Merge pull request #212712 from amarshall/bitwarden-src-build

, docbook-xsl-nons

, docbook_xml_dtd_43

, gnome

, useWrappedDaemon ? true

}:

stdenv.mkDerivation rec {

  '';

  # Use wrapped gnome-keyring-daemon with cap_ipc_lock=ep

  postFixup = ''

  postFixup = lib.optionalString useWrappedDaemon ''

    files=($out/etc/xdg/autostart/* $out/share/dbus-1/services/*)

    for file in ''${files[*]}; do

{ atomEnv

, autoPatchelfHook

, dpkg

, fetchurl

, lib

{ lib

, buildNpmPackage

, dbus

, electron

, fetchFromGitHub

, glib

, gnome

, gtk3

, jq

, libsecret

, libxshmfence

, makeDesktopItem

, makeWrapper

, stdenv

, udev

, moreutils

, nodejs-16_x

, pkg-config

, python3

, rustPlatform

, wrapGAppsHook

}:

stdenv.mkDerivation rec {

  pname = "bitwarden";

  version = "2023.1.1";

let

  description = "A secure and free password manager for all of your devices";

  icon = "bitwarden";

  buildNpmPackage' = buildNpmPackage.override { nodejs = nodejs-16_x; };

  version = "2023.2.0";

  src = fetchFromGitHub {

    owner = "bitwarden";

    repo = "clients";

    rev = "desktop-v${version}";

    sha256 = "/k2r+TikxVGlz8cnOq5zF3oUYw4zj31vDAD7OQFQlC4=";

  };

  desktop-native = rustPlatform.buildRustPackage rec {

    pname = "bitwarden-desktop-native";

    inherit src version;

    sourceRoot = "source/apps/desktop/desktop_native";

    cargoSha256 = "sha256-zLftfmWYYUAaMvIT21qhVsHzxnNdQhFBH0fRBwVduAc=";

    patchFlags = [ "-p4" ];

    nativeBuildInputs = [

      pkg-config

      wrapGAppsHook

    ];

    buildInputs = [

      glib

      gtk3

      libsecret

    ];

    nativeCheckInputs = [

      dbus

      (gnome.gnome-keyring.override { useWrappedDaemon = false; })

    ];

    checkFlags = [

      "--skip=password::password::tests::test"

    ];

    checkPhase = ''

      runHook preCheck

  src = fetchurl {

    url = "https://github.com/bitwarden/clients/releases/download/desktop-v${version}/Bitwarden-${version}-amd64.deb";

    sha256 = "sha256-bL3ybErpY5jeCixF8qtU/DQ35xU+43K9aXreHsoCF7Q=";

      export HOME=$(mktemp -d)

      export -f cargoCheckHook runHook _eval _callImplicitHook

      dbus-run-session \

        --config-file=${dbus}/share/dbus-1/session.conf \

        -- bash -e -c cargoCheckHook

      runHook postCheck

    '';

  };

  desktopItem = makeDesktopItem {

    name = "bitwarden";

    exec = "bitwarden %U";

    icon = "bitwarden";

    comment = "A secure and free password manager for all of your devices";

    inherit icon;

    comment = description;

    desktopName = "Bitwarden";

    categories = [ "Utility" ];

  };

  dontBuild = true;

  dontConfigure = true;

  dontPatchELF = true;

  dontWrapGApps = true;

in

  nativeBuildInputs = [ dpkg makeWrapper autoPatchelfHook wrapGAppsHook ];

buildNpmPackage' {

  pname = "bitwarden";

  inherit src version;

  buildInputs = [ libsecret libxshmfence ] ++ atomEnv.packages;

  makeCacheWritable = true;

  npmBuildFlags = [

    "--workspace apps/desktop"

  ];

  npmDepsHash = "sha256-aFjN1S0+lhHjK3VSYfx0F5X8wSJwRRr6zQpPGt2VpxE=";

  unpackPhase = "dpkg-deb -x $src .";

  ELECTRON_SKIP_BINARY_DOWNLOAD = "1";

  installPhase = ''

    mkdir -p "$out/bin"

    cp -R "opt" "$out"

    cp -R "usr/share" "$out/share"

    chmod -R g-w "$out"

    # Desktop file

    mkdir -p "$out/share/applications"

    cp "${desktopItem}/share/applications/"* "$out/share/applications"

  nativeBuildInputs = [

    jq

    makeWrapper

    moreutils

    python3

  ];

  preBuild = ''

    jq 'del(.scripts.postinstall)' apps/desktop/package.json | sponge apps/desktop/package.json

    jq '.scripts.build = ""' apps/desktop/desktop_native/package.json | sponge apps/desktop/desktop_native/package.json

    cp ${desktop-native}/lib/libdesktop_native.so apps/desktop/desktop_native/desktop_native.linux-x64-musl.node

  '';

  runtimeDependencies = [

    (lib.getLib udev)

  ];

  postBuild = ''

    pushd apps/desktop

    "$(npm bin)"/electron-builder \

      --dir \

      -c.electronDist=${electron}/lib/electron \

      -c.electronVersion=${electron.version}

  postFixup = ''

    makeWrapper $out/opt/Bitwarden/bitwarden $out/bin/bitwarden \

      --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath [ libsecret stdenv.cc.cc ] }" \

      "''${gappsWrapperArgs[@]}"

    popd

  '';

  installPhase = ''

    mkdir $out

    pushd apps/desktop/dist/linux-unpacked

    mkdir -p $out/opt/Bitwarden

    cp -r locales resources{,.pak} $out/opt/Bitwarden

    popd

    makeWrapper '${electron}/bin/electron' "$out/bin/bitwarden" \

      --add-flags $out/opt/Bitwarden/resources/app.asar \

      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations}}" \

      --set-default ELECTRON_IS_DEV 0 \

      --inherit-argv0

    mkdir -p $out/share/applications

    cp ${desktopItem}/share/applications/* $out/share/applications

    pushd apps/desktop/resources/icons

    for icon in *.png; do

      dir=$out/share/icons/hicolor/"''${icon%.png}"/apps

      mkdir -p "$dir"

      cp "$icon" "$dir"/${icon}.png

    done

    popd

  '';

  meta = with lib; {

    description = "A secure and free password manager for all of your devices";

    inherit description;

    homepage = "https://bitwarden.com";

    sourceProvenance = with sourceTypes; [ binaryNativeCode ];

    license = licenses.gpl3;

    maintainers = with maintainers; [ kiwi ];

    license = lib.licenses.gpl3;

    maintainers = with maintainers; [ amarshall kiwi ];

    platforms = [ "x86_64-linux" ];

  };

}