646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
110 lines
2.7 KiB
Nix
110 lines
2.7 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchurl,
|
|
perl,
|
|
openldap,
|
|
pam,
|
|
db,
|
|
cyrus_sasl,
|
|
libcap,
|
|
expat,
|
|
libxml2,
|
|
openssl,
|
|
pkg-config,
|
|
systemd,
|
|
cppunit,
|
|
ipv6 ? true,
|
|
nixosTests,
|
|
}:
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "squid";
|
|
version = "7.1";
|
|
|
|
src = fetchurl {
|
|
url = "https://github.com/squid-cache/squid/releases/download/SQUID_${
|
|
builtins.replaceStrings [ "." ] [ "_" ] finalAttrs.version
|
|
}/squid-${finalAttrs.version}.tar.xz";
|
|
hash = "sha256-djtaeFYc7cTkdjT6QrjmuNRsh8lJoVG056wjltL5feo=";
|
|
};
|
|
|
|
nativeBuildInputs = [ pkg-config ];
|
|
buildInputs = [
|
|
perl
|
|
openldap
|
|
db
|
|
cyrus_sasl
|
|
expat
|
|
libxml2
|
|
openssl
|
|
]
|
|
++ lib.optionals stdenv.hostPlatform.isLinux [
|
|
libcap
|
|
pam
|
|
systemd
|
|
];
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
configureFlags = [
|
|
"--disable-strict-error-checking"
|
|
"--disable-arch-native"
|
|
"--with-openssl"
|
|
"--enable-ssl-crtd"
|
|
"--enable-storeio=ufs,aufs,diskd,rock"
|
|
"--enable-removal-policies=lru,heap"
|
|
"--enable-delay-pools"
|
|
"--enable-x-accelerator-vary"
|
|
"--enable-htcp"
|
|
]
|
|
++ (if ipv6 then [ "--enable-ipv6" ] else [ "--disable-ipv6" ])
|
|
++ lib.optional (
|
|
stdenv.hostPlatform.isLinux && !stdenv.hostPlatform.isMusl
|
|
) "--enable-linux-netfilter";
|
|
|
|
doCheck = true;
|
|
nativeCheckInputs = [ cppunit ];
|
|
preCheck = ''
|
|
# tests attempt to copy around "/bin/true" to make some things
|
|
# no-ops but this doesn't work if our "true" is a multi-call
|
|
# binary, so make our own fake "true" which will work when used
|
|
# this way
|
|
echo "#!$SHELL" > fake-true
|
|
chmod +x fake-true
|
|
grep -rlF '/bin/true' test-suite/ | while read -r filename ; do
|
|
substituteInPlace "$filename" \
|
|
--replace "$(type -P true)" "$(realpath fake-true)" \
|
|
--replace "/bin/true" "$(realpath fake-true)"
|
|
done
|
|
|
|
cd test-suite/
|
|
'';
|
|
|
|
# exit from test-suite/ dir back to src root for correct makefile
|
|
postCheck = ''
|
|
cd ..
|
|
'';
|
|
|
|
# remove unusual nixos paths (pre-made /var dirs, config grammar) and rename sbin output
|
|
postInstall = ''
|
|
rm -r $out/var
|
|
rm $out/share/mib.txt
|
|
mv $out/sbin $out/bin
|
|
'';
|
|
|
|
passthru.tests.squid = nixosTests.squid;
|
|
|
|
meta = with lib; {
|
|
description = "Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more";
|
|
homepage = "http://www.squid-cache.org";
|
|
license = licenses.gpl2Plus;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ raskin ];
|
|
# In the past, it has been brought up that Squid had many security vulnerabilities
|
|
# (see https://megamansec.github.io/Squid-Security-Audit/). As of version 7.0,
|
|
# all of them have been solved, as tracked in their GitHub Security page:
|
|
# https://github.com/squid-cache/squid/security
|
|
knownVulnerabilities = [ ];
|
|
};
|
|
})
|