tvl-depot/tools/hash-password.nix

# Utility for invoking slappasswd with the correct options for
# creating an ARGON2 password hash.
#
# Users should generally use https://signup.tvl.fyi instead.
{ pkgs, ... }:

let
  script = pkgs.writeShellScriptBin "hash-password" ''
    ${pkgs.openldap}/bin/slappasswd -o module-load=argon2 -h '{ARGON2}' "$@"
  '';
in
script.overrideAttrs (old: {
  doCheck = true;
  checkPhase = ''
    ${pkgs.stdenv.shell} $out/bin/hash-password -s example-password > /dev/null
  '';
})
feat(tools/hash-password): Add a wrapper script for slappasswd This wrapper script correctly invokes slappasswd for generating ARGON2 hashes. People without Nix will need to figure this out on their own. Change-Id: I264715ba4932855b868bef70cc9102515b3d129e Reviewed-on: https://cl.tvl.fyi/c/depot/+/833 Tested-by: BuildkiteCI Reviewed-by: BuildkiteCI Reviewed-by: Kane York <rikingcoding@gmail.com> 2020-07-01 22:29:35 +02:00			`# Utility for invoking slappasswd with the correct options for`
			`# creating an ARGON2 password hash.`
docs(REVIEWS): point people to signup.tvl.fyi for account creation Rather than invoking the old shell script, people can now use the web UI to create the entry. Change-Id: Ic1b065d219fde9977bb1d8ee59ce7ac5f27e2e29 Reviewed-on: https://cl.tvl.fyi/c/depot/+/9306 Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI Reviewed-by: flokli <flokli@flokli.de> 2023-09-12 15:49:07 +02:00			`#`
			`# Users should generally use https://signup.tvl.fyi instead.`
chore(nixpkgs): Bump channels to 2021-05-25 * users/grfn/system/home/yeren: remove obsolete awscli2 overrides * ops: make new isSystemUser \|\| isNormalUser assertion happy * users/grfn/system/system/mugwump: make buildkite agents system users * users/tazjin/nixos/camden: set isSystemUser = true for git * users/tazjin/emacs: Remove missing & broken packages * third_party/openldap: remove, as the argon2 module is now enabled upstream * third_party/gerrit_plugins: Pinned new unstable hashes * third_party/nix, third_party/grpc: Disabled CI as these are broken * third_party/overlays/emacs: Bumped version to stay in sync with channel * third_party/buzz: Update LIBCLANG_PATH to reference libclang.lib, since libclang's default output no longer contains libclang.so * users/grfn/system/home: Install julia-stable instead of julia (which aliases to julia-lts), as the latter depends on an insecure version of libgit Change-Id: Iff33b0ecb0ef07a82d1de35e23c40d2f4bf0f8ed Reviewed-on: https://cl.tvl.fyi/c/depot/+/3001 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: grfn <grfn@gws.fyi> 2021-04-13 12:21:42 +02:00			`{ pkgs, ... }:`
feat(tools/hash-password): Add a wrapper script for slappasswd This wrapper script correctly invokes slappasswd for generating ARGON2 hashes. People without Nix will need to figure this out on their own. Change-Id: I264715ba4932855b868bef70cc9102515b3d129e Reviewed-on: https://cl.tvl.fyi/c/depot/+/833 Tested-by: BuildkiteCI Reviewed-by: BuildkiteCI Reviewed-by: Kane York <rikingcoding@gmail.com> 2020-07-01 22:29:35 +02:00
test(tools/hash-password): ensure that script can execute correctly This tests loading of the argon2 OpenLDAP module. Relates to b/184 Change-Id: I661af4ddc238ad02d082b3a0cede55af5ef13f1b Reviewed-on: https://cl.tvl.fyi/c/depot/+/5750 Tested-by: BuildkiteCI Autosubmit: tazjin <tazjin@tvl.su> Reviewed-by: sterni <sternenseemann@systemli.org> 2022-05-28 00:58:05 +02:00			`let`
			`script = pkgs.writeShellScriptBin "hash-password" ''`
			`${pkgs.openldap}/bin/slappasswd -o module-load=argon2 -h '{ARGON2}' "$@"`
			`'';`
			`in`
			`script.overrideAttrs (old: {`
			`doCheck = true;`
			`checkPhase = ''`
			`${pkgs.stdenv.shell} $out/bin/hash-password -s example-password > /dev/null`
			`'';`
			`})`