pkgs/sternenseemann: add release tarball tooling

The following nix functions allow easily creating derivations for
building a signed releases directory for project(s) to be served via
e. g. HTTP.

* buildGitTarball: builds a reproducible .tar.gz for a given git
  revision or tag (similar to git archive, but we don't actually
  reuse it in favor of fetchgit).
* bundleSignedReleases: symlinks tarballs generated using
  buildGitTarball and accompanying (manually provided) signatures into a
  directory and verifies the signatures to ensure buildGitTarball is
  donig what it's supposed to.

1 files changed, 9 insertions, 0 deletions

diff --git a/pkgs/sternenseemann/default.nix b/pkgs/sternenseemann/default.nix
index b133df65..1a348a08 100644
--- a/pkgs/sternenseemann/default.nix
+++ b/pkgs/sternenseemann/default.nix
@@ -47,6 +47,15 @@ lib.fix (self: {
   # nix utilities
   lib = callPackage ./lib { };
 
+  buildGitTarball = callPackage ./build-git-tarball {
+    inherit getBins;
+  };
+
+  bundleSignedReleases = callPackage ./bundle-signed-release {
+    inherit getBins;
+    inherit (self) buildGitTarball;
+  };
+
   # packaged sterniware
   inherit (haskellPackages) emoji-generic;