nixpkgs/pkgs/tools/networking/boundary/default.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

69 lines
2.2 KiB
Nix
Raw Normal View History

2021-02-01 13:13:31 +00:00
{ stdenv, lib, fetchzip }:
stdenv.mkDerivation rec {
pname = "boundary";
2022-06-21 01:06:40 +00:00
version = "0.9.0";
2021-02-01 13:13:31 +00:00
src =
let
inherit (stdenv.hostPlatform) system;
selectSystem = attrs: attrs.${system} or (throw "Unsupported system: ${system}");
suffix = selectSystem {
x86_64-linux = "linux_amd64";
aarch64-linux = "linux_arm64";
x86_64-darwin = "darwin_amd64";
2022-02-24 21:55:23 +00:00
aarch64-darwin = "darwin_arm64";
};
sha256 = selectSystem {
2022-06-21 01:06:40 +00:00
x86_64-linux = "sha256-+Ewk+tLLwp8xszDS3RadeAOpS261wSG5NC8Gk2OwHiY=";
aarch64-linux = "sha256-knEI3a4xL+kAllNColEXBCKhnWoM3Fcso3cwFGaA1fQ=";
x86_64-darwin = "sha256-jPdW3ovcb5yhQHJGUEBB2hou2og4tMIGtr5V+W6vNlc=";
aarch64-darwin = "sha256-8Fx6lQUHna5J8M67wSzpRmAGZlZbQdpMxgSa6/07g/Y=";
};
in
fetchzip {
url = "https://releases.hashicorp.com/boundary/${version}/boundary_${version}_${suffix}.zip";
inherit sha256;
};
2021-02-01 13:13:31 +00:00
dontConfigure = true;
dontBuild = true;
installPhase = ''
runHook preInstall
2021-02-01 13:13:31 +00:00
install -D boundary $out/bin/boundary
runHook postInstall
2021-02-01 13:13:31 +00:00
'';
doInstallCheck = true;
installCheckPhase = ''
runHook preInstallCheck
$out/bin/boundary --help
$out/bin/boundary version
runHook postInstallCheck
'';
2021-02-01 13:13:31 +00:00
dontPatchELF = true;
dontPatchShebangs = true;
2021-02-02 14:13:25 +00:00
passthru.updateScript = ./update.sh;
2021-02-01 13:13:31 +00:00
meta = with lib; {
homepage = "https://boundaryproject.io/";
changelog = "https://github.com/hashicorp/boundary/blob/v${version}/CHANGELOG.md";
description = "Enables identity-based access management for dynamic infrastructure";
longDescription = ''
Boundary provides a secure way to access hosts and critical systems
without having to manage credentials or expose your network, and is
entirely open source.
Boundary is designed to be straightforward to understand, highly scalable,
and resilient. It can run in clouds, on-prem, secure enclaves and more,
and does not require an agent to be installed on every end host.
'';
sourceProvenance = with sourceTypes; [ binaryNativeCode ];
2021-02-01 13:13:31 +00:00
license = licenses.mpl20;
2022-02-24 21:55:23 +00:00
maintainers = with maintainers; [ jk techknowlogick ];
2021-02-01 13:13:31 +00:00
};
}