ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
45 lines
1.1 KiB
Nix
45 lines
1.1 KiB
Nix
{ lib
|
|
, stdenv
|
|
, fetchFromGitHub
|
|
, makeBinaryWrapper
|
|
, coreutils
|
|
, binutils-unwrapped
|
|
}:
|
|
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "spectre-meltdown-checker";
|
|
version = "0.46";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "speed47";
|
|
repo = "spectre-meltdown-checker";
|
|
rev = "v${finalAttrs.version}";
|
|
hash = "sha256-M4ngdtp2esZ+CSqZAiAeOnKtaK8Ra+TmQfMsr5q5gkg=";
|
|
};
|
|
|
|
prePatch = ''
|
|
substituteInPlace spectre-meltdown-checker.sh \
|
|
--replace /bin/echo ${coreutils}/bin/echo
|
|
'';
|
|
|
|
nativeBuildInputs = [ makeBinaryWrapper ];
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
install -Dm755 spectre-meltdown-checker.sh $out/bin/spectre-meltdown-checker
|
|
wrapProgram $out/bin/spectre-meltdown-checker \
|
|
--prefix PATH : ${lib.makeBinPath [ binutils-unwrapped ]}
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
meta = {
|
|
description = "Spectre & Meltdown vulnerability/mitigation checker for Linux";
|
|
mainProgram = "spectre-meltdown-checker";
|
|
homepage = "https://github.com/speed47/spectre-meltdown-checker";
|
|
license = lib.licenses.gpl3;
|
|
maintainers = [ lib.maintainers.dotlambda ];
|
|
platforms = lib.platforms.linux;
|
|
};
|
|
})
|