Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
98 lines
2.6 KiB
Nix
98 lines
2.6 KiB
Nix
{
|
|
buildGoModule,
|
|
fetchFromGitHub,
|
|
nix-update-script,
|
|
versionCheckHook,
|
|
|
|
lib,
|
|
makeWrapper,
|
|
xdg-utils,
|
|
}:
|
|
|
|
buildGoModule rec {
|
|
pname = "granted";
|
|
version = "0.38.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "common-fate";
|
|
repo = "granted";
|
|
rev = "v${version}";
|
|
sha256 = "sha256-xHpYtHG0fJ/VvJ/4lJ90ept3yGzJRnmtFQFbYxJtxwY=";
|
|
};
|
|
|
|
vendorHash = "sha256-Y8g5495IYgQ2lvq5qbnQmoxwEYfzzx12KfMS6wF2QXE=";
|
|
|
|
nativeBuildInputs = [ makeWrapper ];
|
|
|
|
ldflags = [
|
|
"-s"
|
|
"-w"
|
|
"-X github.com/common-fate/granted/internal/build.Version=v${version}"
|
|
"-X github.com/common-fate/granted/internal/build.Commit=${src.rev}"
|
|
"-X github.com/common-fate/granted/internal/build.Date=1970-01-01-00:00:01"
|
|
"-X github.com/common-fate/granted/internal/build.BuiltBy=Nix"
|
|
"-X github.com/common-fate/granted/internal/build.ConfigFolderName=.granted"
|
|
];
|
|
|
|
subPackages = [
|
|
"cmd/granted"
|
|
];
|
|
|
|
postInstall =
|
|
let
|
|
# assume depends on assumego, so we add (placeholder "out") to its path
|
|
addToAssumePath = lib.makeBinPath [
|
|
xdg-utils
|
|
(placeholder "out")
|
|
];
|
|
in
|
|
''
|
|
ln -s $out/bin/granted $out/bin/assumego
|
|
|
|
# Create script with correct permissions
|
|
install -Dm755 /dev/null $out/bin/assume
|
|
|
|
# assume is a script that must be sourced
|
|
# We can't wrap it because it inspects $0 and calls return, which can only
|
|
# be done in sourced scripts.
|
|
# So instead we insert the following snippet into the beginning of the
|
|
# script to add to PATH.
|
|
# This is borrowed from wrapProgram --suffix PATH :
|
|
addToPath="$(cat << 'EOF'
|
|
|
|
PATH=''${PATH:+':'$PATH':'}
|
|
if [[ $PATH != *':'''${addToAssumePath}''':'* ]]; then
|
|
PATH=$PATH'${addToAssumePath}'
|
|
fi
|
|
PATH=''${PATH#':'}
|
|
PATH=''${PATH%':'}
|
|
export PATH
|
|
|
|
EOF
|
|
)"
|
|
|
|
# Insert below the #!/bin/sh shebang
|
|
echo "$addToPath" | sed "/#!\/bin\/sh/r /dev/stdin" $src/scripts/assume >> $out/bin/assume
|
|
|
|
# Install fish script
|
|
install -Dm755 $src/scripts/assume.fish $out/share/assume.fish
|
|
substituteInPlace $out/share/assume.fish \
|
|
--replace-fail "#!/bin/fish" "#!/usr/bin/env fish"
|
|
'';
|
|
|
|
nativeInstallCheckInputs = [ versionCheckHook ];
|
|
doInstallCheck = true;
|
|
|
|
passthru.updateScript = nix-update-script { };
|
|
|
|
meta = {
|
|
description = "Easiest way to access your cloud";
|
|
homepage = "https://github.com/common-fate/granted";
|
|
changelog = "https://github.com/common-fate/granted/releases/tag/${version}";
|
|
license = lib.licenses.mit;
|
|
maintainers = with lib.maintainers; [
|
|
jlbribeiro
|
|
];
|
|
};
|
|
}
|