cosign: enable PIV key support
This was disabled by default in cosign 0.5.0 [0] and we did not enabled it back when we upgraded cosign [1]. The support for PIV keys is enabled by default and can be disabled if needed. [0]749c7e3e5d
[1]de0014a227
This commit is contained in:
parent
d75b67bfa4
commit
48e281f963
|
@ -1,4 +1,4 @@
|
|||
{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC }:
|
||||
{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC, pivKeySupport ? true }:
|
||||
|
||||
buildGoModule rec {
|
||||
pname = "cosign";
|
||||
|
@ -12,8 +12,8 @@ buildGoModule rec {
|
|||
};
|
||||
|
||||
buildInputs =
|
||||
lib.optional stdenv.isLinux (lib.getDev pcsclite)
|
||||
++ lib.optionals stdenv.isDarwin [ PCSC ];
|
||||
lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)
|
||||
++ lib.optionals (stdenv.isDarwin && pivKeySupport) [ PCSC ];
|
||||
|
||||
nativeBuildInputs = [ pkg-config ];
|
||||
|
||||
|
@ -21,6 +21,9 @@ buildGoModule rec {
|
|||
|
||||
subPackages = [ "cmd/cosign" ];
|
||||
|
||||
preBuild = ''
|
||||
buildFlagsArray+=(${lib.optionalString pivKeySupport "-tags=pivkey"})
|
||||
'';
|
||||
ldflags = [ "-s" "-w" "-X github.com/sigstore/cosign/cmd/cosign/cli.gitVersion=v${version}"];
|
||||
|
||||
meta = with lib; {
|
||||
|
|
Loading…
Reference in a new issue