lanzaboote/flake.nix

98 lines
2.8 KiB
Nix
Raw Normal View History

2022-11-21 05:44:04 -05:00
{
description = "A very basic flake";
inputs = {
nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
rust-overlay.url = "github:oxalica/rust-overlay";
naersk.url = "github:nix-community/naersk";
};
outputs = { self, nixpkgs, rust-overlay, naersk }:
let
pkgs = import nixpkgs {
system = "x86_64-linux";
overlays = [
rust-overlay.overlays.default
];
};
2022-11-21 18:42:41 -05:00
rust-nightly = pkgs.rust-bin.fromRustupToolchainFile ./rust/rust-toolchain.toml;
2022-11-21 05:44:04 -05:00
2022-11-21 18:42:41 -05:00
naersk-stable = pkgs.callPackage naersk {};
naersk-nightly = pkgs.callPackage naersk {
cargo = rust-nightly;
rustc = rust-nightly;
2022-11-21 05:44:04 -05:00
};
2022-11-21 09:36:39 -05:00
qemuUefi = pkgs.writeShellScriptBin "qemu-uefi" ''
exec ${pkgs.qemu}/bin/qemu-system-x86_64 \
-machine q35,accel=kvm:tcg -bios ${pkgs.OVMF.fd}/FV/OVMF.fd \
-m 4096 -serial stdio "$@"
'';
2022-11-21 18:42:41 -05:00
uefi-run = pkgs.callPackage ./nix/uefi-run.nix {
naersk = naersk-stable;
2022-11-21 09:36:39 -05:00
};
systemd-boot-run = pkgs.writeShellScriptBin "systemd-boot-run" ''
${uefi-run}/bin/uefi-run lib/systemd/boot/efi/systemd-bootx64.efi
'';
add-sections = pkgs.writeShellScriptBin "add-sections" ''
set -eu
IN=$1
OSREL=$2
CMDLINE=$3
OUT=$4
stub_line=$(objdump -h "$1" | tail -2 | head -1)
stub_size=0x$(echo "$stub_line" | awk '{print $3}')
stub_offs=0x$(echo "$stub_line" | awk '{print $4}')
osrel_offs=$((stub_size + stub_offs))
cmdline_offs=$((osrel_offs + $(stat -c%s "$OSREL")))
objcopy \
--add-section .osrel="$OSREL" --change-section-vma .osrel=$(printf 0x%x $osrel_offs) \
--add-section .cmdline="$CMDLINE" \
--change-section-vma .cmdline=$(printf 0x%x $cmdline_offs) \
"$IN" "$OUT"
'';
2022-11-21 18:42:41 -05:00
lanzaboote = naersk-nightly.buildPackage {
2022-11-21 09:36:39 -05:00
src = ./rust;
cargoBuildOptions = old: old ++ [
"--target x86_64-unknown-uefi"
];
};
osrel = pkgs.writeText "lanzaboote-osrel" ''
NAME=Lanzaboote
2022-11-21 19:01:11 -05:00
VERSION="${lanzaboote.version}"
2022-11-21 09:36:39 -05:00
'';
2022-11-21 10:03:58 -05:00
cmdline = pkgs.writeText "lanzaboote-cmdline" "";
2022-11-21 09:36:39 -05:00
lanzaboote-uki = pkgs.runCommand "lanzboote-uki" {
nativeBuildInputs = [
pkgs.binutils-unwrapped
add-sections
];
} ''
mkdir -p $out/bin
add-sections ${lanzaboote}/bin/lanzaboote.efi ${osrel} ${cmdline} $out/bin/lanzaboote.efi
'';
2022-11-21 18:45:18 -05:00
in {
packages.x86_64-linux = {
inherit qemuUefi uefi-run lanzaboote lanzaboote-uki;
default = lanzaboote-uki;
};
2022-11-21 09:36:39 -05:00
2022-11-21 18:45:18 -05:00
devShells.x86_64-linux.default = pkgs.mkShell {
nativeBuildInputs = [
qemuUefi
uefi-run
rust-nightly
];
2022-11-21 05:44:04 -05:00
};
2022-11-21 18:45:18 -05:00
};
2022-11-21 05:44:04 -05:00
}