From 6fe973349dbc739cce98ec72d6951ffcc940888d Mon Sep 17 00:00:00 2001
From: nikstur <nikstur@outlook.com>
Date: Fri, 20 Sep 2024 15:04:20 +0200
Subject: [PATCH] nix-store-veritysetup-generator: init at 0.1.0

---
 .../package.nix                               | 43 +++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 pkgs/by-name/ni/nix-store-veritysetup-generator/package.nix

diff --git a/pkgs/by-name/ni/nix-store-veritysetup-generator/package.nix b/pkgs/by-name/ni/nix-store-veritysetup-generator/package.nix
new file mode 100644
index 000000000000..3cb661703114
--- /dev/null
+++ b/pkgs/by-name/ni/nix-store-veritysetup-generator/package.nix
@@ -0,0 +1,43 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  systemd,
+}:
+
+rustPlatform.buildRustPackage rec {
+  pname = "nix-store-veritysetup-generator";
+  version = "0.1.0";
+
+  src = fetchFromGitHub {
+    owner = "nikstur";
+    repo = "nix-store-veritysetup-generator";
+    rev = version;
+    hash = "sha256-kQ+mFBnvxmEH2+z1sDaehGInEsBpfZu8LMAseGjZ3/I=";
+  };
+
+  sourceRoot = "${src.name}/rust";
+
+  cargoHash = "sha256-NCxPLsBJX4Dp8LcWrjVrocqDBvWc587DF3WPXZg1uFY=";
+
+  env = {
+    SYSTEMD_VERITYSETUP_PATH = "${systemd}/lib/systemd/systemd-veritysetup";
+    SYSTEMD_ESCAPE_PATH = "${systemd}/bin/systemd-escape";
+  };
+
+  # Use a fake path in tests so that they are not dependent on specific Nix
+  # Store paths and thus don't break on different Nixpkgs invocations. This is
+  # relevant so that this package can be compiled on different architectures.
+  preCheck = ''
+    export SYSTEMD_VERITYSETUP_PATH="systemd-veritysetup";
+  '';
+
+  stripAllList = [ "bin" ];
+
+  meta = with lib; {
+    description = "Systemd unit generator for a verity protected Nix Store";
+    homepage = "https://github.com/nikstur/nix-store-veritysetup-generator";
+    license = licenses.mit;
+    maintainers = with lib.maintainers; [ nikstur ];
+  };
+}