mirror of
https://github.com/Mic92/sops-nix.git
synced 2024-12-14 11:57:52 +00:00
30 lines
848 B
Nix
30 lines
848 B
Nix
|
{ pkgs ? import <nixpkgs> {}
|
||
|
|
, sudo ? "sudo"
|
||
|
|
}:
|
||
|
|
let
|
||
|
|
sopsPkgs = import ./. { inherit pkgs; };
|
||
|
|
in pkgs.stdenv.mkDerivation {
|
||
|
|
name = "env";
|
||
|
|
nativeBuildInputs = with pkgs; [
|
||
|
|
bashInteractive
|
||
|
|
gnupg
|
||
|
|
utillinux
|
||
|
|
nix
|
||
|
|
sopsPkgs.sops-pgp-hook-test
|
||
|
|
] ++ pkgs.lib.optional (pkgs.stdenv.isLinux) sopsPkgs.sops-install-secrets.unittest;
|
||
|
|
# allow to prefetch shell dependencies in build phase
|
||
|
|
dontUnpack = true;
|
||
|
|
installPhase = ''
|
||
|
|
echo $nativeBuildInputs > $out
|
||
|
|
'';
|
||
|
|
shellHook = ''
|
||
|
|
set -x
|
||
|
|
NIX_PATH=nixpkgs=${toString pkgs.path} TEST_ASSETS=$(realpath ./pkgs/sops-pgp-hook/test-assets) \
|
||
|
|
sops-pgp-hook.test
|
||
|
|
${pkgs.lib.optionalString (pkgs.stdenv.isLinux) ''
|
||
|
|
${sudo} TEST_ASSETS=$(realpath ./pkgs/sops-install-secrets/test-assets) \
|
||
|
|
unshare --mount --fork sops-install-secrets.test
|
||
|
|
''}
|
||
|
|
'';
|
||
|
|
}
|