mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-27 16:15:05 +00:00
e0464e4788
In preparation for the deprecation of `stdenv.isX`. These shorthands are not conducive to cross-compilation because they hide the platforms. Darwin might get cross-compilation for which the continued usage of `stdenv.isDarwin` will get in the way One example of why this is bad and especially affects compiler packages https://www.github.com/NixOS/nixpkgs/pull/343059 There are too many files to go through manually but a treewide should get users thinking when they see a `hostPlatform.isX` in a place where it doesn't make sense. ``` fd --type f "\.nix" | xargs sd --fixed-strings "stdenv.is" "stdenv.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "stdenv'.is" "stdenv'.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "clangStdenv.is" "clangStdenv.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "gccStdenv.is" "gccStdenv.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "stdenvNoCC.is" "stdenvNoCC.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "inherit (stdenv) is" "inherit (stdenv.hostPlatform) is" fd --type f "\.nix" | xargs sd --fixed-strings "buildStdenv.is" "buildStdenv.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "effectiveStdenv.is" "effectiveStdenv.hostPlatform.is" fd --type f "\.nix" | xargs sd --fixed-strings "originalStdenv.is" "originalStdenv.hostPlatform.is" ```
87 lines
2.4 KiB
Nix
87 lines
2.4 KiB
Nix
{ lib
|
|
, stdenv
|
|
, fetchFromGitHub
|
|
, kernel ? null
|
|
, elfutils
|
|
, nasm
|
|
, python3
|
|
, withDriver ? false
|
|
}:
|
|
|
|
python3.pkgs.buildPythonApplication rec {
|
|
pname = "chipsec";
|
|
version = "1.10.6";
|
|
|
|
disabled = !stdenv.hostPlatform.isLinux;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "chipsec";
|
|
repo = "chipsec";
|
|
rev = version;
|
|
hash = "sha256-+pbFG1SmSO/cnt1e+kel7ereC0I1OCJKKsS0KaJDWdc=";
|
|
};
|
|
|
|
patches = lib.optionals withDriver [ ./ko-path.diff ./compile-ko.diff ];
|
|
|
|
postPatch = ''
|
|
substituteInPlace tests/software/util.py \
|
|
--replace-fail "assertRegexpMatches" "assertRegex"
|
|
'';
|
|
|
|
KSRC = lib.optionalString withDriver "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
|
|
|
|
nativeBuildInputs = [
|
|
nasm
|
|
] ++ lib.optionals (lib.meta.availableOn stdenv.buildPlatform elfutils) [
|
|
elfutils
|
|
] ++ lib.optionals withDriver kernel.moduleBuildDependencies;
|
|
|
|
nativeCheckInputs = with python3.pkgs; [
|
|
distro
|
|
pytestCheckHook
|
|
];
|
|
|
|
preBuild = lib.optionalString withDriver ''
|
|
export CHIPSEC_BUILD_LIB=$(mktemp -d)
|
|
mkdir -p $CHIPSEC_BUILD_LIB/chipsec/helper/linux
|
|
'';
|
|
|
|
env.NIX_CFLAGS_COMPILE = toString [
|
|
# Needed with GCC 12
|
|
"-Wno-error=dangling-pointer"
|
|
];
|
|
|
|
preInstall = lib.optionalString withDriver ''
|
|
mkdir -p $out/${python3.pkgs.python.sitePackages}/drivers/linux
|
|
mv $CHIPSEC_BUILD_LIB/chipsec/helper/linux/chipsec.ko \
|
|
$out/${python3.pkgs.python.sitePackages}/drivers/linux/chipsec.ko
|
|
'';
|
|
|
|
setupPyBuildFlags = [
|
|
"--build-lib=$CHIPSEC_BUILD_LIB"
|
|
] ++ lib.optionals (!withDriver) [
|
|
"--skip-driver"
|
|
];
|
|
|
|
pythonImportsCheck = [
|
|
"chipsec"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "Platform Security Assessment Framework";
|
|
longDescription = ''
|
|
CHIPSEC is a framework for analyzing the security of PC platforms
|
|
including hardware, system firmware (BIOS/UEFI), and platform components.
|
|
It includes a security test suite, tools for accessing various low level
|
|
interfaces, and forensic capabilities. It can be run on Windows, Linux,
|
|
Mac OS X and UEFI shell.
|
|
'';
|
|
license = licenses.gpl2Only;
|
|
homepage = "https://github.com/chipsec/chipsec";
|
|
maintainers = with maintainers; [ johnazoidberg erdnaxe ];
|
|
platforms = [ "x86_64-linux" ] ++ lib.optional (!withDriver) "x86_64-darwin";
|
|
# https://github.com/chipsec/chipsec/issues/1793
|
|
broken = withDriver && kernel.kernelOlder "5.4" && kernel.isHardened;
|
|
};
|
|
}
|