Ihar Hrachyshka
567e8dfd8e
This commit was created by a combination of scripts and tools: - an ast-grep script to prefix things in meta with `lib.`, - a modified nixf-diagnose / nixf combination to remove unused `with lib;`, and - regular nixfmt. Co-authored-by: Wolfgang Walther <walther@technowledgy.de>
97 lines
2.8 KiB
Nix
97 lines
2.8 KiB
Nix
{
|
|
stdenv,
|
|
lib,
|
|
fetchurl,
|
|
testers,
|
|
installShellFiles,
|
|
}:
|
|
|
|
# this expression is mostly automated, and you are STRONGLY
|
|
# RECOMMENDED to use to nix-update for updating this expression when new
|
|
# releases come out, which runs the sibling `update.sh` script.
|
|
#
|
|
# from the root of the nixpkgs git repository, run:
|
|
#
|
|
# nix-shell maintainers/scripts/update.nix \
|
|
# --argstr commit true \
|
|
# --argstr package infisical
|
|
|
|
let
|
|
# build hashes, which correspond to the hashes of the precompiled binaries procured by GitHub Actions.
|
|
buildHashes = builtins.fromJSON (builtins.readFile ./hashes.json);
|
|
|
|
# the version of infisical
|
|
version = "0.41.90";
|
|
|
|
# the platform-specific, statically linked binary
|
|
src =
|
|
let
|
|
suffix =
|
|
{
|
|
# map the platform name to the golang toolchain suffix
|
|
# NOTE: must be synchronized with update.sh!
|
|
x86_64-linux = "linux_amd64";
|
|
x86_64-darwin = "darwin_amd64";
|
|
aarch64-linux = "linux_arm64";
|
|
aarch64-darwin = "darwin_arm64";
|
|
}
|
|
."${stdenv.hostPlatform.system}" or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
|
|
|
|
name = "infisical_${version}_${suffix}.tar.gz";
|
|
hash = buildHashes."${stdenv.hostPlatform.system}";
|
|
url = "https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv${version}/${name}";
|
|
in
|
|
fetchurl { inherit name url hash; };
|
|
|
|
in
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "infisical";
|
|
version = version;
|
|
inherit src;
|
|
|
|
nativeBuildInputs = [ installShellFiles ];
|
|
|
|
doCheck = true;
|
|
dontConfigure = true;
|
|
dontStrip = true;
|
|
|
|
sourceRoot = ".";
|
|
buildPhase = "chmod +x ./infisical";
|
|
checkPhase = "./infisical --version";
|
|
installPhase = ''
|
|
mkdir -p $out/bin/ $out/share/completions/ $out/share/man/
|
|
cp infisical $out/bin
|
|
cp completions/* $out/share/completions/
|
|
cp manpages/* $out/share/man/
|
|
'';
|
|
postInstall = ''
|
|
installManPage share/man/infisical.1.gz
|
|
installShellCompletion share/completions/infisical.{bash,fish,zsh}
|
|
'';
|
|
|
|
passthru = {
|
|
updateScript = ./update.sh;
|
|
tests.version = testers.testVersion { package = finalAttrs.finalPackage; };
|
|
};
|
|
|
|
meta = {
|
|
description = "Official Infisical CLI";
|
|
longDescription = ''
|
|
Infisical is the open-source secret management platform:
|
|
Sync secrets across your team/infrastructure and prevent secret leaks.
|
|
'';
|
|
homepage = "https://infisical.com";
|
|
changelog = "https://github.com/infisical/infisical/releases/tag/infisical-cli%2Fv${version}";
|
|
license = lib.licenses.mit;
|
|
mainProgram = "infisical";
|
|
maintainers = with lib.maintainers; [ hausken ];
|
|
teams = [ lib.teams.infisical ];
|
|
platforms = [
|
|
"x86_64-linux"
|
|
"aarch64-linux"
|
|
"aarch64-darwin"
|
|
"x86_64-darwin"
|
|
];
|
|
};
|
|
})
|