tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1{ lib
2, fetchFromGitHub
3, python3
4}:
5
6python3.pkgs.buildPythonApplication rec {
7 pname = "volatility3";
8 version = "2.4.1";
9
10 src = fetchFromGitHub {
11 owner = "volatilityfoundation";
12 repo = pname;
13 rev = "refs/tags/v${version}";
14 hash = "sha256-Oi9uy1zNRnKJc+31+IjMiza72EUopiM75sP+Mjjw+aE=";
15 };
16
17 propagatedBuildInputs = with python3.pkgs; [
18 capstone
19 jsonschema
20 pefile
21 pycryptodome
22 yara-python
23 ];
24
25 preBuild = ''
26 export HOME=$(mktemp -d);
27 '';
28
29 # Project has no tests
30 doCheck = false;
31
32 pythonImportsCheck = [
33 "volatility3"
34 ];
35
36 meta = with lib; {
37 description = "Volatile memory extraction frameworks";
38 homepage = "https://www.volatilityfoundation.org/";
39 changelog = "https://github.com/volatilityfoundation/volatility3/releases/tag/v${version}";
40 license = {
41 # Volatility Software License 1.0
42 free = false;
43 url = "https://www.volatilityfoundation.org/license/vsl-v1.0";
44 };
45 maintainers = with maintainers; [ fab ];
46 };
47}