mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-09-19 15:56:03 +00:00
e895aa5495
Cryptsetup and libvirt are new. OpenSSL was moved with the rest. The dynamic libaries cryptsetup and libvirt also ship a file called closure.tar, that contains the transitive closure for all of their dependencies. This tar file can be used as a container image layer or added to a bootable OS image to provide the runtime dependencies required for dynamic linking. Additionally, they ship a `rpath` file. This can be used together with patchelf to fix the RPATH of binaries produced by Bazel.
19 lines
686 B
Nix
19 lines
686 B
Nix
{ pkgs, pkgsLinux, buildEnv, closureInfo }:
|
|
let
|
|
lib = pkgs.lib;
|
|
cc = pkgsLinux.stdenv.cc;
|
|
packages = [ pkgsLinux.cryptsetup.out pkgsLinux.cryptsetup.dev ];
|
|
closure = builtins.toString (lib.strings.splitString "\n" (builtins.readFile "${closureInfo {rootPaths = packages;}}/store-paths"));
|
|
rpath = pkgs.lib.makeLibraryPath [ pkgsLinux.cryptsetup pkgsLinux.glibc pkgsLinux.libgcc.lib ];
|
|
in
|
|
pkgs.symlinkJoin {
|
|
name = "cryptsetup";
|
|
paths = packages;
|
|
buildInputs = packages;
|
|
postBuild = ''
|
|
tar -cf $out/closure.tar --mtime="@$SOURCE_DATE_EPOCH" --sort=name ${closure}
|
|
echo "${rpath}" > $out/rpath
|
|
cp ${cc}/nix-support/dynamic-linker $out/dynamic-linker
|
|
'';
|
|
}
|