From b7547244dc6a3b32b376511b868de175e467d93f Mon Sep 17 00:00:00 2001
From: Nicolas Benes <nbenes.gh@xandea.de>
Date: Mon, 23 Mar 2026 12:35:50 +0100
Subject: [PATCH] nitrokey-fido2-firmware: drop

---
 .../ni/nitrokey-fido2-firmware/package.nix    | 84 -------------------
 pkgs/top-level/aliases.nix                    |  1 +
 2 files changed, 1 insertion(+), 84 deletions(-)
 delete mode 100644 pkgs/by-name/ni/nitrokey-fido2-firmware/package.nix

diff --git a/pkgs/by-name/ni/nitrokey-fido2-firmware/package.nix b/pkgs/by-name/ni/nitrokey-fido2-firmware/package.nix
deleted file mode 100644
index b5aeac3f4f0c..000000000000
--- a/pkgs/by-name/ni/nitrokey-fido2-firmware/package.nix
+++ /dev/null
@@ -1,84 +0,0 @@
-{
-  lib,
-  stdenv,
-  fetchFromGitHub,
-  writeShellScriptBin,
-  gcc-arm-embedded,
-  pynitrokey,
-  python3,
-
-  # The make target to run
-  makeTarget ? "release-buildv",
-  # Whether the firmware should include the production public key for the bootloader
-  release ? true,
-}:
-
-let
-  # The latest release is found on the releases page; do not rely on the latest tag.
-  # They normally contain the suffix `.nitrokey`.
-  # https://github.com/Nitrokey/nitrokey-fido2-firmware/releases
-  version = "2.4.1";
-
-  # The firmware version is pulled from `git` so we stub it here to avoid pulling the whole program.
-  fakeGit = writeShellScriptBin "git" ''
-    echo "${version}.nitrokey"
-  '';
-
-in
-stdenv.mkDerivation {
-  pname = "nitrokey-fido2-firmware";
-  inherit version;
-
-  src = fetchFromGitHub {
-    owner = "Nitrokey";
-    repo = "nitrokey-fido2-firmware";
-    tag = "${version}.nitrokey";
-    hash = "sha256-7AsnxRf8mdybI6Mup2mV01U09r5C/oUX6fG2ymkkOOo=";
-    fetchSubmodules = true;
-  };
-
-  postPatch = ''
-    # Remove a duplicate firmware_version definition. Without this,
-    # firmware_version is defined multiple times, triggering a build error.
-    substituteInPlace fido2/version.h \
-      --replace-fail "const version_t firmware_version ;" ""
-  '';
-
-  nativeBuildInputs = [
-    fakeGit
-    # only gcc-arm-embedded includes libc_nano.a
-    gcc-arm-embedded
-    pynitrokey
-    python3
-  ];
-
-  preBuild = ''
-    cd targets/stm32l432
-  '';
-
-  makeFlags = [
-    "${makeTarget}"
-    "RELEASE=${toString release}"
-  ];
-
-  installPhase = ''
-    runHook preInstall
-    cp -r release $out
-    runHook postInstall
-  '';
-
-  meta = {
-    description = "Firmware for the Nitrokey FIDO2 device";
-    homepage = "https://github.com/Nitrokey/nitrokey-fido2-firmware";
-    maintainers = with lib.maintainers; [
-      amerino
-      kiike
-      imadnyc
-    ];
-    license = with lib.licenses; [
-      asl20
-      mit
-    ];
-    platforms = lib.platforms.unix;
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index b35874eec9ab..f99d7be70ed9 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -1433,6 +1433,7 @@ mapAliases {
   nginxQuic = throw "'nginxQuic' has been removed. QUIC support is now available in the default nginx builds.";
   ngrid = throw "'ngrid' has been removed as it has been unmaintained upstream and broken"; # Added 2025-11-15
   nimbo = throw "'nimbo' has been removed due to being archived upstream."; # Added 2026-01-18
+  nitrokey-fido2-firmware = throw "'nitrokey-fido2-firmware' has been removed as it was broken and unmaintained upstream since 2022"; # Added 2026-03-23
   nix-direnv-flakes = throw "'nix-direnv-flakes' has been renamed to/replaced by 'nix-direnv'"; # Converted to throw 2025-10-27
   nix-ld-rs = throw "'nix-ld-rs' has been renamed to/replaced by 'nix-ld'"; # Converted to throw 2025-10-27
   nix-linter = throw "nix-linter has been removed as it was broken for 3 years and unmaintained upstream"; # Added 2025-09-06