pyrox.dev
1{ lib
2, stdenv
3, fetchFromGitHub
4, docbook_xsl
5, libxslt
6, meson
7, ninja
8, pkg-config
9, bash-completion
10, libcap
11, libselinux
12}:
13
14stdenv.mkDerivation rec {
15 pname = "bubblewrap";
16 version = "0.8.0";
17
18 src = fetchFromGitHub {
19 owner = "containers";
20 repo = "bubblewrap";
21 rev = "v${version}";
22 hash = "sha256-UiZfp1bX/Eul5x31oBln5P9KMT2oFwawQqDs9udZUxY=";
23 };
24
25 postPatch = ''
26 substituteInPlace tests/libtest.sh \
27 --replace "/var/tmp" "$TMPDIR"
28 '';
29
30 nativeBuildInputs = [
31 docbook_xsl
32 libxslt
33 meson
34 ninja
35 pkg-config
36 ];
37
38 buildInputs = [
39 bash-completion
40 libcap
41 libselinux
42 ];
43
44 # incompatible with Nix sandbox
45 doCheck = false;
46
47 meta = with lib; {
48 changelog = "https://github.com/containers/bubblewrap/releases/tag/${src.rev}";
49 description = "Unprivileged sandboxing tool";
50 homepage = "https://github.com/containers/bubblewrap";
51 license = licenses.lgpl2Plus;
52 maintainers = with maintainers; [ dotlambda ];
53 platforms = platforms.linux;
54 mainProgram = "bwrap";
55 };
56}