tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1#!/usr/bin/env nix-shell
2#!nix-shell -i bash -p curl gnused gawk nix-prefetch
3
4set -euo pipefail
5
6ROOT="$(dirname "$(readlink -f "$0")")"
7NIX_DRV="$ROOT/package.nix"
8if [ ! -f "$NIX_DRV" ]; then
9 echo "ERROR: cannot find package.nix in $ROOT"
10 exit 1
11fi
12
13function calc_hash () {
14 local version=$1
15 local arch=$2
16 url="https://releases.hashicorp.com/boundary/${version}/boundary_${version}_${arch}.zip"
17 zip_hash=$(nix-prefetch-url --unpack $url)
18 nix --extra-experimental-features nix-command hash to-sri --type sha256 "$zip_hash"
19}
20
21replace_sha() {
22 sed -i "s#$1 = \"sha256-.\{44\}\"#$1 = \"$2\"#" "$NIX_DRV"
23}
24
25# https://releases.hashicorp.com/boundary/0.1.4/boundary_0.1.4_linux_amd64.zip
26BOUNDARY_VER=$(curl -Ls -w "%{url_effective}" -o /dev/null https://github.com/hashicorp/boundary/releases/latest | awk -F'/' '{print $NF}' | sed 's/v//')
27
28BOUNDARY_LINUX_X64_SHA256=$(calc_hash "$BOUNDARY_VER" "linux_amd64")
29BOUNDARY_DARWIN_X64_SHA256=$(calc_hash "$BOUNDARY_VER" "darwin_amd64")
30BOUNDARY_LINUX_AARCH64_SHA256=$(calc_hash "$BOUNDARY_VER" "linux_arm64")
31BOUNDARY_DARWIN_AARCH64_SHA256=$(calc_hash "$BOUNDARY_VER" "darwin_arm64")
32
33sed -i "s/version = \".*\"/version = \"$BOUNDARY_VER\"/" "$NIX_DRV"
34
35replace_sha "x86_64-linux" "$BOUNDARY_LINUX_X64_SHA256"
36replace_sha "x86_64-darwin" "$BOUNDARY_DARWIN_X64_SHA256"
37replace_sha "aarch64-linux" "$BOUNDARY_LINUX_AARCH64_SHA256"
38replace_sha "aarch64-darwin" "$BOUNDARY_DARWIN_AARCH64_SHA256"