{ stdenv, fetchurl, libmnl, kernel ? null }: # module requires Linux >= 4.1 https://www.wireguard.io/install/#kernel-requirements assert kernel != null -> stdenv.lib.versionAtLeast kernel.version "4.1"; let name = "wireguard-unstable-${version}"; version = "2016-08-08"; src = fetchurl { url = "https://git.zx2c4.com/WireGuard/snapshot/WireGuard-experimental-0.0.20160808.tar.xz"; sha256 = "0z9s9xi8dzkmjnki7ialf2haxb0mn2x5676sjwmjij1jfi9ypxhw"; }; meta = with stdenv.lib; { homepage = https://www.wireguard.io/; downloadPage = https://git.zx2c4.com/WireGuard/refs/; description = "Fast, modern, secure VPN tunnel"; maintainers = with maintainers; [ ericsagnes ]; license = licenses.gpl2; platforms = platforms.linux; }; module = stdenv.mkDerivation { inherit src meta name; preConfigure = '' cd src sed -i '/depmod/,+1d' Makefile ''; hardeningDisable = [ "pic" ]; KERNELDIR = "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"; INSTALL_MOD_PATH = "\${out}"; buildPhase = "make module"; }; tools = stdenv.mkDerivation { inherit src meta name; preConfigure = "cd src"; buildInputs = [ libmnl ]; makeFlags = [ "DESTDIR=$(out)" "PREFIX=/" "-C" "tools" ]; buildPhase = "make tools"; }; in if kernel == null then tools else module