nixpkgs/pkgs/tools/security/clevis/default.nix
Luke Granger-Brown f667c13b66 clevis: fix TPM2 encrypt/decrypt
This also fixes using the "clevis" entrypoint binary without making sure
that all the other tooling is in the PATH.
2021-05-01 18:04:41 +00:00

42 lines
1.2 KiB
Nix

{ lib, stdenv, fetchFromGitHub, meson, ninja, pkg-config, asciidoc
, makeWrapper, jansson, jose, cryptsetup, curl, libpwquality, luksmeta
, coreutils, tpm2-tools
}:
stdenv.mkDerivation rec {
pname = "clevis";
version = "18";
src = fetchFromGitHub {
owner = "latchset";
repo = pname;
rev = "v${version}";
sha256 = "sha256-m1UhyjD5ydSgCTBu6sECLlxFx0rnQxFnBA7frbdUqU8=";
};
postPatch = ''
for f in $(find src/ -type f); do
grep -q "/bin/cat" "$f" && substituteInPlace "$f" \
--replace '/bin/cat' '${coreutils}/bin/cat' || true
done
'';
postInstall = ''
# We wrap the main clevis binary entrypoint but not the sub-binaries.
wrapProgram $out/bin/clevis \
--prefix PATH ':' "${tpm2-tools}/bin:${jose}/bin:${placeholder "out"}/bin"
'';
nativeBuildInputs = [ meson ninja pkg-config asciidoc makeWrapper ];
buildInputs = [ jansson jose cryptsetup curl libpwquality luksmeta tpm2-tools ];
outputs = [ "out" "man" ];
meta = {
description = "Automated Encryption Framework";
homepage = "https://github.com/latchset/clevis";
maintainers = with lib.maintainers; [ fpletz ];
license = lib.licenses.gpl3Plus;
};
}