libfido2: make builds reproducible

2020-04-21 09:44:11 +02:00 · 2020-04-21 09:44:11 +02:00 · f05a209e34
commit f05a209e34
parent ddf0438493
1 changed files with 8 additions and 0 deletions
--- a/pkgs/development/libraries/libfido2/default.nix
+++ b/pkgs/development/libraries/libfido2/default.nix
@ -22,6 +22,14 @@ stdenv.mkDerivation rec {
  buildInputs = [ hidapi libcbor openssl ]
    ++ stdenv.lib.optionals stdenv.isLinux [ udev ];

+  patches = [
+    # make build reproducible
+    (fetchpatch {
+      url = "https://github.com/Yubico/libfido2/commit/e79f7d7996e70d6b2ae9826fce81d61659cab4f6.patch";
+      sha256 = "0jwg69f95qqf0ym24q1ka50d3d3338cyw4fdfzpw4sab0shiaq9v";
+    })
+  ];
+
  cmakeFlags = [
    "-DUDEV_RULES_DIR=${placeholder "out"}/etc/udev/rules.d"
    "-DUSE_HIDAPI=1"