auxolotl/labs
26
12
Fork 15
Code Issues 6 Pull requests 6 Projects Releases Packages Wiki Activity Actions

labs/basic: Validate environment variables

Browse source
This commit is contained in:
Ross Smyth 2025-10-27 23:32:32 -04:00
parent 551bbc60de
commit cabbf2372a
1 changed files with 31 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

32
tidepool/src/builders/foundation/basic.nix
View file

@ -71,10 +71,40 @@ in
(lib.packages.build packages.foundation.bash.versions."5.2.15-stage1" "x86_64-linux" system).package
}/bin/bash";
# Validates that the exported environment variables are stringy
validateEnvVarType =
name: var:
if builtins.isString var || builtins.isPath var || lib.packages.isDerivation var then
var
else
throw "${builtins.unsafeGetAttrPos name package.env}: 'env.${name}' at is not a string, path, or derivation";
# Essentially black-listed environment variable names
# this is a list of attributes on the builtin.derivation below, keep it in sync if possible.
reservedVars = [
"name"
"script"
"system"
"script"
"env"
"__structuredAttrs"
"SHELL"
"builder"
"args"
];
validateEnvVarName =
name: var:
if !(builtins.elem name reservedVars) then
var
else
throw "${builtins.unsafeGetAttrPos name package.env}: 'env.${name}' is a reserved name";
built = builtins.derivation ({
inherit (package) name env;
inherit (package) name;
inherit script system;
env = builtins.mapAttrs (lib.fp.compose validateEnvVarType validateEnvVarName) package.env;
__structuredAttrs = true;
outputs = builtins.attrNames (lib.packages.getOutputs package);