1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
{
lib,
stdenv,
substituteAll,
buildPythonPackage,
fetchPypi,
pythonOlder,
asn1crypto,
cffi,
cryptography,
pkgconfig, # see nativeBuildInputs
pkg-config, # see nativeBuildInputs
pytestCheckHook,
pyyaml,
setuptools-scm,
tpm2-tss,
tpm2-tools,
swtpm,
}:
let
isCross = (stdenv.buildPlatform != stdenv.hostPlatform);
in
buildPythonPackage rec {
pname = "tpm2-pytss";
version = "2.2.1";
format = "setuptools";
disabled = pythonOlder "3.7";
src = fetchPypi {
inherit pname version;
hash = "sha256-uPFUc0IvN39ZxyF9zRR5FlzOYt+jOTTsl2oni68unv4=";
};
patches =
[
# Fix hardcoded `fapi-config.json` configuration path
./fapi-config.patch
# Backport for https://github.com/tpm2-software/tpm2-pytss/pull/576
# This is likely to be dropped with the next major release (>= 2.3)
./pr576-backport.patch
]
++ lib.optionals isCross [
# pytss will regenerate files from headers of tpm2-tss.
# Those headers are fed through a compiler via pycparser. pycparser expects `cpp`
# to be in the path.
# This is put in the path via stdenv when not cross-compiling, but this is absent
# when cross-compiling is turned on.
# This patch changes the call to pycparser.preprocess_file to provide the name
# of the cross-compiling cpp
(substituteAll {
src = ./cross.patch;
crossPrefix = stdenv.hostPlatform.config;
})
];
postPatch = ''
sed -i "s#@TPM2_TSS@#${tpm2-tss.out}#" src/tpm2_pytss/FAPI.py
'';
# Hardening has to be disabled
# due to pycparsing handling it poorly.
# See https://github.com/NixOS/nixpkgs/issues/252023
# for more details.
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [
cffi
pkgconfig # this is the Python module
pkg-config # this is the actual pkg-config tool
setuptools-scm
];
buildInputs = [ tpm2-tss ];
propagatedBuildInputs = [
cffi
asn1crypto
cryptography
pyyaml
];
doCheck = true;
nativeCheckInputs = [
pytestCheckHook
tpm2-tools
swtpm
];
pythonImportsCheck = [ "tpm2_pytss" ];
meta = with lib; {
homepage = "https://github.com/tpm2-software/tpm2-pytss";
changelog = "https://github.com/tpm2-software/tpm2-pytss/blob/${version}/CHANGELOG.md";
description = "TPM2 TSS Python bindings for Enhanced System API (ESYS)";
license = licenses.bsd2;
maintainers = with maintainers; [ baloo ];
};
}
|
