diff --git a/pkgs/tools/security/nsjail/default.nix b/pkgs/tools/security/nsjail/default.nix
index 59f7a6667068..b2e17cae6b68 100644
--- a/pkgs/tools/security/nsjail/default.nix
+++ b/pkgs/tools/security/nsjail/default.nix
@@ -4,17 +4,17 @@
 
 stdenv.mkDerivation rec {
   pname = "nsjail";
-  version = "3.2";
+  version = "3.3";
 
   src = fetchFromGitHub {
     owner           = "google";
     repo            = "nsjail";
     rev             = version;
     fetchSubmodules = true;
-    sha256          = "sha256-SFRnCEPawMKEIdmrOnJ45IIb17W1d4qCceuRdWTDTQU=";
+    hash            = "sha256-L5x3rUDd1nXxDjoP/ZErQa02w2MJSkMBlgu00cy1D3M=";
   };
 
-  nativeBuildInputs = [ autoconf bison flex libtool pkg-config which installShellFiles ];
+  nativeBuildInputs = [ autoconf bison flex installShellFiles libtool pkg-config which ];
   buildInputs = [ libnl protobuf protobufc ];
   enableParallelBuilding = true;
 
@@ -23,13 +23,15 @@ stdenv.mkDerivation rec {
   '';
 
   installPhase = ''
+    runHook preInstallPhase
     install -Dm755 nsjail "$out/bin/nsjail"
     installManPage nsjail.1
+    runHook postInstallPhase
   '';
 
   meta = with lib; {
     description = "A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters";
-    homepage    = "http://nsjail.com/";
+    homepage    = "https://nsjail.dev/";
     license     = licenses.asl20;
     maintainers = with maintainers; [ arturcygan bosu c0bw3b ];
     platforms   = platforms.linux;