2016-09-13 06:01:27 +02:00
|
|
|
{ stdenv, fetchurl, lib, iasl, dev86, pam, libxslt, libxml2, libX11, xproto, libXext
|
2016-09-13 03:42:16 +02:00
|
|
|
, libXcursor, libXmu, qt5, libIDL, SDL, libcap, zlib, libpng, glib, lvm2
|
2016-09-10 11:40:06 +02:00
|
|
|
, libXrandr, libXinerama
|
2015-09-15 06:32:57 +02:00
|
|
|
, which, alsaLib, curl, libvpx, gawk, nettools, dbus
|
2016-09-13 03:42:16 +02:00
|
|
|
, xorriso, makeself, perl, pkgconfig
|
2012-03-20 14:54:01 +01:00
|
|
|
, javaBindings ? false, jdk ? null
|
2016-10-22 17:02:59 +02:00
|
|
|
, pythonBindings ? false, python2 ? null
|
virtualbox: Fix extension pack installation.
With hardening, we need to go a bit further rather than just allowing
/nix/store being world-writable. We now use fakeroot to make sure the
VBoxExtPackHelperApp won't moan that the files are not owned by root.
They are, but only outside of the chrooted build process.
Another issue with using fakeroot is that it doesn't seem to cope well
with arguments that contain spaces. That's why I've piped the call into
${stdenv.shell}.
Now, the really gory and confusing part is the introduction of
VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE.
The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by
the hardened implementation against whether things like VMMR0.r0 or
VBoxVMM.so reside in that directory. As a side note: I admit that the
whole libexec directory is quite polluted with stuff that shouldn't be
there, but for now we've broken enough things and will tear apart the
whole structure at some day in the future[TM].
For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which
_should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately,
the hardened implementation is checking against this directory (in
IsValidBaseDir) for the extension pack(why!?).
Of course, we could put even that into the libexec directory, somewhat
similar as the official package, but after all, let's at least *try* to
separate things.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-01 03:13:51 +01:00
|
|
|
, enableExtensionPack ? false, requireFile ? null, patchelf ? null, fakeroot ? null
|
2015-05-27 21:42:15 +02:00
|
|
|
, pulseSupport ? false, libpulseaudio ? null
|
2014-12-15 07:13:02 +01:00
|
|
|
, enableHardening ? false
|
2016-09-01 20:54:58 +02:00
|
|
|
, headless ? false
|
2016-09-20 13:57:57 +02:00
|
|
|
, patchelfUnstable # needed until 0.10 is released
|
2009-04-16 15:44:06 +02:00
|
|
|
}:
|
2009-04-12 23:59:40 +02:00
|
|
|
|
2012-03-20 14:54:01 +01:00
|
|
|
with stdenv.lib;
|
|
|
|
|
2012-08-18 16:47:13 +02:00
|
|
|
let
|
2016-10-22 17:02:59 +02:00
|
|
|
python = python2;
|
2014-12-18 11:34:57 +01:00
|
|
|
buildType = "release";
|
2012-08-22 22:48:03 +02:00
|
|
|
|
2017-03-20 16:04:37 +01:00
|
|
|
extpack = "996f783996a597d3936fc5f1ccf56edd31ae1f8fb4d527009647d9a2c8c853cd";
|
|
|
|
extpackRev = "114002";
|
|
|
|
main = "7ed0959bbbd02826b86b3d5dc8348931ddfab267c31f8ed36ee53c12f5522cd9";
|
|
|
|
version = "5.1.18";
|
2012-08-22 22:48:03 +02:00
|
|
|
|
2013-06-24 20:35:00 +02:00
|
|
|
# See https://github.com/NixOS/nixpkgs/issues/672 for details
|
|
|
|
extensionPack = requireFile rec {
|
2017-01-30 11:18:56 +01:00
|
|
|
name = "Oracle_VM_VirtualBox_Extension_Pack-${version}-${toString extpackRev}.vbox-extpack";
|
2016-09-13 03:48:14 +02:00
|
|
|
sha256 = extpack;
|
2013-06-24 20:35:00 +02:00
|
|
|
message = ''
|
|
|
|
In order to use the extension pack, you need to comply with the VirtualBox Personal Use
|
2016-06-01 11:01:04 +02:00
|
|
|
and Evaluation License (PUEL) available at:
|
2013-06-24 20:35:00 +02:00
|
|
|
|
2016-06-01 11:01:04 +02:00
|
|
|
https://www.virtualbox.org/wiki/VirtualBox_PUEL
|
2013-06-24 20:35:00 +02:00
|
|
|
|
2016-06-01 11:01:04 +02:00
|
|
|
Once you have read and if you agree with the license, please use the
|
|
|
|
following command and re-run the installation:
|
2013-06-24 20:35:00 +02:00
|
|
|
|
2016-06-01 11:01:04 +02:00
|
|
|
nix-prefetch-url http://download.virtualbox.org/virtualbox/${version}/${name}
|
2013-06-24 20:35:00 +02:00
|
|
|
'';
|
2012-12-12 07:12:46 +01:00
|
|
|
};
|
|
|
|
|
2012-08-18 16:47:13 +02:00
|
|
|
in stdenv.mkDerivation {
|
2016-09-13 03:42:16 +02:00
|
|
|
name = "virtualbox-${version}";
|
2009-04-12 23:59:40 +02:00
|
|
|
|
|
|
|
src = fetchurl {
|
2011-04-18 21:24:10 +02:00
|
|
|
url = "http://download.virtualbox.org/virtualbox/${version}/VirtualBox-${version}.tar.bz2";
|
2016-09-13 03:48:14 +02:00
|
|
|
sha256 = main;
|
2009-04-12 23:59:40 +02:00
|
|
|
};
|
|
|
|
|
2016-09-13 03:42:16 +02:00
|
|
|
outputs = [ "out" "modsrc" ];
|
|
|
|
|
2012-02-23 23:04:54 +01:00
|
|
|
buildInputs =
|
2016-09-01 20:54:58 +02:00
|
|
|
[ iasl dev86 libxslt libxml2 xproto libX11 libXext libXcursor libIDL
|
2016-10-22 17:02:59 +02:00
|
|
|
libcap glib lvm2 alsaLib curl libvpx pam xorriso makeself perl
|
2016-11-14 19:09:25 +01:00
|
|
|
pkgconfig which libXmu libpng patchelfUnstable python ]
|
2012-03-20 14:54:01 +01:00
|
|
|
++ optional javaBindings jdk
|
2016-11-14 19:09:25 +01:00
|
|
|
++ optional pythonBindings python # Python is needed even when not building bindings
|
2016-09-01 20:54:58 +02:00
|
|
|
++ optional pulseSupport libpulseaudio
|
2016-09-10 11:40:06 +02:00
|
|
|
++ optionals (headless) [ libXrandr ]
|
2017-03-27 23:28:26 +02:00
|
|
|
++ optionals (!headless) [ qt5.qtbase qt5.qtx11extras qt5.makeQtWrapper libXinerama SDL ];
|
2009-04-12 23:59:40 +02:00
|
|
|
|
2016-03-06 16:45:44 +01:00
|
|
|
hardeningDisable = [ "fortify" "pic" "stackprotector" ];
|
|
|
|
|
2013-01-10 02:21:02 +01:00
|
|
|
prePatch = ''
|
2009-04-12 23:59:40 +02:00
|
|
|
set -x
|
2016-09-13 03:42:16 +02:00
|
|
|
sed -e 's@MKISOFS --version@MKISOFS -version@' \
|
2012-03-20 14:54:01 +01:00
|
|
|
-e 's@PYTHONDIR=.*@PYTHONDIR=${if pythonBindings then python else ""}@' \
|
2017-02-28 04:35:52 +01:00
|
|
|
-e 's@CXX_FLAGS="\(.*\)"@CXX_FLAGS="-std=c++11 \1"@' \
|
2016-09-13 06:01:27 +02:00
|
|
|
${optionalString (!headless) ''
|
|
|
|
-e 's@TOOLQT5BIN=.*@TOOLQT5BIN="${getDev qt5.qtbase}/bin"@' \
|
|
|
|
''} -i configure
|
2015-04-26 19:54:51 +02:00
|
|
|
ls kBuild/bin/linux.x86/k* tools/linux.x86/bin/* | xargs -n 1 patchelf --set-interpreter ${stdenv.glibc.out}/lib/ld-linux.so.2
|
|
|
|
ls kBuild/bin/linux.amd64/k* tools/linux.amd64/bin/* | xargs -n 1 patchelf --set-interpreter ${stdenv.glibc.out}/lib/ld-linux-x86-64.so.2
|
2017-03-24 03:49:12 +01:00
|
|
|
|
|
|
|
grep 'libpulse\.so\.0' src include -rI --files-with-match | xargs sed -i -e '
|
|
|
|
${optionalString pulseSupport
|
|
|
|
''s@"libpulse\.so\.0"@"${libpulseaudio.out}/lib/libpulse.so.0"@g''}'
|
|
|
|
|
|
|
|
grep 'libdbus-1\.so\.3' src include -rI --files-with-match | xargs sed -i -e '
|
|
|
|
s@"libdbus-1\.so\.3"@"${dbus.lib}/lib/libdbus-1.so.3"@g'
|
|
|
|
|
|
|
|
grep 'libasound\.so\.2' src include -rI --files-with-match | xargs sed -i -e '
|
|
|
|
s@"libasound\.so\.2"@"${alsaLib.out}/lib/libasound.so.2"@g'
|
|
|
|
|
2009-04-12 23:59:40 +02:00
|
|
|
export USER=nix
|
|
|
|
set +x
|
2012-02-23 23:04:54 +01:00
|
|
|
'';
|
2009-04-12 23:59:40 +02:00
|
|
|
|
2016-09-10 11:40:06 +02:00
|
|
|
patches = optional enableHardening ./hardened.patch
|
virtualbox: 5.1.6 -> 5.1.8 for many CVEs:
From LWN:
From the NVD entries:
CVE-2016-5501: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality,
integrity, and availability via vectors related to Core, a different
vulnerability than CVE-2016-5538.
CVE-2016-5538: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality,
integrity, and availability via vectors related to Core, a different
vulnerability than CVE-2016-5501.
CVE-2016-5605: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.1.4 in Oracle Virtualization allows remote
attackers to affect confidentiality and integrity via vectors related
to VRDE.
CVE-2016-5608: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect availability via vectors
related to Core, a different vulnerability than CVE-2016-5613.
CVE-2016-5610: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality,
integrity, and availability via vectors related to Core.
CVE-2016-5611: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect confidentiality via
vectors related to Core.
CVE-2016-5613: Unspecified vulnerability in the Oracle VM VirtualBox
component before 5.0.28 and 5.1.x before 5.1.8 in Oracle
Virtualization allows local users to affect availability via vectors
related to Core, a different vulnerability than CVE-2016-5608.
2016-10-26 13:48:21 +02:00
|
|
|
++ [ ./qtx11extras.patch ];
|
2014-11-29 08:09:50 +01:00
|
|
|
|
2014-12-17 00:57:36 +01:00
|
|
|
postPatch = ''
|
|
|
|
sed -i -e 's|/sbin/ifconfig|${nettools}/bin/ifconfig|' \
|
2016-09-10 11:40:06 +02:00
|
|
|
src/VBox/HostDrivers/adpctl/VBoxNetAdpCtl.cpp
|
2014-12-17 00:57:36 +01:00
|
|
|
'';
|
|
|
|
|
2015-07-24 14:32:52 +02:00
|
|
|
# first line: ugly hack, and it isn't yet clear why it's a problem
|
2009-04-12 23:59:40 +02:00
|
|
|
configurePhase = ''
|
2016-08-31 11:32:34 +02:00
|
|
|
NIX_CFLAGS_COMPILE=$(echo "$NIX_CFLAGS_COMPILE" | sed 's,\-isystem ${lib.getDev stdenv.cc.libc}/include,,g')
|
2015-07-24 14:32:52 +02:00
|
|
|
|
2014-11-29 08:09:50 +01:00
|
|
|
cat >> LocalConfig.kmk <<LOCAL_CONFIG
|
virtualbox: Fix extension pack installation.
With hardening, we need to go a bit further rather than just allowing
/nix/store being world-writable. We now use fakeroot to make sure the
VBoxExtPackHelperApp won't moan that the files are not owned by root.
They are, but only outside of the chrooted build process.
Another issue with using fakeroot is that it doesn't seem to cope well
with arguments that contain spaces. That's why I've piped the call into
${stdenv.shell}.
Now, the really gory and confusing part is the introduction of
VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE.
The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by
the hardened implementation against whether things like VMMR0.r0 or
VBoxVMM.so reside in that directory. As a side note: I admit that the
whole libexec directory is quite polluted with stuff that shouldn't be
there, but for now we've broken enough things and will tear apart the
whole structure at some day in the future[TM].
For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which
_should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately,
the hardened implementation is checking against this directory (in
IsValidBaseDir) for the extension pack(why!?).
Of course, we could put even that into the libexec directory, somewhat
similar as the official package, but after all, let's at least *try* to
separate things.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-01 03:13:51 +01:00
|
|
|
VBOX_WITH_TESTCASES :=
|
|
|
|
VBOX_WITH_TESTSUITE :=
|
|
|
|
VBOX_WITH_VALIDATIONKIT :=
|
|
|
|
VBOX_WITH_DOCS :=
|
|
|
|
VBOX_WITH_WARNINGS_AS_ERRORS :=
|
|
|
|
|
|
|
|
VBOX_WITH_ORIGIN :=
|
|
|
|
VBOX_PATH_APP_PRIVATE_ARCH_TOP := $out/share/virtualbox
|
|
|
|
VBOX_PATH_APP_PRIVATE_ARCH := $out/libexec/virtualbox
|
|
|
|
VBOX_PATH_SHARED_LIBS := $out/libexec/virtualbox
|
|
|
|
VBOX_WITH_RUNPATH := $out/libexec/virtualbox
|
|
|
|
VBOX_PATH_APP_PRIVATE := $out/share/virtualbox
|
|
|
|
VBOX_PATH_APP_DOCS := $out/doc
|
2014-11-29 08:09:50 +01:00
|
|
|
${optionalString javaBindings ''
|
virtualbox: Fix extension pack installation.
With hardening, we need to go a bit further rather than just allowing
/nix/store being world-writable. We now use fakeroot to make sure the
VBoxExtPackHelperApp won't moan that the files are not owned by root.
They are, but only outside of the chrooted build process.
Another issue with using fakeroot is that it doesn't seem to cope well
with arguments that contain spaces. That's why I've piped the call into
${stdenv.shell}.
Now, the really gory and confusing part is the introduction of
VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE.
The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by
the hardened implementation against whether things like VMMR0.r0 or
VBoxVMM.so reside in that directory. As a side note: I admit that the
whole libexec directory is quite polluted with stuff that shouldn't be
there, but for now we've broken enough things and will tear apart the
whole structure at some day in the future[TM].
For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which
_should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately,
the hardened implementation is checking against this directory (in
IsValidBaseDir) for the extension pack(why!?).
Of course, we could put even that into the libexec directory, somewhat
similar as the official package, but after all, let's at least *try* to
separate things.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-01 03:13:51 +01:00
|
|
|
VBOX_JAVA_HOME := ${jdk}
|
2014-11-29 08:09:50 +01:00
|
|
|
''}
|
2016-09-13 06:01:27 +02:00
|
|
|
${optionalString (!headless) ''
|
|
|
|
PATH_QT5_X11_EXTRAS_LIB := ${getLib qt5.qtx11extras}/lib
|
|
|
|
PATH_QT5_X11_EXTRAS_INC := ${getDev qt5.qtx11extras}/include
|
|
|
|
TOOL_QT5_LRC := ${getDev qt5.qttools}/bin/lrelease
|
|
|
|
''}
|
2014-11-29 08:09:50 +01:00
|
|
|
LOCAL_CONFIG
|
|
|
|
|
2016-09-01 20:54:58 +02:00
|
|
|
./configure \
|
|
|
|
${optionalString headless "--build-headless"} \
|
2012-03-20 14:54:01 +01:00
|
|
|
${optionalString (!javaBindings) "--disable-java"} \
|
|
|
|
${optionalString (!pythonBindings) "--disable-python"} \
|
2014-04-18 00:36:41 +02:00
|
|
|
${optionalString (!pulseSupport) "--disable-pulse"} \
|
2014-11-29 08:09:50 +01:00
|
|
|
${optionalString (!enableHardening) "--disable-hardening"} \
|
|
|
|
--disable-kmods --with-mkisofs=${xorriso}/bin/xorrisofs
|
2016-04-16 18:57:59 +02:00
|
|
|
sed -e 's@PKG_CONFIG_PATH=.*@PKG_CONFIG_PATH=${libIDL}/lib/pkgconfig:${glib.dev}/lib/pkgconfig ${libIDL}/bin/libIDL-config-2@' \
|
2009-04-12 23:59:40 +02:00
|
|
|
-i AutoConfig.kmk
|
|
|
|
sed -e 's@arch/x86/@@' \
|
|
|
|
-i Config.kmk
|
2010-11-20 11:41:53 +01:00
|
|
|
substituteInPlace Config.kmk --replace "VBOX_WITH_TESTCASES = 1" "#"
|
2009-04-12 23:59:40 +02:00
|
|
|
'';
|
|
|
|
|
2012-03-02 15:54:14 +01:00
|
|
|
enableParallelBuilding = true;
|
|
|
|
|
2012-08-17 12:36:43 +02:00
|
|
|
buildPhase = ''
|
2009-04-12 23:59:40 +02:00
|
|
|
source env.sh
|
2016-04-22 08:39:42 +02:00
|
|
|
kmk -j $NIX_BUILD_CORES BUILD_TYPE="${buildType}"
|
2012-03-02 15:54:14 +01:00
|
|
|
'';
|
|
|
|
|
2009-04-12 23:59:40 +02:00
|
|
|
installPhase = ''
|
2014-12-16 11:08:13 +01:00
|
|
|
libexec="$out/libexec/virtualbox"
|
|
|
|
share="${if enableHardening then "$out/share/virtualbox" else "$libexec"}"
|
2012-08-17 12:36:43 +02:00
|
|
|
|
2009-10-08 14:57:05 +02:00
|
|
|
# Install VirtualBox files
|
2014-12-16 22:13:12 +01:00
|
|
|
mkdir -p "$libexec"
|
2014-12-18 11:34:57 +01:00
|
|
|
find out/linux.*/${buildType}/bin -mindepth 1 -maxdepth 1 \
|
2014-12-16 22:13:12 +01:00
|
|
|
-name src -o -exec cp -avt "$libexec" {} +
|
2012-08-17 12:36:43 +02:00
|
|
|
|
2009-10-08 14:57:05 +02:00
|
|
|
# Create wrapper script
|
2012-03-02 15:54:14 +01:00
|
|
|
mkdir -p $out/bin
|
2017-03-27 23:28:26 +02:00
|
|
|
${optionalString (!headless) ''
|
|
|
|
makeQtWrapper "$libexec/VirtualBox" $out/bin/VirtualBox
|
|
|
|
''}
|
|
|
|
for file in ${optionalString (!headless) "VBoxSDL rdesktop-vrdp"} VBoxManage VBoxBalloonCtrl VBoxHeadless; do
|
|
|
|
echo "Linking $file to /bin"
|
|
|
|
test -x "$libexec/$file"
|
2012-03-20 14:54:01 +01:00
|
|
|
ln -s "$libexec/$file" $out/bin/$file
|
2009-04-14 15:29:19 +02:00
|
|
|
done
|
2012-08-17 12:36:43 +02:00
|
|
|
|
2012-12-12 07:12:46 +01:00
|
|
|
${optionalString enableExtensionPack ''
|
virtualbox: Fix extension pack installation.
With hardening, we need to go a bit further rather than just allowing
/nix/store being world-writable. We now use fakeroot to make sure the
VBoxExtPackHelperApp won't moan that the files are not owned by root.
They are, but only outside of the chrooted build process.
Another issue with using fakeroot is that it doesn't seem to cope well
with arguments that contain spaces. That's why I've piped the call into
${stdenv.shell}.
Now, the really gory and confusing part is the introduction of
VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE.
The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by
the hardened implementation against whether things like VMMR0.r0 or
VBoxVMM.so reside in that directory. As a side note: I admit that the
whole libexec directory is quite polluted with stuff that shouldn't be
there, but for now we've broken enough things and will tear apart the
whole structure at some day in the future[TM].
For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which
_should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately,
the hardened implementation is checking against this directory (in
IsValidBaseDir) for the extension pack(why!?).
Of course, we could put even that into the libexec directory, somewhat
similar as the official package, but after all, let's at least *try* to
separate things.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-01 03:13:51 +01:00
|
|
|
mkdir -p "$share"
|
|
|
|
"${fakeroot}/bin/fakeroot" "${stdenv.shell}" <<EXTHELPER
|
2012-12-12 07:12:46 +01:00
|
|
|
"$libexec/VBoxExtPackHelperApp" install \
|
virtualbox: Fix extension pack installation.
With hardening, we need to go a bit further rather than just allowing
/nix/store being world-writable. We now use fakeroot to make sure the
VBoxExtPackHelperApp won't moan that the files are not owned by root.
They are, but only outside of the chrooted build process.
Another issue with using fakeroot is that it doesn't seem to cope well
with arguments that contain spaces. That's why I've piped the call into
${stdenv.shell}.
Now, the really gory and confusing part is the introduction of
VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE.
The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by
the hardened implementation against whether things like VMMR0.r0 or
VBoxVMM.so reside in that directory. As a side note: I admit that the
whole libexec directory is quite polluted with stuff that shouldn't be
there, but for now we've broken enough things and will tear apart the
whole structure at some day in the future[TM].
For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which
_should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately,
the hardened implementation is checking against this directory (in
IsValidBaseDir) for the extension pack(why!?).
Of course, we could put even that into the libexec directory, somewhat
similar as the official package, but after all, let's at least *try* to
separate things.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-01 03:13:51 +01:00
|
|
|
--base-dir "$share/ExtensionPacks" \
|
|
|
|
--cert-dir "$share/ExtPackCertificates" \
|
2012-12-12 07:12:46 +01:00
|
|
|
--name "Oracle VM VirtualBox Extension Pack" \
|
2013-02-08 07:02:32 +01:00
|
|
|
--tarball "${extensionPack}" \
|
2012-12-12 07:12:46 +01:00
|
|
|
--sha-256 "${extensionPack.outputHash}"
|
virtualbox: Fix extension pack installation.
With hardening, we need to go a bit further rather than just allowing
/nix/store being world-writable. We now use fakeroot to make sure the
VBoxExtPackHelperApp won't moan that the files are not owned by root.
They are, but only outside of the chrooted build process.
Another issue with using fakeroot is that it doesn't seem to cope well
with arguments that contain spaces. That's why I've piped the call into
${stdenv.shell}.
Now, the really gory and confusing part is the introduction of
VBOX_PATH_APP_PRIVATE_ARCH_TOP and the change of VBOX_PATH_APP_PRIVATE.
The VBOX_PATH_APP_PRIVATE_ARCH is *only* for modules and is checked by
the hardened implementation against whether things like VMMR0.r0 or
VBoxVMM.so reside in that directory. As a side note: I admit that the
whole libexec directory is quite polluted with stuff that shouldn't be
there, but for now we've broken enough things and will tear apart the
whole structure at some day in the future[TM].
For the confusing part we have VBOX_PATH_APP_PRIVATE_ARCH_TOP, which
_should_ be the same as VBOX_PATH_APP_PRIVATE_ARCH but unfortunately,
the hardened implementation is checking against this directory (in
IsValidBaseDir) for the extension pack(why!?).
Of course, we could put even that into the libexec directory, somewhat
similar as the official package, but after all, let's at least *try* to
separate things.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2014-12-01 03:13:51 +01:00
|
|
|
EXTHELPER
|
2012-12-12 07:12:46 +01:00
|
|
|
''}
|
|
|
|
|
2016-09-01 20:54:58 +02:00
|
|
|
${optionalString (!headless) ''
|
|
|
|
# Create and fix desktop item
|
|
|
|
mkdir -p $out/share/applications
|
|
|
|
sed -i -e "s|Icon=VBox|Icon=$libexec/VBox.png|" $libexec/virtualbox.desktop
|
|
|
|
ln -sfv $libexec/virtualbox.desktop $out/share/applications
|
|
|
|
# Icons
|
|
|
|
mkdir -p $out/share/icons/hicolor
|
|
|
|
for size in `ls -1 $libexec/icons`; do
|
|
|
|
mkdir -p $out/share/icons/hicolor/$size/apps
|
|
|
|
ln -s $libexec/icons/$size/*.png $out/share/icons/hicolor/$size/apps
|
|
|
|
done
|
|
|
|
''}
|
2014-12-15 17:51:12 +01:00
|
|
|
|
2016-09-13 03:42:16 +02:00
|
|
|
cp -rv out/linux.*/${buildType}/bin/src "$modsrc"
|
2009-04-12 23:59:40 +02:00
|
|
|
'';
|
2012-08-17 12:36:43 +02:00
|
|
|
|
2013-06-23 14:35:33 +02:00
|
|
|
passthru = { inherit version; /* for guest additions */ };
|
|
|
|
|
2009-04-12 23:59:40 +02:00
|
|
|
meta = {
|
|
|
|
description = "PC emulator";
|
|
|
|
homepage = http://www.virtualbox.org/;
|
2009-09-11 14:24:32 +02:00
|
|
|
maintainers = [ lib.maintainers.sander ];
|
2009-09-16 16:56:53 +02:00
|
|
|
platforms = lib.platforms.linux;
|
2009-04-12 23:59:40 +02:00
|
|
|
};
|
|
|
|
}
|