summaryrefslogtreecommitdiffstats
path: root/pkgs/by-name/sb/sbsigntool/package.nix
blob: f0031367fea883868f57eb4708e4bfd65050157a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
{
  lib,
  stdenv,
  fetchgit,
  autoconf,
  automake,
  pkg-config,
  help2man,
  openssl,
  libuuid,
  gnu-efi,
  libbfd,
  util-linux,
  buildPackages,
  deterministic-host-uname,
  # help2man runs host executables
  withMan ? stdenv.buildPlatform.canExecute stdenv.hostPlatform,
}:

stdenv.mkDerivation (finalAttrs: {
  pname = "sbsigntool";
  version = "0.9.5";

  src = fetchgit {
    url = "https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git";
    rev = "v${finalAttrs.version}";
    hash = "sha256-5DInWgl1gThjjfGOsts1H1s1GbMCkd0gjbmG3gA3Fhg=";
  };

  patches = [ ./autoconf.patch ];

  prePatch = "patchShebangs .";

  nativeBuildInputs = [
    autoconf
    automake
    pkg-config
    help2man
    util-linux # for getopt used by create-ccan-tree
    deterministic-host-uname # build system incorrectly uses uname to determine host CPU
  ];
  buildInputs = [
    openssl
    libuuid
    libbfd
    gnu-efi
  ];

  preConfigure = ''
    substituteInPlace configure.ac --replace-fail "@@NIX_GNUEFI@@" "${gnu-efi}"

    CC=${lib.getExe buildPackages.stdenv.cc} lib/ccan.git/tools/create-ccan-tree --build-type=automake lib/ccan "talloc read_write_all build_assert array_size endian"
    touch AUTHORS
    touch ChangeLog

    echo "SUBDIRS = lib/ccan src ${lib.optionalString withMan "docs"}" > Makefile.am

    aclocal
    autoheader
    autoconf
    automake --add-missing -Wno-portability
  '';

  # GCC 16's unused variable analysis is more advanced, leading to a build
  # failure since sbsigntool builds with -Wno-error.
  configureFlags = [ "CFLAGS=-Wno-error=unused-but-set-variable" ];

  makeFlags = [
    "AR=${stdenv.cc.targetPrefix}ar"
  ];

  meta = {
    description = "Tools for maintaining UEFI signature databases";
    homepage = "http://jk.ozlabs.org/docs/sbkeysync-maintaing-uefi-key-databases";
    maintainers = with lib.maintainers; [
      hmenke
      raitobezarius
    ];
    platforms = [
      "x86_64-linux"
      "aarch64-linux"
    ]; # Broken on i686
    license = lib.licenses.gpl3;
  };
})