linuxPackages.isgx: init at 2.11 (#109013)
* linuxPackages.isgx: init at 2.11 * isgx: simplify * isgx: fix meta and mark as broken for kernel >= 5.11.0
This commit is contained in:
parent
5481589204
commit
72e1e31773
53
pkgs/os-specific/linux/isgx/default.nix
Normal file
53
pkgs/os-specific/linux/isgx/default.nix
Normal file
|
@ -0,0 +1,53 @@
|
|||
{ stdenv, lib, fetchFromGitHub, fetchpatch, kernel, kernelAtLeast }:
|
||||
|
||||
stdenv.mkDerivation rec {
|
||||
name = "isgx-${version}-${kernel.version}";
|
||||
version = "2.11";
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "intel";
|
||||
repo = "linux-sgx-driver";
|
||||
rev = "sgx_driver_${version}";
|
||||
hash = "sha256-zZ0FgCx63LCNmvQ909O27v/o4+93gefhgEE/oDr/bHw=";
|
||||
};
|
||||
|
||||
patches = [
|
||||
# Fixes build with kernel >= 5.8
|
||||
(fetchpatch {
|
||||
url = "https://github.com/intel/linux-sgx-driver/commit/276c5c6a064d22358542f5e0aa96b1c0ace5d695.patch";
|
||||
sha256 = "sha256-PmchqYENIbnJ51G/tkdap/g20LUrJEoQ4rDtqy6hj24=";
|
||||
})
|
||||
];
|
||||
|
||||
hardeningDisable = [ "pic" ];
|
||||
|
||||
nativeBuildInputs = kernel.moduleBuildDependencies;
|
||||
|
||||
makeFlags = [
|
||||
"KDIR=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
|
||||
];
|
||||
|
||||
installPhase = ''
|
||||
runHook preInstall
|
||||
install -D isgx.ko -t $out/lib/modules/${kernel.modDirVersion}/kernel/drivers/intel/sgx
|
||||
runHook postInstall
|
||||
'';
|
||||
|
||||
meta = with lib; {
|
||||
description = "Intel SGX Linux Driver";
|
||||
longDescription = ''
|
||||
The linux-sgx-driver project (isgx) hosts an out-of-tree driver
|
||||
for the Linux* Intel(R) SGX software stack, which would be used
|
||||
until the driver upstreaming process is complete (before 5.11.0).
|
||||
|
||||
It is used to support Enhanced Privacy Identification (EPID)
|
||||
based attestation on the platforms without Flexible Launch Control.
|
||||
'';
|
||||
homepage = "https://github.com/intel/linux-sgx-driver";
|
||||
license = with licenses; [ bsd3 /* OR */ gpl2Only ];
|
||||
maintainers = with maintainers; [ oxalica ];
|
||||
platforms = platforms.linux;
|
||||
# The driver is already in kernel >= 5.11.0.
|
||||
broken = kernelAtLeast "5.11.0";
|
||||
};
|
||||
}
|
|
@ -19848,6 +19848,8 @@ in
|
|||
|
||||
sch_cake = callPackage ../os-specific/linux/sch_cake { };
|
||||
|
||||
isgx = callPackage ../os-specific/linux/isgx { };
|
||||
|
||||
sysdig = callPackage ../os-specific/linux/sysdig {};
|
||||
|
||||
systemtap = callPackage ../development/tools/profiling/systemtap { };
|
||||
|
|
Loading…
Reference in a new issue