clevis: 18 -> 19

{ lib

, stdenv

, fetchFromGitHub

, fetchurl

, meson

, ninja

, pkg-config

, asciidoc

, makeWrapper

, jansson

, jose

, coreutils

, cryptsetup

, curl

, fetchFromGitHub

, gnugrep

, gnused

, jansson

, jose

, libpwquality

, luksmeta

, coreutils

, makeWrapper

, meson

, ninja

, pkg-config

, tpm2-tools

, gnugrep

, gnused

}:

stdenv.mkDerivation rec {

  pname = "clevis";

  version = "18";

  version = "19";

  src = fetchFromGitHub {

    owner = "latchset";

    repo = pname;

    rev = "refs/tags/v${version}";

    hash = "sha256-m1UhyjD5ydSgCTBu6sECLlxFx0rnQxFnBA7frbdUqU8=";

    hash = "sha256-3J3ti/jRiv+p3eVvJD7u0ko28rPd8Gte0mCJaVaqyOs=";

  };

  patches = [

    # sss: use BN_set_word(x, 0) instead of BN_zero(), fixes build issue with different versions of openssl

    (fetchurl {

      url = "https://github.com/latchset/clevis/commit/ee1dfedb9baca107e66a0fec76693c9d479dcfd9.patch";

      sha256 = "sha256-GeklrWWlAMALDLdnn6+0Bi0l+bXrIbYkgIyI94WEybM=";

    })

  ];

  postPatch = ''

    for f in $(find src/ -type f); do

      grep -q "/bin/cat" "$f" && substituteInPlace "$f" \

      --prefix PATH ':' "${lib.makeBinPath [tpm2-tools jose cryptsetup libpwquality luksmeta gnugrep gnused coreutils]}:${placeholder "out"}/bin"

  '';

  nativeBuildInputs = [ meson ninja pkg-config asciidoc makeWrapper ];

  buildInputs = [ jansson jose cryptsetup curl libpwquality luksmeta tpm2-tools ];

  nativeBuildInputs = [

    meson

    ninja

    pkg-config

    asciidoc

    makeWrapper

  ];

  buildInputs = [

    jansson

    jose

    cryptsetup

    curl

    libpwquality

    luksmeta

    tpm2-tools

  ];

  outputs = [ "out" "man" ];

  outputs = [

    "out"

    "man"

  ];

  meta = with lib; {

    description = "Automated Encryption Framework";