1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
|
{ stdenv
, lib
, fetchFromGitHub
, makeWrapper
, strip-nondeterminism
, meson
, ninja
, pkg-config
, gradle_7
, curl
, cryptopp
, fontconfig
, jre
, libxml2
, openssl
, pcsclite
, podofo
, ghostscript
}:
let
pname = "cie-middleware-linux";
version = "1.5.0";
src = fetchFromGitHub {
owner = "M0rf30";
repo = pname;
rev = version;
sha256 = "sha256-Z8K2Ibg5bBfSql5HEapKgdfiCf/EIKTTD15oVeysQGk=";
};
gradle = gradle_7;
# Shared libraries needed by the Java application
libraries = lib.makeLibraryPath [ ghostscript ];
# Fixed-output derivation that fetches the Java dependencies
javaDeps = stdenv.mkDerivation {
pname = "cie-java-deps";
inherit src version;
nativeBuildInputs = [ gradle ];
buildPhase = ''
# Run the fetchDeps task
export GRADLE_USER_HOME=$(mktemp -d)
ls -l
gradle --no-daemon -b cie-java/build.gradle fetchDeps
'';
installPhase = ''
# Build a tree compatible with the maven repository format
pushd "$GRADLE_USER_HOME/caches/modules-2/files-2.1"
find -type f | awk -F/ -v OFS=/ -v out="$out" '{
infile = $0
gsub(/\./, "/", $2)
system("install -m644 -D "infile" "out"/"$2"/"$3"/"$4"/"$6)
}'
popd
'';
outputHashAlgo = "sha256";
outputHashMode = "recursive";
outputHash = "sha256-jtaH8dBpnx8KMJe+jzJfkvcx1NO4nL5jsRO4+GI+d0c=";
};
in
stdenv.mkDerivation {
inherit pname src version;
hardeningDisable = [ "format" ];
outputs = [ "out" "dev" ];
nativeBuildInputs = [
makeWrapper
meson
ninja
pkg-config
gradle
strip-nondeterminism
];
buildInputs = [
cryptopp
fontconfig
podofo.dev
openssl
pcsclite
curl
libxml2
];
postPatch = ''
# substitute the cieid command with this $out/bin/cieid
substituteInPlace libs/pkcs11/src/CSP/AbilitaCIE.cpp \
--replace 'file = "cieid"' 'file = "'$out'/bin/cieid"'
# revert https://github.com/M0Rf30/cie-middleware-linux/commit/1a389d8
sed -i libs/meson.build \
-e "s@podofo_dep = .\+@podofo_dep = dependency('libpodofo')@g"
'';
# Note: we use pushd/popd to juggle between the
# libraries and the Java application builds.
preConfigure = "pushd libs";
postBuild = ''
popd
# Use the packages in javaDeps for both plugins and dependencies
localRepo="maven { url uri('${javaDeps}') }"
sed -i cie-java/settings.gradle -e "1i \
pluginManagement { repositories { $localRepo } }"
substituteInPlace cie-java/build.gradle \
--replace 'mavenCentral()' "$localRepo"
# Build the Java application
export GRADLE_USER_HOME=$(mktemp -d)
gradle standalone \
--no-daemon \
--offline \
--parallel \
--info -Dorg.gradle.java.home=${jre} \
--build-file cie-java/build.gradle
pushd libs/build
'';
postInstall = ''
popd
# Install the Java application
install -Dm755 cie-java/build/libs/CIEID-standalone.jar \
"$out/share/cieid/cieid.jar"
# Create a wrapper
mkdir -p "$out/bin"
makeWrapper "${jre}/bin/java" "$out/bin/cieid" \
--add-flags "-Djna.library.path='$out/lib:${libraries}'" \
--add-flags '-Dawt.useSystemAAFontSettings=on' \
--add-flags "-cp $out/share/cieid/cieid.jar" \
--add-flags "it.ipzs.cieid.MainApplication"
# Install other files
install -Dm644 data/cieid.desktop "$out/share/applications/cieid.desktop"
install -Dm755 data/logo.png "$out/share/pixmaps/cieid.png"
install -Dm644 LICENSE "$out/share/licenses/cieid/LICENSE"
'';
postFixup = ''
# Move static libraries to the dev output
mv -t "$dev/lib" "$out/lib/"*.a
# Make the jar deterministic (mainly, sorting its files)
strip-nondeterminism "$out/share/cieid/cieid.jar"
'';
passthru = { inherit javaDeps; };
meta = with lib; {
homepage = "https://github.com/M0Rf30/cie-middleware-linux";
description = "Middleware for the Italian Electronic Identity Card (CIE)";
longDescription = ''
Software for the usage of the Italian Electronic Identity Card (CIE).
Access to PA services, signing and verification of documents
Warning: this is an unofficial fork because the original software, as
distributed by the Italian government, is essentially lacking a build
system and is in violation of the license of the PoDoFo library.
'';
license = licenses.bsd3;
platforms = platforms.unix;
# Note: fails due to a lot of broken type conversions
badPlatforms = platforms.darwin;
maintainers = with maintainers; [ rnhmjoj ];
};
}
|