646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
42 lines
1.3 KiB
Nix
42 lines
1.3 KiB
Nix
{
|
|
stdenv,
|
|
lib,
|
|
python3,
|
|
}:
|
|
|
|
stdenv.mkDerivation {
|
|
name = "replace-secret";
|
|
buildInputs = [ python3 ];
|
|
dontUnpack = true;
|
|
installPhase = ''
|
|
runHook preInstall
|
|
install -D ${./replace-secret.py} $out/bin/replace-secret
|
|
patchShebangs $out
|
|
runHook postInstall
|
|
'';
|
|
installCheckPhase = ''
|
|
install -m 0600 ${./test/input_file} long_test
|
|
$out/bin/replace-secret "replace this" ${./test/passwd} long_test
|
|
$out/bin/replace-secret "and this" ${./test/rsa} long_test
|
|
diff ${./test/expected_long_output} long_test
|
|
|
|
install -m 0600 ${./test/input_file} short_test
|
|
$out/bin/replace-secret "replace this" <(echo "a") short_test
|
|
$out/bin/replace-secret "and this" <(echo "b") short_test
|
|
diff ${./test/expected_short_output} short_test
|
|
'';
|
|
meta = with lib; {
|
|
platforms = platforms.all;
|
|
maintainers = with maintainers; [ talyz ];
|
|
license = licenses.mit;
|
|
description = "Replace a string in one file with a secret from a second file";
|
|
longDescription = ''
|
|
Replace a string in one file with a secret from a second file.
|
|
|
|
Since the secret is read from a file, it won't be leaked through
|
|
'/proc/<pid>/cmdline', unlike when 'sed' or 'replace' is used.
|
|
'';
|
|
mainProgram = "replace-secret";
|
|
};
|
|
}
|