646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
81 lines
2.0 KiB
Nix
81 lines
2.0 KiB
Nix
{
|
|
fetchFromGitHub,
|
|
git,
|
|
gnupg,
|
|
makeWrapper,
|
|
openssl,
|
|
lib,
|
|
stdenv,
|
|
libxslt,
|
|
docbook_xsl,
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "git-crypt";
|
|
version = "0.8.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "AGWA";
|
|
repo = "git-crypt";
|
|
rev = version;
|
|
sha256 = "sha256-d5nMDFQkJY+obYkhvr8yT9mjlGEBWFLN5xGizJ9kwHw=";
|
|
};
|
|
|
|
strictDeps = true;
|
|
|
|
nativeBuildInputs = [
|
|
libxslt
|
|
makeWrapper
|
|
];
|
|
|
|
buildInputs = [ openssl ];
|
|
|
|
postPatch = ''
|
|
substituteInPlace commands.cpp \
|
|
--replace '(escape_shell_arg(our_exe_path()))' '= "git-crypt"'
|
|
'';
|
|
|
|
makeFlags = [
|
|
"PREFIX=${placeholder "out"}"
|
|
"ENABLE_MAN=yes"
|
|
"DOCBOOK_XSL=${docbook_xsl}/share/xml/docbook-xsl-nons/manpages/docbook.xsl"
|
|
];
|
|
|
|
# https://github.com/AGWA/git-crypt/issues/232
|
|
CXXFLAGS = [
|
|
"-DOPENSSL_API_COMPAT=0x30000000L"
|
|
];
|
|
|
|
postFixup = ''
|
|
wrapProgram $out/bin/git-crypt \
|
|
--suffix PATH : ${
|
|
lib.makeBinPath [
|
|
git
|
|
gnupg
|
|
]
|
|
}
|
|
'';
|
|
|
|
meta = with lib; {
|
|
homepage = "https://www.agwa.name/projects/git-crypt";
|
|
description = "Transparent file encryption in git";
|
|
longDescription = ''
|
|
git-crypt enables transparent encryption and decryption of files in a git
|
|
repository. Files which you choose to protect are encrypted when
|
|
committed, and decrypted when checked out. git-crypt lets you freely
|
|
share a repository containing a mix of public and private
|
|
content. git-crypt gracefully degrades, so developers without the secret
|
|
key can still clone and commit to a repository with encrypted files. This
|
|
lets you store your secret material (such as keys or passwords) in the
|
|
same repository as your code, without requiring you to lock down your
|
|
entire repository.
|
|
'';
|
|
downloadPage = "https://github.com/AGWA/git-crypt/releases";
|
|
license = licenses.gpl3;
|
|
maintainers = with maintainers; [ dochang ];
|
|
platforms = platforms.unix;
|
|
mainProgram = "git-crypt";
|
|
};
|
|
|
|
}
|