tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1#!/usr/bin/env nix-shell
2#!nix-shell -i bash -p curl gnused gawk nix-prefetch
3
4set -euo pipefail
5
6ROOT="$(dirname "$(readlink -f "$0")")"
7NIX_DRV="$ROOT/package.nix"
8if [ ! -f "$NIX_DRV" ]; then
9 echo "ERROR: cannot find vault-bin in $ROOT"
10 exit 1
11fi
12
13function calc_hash () {
14 local version=$1
15 local arch=$2
16 url="https://releases.hashicorp.com/vault/${version}/vault_${version}_${arch}.zip"
17 zip_hash=$(nix-prefetch-url --unpack $url)
18 nix --extra-experimental-features nix-command hash to-sri --type sha256 "$zip_hash"
19}
20
21replace_sha() {
22 sed -i "s#$1 = \"sha256-.\{44\}\"#$1 = \"$2\"#" "$NIX_DRV"
23}
24
25# https://releases.hashicorp.com/vault/1.9.4/vault_1.9.4_linux_arm64.zip
26VAULT_VER=$(curl -Ls -w "%{url_effective}" -o /dev/null https://github.com/hashicorp/vault/releases/latest | awk -F'/' '{print $NF}' | sed 's/v//')
27
28VAULT_LINUX_X86_SHA256=$(calc_hash "$VAULT_VER" "linux_386")
29VAULT_LINUX_X64_SHA256=$(calc_hash "$VAULT_VER" "linux_amd64")
30VAULT_DARWIN_X64_SHA256=$(calc_hash "$VAULT_VER" "darwin_amd64")
31VAULT_LINUX_AARCH64_SHA256=$(calc_hash "$VAULT_VER" "linux_arm64")
32VAULT_DARWIN_AARCH64_SHA256=$(calc_hash "$VAULT_VER" "darwin_arm64")
33
34sed -i "s/version = \".*\"/version = \"$VAULT_VER\"/" "$NIX_DRV"
35
36replace_sha "i686-linux" "$VAULT_LINUX_X86_SHA256"
37replace_sha "x86_64-linux" "$VAULT_LINUX_X64_SHA256"
38replace_sha "x86_64-darwin" "$VAULT_DARWIN_X64_SHA256"
39replace_sha "aarch64-linux" "$VAULT_LINUX_AARCH64_SHA256"
40replace_sha "aarch64-darwin" "$VAULT_DARWIN_AARCH64_SHA256"