1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
{ lib
, stdenv
, fetchurl
, pkg-config
, dbus
, libgcrypt
, pam
, python3
, glib
, libxslt
, gettext
, gcr
, autoreconfHook
, libcap_ng
, libselinux
, p11-kit
, openssh
, wrapGAppsHook
, docbook-xsl-nons
, docbook_xml_dtd_43
, gnome
, useWrappedDaemon ? true
}:
stdenv.mkDerivation rec {
pname = "gnome-keyring";
version = "42.1";
outputs = [ "out" "dev" ];
src = fetchurl {
url = "mirror://gnome/sources/gnome-keyring/${lib.versions.major version}/${pname}-${version}.tar.xz";
sha256 = "x/TQQMx2prf+Z+CO+RBpEcPIDUD8iMv8jiaEpMlG4+Y=";
};
nativeBuildInputs = [
pkg-config
gettext
libxslt
# Upstream uses ancient autotools to pre-generate the scripts.
autoreconfHook
docbook-xsl-nons
docbook_xml_dtd_43
wrapGAppsHook
];
buildInputs = [
glib
libgcrypt
pam
openssh
libcap_ng
libselinux
gcr
p11-kit
];
nativeCheckInputs = [ dbus python3 ];
configureFlags = [
"--with-pkcs11-config=${placeholder "out"}/etc/pkcs11/" # installation directories
"--with-pkcs11-modules=${placeholder "out"}/lib/pkcs11/"
];
# Tends to fail non-deterministically.
# - https://github.com/NixOS/nixpkgs/issues/55293
# - https://github.com/NixOS/nixpkgs/issues/51121
doCheck = false;
postPatch = ''
patchShebangs build
'';
checkPhase = ''
export HOME=$(mktemp -d)
dbus-run-session \
--config-file=${dbus}/share/dbus-1/session.conf \
make check
'';
# Use wrapped gnome-keyring-daemon with cap_ipc_lock=ep
postFixup = lib.optionalString useWrappedDaemon ''
files=($out/etc/xdg/autostart/* $out/share/dbus-1/services/*)
for file in ''${files[*]}; do
substituteInPlace $file \
--replace "$out/bin/gnome-keyring-daemon" "/run/wrappers/bin/gnome-keyring-daemon"
done
'';
passthru = {
updateScript = gnome.updateScript {
packageName = "gnome-keyring";
attrPath = "gnome.gnome-keyring";
};
};
meta = with lib; {
description = "Collection of components in GNOME that store secrets, passwords, keys, certificates and make them available to applications";
homepage = "https://wiki.gnome.org/Projects/GnomeKeyring";
license = licenses.gpl2;
maintainers = teams.gnome.members;
platforms = platforms.linux;
};
}
|