diff options
| author | Hedtke, Moritz <Moritz.Hedtke@t-online.de> | 2021-02-18 13:01:26 +0100 |
|---|---|---|
| committer | Hedtke, Moritz <Moritz.Hedtke@t-online.de> | 2021-04-07 16:38:23 +0200 |
| commit | 2d821cb5c0adb3247d3d3c841f8a6c5431802b75 (patch) | |
| tree | 69cf87f8f24b75ef745b34f5c781168246c75c61 /pkgs/tools/security/step-ca/default.nix | |
| parent | 106b8616f7c808f1706545dc8f05488986bbbca6 (diff) | |
| download | nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.tar nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.tar.gz nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.tar.bz2 nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.tar.lz nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.tar.xz nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.tar.zst nixpkgs-2d821cb5c0adb3247d3d3c841f8a6c5431802b75.zip | |
step-ca: Add option to disable HSM support
Diffstat (limited to 'pkgs/tools/security/step-ca/default.nix')
| -rw-r--r-- | pkgs/tools/security/step-ca/default.nix | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/pkgs/tools/security/step-ca/default.nix b/pkgs/tools/security/step-ca/default.nix index 584a597d67d..82afc06e1c5 100644 --- a/pkgs/tools/security/step-ca/default.nix +++ b/pkgs/tools/security/step-ca/default.nix @@ -6,6 +6,7 @@ , pcsclite , PCSC , pkg-config +, hsmSupport ? true }: buildGoModule rec { @@ -21,16 +22,20 @@ buildGoModule rec { vendorSha256 = "f1NdszqYYx6X1HqwqG26jjfjXq1gDXLOrh64ccKRQ90="; - nativeBuildInputs = [ pkg-config ]; + nativeBuildInputs = lib.optionals hsmSupport [ pkg-config ]; buildInputs = - lib.optionals (stdenv.isLinux) [ pcsclite ] - ++ lib.optionals (stdenv.isDarwin) [ PCSC ]; + lib.optionals (hsmSupport && stdenv.isLinux) [ pcsclite ] + ++ lib.optionals (hsmSupport && stdenv.isDarwin) [ PCSC ]; postPatch = '' substituteInPlace systemd/step-ca.service --replace "/bin/kill" "${coreutils}/bin/kill" ''; + preBuild = '' + ${lib.optionalString (!hsmSupport) "export CGO_ENABLED=0"} + ''; + postInstall = '' install -Dm444 -t $out/lib/systemd/system systemd/step-ca.service ''; |