pkgs/tools/security/volatility3/default.nix

   1 { lib
   2 , fetchFromGitHub
   3 , python3
   4 }:
   5
   6 python3.pkgs.buildPythonApplication rec {
   7   pname = "volatility3";
   8   version = "2.0.1";
   9
  10   src = fetchFromGitHub {
  11     owner = "volatilityfoundation";
  12     repo = pname;
  13     rev = "v${version}";
  14     hash = "sha256-rEqp+V5r4Sk4D+r2ukR1uy4IDj9XQGhYwoYSPeMyKpA=";
  15   };
  16
  17   propagatedBuildInputs = with python3.pkgs; [
  18     capstone
  19     jsonschema
  20     pefile
  21     pycryptodome
  22     yara-python
  23   ];
  24
  25   preBuild = ''
  26     export HOME=$(mktemp -d);
  27   '';
  28
  29   # Project has no tests
  30   doCheck = false;
  31
  32   pythonImportsCheck = [
  33     "volatility3"
  34   ];
  35
  36   meta = with lib; {
  37     description = "Volatile memory extraction frameworks";
  38     homepage = "https://www.volatilityfoundation.org/";
  39     license = {
  40       # Volatility Software License 1.0
  41       free = false;
  42       url = "https://www.volatilityfoundation.org/license/vsl-v1.0";
  43     };
  44     maintainers = with maintainers; [ fab ];
  45   };
  46 }