diff --git a/default.nix b/default.nix index f4e8474..188c403 100644 --- a/default.nix +++ b/default.nix @@ -1,5 +1,12 @@ -{ pkgs ? import {} }: { +{ pkgs ? import {} }: let + vendorSha256 = "sha256-O0z+oEffOOZa/bn2gV9onLVbPBHsNDH2yq1CZPi8w58="; +in { sops-init-gpg-key = pkgs.callPackage ./pkgs/sops-init-gpg-key {}; - sops-install-secrets = pkgs.callPackage ./pkgs/sops-install-secrets {}; + sops-install-secrets = pkgs.callPackage ./pkgs/sops-install-secrets { + inherit vendorSha256; + }; sops-shell-hook = pkgs.callPackage ./pkgs/sops-shell-hook {}; + ssh-to-pgp = pkgs.callPackage ./pkgs/ssh-to-pgp { + inherit vendorSha256; + }; } diff --git a/pkgs/sops-install-secrets/default.nix b/pkgs/sops-install-secrets/default.nix index 7b16ccd..0c0bfa6 100644 --- a/pkgs/sops-install-secrets/default.nix +++ b/pkgs/sops-install-secrets/default.nix @@ -1,4 +1,4 @@ -{ buildGoModule, path, pkgs }: +{ buildGoModule, path, pkgs, vendorSha256 }: buildGoModule { pname = "sops-install-secrets"; version = "0.0.1"; @@ -12,5 +12,13 @@ buildGoModule { inherit pkgs; }; - vendorSha256 = "sha256-O0z+oEffOOZa/bn2gV9onLVbPBHsNDH2yq1CZPi8w58="; + inherit vendorSha256; + + meta = with stdenv.lib; { + description = "Atomic secret provisioning based on sops"; + homepage = "https://github.com/Mic92/sops-nix"; + license = licenses.mit; + maintainers = with maintainers; [ mic92 ]; + platforms = platforms.unix; + }; } diff --git a/pkgs/ssh-to-pgp/default.nix b/pkgs/ssh-to-pgp/default.nix new file mode 100644 index 0000000..4c96577 --- /dev/null +++ b/pkgs/ssh-to-pgp/default.nix @@ -0,0 +1,26 @@ +{ stdenv, buildGoModule, gnupg, vendorSha256, }: +buildGoModule { + pname = "ssh-to-pgp"; + version = "0.0.1"; + + src = ../..; + + subPackages = [ "pkgs/ssh-to-pgp" ]; + + checkInputs = [ gnupg ]; + checkPhase = '' + HOME=$TMPDIR go test ./pkgs/ssh-to-pgp + ''; + + doCheck = true; + + inherit vendorSha256; + + meta = with stdenv.lib; { + description = "Convert ssh public/private keys to PGP"; + homepage = "https://github.com/Mic92/sops-nix"; + license = licenses.mit; + maintainers = with maintainers; [ mic92 ]; + platforms = platforms.unix; + }; +}