51 lines
1.5 KiB
Nix
51 lines
1.5 KiB
Nix
|
{ stdenv, lib, curl, jshon, python, runCommand }:
|
||
|
|
|
||
|
|
# Inspired and simplified version of fetchurl.
|
||
|
|
# For simplicity we only support sha256.
|
||
|
|
|
||
|
|
# Currently only registry v1 is supported, compatible with Docker Hub.
|
||
|
|
|
||
|
|
{ imageName, imageTag ? "latest", imageId ? null
|
||
|
|
, sha256, name ? "${imageName}-${imageTag}"
|
||
|
|
, indexUrl ? "https://index.docker.io"
|
||
|
|
, registryUrl ? "https://registry-1.docker.io"
|
||
|
|
, registryVersion ? "v1"
|
||
|
|
, curlOpts ? "" }:
|
||
|
|
|
||
|
|
let layer = stdenv.mkDerivation {
|
||
|
|
inherit name imageName imageTag imageId
|
||
|
|
indexUrl registryUrl registryVersion curlOpts;
|
||
|
|
|
||
|
|
builder = ./pull.sh;
|
||
|
|
detjson = ./detjson.py;
|
||
|
|
|
||
|
|
buildInputs = [ curl jshon python ];
|
||
|
|
|
||
|
|
outputHashAlgo = "sha256";
|
||
|
|
outputHash = sha256;
|
||
|
|
outputHashMode = "recursive";
|
||
|
|
|
||
|
|
impureEnvVars = [
|
||
|
|
# We borrow these environment variables from the caller to allow
|
||
|
|
# easy proxy configuration. This is impure, but a fixed-output
|
||
|
|
# derivation like fetchurl is allowed to do so since its result is
|
||
|
|
# by definition pure.
|
||
|
|
"http_proxy" "https_proxy" "ftp_proxy" "all_proxy" "no_proxy"
|
||
|
|
|
||
|
|
# This variable allows the user to pass additional options to curl
|
||
|
|
"NIX_CURL_FLAGS"
|
||
|
|
|
||
|
|
# This variable allows overriding the timeout for connecting to
|
||
|
|
# the hashed mirrors.
|
||
|
|
"NIX_CONNECT_TIMEOUT"
|
||
|
|
];
|
||
|
|
|
||
|
|
# Doing the download on a remote machine just duplicates network
|
||
|
|
# traffic, so don't do that.
|
||
|
|
preferLocalBuild = true;
|
||
|
|
};
|
||
|
|
|
||
|
|
in runCommand "${name}.tar.gz" {} ''
|
||
|
|
tar -C ${layer} -czf $out .
|
||
|
|
''
|