c397aaceef
Newer versions broke compatibility with who knows whatever part of the stack is required for correct TVM + OpenVPN interaction, but I need this to work. This was previously picked from stable, but we've bumped stable and it has advanced to a version where this is also broken. I believe this is a known issue, but right now I don't have the time to look into it. Change-Id: I1060f3ecfd7b43ebe5e1860f59f7574ca094570a Reviewed-on: https://cl.tvl.fyi/c/depot/+/10743 Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
105 lines
2.3 KiB
Nix
105 lines
2.3 KiB
Nix
{ stdenv
|
|
, lib
|
|
, fetchFromGitHub
|
|
, substituteAll
|
|
, pkg-config
|
|
, autoreconfHook
|
|
, autoconf-archive
|
|
, makeWrapper
|
|
, patchelf
|
|
, tpm2-tss
|
|
, tpm2-tools
|
|
, opensc
|
|
, openssl
|
|
, sqlite
|
|
, python3
|
|
, glibc
|
|
, libyaml
|
|
, abrmdSupport ? true
|
|
, tpm2-abrmd ? null
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "tpm2-pkcs11";
|
|
version = "1.8.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "tpm2-software";
|
|
repo = pname;
|
|
rev = version;
|
|
sha256 = "sha256-f5wi0nIM071yaQCwPkY1agKc7OEQa/IxHJc4V2i0Q9I=";
|
|
};
|
|
|
|
patches = lib.singleton (
|
|
substituteAll {
|
|
src = ./0001-configure-ac-version.patch;
|
|
VERSION = version;
|
|
});
|
|
|
|
# The preConfigure phase doesn't seem to be working here
|
|
# ./bootstrap MUST be executed as the first step, before all
|
|
# of the autoreconfHook stuff
|
|
postPatch = ''
|
|
./bootstrap
|
|
'';
|
|
|
|
nativeBuildInputs = [
|
|
pkg-config
|
|
autoreconfHook
|
|
autoconf-archive
|
|
makeWrapper
|
|
patchelf
|
|
];
|
|
buildInputs = [
|
|
tpm2-tss
|
|
tpm2-tools
|
|
opensc
|
|
openssl
|
|
sqlite
|
|
libyaml
|
|
(python3.withPackages (ps: with ps; [ packaging pyyaml cryptography pyasn1-modules tpm2-pytss ]))
|
|
];
|
|
|
|
outputs = [ "out" "bin" "dev" ];
|
|
|
|
dontStrip = true;
|
|
dontPatchELF = true;
|
|
|
|
# To be able to use the userspace resource manager, the RUNPATH must
|
|
# explicitly include the tpm2-abrmd shared libraries.
|
|
preFixup =
|
|
let
|
|
rpath = lib.makeLibraryPath (
|
|
(lib.optional abrmdSupport tpm2-abrmd)
|
|
++ [
|
|
tpm2-tss
|
|
sqlite
|
|
openssl
|
|
glibc
|
|
libyaml
|
|
]
|
|
);
|
|
in
|
|
''
|
|
patchelf \
|
|
--set-rpath ${rpath} \
|
|
${lib.optionalString abrmdSupport "--add-needed ${lib.makeLibraryPath [tpm2-abrmd]}/libtss2-tcti-tabrmd.so"} \
|
|
--add-needed ${lib.makeLibraryPath [tpm2-tss]}/libtss2-tcti-device.so \
|
|
$out/lib/libtpm2_pkcs11.so.0.0.0
|
|
'';
|
|
|
|
postInstall = ''
|
|
mkdir -p $bin/bin/ $bin/share/tpm2_pkcs11/
|
|
mv ./tools/* $bin/share/tpm2_pkcs11/
|
|
makeWrapper $bin/share/tpm2_pkcs11/tpm2_ptool.py $bin/bin/tpm2_ptool \
|
|
--prefix PATH : ${lib.makeBinPath [ tpm2-tools ]}
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "A PKCS#11 interface for TPM2 hardware";
|
|
homepage = "https://github.com/tpm2-software/tpm2-pkcs11";
|
|
license = licenses.bsd2;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ matthiasbeyer ];
|
|
};
|
|
}
|