From 7f2d5f369ce7a386c51c505dc08e21a8e94255f4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= Date: Mon, 19 Dec 2022 08:37:40 +0100 Subject: [PATCH] openresty: 1.19.9 -> 1.21.4 --- pkgs/servers/http/nginx/generic.nix | 13 ++++++++----- pkgs/servers/http/openresty/default.nix | 21 ++++++++++++--------- 2 files changed, 20 insertions(+), 14 deletions(-) diff --git a/pkgs/servers/http/nginx/generic.nix b/pkgs/servers/http/nginx/generic.nix index a18b771aa1c3..67e08a66695c 100644 --- a/pkgs/servers/http/nginx/generic.nix +++ b/pkgs/servers/http/nginx/generic.nix @@ -18,9 +18,11 @@ outer@{ lib, stdenv, fetchurl, fetchpatch, openssl, zlib, pcre, libxml2, libxslt , src ? null # defaults to upstream nginx ${version} , sha256 ? null # when not specifying src , configureFlags ? [] +, nativeBuildInputs ? [] , buildInputs ? [] , extraPatches ? [] , fixPatch ? p: p +, postPatch ? "" , preConfigure ? "" , postInstall ? "" , meta ? null @@ -48,9 +50,7 @@ assert assertMsg (unique moduleNames == moduleNames) "nginx: duplicate modules: ${concatStringsSep ", " moduleNames}. A common cause for this is that services.nginx.additionalModules adds a module which the nixos module itself already adds."; stdenv.mkDerivation { - inherit pname; - inherit version; - inherit nginxVersion; + inherit pname version nginxVersion; outputs = ["out" "doc"]; @@ -59,6 +59,9 @@ stdenv.mkDerivation { inherit sha256; }; + nativeBuildInputs = [ removeReferencesTo ] + ++ nativeBuildInputs; + buildInputs = [ openssl zlib pcre libxml2 libxslt gd geoip perl ] ++ buildInputs ++ mapModules "inputs"; @@ -155,6 +158,8 @@ stdenv.mkDerivation { ] ++ mapModules "patches") ++ extraPatches; + inherit postPatch; + hardeningEnable = optional (!stdenv.isDarwin) "pie"; enableParallelBuilding = true; @@ -164,8 +169,6 @@ stdenv.mkDerivation { cp -r ${nginx-doc}/* $doc ''; - nativeBuildInputs = [ removeReferencesTo ]; - disallowedReferences = map (m: m.src) modules; postInstall = diff --git a/pkgs/servers/http/openresty/default.nix b/pkgs/servers/http/openresty/default.nix index 5c852de5b64a..433d8fd3969b 100644 --- a/pkgs/servers/http/openresty/default.nix +++ b/pkgs/servers/http/openresty/default.nix @@ -2,6 +2,7 @@ , runCommand , lib , fetchurl +, perl , postgresql , nixosTests , ... @@ -9,17 +10,17 @@ callPackage ../nginx/generic.nix args rec { pname = "openresty"; - nginxVersion = "1.19.9"; + nginxVersion = "1.21.4"; version = "${nginxVersion}.1"; src = fetchurl { url = "https://openresty.org/download/openresty-${version}.tar.gz"; - sha256 = "1xn1d0x2y63z0mi0qq3js6lz6ziba92r7vyyfkj1qc738vjz8vsp"; + sha256 = "sha256-DFCTtk94IehQZcmeXU5swxggz9fze5oN7IQgnYeir5k="; }; - # generic.nix applies fixPatch on top of every patch defined there. This - # allows updating the patch destination, as openresty has nginx source code - # in a different folder. + # generic.nix applies fixPatch on top of every patch defined there. + # This allows updating the patch destination, as openresty has + # nginx source code in a different folder. fixPatch = patch: let name = patch.name or (builtins.baseNameOf patch); in runCommand "openresty-${name}" { src = patch; } '' @@ -28,14 +29,16 @@ callPackage ../nginx/generic.nix args rec { --replace "b/" "b/bundle/nginx-${nginxVersion}/" ''; + nativeBuildInputs = [ perl ]; + buildInputs = [ postgresql ]; - configureFlags = [ "--with-http_postgres_module" ]; - - preConfigure = '' - patchShebangs . + postPatch = '' + patchShebangs configure bundle/ ''; + configureFlags = [ "--with-http_postgres_module" ]; + postInstall = '' ln -s $out/luajit/bin/luajit-2.1.0-beta3 $out/bin/luajit-openresty ln -s $out/nginx/sbin/nginx $out/bin/nginx