forked from mirrors/nixpkgs
Merge pull request #130208 from LeSuisse/cosign-enable-piv-key-support
cosign: enable PIV key support
This commit is contained in:
commit
0d3bacac45
|
@ -1,4 +1,4 @@
|
||||||
{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC }:
|
{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC, pivKeySupport ? true }:
|
||||||
|
|
||||||
buildGoModule rec {
|
buildGoModule rec {
|
||||||
pname = "cosign";
|
pname = "cosign";
|
||||||
|
@ -12,8 +12,8 @@ buildGoModule rec {
|
||||||
};
|
};
|
||||||
|
|
||||||
buildInputs =
|
buildInputs =
|
||||||
lib.optional stdenv.isLinux (lib.getDev pcsclite)
|
lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)
|
||||||
++ lib.optionals stdenv.isDarwin [ PCSC ];
|
++ lib.optionals (stdenv.isDarwin && pivKeySupport) [ PCSC ];
|
||||||
|
|
||||||
nativeBuildInputs = [ pkg-config ];
|
nativeBuildInputs = [ pkg-config ];
|
||||||
|
|
||||||
|
@ -21,6 +21,9 @@ buildGoModule rec {
|
||||||
|
|
||||||
subPackages = [ "cmd/cosign" ];
|
subPackages = [ "cmd/cosign" ];
|
||||||
|
|
||||||
|
preBuild = ''
|
||||||
|
buildFlagsArray+=(${lib.optionalString pivKeySupport "-tags=pivkey"})
|
||||||
|
'';
|
||||||
ldflags = [ "-s" "-w" "-X github.com/sigstore/cosign/cmd/cosign/cli.gitVersion=v${version}"];
|
ldflags = [ "-s" "-w" "-X github.com/sigstore/cosign/cmd/cosign/cli.gitVersion=v${version}"];
|
||||||
|
|
||||||
meta = with lib; {
|
meta = with lib; {
|
||||||
|
|
Loading…
Reference in a new issue