Wolfgang Walther
99 lines
2.0 KiB
Nix
99 lines
2.0 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchurl,
|
|
pkg-config,
|
|
bison,
|
|
flex,
|
|
asciidoc,
|
|
libxslt,
|
|
findXMLCatalogs,
|
|
docbook_xml_dtd_45,
|
|
docbook_xsl,
|
|
libmnl,
|
|
libnftnl,
|
|
libpcap,
|
|
gmp,
|
|
jansson,
|
|
autoreconfHook,
|
|
withDebugSymbols ? false,
|
|
withCli ? true,
|
|
libedit,
|
|
withXtables ? true,
|
|
iptables,
|
|
nixosTests,
|
|
gitUpdater,
|
|
ncurses,
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
version = "1.1.6";
|
|
pname = "nftables";
|
|
|
|
src = fetchurl {
|
|
url = "https://netfilter.org/projects/nftables/files/${pname}-${version}.tar.xz";
|
|
hash = "sha256-NykxvahVazEGNqL5AgrccQ+bq2b0fv4M6Qv/gArCUww=";
|
|
};
|
|
|
|
patches = [
|
|
(fetchurl {
|
|
name = "musl.patch";
|
|
url = "https://lore.kernel.org/netfilter-devel/20241219231001.1166085-2-hi@alyssa.is/raw";
|
|
hash = "sha256-7vMBIoDWcI/JBInYP5yYWp8BnYbATRfMTxqyZr2L9Sk=";
|
|
})
|
|
];
|
|
|
|
nativeBuildInputs = [
|
|
autoreconfHook
|
|
pkg-config
|
|
bison
|
|
flex
|
|
asciidoc
|
|
docbook_xml_dtd_45
|
|
docbook_xsl
|
|
findXMLCatalogs
|
|
libxslt
|
|
]
|
|
++ lib.optional stdenv.hostPlatform.isStatic ncurses;
|
|
|
|
buildInputs = [
|
|
libmnl
|
|
libnftnl
|
|
libpcap
|
|
gmp
|
|
jansson
|
|
]
|
|
++ lib.optional withCli libedit
|
|
++ lib.optional withXtables iptables;
|
|
|
|
env.NIX_LDFLAGS = lib.optionalString stdenv.hostPlatform.isStatic "-lncursesw";
|
|
|
|
configureFlags = [
|
|
"--with-json"
|
|
(lib.withFeatureAs withCli "cli" "editline")
|
|
]
|
|
++ lib.optional (!withDebugSymbols) "--disable-debug"
|
|
++ lib.optional withXtables "--with-xtables";
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
passthru.tests = {
|
|
inherit (nixosTests) firewall-nftables;
|
|
nat = { inherit (nixosTests.nat.nftables) firewall standalone; };
|
|
};
|
|
|
|
passthru.updateScript = gitUpdater {
|
|
url = "https://git.netfilter.org/nftables";
|
|
rev-prefix = "v";
|
|
};
|
|
|
|
meta = {
|
|
description = "Project that aims to replace the existing {ip,ip6,arp,eb}tables framework";
|
|
homepage = "https://netfilter.org/projects/nftables/";
|
|
license = lib.licenses.gpl2Only;
|
|
platforms = lib.platforms.linux;
|
|
maintainers = with lib.maintainers; [ izorkin ];
|
|
mainProgram = "nft";
|
|
};
|
|
}
|