core/pkgs/by-name/sh/shadow/default.nix

114 lines
3.1 KiB
Nix
Raw Normal View History

2024-05-13 21:24:10 +00:00
{ lib, stdenv, fetchFromGitHub, fetchpatch, runtimeShell, autoreconfHook, bison
, flex, docbook_xml_dtd_45, docbook_xsl, itstool, libbsd, libxml2, libxslt
, libxcrypt, pkg-config, glibcCross ? null, pam ? null
2024-05-02 00:46:19 +00:00
, withTcb ? lib.meta.availableOn stdenv.hostPlatform tcb, tcb
# for passthru.tests
# , nixosTests
}:
let
2024-05-13 21:24:10 +00:00
glibc = if stdenv.hostPlatform != stdenv.buildPlatform then
glibcCross
else
assert stdenv.hostPlatform.libc == "glibc"; stdenv.cc.libc;
2024-05-02 00:46:19 +00:00
2024-05-13 21:24:10 +00:00
in stdenv.mkDerivation rec {
2024-05-02 00:46:19 +00:00
pname = "shadow";
version = "4.14.6";
src = fetchFromGitHub {
owner = "shadow-maint";
repo = pname;
rev = version;
hash = "sha256-+klU1a0cSgHPwZkDnbCSjKnBUKIm2Z3OGUvR/zrqQxo=";
};
outputs = [ "out" "su" "dev" "man" ];
RUNTIME_SHELL = runtimeShell;
nativeBuildInputs = [
2024-05-13 21:24:10 +00:00
autoreconfHook
bison
flex
docbook_xml_dtd_45
docbook_xsl
itstool
libxml2
libxslt
2024-05-02 00:46:19 +00:00
pkg-config
];
buildInputs = [ libbsd libxcrypt ]
++ lib.optional (pam != null && stdenv.isLinux) pam
++ lib.optional withTcb tcb;
patches = [
./keep-path.patch
# Obtain XML resources from XML catalog (patch adapted from gtk-doc)
./respect-xml-catalog-files-var.patch
./runtime-shell.patch
./fix-install-with-tcb.patch
# Fix build against `clang-16` and upcoming `gcc-14`:
# https://github.com/shadow-maint/shadow/pull/857
(fetchpatch {
name = "fix-implicit-getdef_bool.patch";
2024-05-13 21:24:10 +00:00
url =
"https://github.com/shadow-maint/shadow/commit/5abe0811b880208600f646356549b7e5cad89060.patch";
2024-05-02 00:46:19 +00:00
hash = "sha256-XqvVv8mYY58uXJBKRwncHQRSI45PUkp3dQNn44gzezU=";
})
];
# The nix daemon often forbids even creating set[ug]id files.
postPatch = ''
sed 's/^\(s[ug]idperms\) = [0-9]755/\1 = 0755/' -i src/Makefile.am
'';
# Assume System V `setpgrp (void)', which is the default on GNU variants
# (`AC_FUNC_SETPGRP' is not cross-compilation capable.)
preConfigure = ''
export ac_cv_func_setpgrp_void=yes
export shadow_cv_logdir=/var/log
'';
configureFlags = [
"--enable-man"
"--with-group-name-max-length=32"
"--with-bcrypt"
"--with-yescrypt"
] ++ lib.optional (stdenv.hostPlatform.libc != "glibc") "--disable-nscd"
++ lib.optional withTcb "--with-tcb";
preBuild = lib.optionalString (stdenv.hostPlatform.libc == "glibc") ''
substituteInPlace lib/nscd.c --replace /usr/sbin/nscd ${glibc.bin}/bin/nscd
'';
postInstall = ''
# Don't install groups, since coreutils already provides it.
rm $out/bin/groups
rm $man/share/man/man1/groups.*
# Move the su binary into the su package
mkdir -p $su/bin
mv $out/bin/su $su/bin
'';
enableParallelBuilding = true;
2024-05-13 21:24:10 +00:00
disallowedReferences =
lib.optional (stdenv.buildPlatform != stdenv.hostPlatform)
stdenv.shellPackage;
2024-05-02 00:46:19 +00:00
meta = with lib; {
homepage = "https://github.com/shadow-maint";
2024-05-13 21:24:10 +00:00
description =
"Suite containing authentication-related tools such as passwd and su";
2024-05-02 00:46:19 +00:00
license = licenses.bsd3;
platforms = platforms.linux;
};
passthru = {
shellPath = "/bin/nologin";
# tests = { inherit (nixosTests) shadow; };
};
}