1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
|
{
lib,
fetchFromGitLab,
libseccomp,
mandoc,
nix-update-script,
pkg-config,
rustPlatform,
scdoc,
testers,
}:
rustPlatform.buildRustPackage (finalAttrs: {
pname = "sydbox";
version = "3.32.6";
outputs = [
"out"
"man"
];
src = fetchFromGitLab {
domain = "gitlab.exherbo.org";
owner = "Sydbox";
repo = "sydbox";
tag = "v${finalAttrs.version}";
hash = "sha256-7tU1H8Du2O4Ay+isZwSUcx+Ws9gr0Djq5uQeRPCuQEo=";
};
useFetchCargoVendor = true;
cargoHash = "sha256-SukVs5VG7NEkwF78iliD0SZZgdT0Kz/yQV3LTBo2Nn0=";
nativeBuildInputs = [
mandoc
pkg-config
scdoc
];
buildInputs = [ libseccomp ];
makeFlags = [ "PREFIX=${placeholder "out"}" ];
checkFlags = [
# rm -rf tmpdir: Os { code: 2, kind: NotFound, message: "No such file or directory" }
"--skip=fs::tests::test_relative_symlink_resolution"
# Failed to write C source file!: Os { code: 13, kind: PermissionDenied, message: "Permission denied" }
"--skip=proc::tests::test_proc_set_at_secure_test_32bit_dynamic"
# Flakey. May only fail on OfBorg/Hydra
# Failed to write C source file!: Os { code: 13, kind: PermissionDenied, message: "Permission denied" }
"proc::tests::test_proc_set_at_secure_test_32bit_static"
# Failed to write C source file!: Os { code: 13, kind: PermissionDenied, message: "Permission denied" }
"--skip=proc::tests::test_proc_set_at_secure_test_32bit_static_pie"
# /bin/false: Os { code: 2, kind: NotFound, message: "No such file or directory" }
"--skip=syd_test"
# Endlessly stall or use "invalid arguments". Maybe a sandbox issue?
"--skip=caps"
"--skip=landlock"
"--skip=proc::proc_cmdline"
"--skip=proc::proc_comm"
];
# TODO: Have these directories be created upstream similar to the vim files
postInstall = ''
mkdir -p $out/share/man/man{1,2,5,7}
make $makeFlags install-{man,vim}
'';
passthru = {
tests.version = testers.testVersion {
package = finalAttrs.finalPackage;
command = "syd -V";
};
updateScript = nix-update-script { };
};
meta = {
description = "seccomp-based application sandbox";
homepage = "https://gitlab.exherbo.org/sydbox/sydbox";
changelog = "https://gitlab.exherbo.org/sydbox/sydbox/-/blob/${finalAttrs.src.tag}/ChangeLog.md";
license = lib.licenses.gpl3Plus;
maintainers = with lib.maintainers; [
mvs
getchoo
];
mainProgram = "syd";
platforms = lib.platforms.linux;
};
})
|
