pkgs/tools/networking/ebpf-verifier/default.nix

   1 { lib
   2 , stdenv
   3 , fetchFromGitHub
   4 , boost
   5 , cmake
   6 , catch2
   7 , pkg-config
   8 , substituteAll
   9 , yaml-cpp
  10 }:
  11
  12 stdenv.mkDerivation {
  13   pname = "ebpf-verifier";
  14   version = "unstable-2023-07-15";
  15
  16   src = fetchFromGitHub {
  17     owner = "vbpf";
  18     repo = "ebpf-verifier";
  19     rev = "de14d3aa3cd2845b621faf32b599766a66e158cf";
  20     fetchSubmodules = true;
  21     hash = "sha256-gnxB8ZLbTyIYpd61T57LPKFm1MHufeVEq/qN9pu2Vpk=";
  22   };
  23
  24   patches = [
  25     (substituteAll {
  26       # We will download them instead of cmake's fetchContent
  27       src = ./remove-fetchcontent-usage.patch;
  28       catch2Src = catch2.src;
  29     })
  30   ];
  31
  32   nativeBuildInputs = [
  33     pkg-config
  34     cmake
  35   ];
  36
  37   buildInputs = [
  38     boost
  39     yaml-cpp
  40   ];
  41
  42   installPhase = ''
  43     runHook preInstall
  44
  45     mkdir -p $out/bin
  46     cp ../check $out/bin/ebpf-verifier
  47
  48     runHook postInstall
  49   '';
  50
  51   meta = with lib; {
  52     description = "eBPF verifier based on abstract interpretation";
  53     homepage = "https://github.com/vbpf/ebpf-verifier";
  54     license = licenses.mit;
  55     platforms = platforms.linux;
  56     maintainers = with maintainers; [ gaelreyrol ];
  57     mainProgram = "ebpf-verifier";
  58   };
  59 }