ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
78 lines
2.2 KiB
Nix
78 lines
2.2 KiB
Nix
{ lib
|
|
, buildGoModule
|
|
, fetchFromGitHub
|
|
, installShellFiles
|
|
}:
|
|
|
|
buildGoModule rec {
|
|
pname = "apko";
|
|
version = "0.10.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "chainguard-dev";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
hash = "sha256-Dyu/cPoYI8dm/p/91oL5g8ilz9ksw4i0opsPT6rGztc=";
|
|
# populate values that require us to use git. By doing this in postFetch we
|
|
# can delete .git afterwards and maintain better reproducibility of the src.
|
|
leaveDotGit = true;
|
|
postFetch = ''
|
|
cd "$out"
|
|
git rev-parse HEAD > $out/COMMIT
|
|
# '0000-00-00T00:00:00Z'
|
|
date -u -d "@$(git log -1 --pretty=%ct)" "+'%Y-%m-%dT%H:%M:%SZ'" > $out/SOURCE_DATE_EPOCH
|
|
find "$out" -name .git -print0 | xargs -0 rm -rf
|
|
'';
|
|
};
|
|
vendorHash = "sha256-Jsp4rGIltszpQe05S3W+UFzPxhb6N5lCzUaZWBkXNWY=";
|
|
|
|
nativeBuildInputs = [ installShellFiles ];
|
|
|
|
ldflags = [
|
|
"-s"
|
|
"-w"
|
|
"-X sigs.k8s.io/release-utils/version.gitVersion=v${version}"
|
|
"-X sigs.k8s.io/release-utils/version.gitTreeState=clean"
|
|
];
|
|
|
|
# ldflags based on metadata from git and source
|
|
preBuild = ''
|
|
ldflags+=" -X sigs.k8s.io/release-utils/version.gitCommit=$(cat COMMIT)"
|
|
ldflags+=" -X sigs.k8s.io/release-utils/version.buildDate=$(cat SOURCE_DATE_EPOCH)"
|
|
'';
|
|
|
|
checkFlags = [
|
|
# networking required to fetch alpine-keys
|
|
# pulled out into a separate library next release
|
|
"-skip=TestInitDB"
|
|
# fails to build image on read-only filesystem
|
|
"-skip=TestPublish"
|
|
];
|
|
|
|
postInstall = ''
|
|
installShellCompletion --cmd apko \
|
|
--bash <($out/bin/apko completion bash) \
|
|
--fish <($out/bin/apko completion fish) \
|
|
--zsh <($out/bin/apko completion zsh)
|
|
'';
|
|
|
|
doInstallCheck = true;
|
|
installCheckPhase = ''
|
|
runHook preInstallCheck
|
|
|
|
$out/bin/apko --help
|
|
$out/bin/apko version 2>&1 | grep "v${version}"
|
|
|
|
runHook postInstallCheck
|
|
'';
|
|
|
|
meta = with lib; {
|
|
homepage = "https://apko.dev/";
|
|
changelog = "https://github.com/chainguard-dev/apko/blob/main/NEWS.md";
|
|
description = "Build OCI images using APK directly without Dockerfile";
|
|
mainProgram = "apko";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ jk developer-guy ];
|
|
};
|
|
}
|