forked from mirrors/nixpkgs
471c673d71
Fixes CVE-2021-39226. https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/
77 lines
2.9 KiB
Nix
77 lines
2.9 KiB
Nix
{ lib, buildGoModule, fetchurl, fetchFromGitHub, nixosTests, tzdata }:
|
|
|
|
buildGoModule rec {
|
|
pname = "grafana";
|
|
version = "8.1.6";
|
|
|
|
excludedPackages = "\\(alert_webhook_listener\\|clean-swagger\\|release_publisher\\|slow_proxy\\|slow_proxy_mac\\|macaron\\)";
|
|
|
|
src = fetchFromGitHub {
|
|
rev = "v${version}";
|
|
owner = "grafana";
|
|
repo = "grafana";
|
|
sha256 = "sha256-PUVRFa3b+O2lY6q3vO+rLUcC+fx80iB78tt60f6Vugk=";
|
|
};
|
|
|
|
srcStatic = fetchurl {
|
|
url = "https://dl.grafana.com/oss/release/grafana-${version}.linux-amd64.tar.gz";
|
|
sha256 = "sha256-So9xzet9kPkjcDwNts3iXlCd+u2uiXTo0LVcLc8toyk=";
|
|
};
|
|
|
|
vendorSha256 = "sha256-dn4sliRp58oZALZ8Iu7kE83ntkcMIU84Xr5WoeXlhCI=";
|
|
|
|
preBuild = ''
|
|
# The testcase makes an API call against grafana.com:
|
|
#
|
|
# --- Expected
|
|
# +++ Actual
|
|
# @@ -1,4 +1,4 @@
|
|
# (map[string]interface {}) (len=2) {
|
|
# - (string) (len=5) "error": (string) (len=16) "plugin not found",
|
|
# - (string) (len=7) "message": (string) (len=16) "Plugin not found"
|
|
# + (string) (len=5) "error": (string) (len=171) "Failed to send request: Get \"https://grafana.com/api/plugins/repo/test\": dial tcp: lookup grafana.com on [::1]:53: read udp [::1]:48019->[::1]:53: read: connection refused",
|
|
# + (string) (len=7) "message": (string) (len=24) "Failed to install plugin"
|
|
# }
|
|
sed -i -e '/func TestPluginInstallAccess/a t.Skip();' pkg/tests/api/plugins/api_install_test.go
|
|
|
|
# Skip a flaky test (https://github.com/NixOS/nixpkgs/pull/126928#issuecomment-861424128)
|
|
sed -i -e '/it should change folder successfully and return correct result/{N;s/$/\nt.Skip();/}'\
|
|
pkg/services/libraryelements/libraryelements_patch_test.go
|
|
|
|
|
|
# main module (github.com/grafana/grafana) does not contain package github.com/grafana/grafana/scripts/go
|
|
rm -r scripts/go
|
|
'';
|
|
|
|
ldflags = [
|
|
"-s" "-w" "-X main.version=${version}"
|
|
];
|
|
|
|
# Tests start http servers which need to bind to local addresses:
|
|
# panic: httptest: failed to listen on a port: listen tcp6 [::1]:0: bind: operation not permitted
|
|
__darwinAllowLocalNetworking = true;
|
|
|
|
# On Darwin, files under /usr/share/zoneinfo exist, but fail to open in sandbox:
|
|
# TestValueAsTimezone: date_formats_test.go:33: Invalid has err for input "Europe/Amsterdam": operation not permitted
|
|
preCheck = ''
|
|
export ZONEINFO=${tzdata}/share/zoneinfo
|
|
'';
|
|
|
|
postInstall = ''
|
|
tar -xvf $srcStatic
|
|
mkdir -p $out/share/grafana
|
|
mv grafana-*/{public,conf,tools} $out/share/grafana/
|
|
'';
|
|
|
|
passthru.tests = { inherit (nixosTests) grafana; };
|
|
|
|
meta = with lib; {
|
|
description = "Gorgeous metric viz, dashboards & editors for Graphite, InfluxDB & OpenTSDB";
|
|
license = licenses.agpl3;
|
|
homepage = "https://grafana.com";
|
|
maintainers = with maintainers; [ offline fpletz willibutz globin ma27 Frostman ];
|
|
platforms = platforms.linux ++ platforms.darwin;
|
|
mainProgram = "grafana-server";
|
|
};
|
|
}
|