646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
95 lines
1.9 KiB
Nix
95 lines
1.9 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchurl,
|
|
pkg-config,
|
|
bison,
|
|
flex,
|
|
asciidoc,
|
|
libxslt,
|
|
findXMLCatalogs,
|
|
docbook_xml_dtd_45,
|
|
docbook_xsl,
|
|
libmnl,
|
|
libnftnl,
|
|
libpcap,
|
|
gmp,
|
|
jansson,
|
|
autoreconfHook,
|
|
withDebugSymbols ? false,
|
|
withCli ? true,
|
|
libedit,
|
|
withXtables ? true,
|
|
iptables,
|
|
nixosTests,
|
|
gitUpdater,
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
version = "1.1.5";
|
|
pname = "nftables";
|
|
|
|
src = fetchurl {
|
|
url = "https://netfilter.org/projects/nftables/files/${pname}-${version}.tar.xz";
|
|
hash = "sha256-Ha8Q8yLhT9kKAXU4qvLANNfMHrHMQY3tR0RdcU6haNQ=";
|
|
};
|
|
|
|
patches = [
|
|
(fetchurl {
|
|
name = "musl.patch";
|
|
url = "https://lore.kernel.org/netfilter-devel/20241219231001.1166085-2-hi@alyssa.is/raw";
|
|
hash = "sha256-7vMBIoDWcI/JBInYP5yYWp8BnYbATRfMTxqyZr2L9Sk=";
|
|
})
|
|
];
|
|
|
|
nativeBuildInputs = [
|
|
autoreconfHook
|
|
pkg-config
|
|
bison
|
|
flex
|
|
asciidoc
|
|
docbook_xml_dtd_45
|
|
docbook_xsl
|
|
findXMLCatalogs
|
|
libxslt
|
|
];
|
|
|
|
buildInputs = [
|
|
libmnl
|
|
libnftnl
|
|
libpcap
|
|
gmp
|
|
jansson
|
|
]
|
|
++ lib.optional withCli libedit
|
|
++ lib.optional withXtables iptables;
|
|
|
|
configureFlags = [
|
|
"--with-json"
|
|
(lib.withFeatureAs withCli "cli" "editline")
|
|
]
|
|
++ lib.optional (!withDebugSymbols) "--disable-debug"
|
|
++ lib.optional withXtables "--with-xtables";
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
passthru.tests = {
|
|
inherit (nixosTests) firewall-nftables;
|
|
nat = { inherit (nixosTests.nat.nftables) firewall standalone; };
|
|
};
|
|
|
|
passthru.updateScript = gitUpdater {
|
|
url = "https://git.netfilter.org/nftables";
|
|
rev-prefix = "v";
|
|
};
|
|
|
|
meta = with lib; {
|
|
description = "Project that aims to replace the existing {ip,ip6,arp,eb}tables framework";
|
|
homepage = "https://netfilter.org/projects/nftables/";
|
|
license = licenses.gpl2Only;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ izorkin ];
|
|
mainProgram = "nft";
|
|
};
|
|
}
|