38 lines
930 B
Nix
38 lines
930 B
Nix
{ lib, buildGoModule, fetchFromGitHub, pkg-config, pcsclite, softhsm, opensc
|
|
, yubihsm-shell, writeScriptBin }:
|
|
|
|
buildGoModule rec {
|
|
pname = "step-kms-plugin";
|
|
version = "0.7.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "smallstep";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
hash = "sha256-5oMkR997ZbPpOqazpyxEvLKbak7THAu855FC6a/Tr+4=";
|
|
};
|
|
|
|
vendorHash = "sha256-Zd2rZez5vP9uL5dolGHO8FR0ARoYP78amcakK/lKtdc=";
|
|
|
|
proxyVendor = true;
|
|
|
|
nativeBuildInputs = [ pkg-config ];
|
|
|
|
buildInputs = [ opensc pcsclite softhsm yubihsm-shell ];
|
|
|
|
ldflags = [
|
|
"-w"
|
|
"-s"
|
|
"-X github.com/smallstep/step-kms-plugin/cmd.Version=${version}"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description =
|
|
"step plugin to manage keys and certificates on cloud KMSs and HSMs";
|
|
homepage = "https://smallstep.com/cli/";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ qbit ];
|
|
mainProgram = "step-kms-plugin";
|
|
};
|
|
}
|