mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-02-16 09:03:42 +00:00
ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
102 lines
2.3 KiB
Nix
102 lines
2.3 KiB
Nix
{ buildGoModule
|
|
, fetchFromGitHub
|
|
, fetchpatch
|
|
, protobuf
|
|
, go-protobuf
|
|
, pkg-config
|
|
, libnetfilter_queue
|
|
, libnfnetlink
|
|
, lib
|
|
, coreutils
|
|
, iptables
|
|
, makeWrapper
|
|
, protoc-gen-go-grpc
|
|
, testers
|
|
, opensnitch
|
|
, nixosTests
|
|
}:
|
|
|
|
buildGoModule rec {
|
|
pname = "opensnitch";
|
|
version = "1.6.5.1";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "evilsocket";
|
|
repo = "opensnitch";
|
|
rev = "refs/tags/v${version}";
|
|
hash = "sha256-IVrAAHzLS7A7cYhRk+IUx8/5TGKeqC7M/7iXOpPe2ZA=";
|
|
};
|
|
|
|
postPatch = ''
|
|
# Allow configuring Version at build time
|
|
substituteInPlace daemon/core/version.go --replace "const " "var "
|
|
'';
|
|
|
|
modRoot = "daemon";
|
|
|
|
buildInputs = [
|
|
libnetfilter_queue
|
|
libnfnetlink
|
|
];
|
|
|
|
nativeBuildInputs = [
|
|
pkg-config
|
|
protobuf
|
|
go-protobuf
|
|
makeWrapper
|
|
protoc-gen-go-grpc
|
|
];
|
|
|
|
vendorHash = "sha256-PX41xeUJb/WKv3+z5kbRmJNP1vFu8x35NZvN2Dgp4CQ=";
|
|
|
|
preBuild = ''
|
|
# Fix inconsistent vendoring build error
|
|
# https://github.com/evilsocket/opensnitch/issues/770
|
|
cp ${./go.mod} go.mod
|
|
cp ${./go.sum} go.sum
|
|
|
|
make -C ../proto ../daemon/ui/protocol/ui.pb.go
|
|
'';
|
|
|
|
postBuild = ''
|
|
mv $GOPATH/bin/daemon $GOPATH/bin/opensnitchd
|
|
mkdir -p $out/etc/opensnitchd $out/lib/systemd/system
|
|
cp system-fw.json $out/etc/opensnitchd/
|
|
substitute default-config.json $out/etc/opensnitchd/default-config.json \
|
|
--replace "/var/log/opensnitchd.log" "/dev/stdout"
|
|
# Do not mkdir rules path
|
|
sed -i '8d' opensnitchd.service
|
|
# Fixup hardcoded paths
|
|
substitute opensnitchd.service $out/lib/systemd/system/opensnitchd.service \
|
|
--replace "/usr/local/bin/opensnitchd" "$out/bin/opensnitchd"
|
|
'';
|
|
|
|
ldflags = [
|
|
"-s"
|
|
"-w"
|
|
"-X github.com/evilsocket/opensnitch/daemon/core.Version=${version}"
|
|
];
|
|
|
|
postInstall = ''
|
|
wrapProgram $out/bin/opensnitchd \
|
|
--prefix PATH : ${lib.makeBinPath [ iptables ]}
|
|
'';
|
|
|
|
passthru.tests = {
|
|
inherit (nixosTests) opensnitch;
|
|
version = testers.testVersion {
|
|
package = opensnitch;
|
|
command = "opensnitchd -version";
|
|
};
|
|
};
|
|
|
|
meta = with lib; {
|
|
description = "An application firewall";
|
|
mainProgram = "opensnitchd";
|
|
homepage = "https://github.com/evilsocket/opensnitch/wiki";
|
|
license = licenses.gpl3Only;
|
|
maintainers = with maintainers; [ onny ];
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|