liminix/overlay.nix

final: prev:
let
  isCross = final.stdenv.buildPlatform != final.stdenv.hostPlatform;
  crossOnly = pkg : amendFn : if isCross then (amendFn pkg) else pkg;
  extraPkgs = import ./pkgs/default.nix {
    inherit (final) lib callPackage;
  };
  inherit (final) fetchpatch;
  luaHost = prev.lua5_3.overrideAttrs(o: {
     name = "lua-tty";
     preBuild = ''
       makeFlagsArray+=(PLAT="posix" SYSLIBS="-Wl,-E -ldl"  CFLAGS="-O2 -fPIC -DLUA_USE_POSIX -DLUA_USE_DLOPEN")
     '';
     # lua in nixpkgs has a postInstall stanza that assumes only
     # one output, we need to override that if we're going to
     # convert to multi-output
     # outputs = ["bin" "man" "out"];
     makeFlags =
       builtins.filter (x: (builtins.match "(PLAT|MYLIBS).*" x) == null)
         o.makeFlags;
   });

  s6 = prev.s6.overrideAttrs(o:
    let
      patch = fetchpatch {
        # add "p" directive in s6-log
        url = "https://github.com/skarnet/s6/commit/ddc76841398dfd5e18b22943727ad74b880236d3.patch";
        hash = "sha256-fBtUinBdp5GqoxgF6fcR44Tu8hakxs/rOShhuZOgokc=";
      };
      patch_needed = builtins.compareVersions o.version "2.11.1.2" <= 0;
    in {
      configureFlags = (builtins.filter
        (x: (builtins.match ".*shared.*" x) == null)
        o.configureFlags) ++
      [
        "--disable-allstatic"
        "--disable-static"
        "--enable-shared"
      ];
      hardeningDisable = ["all"];
      stripAllList = [ "sbin" "bin" ];
      patches =
        (if o ? patches then o.patches else []) ++
        (if patch_needed then [ patch ] else []);
    });
in
extraPkgs // {
  # liminix library functions
  lim = {
    parseInt = s : (builtins.fromTOML "r=${s}").r;
  };

  # keep these alphabetical

  btrfs-progs = prev.btrfs-progs.override {
    udevSupport = false;
    udev = null;
  };

  chrony =
    let chrony' = prev.chrony.overrideAttrs(o: {
          configureFlags = [
            "--chronyvardir=$(out)/var/lib/chrony"
            "--disable-readline"
            "--disable-editline"
          ];
        });
    in chrony'.override {
      gnutls = null;
      nss = null;
      nspr = null;
      readline = null;
      libedit = null;
      libseccomp = null;
      # should texinfo be in nativeBuildInputs instead of
      # buildInputs?
      texinfo = null;

    };

  # luarocks wants a cross-compiled cmake (which seems like a bug,
  # we're never going to run luarocks on the device, but ...)
  # but https://github.com/NixOS/nixpkgs/issues/284734
  # so we do surgery on the cmake derivation until that's fixed

  cmake = prev.cmake.overrideAttrs(o:
    # don't override the build cmake or we'll have to rebuild
    # half the known universe to no useful benefit
    if final.stdenv.buildPlatform != final.stdenv.hostPlatform
    then {
      preConfigure =
        builtins.replaceStrings
          ["$configureFlags"] ["$configureFlags $cmakeFlags"] o.preConfigure;
    }
    else {}
  );

  dnsmasq =
    let d =  prev.dnsmasq.overrideAttrs(o: {
          preBuild =  ''
              makeFlagsArray=("COPTS=")
          '';
        });
    in d.override {
      dbusSupport = false;
      nettle = null;
    };

  dropbear = prev.dropbear.overrideAttrs (o: {
    postPatch = ''
     (echo '#define DSS_PRIV_FILENAME "/run/dropbear/dropbear_dss_host_key"'
      echo '#define RSA_PRIV_FILENAME "/run/dropbear/dropbear_rsa_host_key"'
      echo '#define ECDSA_PRIV_FILENAME "/run/dropbear/dropbear_ecdsa_host_key"'
      echo '#define ED25519_PRIV_FILENAME "/run/dropbear/dropbear_ed25519_host_key"') > localoptions.h
    '';
  });

  hostapd =
    let
      config =  [
        "CONFIG_DRIVER_NL80211=y"
        "CONFIG_IAPP=y"
        "CONFIG_IEEE80211AC=y"
        "CONFIG_IEEE80211AX=y"
        "CONFIG_IEEE80211N=y"
        "CONFIG_IEEE80211W=y"
        "CONFIG_INTERNAL_LIBTOMMATH=y"
        "CONFIG_INTERNAL_LIBTOMMATH_FAST=y"
        "CONFIG_IPV6=y"
        "CONFIG_LIBNL32=y"
        "CONFIG_PKCS12=y"
        "CONFIG_RSN_PREAUTH=y"
        "CONFIG_UBUS=y"
        "CONFIG_TLS=internal"
      ];
      h = prev.hostapd.overrideAttrs(o: {
        buildInputs = o.buildInputs ++ [ final.libubox final.ubus ];
        src = final.fetchFromGitea {
           domain = "git.dgnum.eu";
           owner = "DGNum";
           repo = "hostapd";
           rev = "hostap-liminix-integration";
           hash = "sha256-5Xi90keCHxvuKR5Q7STuZDzuM9h9ac6aWoXVQYvqkQI=";
        };
        extraConfig = "";
        configurePhase = ''
          cat > hostapd/defconfig <<EOF
          ${builtins.concatStringsSep "\n" config}
          EOF
          ${o.configurePhase}
        '';
      });
    in h.override { openssl = null; sqlite = null; };

  hostapd-radius =
  let
    config =  [
      "CONFIG_DRIVER_NL80211=y"
      "CONFIG_DRIVER_WIRED=y"
      "CONFIG_EAP=y"
      "CONFIG_EAP_PEAP=y"
      "CONFIG_RADIUS_SERVER=y"
      "CONFIG_FULL_DYNAMIC_VLAN=y"
      "CONFIG_IAPP=y"
      "CONFIG_IEEE80211AC=y"
      "CONFIG_IEEE80211AX=y"
      "CONFIG_IEEE80211N=y"
      "CONFIG_IEEE80211W=y"
      "CONFIG_INTERNAL_LIBTOMMATH=y"
      "CONFIG_INTERNAL_LIBTOMMATH_FAST=y"
      "CONFIG_IPV6=y"
      "CONFIG_LIBNL32=y"
      "CONFIG_PKCS12=y"
      "CONFIG_RSN_PREAUTH=y"
      "CONFIG_UBUS=y"
      "CONFIG_TLS=internal"
    ];
    h = prev.hostapd.overrideAttrs(o: {
      buildInputs = o.buildInputs ++ [ final.libubox final.ubus ];
        src = final.fetchFromGitea {
           domain = "git.dgnum.eu";
           owner = "DGNum";
           repo = "hostapd";
           rev = "hostap-liminix-integration";
           hash = "sha256-5Xi90keCHxvuKR5Q7STuZDzuM9h9ac6aWoXVQYvqkQI=";
      };
      extraConfig = "";
      configurePhase = ''
        cat > hostapd/defconfig <<EOF
        ${builtins.concatStringsSep "\n" config}
        EOF
        ${o.configurePhase}
      '';
    });
  in h.override { openssl = null; sqlite = null; };

  wpa_supplicant = prev.wpa_supplicant.override {
    dbusSupport = false;
    withPcsclite = false;
    wpa_supplicant_gui = null;
  };

  kexec-tools-static = prev.kexec-tools.overrideAttrs(o: {
    # For kexecboot we copy kexec into a ramdisk on the system being
    # upgraded from. This is more likely to work if kexec is
    # statically linked so doesn't have dependencies on store paths that
    # may not exist on that machine. (We can't nix-copy-closure as
    # the store may not be on a writable filesystem)
    LDFLAGS = "-static";

    patches = o.patches ++ [
      (fetchpatch {
        # merge user command line options into DTB chosen
        url = "https://patch-diff.githubusercontent.com/raw/horms/kexec-tools/pull/3.patch";
        hash = "sha256-MvlJhuex9dlawwNZJ1sJ33YPWn1/q4uKotqkC/4d2tk=";
      })
      pkgs/kexec-map-file.patch
    ];
  });

  lua = crossOnly prev.lua5_3 (_: luaHost);

  mtdutils = prev.mtdutils.overrideAttrs(o: {
    patches = (if o ? patches then o.patches else []) ++ [
      ./pkgs/mtdutils/0001-mkfs.jffs2-add-graft-option.patch
    ];

    postInstall = ''
      # Testing programs which we don't need. We save a lot of space!
      rm -rf $out/libexec
    '';
  });

  nftables = prev.nftables.overrideAttrs(o: {
    configureFlags = [
      "--disable-debug"
      "--disable-python"
      "--with-mini-gmp"
      "--without-cli"
    ];
  });

  openssl = prev.openssl.overrideAttrs (o: {
    # we want to apply
    # https://patch-diff.githubusercontent.com/raw/openssl/openssl/pull/20273.patch";
    # which disables overriding the -march cflags to the wrong values,
    # but openssl is used for bootstrapping so that's easier said than
    # done. Do it the ugly way..
    postPatch =
      o.postPatch
      + (with final;
        lib.optionalString (stdenv.buildPlatform != stdenv.hostPlatform)
          "\nsed -i.bak 's/linux.*-mips/linux-mops/' Configure\n");
  });

  pppBuild = prev.ppp;

  qemuLim = let q = prev.qemu.overrideAttrs (o: {
    patches = o.patches ++ [
      ./pkgs/qemu/arm-image-friendly-load-addr.patch
    ];
  }); in q.override {
    vde2 = null;
    nixosTestRunner = true;
    sdlSupport = false;
    hostCpuTargets = [ "mips-softmmu" ];
  };

  rsyncSmall =
    let r = prev.rsync.overrideAttrs(o: {
          configureFlags = o.configureFlags ++ [
            "--disable-openssl"
          ];
        });
    in r.override { openssl = null; };


  inherit s6;
  s6-linux-init = prev.s6-linux-init.override {
    skawarePackages = prev.skawarePackages // {
      inherit s6;
    };
  };
  s6-rc = prev.s6-rc.override {
    skawarePackages = prev.skawarePackages // {
      inherit s6;
    };
  };

  strace = prev.strace.override { libunwind = null; };

  getent =
    prev.callPackage ({
      lib,
      stdenv,
      fetchFromGitHub,
    }:

    stdenv.mkDerivation rec {
      pname = "musl-utils";
      version = "1.1.12-r7";

      src = fetchFromGitHub {
        owner = "boltlinux";
        repo = "musl-utils";
        rev = version;
        hash = "sha256-q9CbOyK0Psw3YJnIT3yPRWuwr40nxLZt4RexuOHAUuw=";
      };

      nativeBuildInputs = [
        prev.autoconf
        prev.automake
      ];

      preConfigure = ''
        autoreconf -i
      '';

      buildPhase = ''
        make -C src getent
      '';

      installPhase = ''
        mkdir -p $out/bin/
        cp src/getent $out/bin/
      '';

      meta = {
        description = "Alpine Linux' getconf, getent and iconv implementations";
        homepage = "https://github.com/boltlinux/musl-utils";
        license = lib.licenses.free; # FIXME: nix-init did not find a license
        maintainers = with lib.maintainers; [ ];
        mainProgram = "musl-utils";
        platforms = lib.platforms.all;
      };
    }) { };

  writeShellScriptBin = name: text:
    final.writeTextFile {
      inherit name;
      executable = true;
      destination = "/bin/${name}";
      text = ''
        #!/bin/ash
        ${text}
      '';
      checkPhase = ''
        ${final.stdenv.shellDryRun} "$target"
      '';
      meta.mainProgram = name;
    };

  systemd =
    let base = prev.systemd.override {
      kbd = "";
      coreutils = "";
      bash = null;
      bashInteractive = "";

      withAcl = false;
      withAnalyze = false;
      withApparmor = false;
      withAudit = false;
      withBootloader = false;
      withCompression = false;
      withCoredump = false;
      withCryptsetup = false;
      withRepart = false;
      withDocumentation = false;
      withEfi = false;
      withFido2 = false;
      withHomed = false;
      withHostnamed = false;
      withHwdb = false;
      withImportd = false;
      withIptables = false;
      withKmod = false;
      withLibBPF = false;
      withLibidn2 = false;
      withLocaled = false;
      withLogind = false;
      withMachined = false;
      withNetworkd = false;
      withNss = false;
      withOomd = false;
      withPam = false;
      withPasswordQuality = false;
      withPCRE2 = false;
      withPolkit = false;
      withPortabled = false;
      withQrencode = false;
      withRemote = false;
      withResolved = false;
      withShellCompletions = false;
      withSysusers = false;
      withSysupdate = false;
      withTimedated = false;
      withTimesyncd = false;
      withTpm2Tss = false;
      withUkify = false;
      withUserDb = false;
      withUtmp = false;
      withVmspawn = false;
      withKernelInstall = false;
      withLibarchive = false;
    };
    in base.overrideAttrs (o: {
      mesonFlags = o.mesonFlags ++ [
      #  "--optimization=s"
        "--default-library=static"
        "--buildtype=minsize"
        # (final.lib.mesonBool "static-libsystemd" true)
        # (final.lib.mesonBool "standalone-binaries" true)

      #  (final.lib.mesonBool "link-udev-shared" false)
      #  (final.lib.mesonBool "link-executor-shared" false)
      #  (final.lib.mesonBool "link-systemctl-shared" false)
      #  (final.lib.mesonBool "link-networkd-shared" false)
      #  (final.lib.mesonBool "link-timesyncd-shared" false)
      #  (final.lib.mesonBool "link-journalctl-shared" false)
      #  (final.lib.mesonBool "link-boot-shared" false)
      #  (final.lib.mesonBool "link-portabled-shared" false)
      ];
      postInstall = o.postInstall + ''
        rm -rf $out/share
        rm $out/lib/libudev.so*
        rm -rf $out/lib/systemd/catalog
        rm -rf $out/lib/systemd/system-generators
        rm $out/lib/systemd/systemd-backlight
        rm $out/lib/systemd/systemd-battery-check
        rm $out/lib/systemd/systemd-hibernate-resume
        rm $out/lib/systemd/systemd-makefs
        rm $out/lib/systemd/systemd-nsresourced
        rm $out/lib/systemd/systemd-nsresourcework
        rm $out/lib/systemd/systemd-shutdown
        rm $out/lib/systemd/systemd-sleep
        rm $out/lib/systemd/systemd-binfmt
        rm $out/lib/systemd/systemd-growfs
        rm $out/lib/systemd/systemd-mountfsd
        rm $out/lib/systemd/systemd-mountwork
        rm $out/lib/systemd/systemd-network-generator
        rm $out/lib/systemd/systemd-pstore
        rm $out/lib/systemd/systemd-remount-fs
        rm $out/lib/systemd/systemd-reply-password
        rm $out/lib/systemd/systemd-rfkill
        rm $out/lib/systemd/systemd-socket-proxyd
        rm $out/lib/systemd/systemd-ssh-proxy
        rm $out/lib/systemd/systemd-storagetm
        rm $out/lib/systemd/systemd-volatile-root
        rm $out/lib/systemd/systemd-xdg-autostart-condition
        rm -rf $out/example
        rm $out/bin/bootctl
        rm $out/bin/systemd-nspawn
        rm $out/bin/systemd-ac-power
        rm $out/bin/systemd-dissect
        rm $out/bin/systemd-ask-password
        rm $out/bin/systemd-cgls
        rm $out/bin/systemd-cgtop
        rm $out/bin/systemd-creds
        rm $out/bin/systemd-delta
        rm $out/bin/systemd-detect-virt
        rm $out/bin/systemd-escape
        rm $out/bin/systemd-id128
        rm $out/bin/systemd-machine-id-setup
        rm $out/bin/systemd-path
        rm $out/bin/systemd-run
        rm $out/bin/systemd-socket-activate
        rm $out/bin/systemd-stdio-bridge
        rm $out/bin/systemd-sysext
        rm $out/bin/systemd-tty-ask-password-agent
        rm $out/bin/systemd-vpick

        # rm $out/lib/libsystemd.a
        # rm $out/lib/systemd/libsystemd-shared-256.so
      '';
    });

  ubootQemuAarch64 = final.buildUBoot {
    defconfig = "qemu_arm64_defconfig";
    extraMeta.platforms = ["aarch64-linux"];
    filesToInstall = ["u-boot.bin"];
  };

  ubootQemuArm = final.buildUBoot {
    defconfig = "qemu_arm_defconfig";
    extraMeta.platforms = ["armv7l-linux"];
    filesToInstall = ["u-boot.bin"];
    extraConfig = ''
      CONFIG_CMD_UBI=y
      CONFIG_CMD_UBIFS=y
      CONFIG_BOOTSTD=y
      CONFIG_BOOTMETH_DISTRO=y
      CONFIG_LZMA=y
      CONFIG_CMD_LZMADEC=y
      CONFIG_SYS_BOOTM_LEN=0x1000000
    '';
  };

  ubootQemuMips = final.buildUBoot {
    defconfig = "malta_defconfig";
    extraMeta.platforms = ["mips-linux"];
    filesToInstall = ["u-boot.bin"];
    # define the prompt to be the same as arm{32,64} so
    # we can use the same expect script for both
    extraPatches = [ ./pkgs/u-boot/0002-virtio-init-for-malta.patch ];
    extraConfig = ''
      CONFIG_SYS_PROMPT="=> "
      CONFIG_VIRTIO=y
      CONFIG_AUTOBOOT=y
      CONFIG_DM_PCI=y
      CONFIG_VIRTIO_PCI=y
      CONFIG_VIRTIO_NET=y
      CONFIG_VIRTIO_BLK=y
      CONFIG_VIRTIO_MMIO=y
      CONFIG_QFW_MMIO=y
      CONFIG_FIT=y
      CONFIG_LZMA=y
      CONFIG_CMD_LZMADEC=y
      CONFIG_SYS_BOOTM_LEN=0x1000000
      CONFIG_SYS_MALLOC_LEN=0x400000
      CONFIG_MIPS_BOOT_FDT=y
      CONFIG_OF_LIBFDT=y
      CONFIG_OF_STDOUT_VIA_ALIAS=y
   '';
  };

  libusb1 = prev.libusb1.override { enableUdev = false; };

  util-linux-small = prev.util-linux.override {
    ncursesSupport = false;
    pamSupport = false;
    systemdSupport = false;
    nlsSupport = false;
    translateManpages = false;
    capabilitiesSupport = false;
  };

}