nixpkgs/pkgs/tools/security/chipsec/default.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

74 lines
1.9 KiB
Nix
Raw Normal View History

2021-03-28 23:57:16 +02:00
{ lib
, stdenv
, fetchFromGitHub
, kernel ? null
, libelf
, nasm
, python3
, withDriver ? false
}:
python3.pkgs.buildPythonApplication rec {
2020-03-29 12:34:50 +02:00
pname = "chipsec";
2022-02-10 08:24:36 +01:00
version = "1.8.1";
2022-01-18 12:37:52 +01:00
2021-03-28 23:57:16 +02:00
disabled = !stdenv.isLinux;
2018-12-27 20:28:59 +01:00
src = fetchFromGitHub {
owner = "chipsec";
repo = "chipsec";
rev = version;
2022-02-10 08:24:36 +01:00
hash = "sha256-bK8wlwhP0pi8rOs8ysbSZ+0aZOaX4mckfH/p4OLGnes=";
2018-12-27 20:28:59 +01:00
};
patches = lib.optionals withDriver [ ./ko-path.diff ./compile-ko.diff ];
KSRC = lib.optionalString withDriver "${kernel.dev}/lib/modules/${kernel.modDirVersion}/build";
2020-06-17 06:20:00 +02:00
2019-03-24 13:44:59 +01:00
nativeBuildInputs = [
2021-03-28 23:57:16 +02:00
libelf
nasm
2018-12-27 20:28:59 +01:00
];
2022-01-18 12:37:52 +01:00
checkInputs = with python3.pkgs; [
distro
pytestCheckHook
2021-03-28 23:57:16 +02:00
];
2018-12-27 20:28:59 +01:00
preBuild = lib.optionalString withDriver ''
export CHIPSEC_BUILD_LIB=$(mktemp -d)
mkdir -p $CHIPSEC_BUILD_LIB/chipsec/helper/linux
'';
preInstall = lib.optionalString withDriver ''
mkdir -p $out/${python3.pkgs.python.sitePackages}/drivers/linux
mv $CHIPSEC_BUILD_LIB/chipsec/helper/linux/chipsec.ko \
$out/${python3.pkgs.python.sitePackages}/drivers/linux/chipsec.ko
'';
2022-01-18 12:37:52 +01:00
setupPyBuildFlags = [
"--build-lib=$CHIPSEC_BUILD_LIB"
] ++ lib.optional (!withDriver) [
"--skip-driver"
];
2018-12-27 20:28:59 +01:00
2022-01-18 12:37:52 +01:00
pythonImportsCheck = [
"chipsec"
];
2018-12-27 20:28:59 +01:00
meta = with lib; {
2018-12-27 20:28:59 +01:00
description = "Platform Security Assessment Framework";
longDescription = ''
CHIPSEC is a framework for analyzing the security of PC platforms
including hardware, system firmware (BIOS/UEFI), and platform components.
It includes a security test suite, tools for accessing various low level
interfaces, and forensic capabilities. It can be run on Windows, Linux,
Mac OS X and UEFI shell.
'';
2021-03-28 23:57:16 +02:00
license = licenses.gpl2Only;
homepage = "https://github.com/chipsec/chipsec";
2018-12-27 20:28:59 +01:00
maintainers = with maintainers; [ johnazoidberg ];
platforms = if withDriver then [ "x86_64-linux" ] else platforms.all;
2018-12-27 20:28:59 +01:00
};
}