1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
{
lib,
runCommand,
awscli2,
}:
lib.fetchers.withNormalizedHash { } (
{
s3url,
name ? baseNameOf s3url,
outputHash,
outputHashAlgo,
region ? "us-east-1",
credentials ? null, # Default to looking at local EC2 metadata service
recursiveHash ? false,
postFetch ? null,
}:
let
mkCredentials =
{
access_key_id,
secret_access_key,
session_token ? null,
}:
{
AWS_ACCESS_KEY_ID = access_key_id;
AWS_SECRET_ACCESS_KEY = secret_access_key;
AWS_SESSION_TOKEN = session_token;
};
credentialAttrs = lib.optionalAttrs (credentials != null) (mkCredentials credentials);
in
runCommand name
(
{
nativeBuildInputs = [ awscli2 ];
inherit outputHash outputHashAlgo;
outputHashMode = if recursiveHash then "recursive" else "flat";
preferLocalBuild = true;
AWS_DEFAULT_REGION = region;
}
// credentialAttrs
)
(
if postFetch != null then
''
downloadedFile="$(mktemp)"
aws s3 cp ${s3url} $downloadedFile
${postFetch}
''
else
''
aws s3 cp ${s3url} $out
''
)
)
|
