ipxe: 1.21.1-unstable-2025-11-19 -> 2.0.0 (#497898)

This commit is contained in:
Fernando Rodrigues
2026-03-20 08:44:19 +00:00
committed by GitHub
+86 -50
View File
@@ -2,7 +2,7 @@
stdenv,
lib,
fetchFromGitHub,
unstableGitUpdater,
nix-update-script,
buildPackages,
mtools,
openssl,
@@ -10,45 +10,103 @@
xorriso,
xz,
syslinux,
embedScript ? null,
enableDefaultPlatformTargets ? true,
additionalTargets ? { },
enableDefaultOptions ? true,
additionalOptions ? [ ],
firmwareBinary ? "ipxe.efirom",
}:
let
inherit (lib)
assertOneOf
attrNames
concatStringsSep
escapeShellArgs
flip
last
licenses
maintainers
mapAttrsToList
optional
optionalAttrs
optionalString
optionals
platforms
splitString
uniqueStrings
;
inherit (stdenv.hostPlatform)
isAarch32
isAarch64
isx86
isx86_64
;
platformTarget = platform: optionalAttrs (enableDefaultPlatformTargets && platform);
targets =
additionalTargets
// lib.optionalAttrs stdenv.hostPlatform.isx86_64 {
platformTarget isx86_64 {
"bin-x86_64-efi/ipxe.efi" = null;
"bin-x86_64-efi/ipxe.efirom" = null;
"bin-x86_64-efi/ipxe.usb" = "ipxe-efi.usb";
"bin-x86_64-efi/snp.efi" = null;
}
// lib.optionalAttrs stdenv.hostPlatform.isx86 {
// platformTarget isx86 {
"bin/ipxe.dsk" = null;
"bin/ipxe.usb" = null;
"bin/ipxe.iso" = null;
"bin/ipxe.lkrn" = null;
"bin/undionly.kpxe" = null;
}
// lib.optionalAttrs stdenv.hostPlatform.isAarch32 {
// platformTarget isAarch32 {
"bin-arm32-efi/ipxe.efi" = null;
"bin-arm32-efi/ipxe.efirom" = null;
"bin-arm32-efi/ipxe.usb" = "ipxe-efi.usb";
"bin-arm32-efi/snp.efi" = null;
}
// lib.optionalAttrs stdenv.hostPlatform.isAarch64 {
// platformTarget isAarch64 {
"bin-arm64-efi/ipxe.efi" = null;
"bin-arm64-efi/ipxe.efirom" = null;
"bin-arm64-efi/ipxe.usb" = "ipxe-efi.usb";
"bin-arm64-efi/snp.efi" = null;
};
}
// additionalTargets;
getTargets = flip mapAttrsToList targets;
binaries = uniqueStrings (
getTargets (from: to: if (isNull to) then last (splitString "/" from) else to)
);
options =
optionals enableDefaultOptions [
"PING_CMD"
"IMAGE_TRUST_CMD"
"DOWNLOAD_PROTO_HTTP"
"DOWNLOAD_PROTO_HTTPS"
]
++ additionalOptions;
in
assert assertOneOf "When building iPXE, the 'firmwareBinary' parameter" firmwareBinary binaries;
stdenv.mkDerivation (finalAttrs: {
pname = "ipxe";
version = "1.21.1-unstable-2026-01-30";
version = "2.0.0";
src = fetchFromGitHub {
owner = "ipxe";
repo = "ipxe";
tag = "v${finalAttrs.version}";
hash = "sha256-O7jUpnP+wa9zBIEqYa7FQ9Zo1Ii1oVH10nlk+c4iHwg=";
};
enableParallelBuilding = true;
strictDeps = true;
nativeBuildInputs = [
mtools
@@ -57,24 +115,10 @@ stdenv.mkDerivation (finalAttrs: {
xorriso
xz
]
++ lib.optional stdenv.hostPlatform.isx86 syslinux;
++ optional isx86 syslinux;
depsBuildBuild = [ buildPackages.stdenv.cc ];
strictDeps = true;
src = fetchFromGitHub {
owner = "ipxe";
repo = "ipxe";
rev = "74e0551ac2f66760430e69407a4f7ed0dfe9feab";
hash = "sha256-7Guts4js1pM/Vse58XCjr7K8qHbJU5oiFFuqojwXTC4=";
};
# Calling syslinux on a FAT image isn't going to work on Aarch64.
postPatch = lib.optionalString stdenv.hostPlatform.isAarch64 ''
substituteInPlace src/util/genfsimg --replace " syslinux " " true "
'';
# Hardening is not possible due to assembler code.
hardeningDisable = [
"pic"
@@ -86,23 +130,22 @@ stdenv.mkDerivation (finalAttrs: {
"ECHO_E_BIN_ECHO_E=echo" # No /bin/echo here.
"CROSS=${stdenv.cc.targetPrefix}"
]
++ lib.optional (embedScript != null) "EMBED=${embedScript}";
++ optional (embedScript != null) "EMBED=${embedScript}";
enabledOptions = [
"PING_CMD"
"IMAGE_TRUST_CMD"
"DOWNLOAD_PROTO_HTTP"
"DOWNLOAD_PROTO_HTTPS"
]
++ additionalOptions;
buildFlags = attrNames targets;
# Calling syslinux on a FAT image isn't going to work on Aarch64.
postPatch = optionalString isAarch64 ''
substituteInPlace src/util/genfsimg --replace-fail " syslinux " " true "
'';
configurePhase = ''
runHook preConfigure
for opt in ${lib.escapeShellArgs finalAttrs.enabledOptions}; do echo "#define $opt" >> src/config/general.h; done
substituteInPlace src/Makefile.housekeeping --replace '/bin/echo' echo
for opt in ${escapeShellArgs options}; do echo "#define $opt" >> src/config/general.h; done
substituteInPlace src/Makefile.housekeeping --replace-fail '/bin/echo' echo
''
+ lib.optionalString stdenv.hostPlatform.isx86 ''
substituteInPlace src/util/genfsimg --replace /usr/lib/syslinux ${syslinux}/share/syslinux
+ optionalString isx86 ''
substituteInPlace src/util/genfsimg --replace-fail /usr/lib/syslinux ${syslinux}/share/syslinux
''
+ ''
runHook postConfigure
@@ -110,19 +153,15 @@ stdenv.mkDerivation (finalAttrs: {
preBuild = "cd src";
buildFlags = lib.attrNames targets;
installPhase = ''
runHook preInstall
mkdir -p $out
${lib.concatStringsSep "\n" (
lib.mapAttrsToList (
from: to: if to == null then "cp -v ${from} $out" else "cp -v ${from} $out/${to}"
) targets
${concatStringsSep "\n" (
getTargets (from: to: if (isNull to) then "cp -v ${from} $out" else "cp -v ${from} $out/${to}")
)}
''
+ lib.optionalString stdenv.hostPlatform.isx86 ''
+ optionalString isx86 ''
# Some PXE constellations especially with dnsmasq are looking for the file with .0 ending
# let's provide it as a symlink to be compatible in this case.
ln -s undionly.kpxe $out/undionly.kpxe.0
@@ -131,19 +170,16 @@ stdenv.mkDerivation (finalAttrs: {
runHook postInstall
'';
enableParallelBuilding = true;
passthru = {
firmware = "${finalAttrs.finalPackage}/${firmwareBinary}";
updateScript = unstableGitUpdater {
tagPrefix = "v";
};
updateScript = nix-update-script { };
};
meta = {
description = "Network boot firmware";
homepage = "https://ipxe.org/";
license = with lib.licenses; [
changelog = "https://github.com/ipxe/ipxe/releases/tag/v${finalAttrs.version}";
license = with licenses; [
bsd2
bsd3
gpl2Only
@@ -152,7 +188,7 @@ stdenv.mkDerivation (finalAttrs: {
mit
mpl11
];
platforms = lib.platforms.linux;
maintainers = with lib.maintainers; [ sigmasquadron ];
platforms = platforms.linux;
maintainers = with maintainers; [ sigmasquadron ];
};
})