Sops + age plugin wrapper (#395189) (c509a0d7) · Commits · nix / nixpkgs

pkgs/by-name/ag/age/package.nix

+39 −9

Original line number	Diff line number	Diff line
		@@ -3,16 +3,22 @@
		buildGoModule,
		fetchFromGitHub,
		installShellFiles,
		age-plugin-tpm,
		age-plugin-ledger,
		age-plugin-yubikey,
		age-plugin-fido2-hmac,
		makeWrapper,
		runCommand,
		}:

		buildGoModule rec {
		buildGoModule (final: {
		pname = "age";
		version = "1.2.1";

		src = fetchFromGitHub {
		owner = "FiloSottile";
		repo = "age";
		rev = "v${version}";
		rev = "v${final.version}";
		hash = "sha256-9ZJdrmqBj43zSvStt0r25wjSfnvitdx3GYtM3urHcaA=";
		};

		@@ -21,10 +27,12 @@ buildGoModule rec {
		ldflags = [
		"-s"
		"-w"
		"-X main.Version=${version}"
		"-X main.Version=${final.version}"
		];

		nativeBuildInputs = [ installShellFiles ];
		nativeBuildInputs = [
		installShellFiles
		];

		preInstall = ''
		installManPage doc/*.1
		@@ -32,10 +40,10 @@ buildGoModule rec {

		doInstallCheck = true;
		installCheckPhase = ''
		if [[ "$("$out/bin/${pname}" --version)" == "${version}" ]]; then
		echo '${pname} smoke check passed'
		if [[ "$("$out/bin/${final.pname}" --version)" == "${final.version}" ]]; then
		echo '${final.pname} smoke check passed'
		else
		echo '${pname} smoke check failed'
		echo '${final.pname} smoke check failed'
		return 1
		fi
		'';
		@@ -46,12 +54,34 @@ buildGoModule rec {
		"TestScript/plugin"
		];

		# group age plugins together
		passthru.plugins = {
		inherit
		age-plugin-tpm
		age-plugin-ledger
		age-plugin-yubikey
		age-plugin-fido2-hmac
		;
		};

		# convenience function for wrapping sops with plugins
		passthru.withPlugins =
		filter:
		runCommand "age-${final.version}-with-plugins"
		{
		nativeBuildInputs = [ makeWrapper ];
		}
		''
		makeWrapper ${lib.getBin final.finalPackage}/bin/age $out/bin/age \
		--prefix PATH : "${lib.makeBinPath (filter final.passthru.plugins)}"
		'';

		meta = with lib; {
		changelog = "https://github.com/FiloSottile/age/releases/tag/v${version}";
		changelog = "https://github.com/FiloSottile/age/releases/tag/v${final.version}";
		homepage = "https://age-encryption.org/";
		description = "Modern encryption tool with small explicit keys";
		license = licenses.bsd3;
		mainProgram = "age";
		maintainers = with maintainers; [ tazjin ];
		};
		}
		})

pkgs/by-name/so/sops/package.nix

+25 −7

Original line number	Diff line number	Diff line
		@@ -5,16 +5,19 @@
		installShellFiles,
		versionCheckHook,
		nix-update-script,
		makeWrapper,
		runCommand,
		age,
		}:

		buildGoModule rec {
		buildGoModule (final: {
		pname = "sops";
		version = "3.10.1";

		src = fetchFromGitHub {
		owner = "getsops";
		repo = pname;
		tag = "v${version}";
		repo = final.pname;
		tag = "v${final.version}";
		hash = "sha256-LdsuN243oQ/L6LYgynb7Kw60alXn5IfUfhY0WaZFVCU=";
		};

		@@ -25,10 +28,13 @@ buildGoModule rec {
		ldflags = [
		"-s"
		"-w"
		"-X github.com/getsops/sops/v3/version.Version=${version}"
		"-X github.com/getsops/sops/v3/version.Version=${final.version}"
		];

		nativeBuildInputs = [ installShellFiles ];
		nativeBuildInputs = [
		installShellFiles
		makeWrapper
		];

		postInstall = ''
		installShellCompletion --cmd sops --bash ${./bash_autocomplete}
		@@ -41,10 +47,22 @@ buildGoModule rec {

		passthru.updateScript = nix-update-script { };

		# wrap sops with age plugins
		passthru.withAgePlugins =
		filter:
		runCommand "sops-${final.version}-with-age-plugins"
		{
		nativeBuildInputs = [ makeWrapper ];
		}
		''
		makeWrapper ${lib.getBin final.finalPackage}/bin/sops $out/bin/sops \
		--prefix PATH : "${lib.makeBinPath (filter age.passthru.plugins)}"
		'';

		meta = {
		homepage = "https://getsops.io/";
		description = "Simple and flexible tool for managing secrets";
		changelog = "https://github.com/getsops/sops/blob/v${version}/CHANGELOG.rst";
		changelog = "https://github.com/getsops/sops/blob/v${final.version}/CHANGELOG.rst";
		mainProgram = "sops";
		maintainers = with lib.maintainers; [
		Scrumplex
		@@ -52,4 +70,4 @@ buildGoModule rec {
		];
		license = lib.licenses.mpl20;
		};
		}
		})