
|
|
wasmRuntime ? "wamr",
|
|
}:
|
|
|
|
let
|
|
srcVer = {
|
|
# We need the commit hash, since Bazel stamps the build with it.
|
|
# However, the version string is more useful for end-users.
|
|
# These are contained in a attrset of their own to make it obvious that
|
|
# people should update both.
|
|
version = "1.32.0";
|
|
rev = "86dc7ef91ca15fb4957a74bd599397413fc26a24";
|
|
hash = "sha256-Wcbt62RfaNcTntmPjaAM0cP3LJangm4ht7Q0bzEpu5A=";
|
|
};
|
|
|
|
# these need to be updated for any changes to fetchAttrs
|
|
depsHash =
|
|
{
|
|
x86_64-linux = "sha256-LkDNPFT7UUCsGPG1dMnwzdIw0lzc5+3JYDoblF5oZVk=";
|
|
aarch64-linux = "sha256-DkibjmY1YND9Q2aQ41bhNdch0SKM5ghY2mjYSQfV30M=";
|
|
}
|
|
.${stdenv.system} or (throw "unsupported system ${stdenv.system}");
|
|
in
|
|
buildBazelPackage rec {
|
|
pname = "envoy";
|
|
inherit (srcVer) version;
|
|
bazel = bazel_6;
|
|
src = fetchFromGitHub {
|
|
owner = "envoyproxy";
|
|
repo = "envoy";
|
|
inherit (srcVer) hash rev;
|
|
|
|
postFetch = ''
|
|
chmod -R +w $out
|
|
rm $out/.bazelversion
|
|
echo ${srcVer.rev} > $out/SOURCE_VERSION
|
|
'';
|
|
};
|
|
|
|
postPatch = ''
|
|
sed -i 's,#!/usr/bin/env python3,#!${python3}/bin/python,' bazel/foreign_cc/luajit.patch
|
|
sed -i '/javabase=/d' .bazelrc
|
|
sed -i '/"-Werror"/d' bazel/envoy_internal.bzl
|
|
|
|
mkdir -p bazel/nix/
|
|
substitute ${./bazel_nix.BUILD.bazel} bazel/nix/BUILD.bazel \
|
|
--subst-var-by bash "$(type -p bash)"
|
|
ln -sf "${cargo}/bin/cargo" bazel/nix/cargo
|
|
ln -sf "${rustc}/bin/rustc" bazel/nix/rustc
|
|
ln -sf "${rustc}/bin/rustdoc" bazel/nix/rustdoc
|
|
ln -sf "${rustPlatform.rustLibSrc}" bazel/nix/ruststd
|
|
substituteInPlace bazel/dependency_imports.bzl \
|
|
--replace-fail 'crate_universe_dependencies()' 'crate_universe_dependencies(rust_toolchain_cargo_template="@@//bazel/nix:cargo", rust_toolchain_rustc_template="@@//bazel/nix:rustc")' \
|
|
--replace-fail 'crates_repository(' 'crates_repository(rust_toolchain_cargo_template="@@//bazel/nix:cargo", rust_toolchain_rustc_template="@@//bazel/nix:rustc",'
|
|
|
|
substitute ${./rules_rust_extra.patch} bazel/nix/rules_rust_extra.patch \
|
|
--subst-var-by bash "$(type -p bash)"
|
|
cat bazel/nix/rules_rust_extra.patch bazel/rules_rust.patch > bazel/nix/rules_rust.patch
|
|
mv bazel/nix/rules_rust.patch bazel/rules_rust.patch
|
|
'';
|
|
|
|
patches = [
|
|
# use system Python, not bazel-fetched binary Python
|
|
./0001-nixpkgs-use-system-Python.patch
|
|
|
|
# use system Go, not bazel-fetched binary Go
|
|
./0002-nixpkgs-use-system-Go.patch
|
|
|
|
# use system C/C++ tools
|
|
./0003-nixpkgs-use-system-C-C-toolchains.patch
|
|
];
|
|
|
|
nativeBuildInputs = [
|
|
cmake
|
|
python3
|
|
gn
|
|
go
|
|
jdk
|
|
ninja
|
|
patchelf
|
|
cacert
|
|
];
|
|
|
|
buildInputs = [ linuxHeaders ];
|
|
|
|
fetchAttrs = {
|
|
sha256 = depsHash;
|
|
env.CARGO_BAZEL_REPIN = true;
|
|
dontUseCmakeConfigure = true;
|
|
dontUseGnConfigure = true;
|
|
postPatch = ''
|
|
${postPatch}
|
|
|
|
substituteInPlace bazel/dependency_imports.bzl \
|
|
--replace-fail 'crate_universe_dependencies(' 'crate_universe_dependencies(bootstrap=True, ' \
|
|
--replace-fail 'crates_repository(' 'crates_repository(generator="@@cargo_bazel_bootstrap//:cargo-bazel", '
|
|
'';
|
|
preInstall = ''
|
|
# Strip out the path to the build location (by deleting the comment line).
|
|
find $bazelOut/external -name requirements.bzl | while read requirements; do
|
|
sed -i '/# Generated from /d' "$requirements"
|
|
done
|
|
|
|
# Remove references to paths in the Nix store.
|
|
sed -i \
|
|
-e 's,${python3},__NIXPYTHON__,' \
|
|
-e 's,${stdenv.shellPackage},__NIXSHELL__,' \
|
|
$bazelOut/external/com_github_luajit_luajit/build.py \
|
|
$bazelOut/external/local_config_sh/BUILD \
|
|
$bazelOut/external/*_pip3/BUILD.bazel
|
|
|
|
rm -r $bazelOut/external/go_sdk
|
|
rm -r $bazelOut/external/local_jdk
|
|
rm -r $bazelOut/external/bazel_gazelle_go_repository_tools/bin
|
|
|
|
# Remove compiled python
|
|
find $bazelOut -name '*.pyc' -delete
|
|
|
|
# Remove Unix timestamps from go cache.
|
|
rm -rf $bazelOut/external/bazel_gazelle_go_repository_cache/{gocache,pkg/mod/cache,pkg/sumdb}
|
|
|
|
# fix tcmalloc failure https://github.com/envoyproxy/envoy/issues/30838
|
|
sed -i '/TCMALLOC_GCC_FLAGS = \[/a"-Wno-changes-meaning",' $bazelOut/external/com_github_google_tcmalloc/tcmalloc/copts.bzl
|
|
|
|
# Install repinned rules_rust lockfile
|
|
cp source/extensions/dynamic_modules/sdk/rust/Cargo.Bazel.lock $bazelOut/external/Cargo.Bazel.lock
|
|
|
|
# Don't save cargo_bazel_bootstrap or the crate index cache
|
|
rm -rf $bazelOut/external/cargo_bazel_bootstrap $bazelOut/external/dynamic_modules_rust_sdk_crate_index/.cargo_home $bazelOut/external/dynamic_modules_rust_sdk_crate_index/splicing-output
|
|
'';
|
|
};
|
|
buildAttrs = {
|
|
dontUseCmakeConfigure = true;
|
|
dontUseGnConfigure = true;
|
|
dontUseNinjaInstall = true;
|
|
preConfigure = ''
|
|
# Make executables work, for the most part.
|
|
find $bazelOut/external -type f -executable | while read execbin; do
|
|
file "$execbin" | grep -q ': ELF .*, dynamically linked,' || continue
|
|
patchelf \
|
|
--set-interpreter $(cat ${stdenv.cc}/nix-support/dynamic-linker) \
|
|
"$execbin" || echo "$execbin"
|
|
done
|
|
|
|
ln -s ${bazel-gazelle}/bin $bazelOut/external/bazel_gazelle_go_repository_tools/bin
|
|
|
|
sed -i 's,#!/usr/bin/env bash,#!${stdenv.shell},' $bazelOut/external/rules_foreign_cc/foreign_cc/private/framework/toolchains/linux_commands.bzl
|
|
|
|
# Add paths to Nix store back.
|
|
sed -i \
|
|
-e 's,__NIXPYTHON__,${python3},' \
|
|
-e 's,__NIXSHELL__,${stdenv.shellPackage},' \
|
|
$bazelOut/external/com_github_luajit_luajit/build.py \
|
|
$bazelOut/external/local_config_sh/BUILD \
|
|
$bazelOut/external/*_pip3/BUILD.bazel
|
|
|
|
# Install repinned rules_rust lockfile
|
|
cp $bazelOut/external/Cargo.Bazel.lock source/extensions/dynamic_modules/sdk/rust/Cargo.Bazel.lock
|
|
'';
|
|
installPhase = ''
|
|
install -Dm0755 bazel-bin/source/exe/envoy-static $out/bin/envoy
|
|
'';
|
|
};
|
|
|
|
removeRulesCC = false;
|
|
removeLocalConfigCc = true;
|
|
removeLocal = false;
|
|
bazelTargets = [ "//source/exe:envoy-static" ];
|
|
bazelBuildFlags =
|
|
[
|
|
"-c opt"
|
|
"--spawn_strategy=standalone"
|
|
"--noexperimental_strict_action_env"
|
|
"--cxxopt=-Wno-error"
|
|
"--linkopt=-Wl,-z,noexecstack"
|
|
|
|
# Force use of system Java.
|
|
"--extra_toolchains=@local_jdk//:all"
|
|
"--java_runtime_version=local_jdk"
|
|
"--tool_java_runtime_version=local_jdk"
|
|
|
|
# Force use of system Rust.
|
|
"--extra_toolchains=//bazel/nix:rust_nix_aarch64,//bazel/nix:rust_nix_x86_64"
|
|
|
|
# undefined reference to 'grpc_core::*Metadata*::*Memento*
|
|
#
|
|
# During linking of the final binary, we see undefined references to grpc_core related symbols.
|
|
# The missing symbols would be instantiations of a template class from https://github.com/grpc/grpc/blob/v1.59.4/src/core/lib/transport/metadata_batch.h
|
|
# "ParseMemento" and "MementoToValue" are only implemented for some types
|
|
# and appear unused and unimplemented for the undefined cases reported by the linker.
|
|
"--linkopt=-Wl,--unresolved-symbols=ignore-in-object-files"
|
|
|
|
"--define=wasm=${wasmRuntime}"
|
|
]
|
|
++ (lib.optionals stdenv.hostPlatform.isAarch64 [
|
|
# external/com_github_google_tcmalloc/tcmalloc/internal/percpu_tcmalloc.h:611:9: error: expected ':' or '::' before '[' token
|
|
# 611 | : [end_ptr] "=&r"(end_ptr), [cpu_id] "=&r"(cpu_id),
|
|
# | ^
|
|
"--define=tcmalloc=disabled"
|
|
]);
|
|
|
|
bazelFetchFlags = [
|
|
"--define=wasm=${wasmRuntime}"
|
|
|
|
# Force use of system Rust.
|
|
"--extra_toolchains=//bazel/nix:rust_nix_aarch64,//bazel/nix:rust_nix_x86_64"
|
|
|
|
# https://github.com/bazelbuild/rules_go/issues/3844
|
|
"--repo_env=GOPROXY=https://proxy.golang.org,direct"
|
|
"--repo_env=GOSUMDB=sum.golang.org"
|
|
];
|
|
|
|
requiredSystemFeatures = [ "big-parallel" ];
|
|
|
|
passthru.tests = {
|
|
envoy = nixosTests.envoy;
|
|
# tested as a core component of Pomerium
|
|
pomerium = nixosTests.pomerium;
|
|
};
|
|
|
|
meta = with lib; {
|
|
homepage = "https://envoyproxy.io";
|
|
changelog = "https://github.com/envoyproxy/envoy/releases/tag/v${version}";
|
|
description = "Cloud-native edge and service proxy";
|
|
mainProgram = "envoy";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ lukegb ];
|
|
platforms = [
|
|
"x86_64-linux"
|
|
"aarch64-linux"
|
|
];
|
|
};
|
|
}
|