pyrox.dev
vault-bin: 1.16.2 -> 1.17.5 (#341233)
authored by Thomas Gerbet and committed by GitHub 58867d7c 270ac82a
+11
-14
pkgs/tools/security/vault/update-bin.sh
+11
-14
pkgs/tools/security/vault/update-bin.sh
···
10
10
exit 1
11
11
fi
12
12
13
-
fetch_arch() {
14
-
VER="$1"; ARCH="$2"
15
-
URL="https://releases.hashicorp.com/vault/${VER}/vault_${VER}_${ARCH}.zip"
16
-
nix-prefetch "{ stdenv, fetchzip }:
17
-
stdenv.mkDerivation rec {
18
-
pname = \"vault-bin\"; version = \"${VER}\";
19
-
src = fetchzip { url = \"$URL\"; };
20
-
}
21
-
"
13
+
function calc_hash () {
14
+
local version=$1
15
+
local arch=$2
16
+
url="https://releases.hashicorp.com/vault/${version}/vault_${version}_${arch}.zip"
17
+
zip_hash=$(nix-prefetch-url --unpack $url)
18
+
nix hash to-sri --type sha256 "$zip_hash"
22
19
}
23
20
24
21
replace_sha() {
···
28
25
# https://releases.hashicorp.com/vault/1.9.4/vault_1.9.4_linux_arm64.zip
29
26
VAULT_VER=$(curl -Ls -w "%{url_effective}" -o /dev/null https://github.com/hashicorp/vault/releases/latest | awk -F'/' '{print $NF}' | sed 's/v//')
30
27
31
-
VAULT_LINUX_X86_SHA256=$(fetch_arch "$VAULT_VER" "linux_386")
32
-
VAULT_LINUX_X64_SHA256=$(fetch_arch "$VAULT_VER" "linux_amd64")
33
-
VAULT_DARWIN_X64_SHA256=$(fetch_arch "$VAULT_VER" "darwin_amd64")
34
-
VAULT_LINUX_AARCH64_SHA256=$(fetch_arch "$VAULT_VER" "linux_arm64")
35
-
VAULT_DARWIN_AARCH64_SHA256=$(fetch_arch "$VAULT_VER" "darwin_arm64")
28
+
VAULT_LINUX_X86_SHA256=$(calc_hash "$VAULT_VER" "linux_386")
29
+
VAULT_LINUX_X64_SHA256=$(calc_hash "$VAULT_VER" "linux_amd64")
30
+
VAULT_DARWIN_X64_SHA256=$(calc_hash "$VAULT_VER" "darwin_amd64")
31
+
VAULT_LINUX_AARCH64_SHA256=$(calc_hash "$VAULT_VER" "linux_arm64")
32
+
VAULT_DARWIN_AARCH64_SHA256=$(calc_hash "$VAULT_VER" "darwin_arm64")
36
33
37
34
sed -i "s/version = \".*\"/version = \"$VAULT_VER\"/" "$NIX_DRV"
38
35
+9
-8
pkgs/tools/security/vault/vault-bin.nix
+9
-8
pkgs/tools/security/vault/vault-bin.nix
···
2
2
3
3
stdenv.mkDerivation rec {
4
4
pname = "vault-bin";
5
-
version = "1.16.2";
5
+
version = "1.17.5";
6
6
7
7
src =
8
8
let
···
15
15
x86_64-darwin = "darwin_amd64";
16
16
aarch64-darwin = "darwin_arm64";
17
17
};
18
-
sha256 = selectSystem {
19
-
x86_64-linux = "sha256-fVDHXVI4f/1d6NTgHcURDXAjCkSEwKD3+bhRyvIgfjw=";
20
-
aarch64-linux = "sha256-tfRqnroz9W7V3gCataJbm2t97OJUkVe2VyWXPqbeJaw=";
21
-
i686-linux = "sha256-l2aYuyxYAOnAOBwtkEkrpqRNWYL7qsaYJ3vMiknhFow=";
22
-
x86_64-darwin = "sha256-xX/syRtkJJjmSO36Apq+i/s4kOMMop3De276358hb0c=";
23
-
aarch64-darwin = "sha256-I1FpMRsssil0LQe5LBjpX5b7uTATRJOBzbJeLnKCd74=";
18
+
hash = selectSystem {
19
+
x86_64-linux = "sha256-rh0ZVmAbiOmZFCpiiX9ClAYmQKx084VKCjxvD9bbYAk=";
20
+
aarch64-linux = "sha256-DtriOEQCuSMMjzfJJpJAf7z+wGJSbzU3V/X+glTLkv8=";
21
+
i686-linux = "sha256-EPS3Sx2l0Gv4PWeqrnIEoNYUF4Or075vdhn71vKXQEw=";
22
+
x86_64-darwin = "sha256-pi/sD88haBxUx6dSUEUv6ugQO2K/lhg4ne7xbcVzg3M=";
23
+
aarch64-darwin = "sha256-6ZESO3m5FCRwTNh3xlWjWw6c9sjiAwV09YA/hQ5Py/o=";
24
24
};
25
25
in
26
26
fetchzip {
27
27
url = "https://releases.hashicorp.com/vault/${version}/vault_${version}_${suffix}.zip";
28
-
inherit sha256;
28
+
stripRoot=false;
29
+
inherit hash;
29
30
};
30
31
31
32
dontConfigure = true;