Files

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

55 lines
1.0 KiB
Nix
Raw Permalink Normal View History

2025-10-09 14:15:47 +02:00
{
stdenv,
lib,
buildGoModule,
fetchFromGitHub,
pkg-config,
pcsclite,
softhsm,
opensc,
yubihsm-shell,
}:
buildGoModule rec {
pname = "step-kms-plugin";
version = "0.15.1";
src = fetchFromGitHub {
owner = "smallstep";
repo = "step-kms-plugin";
rev = "v${version}";
hash = "sha256-Evi5rXdb/2WDlIUXJcQjQ0d1Zrfg1x00tFonlNmLi6E=";
};
vendorHash = "sha256-CxX4tQRBPtza1PAVeidp+KNeYxIh5y1tJ+RgcBKdORs=";
proxyVendor = true;
nativeBuildInputs = [
pkg-config
];
buildInputs = [
opensc
pcsclite
softhsm
yubihsm-shell
];
ldflags = [
"-w"
"-s"
"-X github.com/smallstep/step-kms-plugin/cmd.Version=${version}"
];
meta = with lib; {
description = "Step plugin to manage keys and certificates on cloud KMSs and HSMs";
homepage = "https://smallstep.com/cli/";
license = licenses.asl20;
maintainers = with maintainers; [ qbit ];
mainProgram = "step-kms-plugin";
# can't find pcsclite header files
broken = stdenv.hostPlatform.isDarwin;
};
}