4ea28e76c2
https://github.com/apple/cups/releases/tag/v2.3.3 Fixes: https://nvd.nist.gov/vuln/detail/CVE-2019-8842 https://nvd.nist.gov/vuln/detail/CVE-2020-3898
160 lines
4.8 KiB
Nix
160 lines
4.8 KiB
Nix
{ stdenv
|
|
, fetchurl
|
|
, pkgconfig
|
|
, removeReferencesTo
|
|
, zlib
|
|
, libjpeg
|
|
, libpng
|
|
, libtiff
|
|
, pam
|
|
, dbus
|
|
, enableSystemd ? stdenv.isLinux && !stdenv.hostPlatform.isMusl
|
|
, systemd ? null
|
|
, acl
|
|
, gmp
|
|
, darwin
|
|
, libusb1 ? null
|
|
, gnutls ? null
|
|
, avahi ? null
|
|
, libpaper ? null
|
|
, coreutils
|
|
}:
|
|
|
|
assert enableSystemd -> systemd != null;
|
|
|
|
### IMPORTANT: before updating cups, make sure the nixos/tests/printing.nix test
|
|
### works at least for your platform.
|
|
|
|
with stdenv.lib;
|
|
stdenv.mkDerivation rec {
|
|
pname = "cups";
|
|
|
|
# After 2.2.6, CUPS requires headers only available in macOS 10.12+
|
|
version = if stdenv.isDarwin then "2.2.6" else "2.3.3";
|
|
|
|
passthru = { inherit version; };
|
|
|
|
src = fetchurl {
|
|
url = "https://github.com/apple/cups/releases/download/v${version}/cups-${version}-source.tar.gz";
|
|
sha256 = if version == "2.2.6"
|
|
then "16qn41b84xz6khrr2pa2wdwlqxr29rrrkjfi618gbgdkq9w5ff20"
|
|
else "1vpk0b2vq830f8fvf9z8qjsm5k141i7pi8djbinpnr78pi4dj7r6";
|
|
};
|
|
|
|
outputs = [ "out" "lib" "dev" "man" ];
|
|
|
|
postPatch = ''
|
|
substituteInPlace cups/testfile.c \
|
|
--replace 'cupsFileFind("cat", "/bin' 'cupsFileFind("cat", "${coreutils}/bin'
|
|
'';
|
|
|
|
nativeBuildInputs = [ pkgconfig removeReferencesTo ];
|
|
|
|
buildInputs = [ zlib libjpeg libpng libtiff libusb1 gnutls libpaper ]
|
|
++ optionals stdenv.isLinux [ avahi pam dbus ]
|
|
++ optional enableSystemd systemd
|
|
# Separate from above only to not modify order, to avoid mass rebuilds; merge this with the above at next big change.
|
|
++ optionals stdenv.isLinux [ acl ]
|
|
++ optionals stdenv.isDarwin (with darwin; [
|
|
configd apple_sdk.frameworks.ApplicationServices
|
|
]);
|
|
|
|
propagatedBuildInputs = [ gmp ];
|
|
|
|
configureFlags = [
|
|
"--localstatedir=/var"
|
|
"--sysconfdir=/etc"
|
|
"--enable-raw-printing"
|
|
"--enable-threads"
|
|
] ++ optionals stdenv.isLinux [
|
|
"--enable-dbus"
|
|
"--enable-pam"
|
|
"--with-dbusdir=${placeholder "out"}/share/dbus-1"
|
|
] ++ optional (libusb1 != null) "--enable-libusb"
|
|
++ optional (gnutls != null) "--enable-ssl"
|
|
++ optional (avahi != null) "--enable-avahi"
|
|
++ optional (libpaper != null) "--enable-libpaper"
|
|
++ optional stdenv.isDarwin "--disable-launchd";
|
|
|
|
# AR has to be an absolute path
|
|
preConfigure = ''
|
|
export AR="${getBin stdenv.cc.bintools.bintools}/bin/${stdenv.cc.targetPrefix}ar"
|
|
configureFlagsArray+=(
|
|
# Put just lib/* and locale into $lib; this didn't work directly.
|
|
# lib/cups is moved back to $out in postInstall.
|
|
# Beware: some parts of cups probably don't fully respect these.
|
|
"--prefix=$lib"
|
|
"--datadir=$out/share"
|
|
"--localedir=$lib/share/locale"
|
|
|
|
"--with-systemd=$out/lib/systemd/system"
|
|
|
|
${optionalString stdenv.isDarwin ''
|
|
"--with-bundledir=$out"
|
|
''}
|
|
)
|
|
'';
|
|
|
|
installFlags =
|
|
[ # Don't try to write in /var at build time.
|
|
"CACHEDIR=$(TMPDIR)/dummy"
|
|
"LOGDIR=$(TMPDIR)/dummy"
|
|
"REQUESTS=$(TMPDIR)/dummy"
|
|
"STATEDIR=$(TMPDIR)/dummy"
|
|
# Idem for /etc.
|
|
"PAMDIR=$(out)/etc/pam.d"
|
|
"XINETD=$(out)/etc/xinetd.d"
|
|
"SERVERROOT=$(out)/etc/cups"
|
|
# Idem for /usr.
|
|
"MENUDIR=$(out)/share/applications"
|
|
"ICONDIR=$(out)/share/icons"
|
|
# Work around a Makefile bug.
|
|
"CUPS_PRIMARY_SYSTEM_GROUP=root"
|
|
];
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
postInstall = ''
|
|
libexec=${if stdenv.isDarwin then "libexec/cups" else "lib/cups"}
|
|
moveToOutput $libexec "$out"
|
|
|
|
# $lib contains references to $out/share/cups.
|
|
# CUPS is working without them, so they are not vital.
|
|
find "$lib" -type f -exec grep -q "$out" {} \; \
|
|
-printf "removing references from %p\n" \
|
|
-exec remove-references-to -t "$out" {} +
|
|
|
|
# Delete obsolete stuff that conflicts with cups-filters.
|
|
rm -rf $out/share/cups/banners $out/share/cups/data/testprint
|
|
|
|
moveToOutput bin/cups-config "$dev"
|
|
sed -e "/^cups_serverbin=/s|$lib|$out|" \
|
|
-i "$dev/bin/cups-config"
|
|
|
|
# Rename systemd files provided by CUPS
|
|
for f in "$out"/lib/systemd/system/*; do
|
|
substituteInPlace "$f" \
|
|
--replace "$lib/$libexec" "$out/$libexec" \
|
|
--replace "org.cups.cupsd" "cups" \
|
|
--replace "org.cups." ""
|
|
|
|
if [[ "$f" =~ .*cupsd\..* ]]; then
|
|
mv "$f" "''${f/org\.cups\.cupsd/cups}"
|
|
else
|
|
mv "$f" "''${f/org\.cups\./}"
|
|
fi
|
|
done
|
|
'' + optionalString stdenv.isLinux ''
|
|
# Use xdg-open when on Linux
|
|
substituteInPlace "$out"/share/applications/cups.desktop \
|
|
--replace "Exec=htmlview" "Exec=xdg-open"
|
|
'';
|
|
|
|
meta = {
|
|
homepage = "https://cups.org/";
|
|
description = "A standards-based printing system for UNIX";
|
|
license = licenses.gpl2; # actually LGPL for the library and GPL for the rest
|
|
maintainers = with maintainers; [ matthewbauer ];
|
|
platforms = platforms.unix;
|
|
};
|
|
}
|