linuxPackages.isgx: init at 2.11 (#109013)

* linuxPackages.isgx: init at 2.11

* isgx: simplify

* isgx: fix meta and mark as broken for kernel >= 5.11.0
This commit is contained in:
oxalica 2021-04-01 07:33:38 +08:00 committed by GitHub
parent 5481589204
commit 72e1e31773
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 55 additions and 0 deletions

View file

@ -0,0 +1,53 @@
{ stdenv, lib, fetchFromGitHub, fetchpatch, kernel, kernelAtLeast }:
stdenv.mkDerivation rec {
name = "isgx-${version}-${kernel.version}";
version = "2.11";
src = fetchFromGitHub {
owner = "intel";
repo = "linux-sgx-driver";
rev = "sgx_driver_${version}";
hash = "sha256-zZ0FgCx63LCNmvQ909O27v/o4+93gefhgEE/oDr/bHw=";
};
patches = [
# Fixes build with kernel >= 5.8
(fetchpatch {
url = "https://github.com/intel/linux-sgx-driver/commit/276c5c6a064d22358542f5e0aa96b1c0ace5d695.patch";
sha256 = "sha256-PmchqYENIbnJ51G/tkdap/g20LUrJEoQ4rDtqy6hj24=";
})
];
hardeningDisable = [ "pic" ];
nativeBuildInputs = kernel.moduleBuildDependencies;
makeFlags = [
"KDIR=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
];
installPhase = ''
runHook preInstall
install -D isgx.ko -t $out/lib/modules/${kernel.modDirVersion}/kernel/drivers/intel/sgx
runHook postInstall
'';
meta = with lib; {
description = "Intel SGX Linux Driver";
longDescription = ''
The linux-sgx-driver project (isgx) hosts an out-of-tree driver
for the Linux* Intel(R) SGX software stack, which would be used
until the driver upstreaming process is complete (before 5.11.0).
It is used to support Enhanced Privacy Identification (EPID)
based attestation on the platforms without Flexible Launch Control.
'';
homepage = "https://github.com/intel/linux-sgx-driver";
license = with licenses; [ bsd3 /* OR */ gpl2Only ];
maintainers = with maintainers; [ oxalica ];
platforms = platforms.linux;
# The driver is already in kernel >= 5.11.0.
broken = kernelAtLeast "5.11.0";
};
}

View file

@ -19848,6 +19848,8 @@ in
sch_cake = callPackage ../os-specific/linux/sch_cake { };
isgx = callPackage ../os-specific/linux/isgx { };
sysdig = callPackage ../os-specific/linux/sysdig {};
systemtap = callPackage ../development/tools/profiling/systemtap { };