mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-07-06 17:13:24 -05:00
c876559055cryptography 47.0.0 made __deepcopy__ an abstract method on the RSAPrivateKey and EllipticCurvePrivateKey base classes, which tpm2-pytss subclasses. tpm2-pytss 2.3.0 only implements __copy__, so its tpm_rsa_private_key / tpm_ecc_private_key classes can no longer be instantiated, failing 33 tests in the check phase. Backport the upstream fix, which adds __deepcopy__ delegating to __copy__. https://github.com/tpm2-software/tpm2-pytss/pull/689
130 lines
4 KiB
Nix
130 lines
4 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
replaceVars,
|
|
buildPythonPackage,
|
|
fetchPypi,
|
|
fetchpatch,
|
|
fetchpatch2,
|
|
asn1crypto,
|
|
cffi,
|
|
cryptography,
|
|
pkgconfig, # see nativeBuildInputs
|
|
pkg-config, # see nativeBuildInputs
|
|
pytestCheckHook,
|
|
pyyaml,
|
|
setuptools-scm,
|
|
tpm2-tss,
|
|
tpm2-tools,
|
|
swtpm,
|
|
}:
|
|
|
|
let
|
|
isCross = (stdenv.buildPlatform != stdenv.hostPlatform);
|
|
in
|
|
buildPythonPackage rec {
|
|
pname = "tpm2-pytss";
|
|
version = "2.3.0";
|
|
format = "setuptools";
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
hash = "sha256-IAcRKTeWVvXzw7wW02RhJnKxR9gRkftOufn/n77khBA=";
|
|
};
|
|
|
|
patches = [
|
|
# libtpms (underneath swtpm) bumped the TPM revision
|
|
# https://github.com/tpm2-software/tpm2-pytss/pull/593
|
|
(fetchpatch {
|
|
url = "https://github.com/tpm2-software/tpm2-pytss/pull/593.patch";
|
|
hash = "sha256-CNJnSIvUQ0Yvy0o7GdVfFZ7kHJd2hBt5Zv1lqgOeoks=";
|
|
})
|
|
# support cryptography >= 45.0.0
|
|
# https://github.com/tpm2-software/tpm2-pytss/pull/643
|
|
(fetchpatch {
|
|
url = "https://github.com/tpm2-software/tpm2-pytss/commit/6ab4c74e6fb3da7cd38e97c1f8e92532312f8439.patch";
|
|
hash = "sha256-01Qe4qpD2IINc5Z120iVdPitiLBwdr8KNBjLFnGgE7E=";
|
|
})
|
|
# support cryptography >= 47.0.0, which made __deepcopy__ an abstract
|
|
# method on the private-key base classes
|
|
# https://github.com/tpm2-software/tpm2-pytss/pull/689
|
|
(fetchpatch {
|
|
url = "https://github.com/tpm2-software/tpm2-pytss/commit/5d15cad4bde28902a4becb8e2a8e915aba8abbd0.patch";
|
|
hash = "sha256-b2zVD7KJGVzJ765HO8LFAe9MyQmjOTpERmEqUrIg3oM=";
|
|
})
|
|
# Properly restore environment variables upon exit from
|
|
# FAPIConfig context. Accepted into upstream, not yet released.
|
|
(fetchpatch2 {
|
|
url = "https://github.com/tpm2-software/tpm2-pytss/commit/afdee627d0639eb05711a2191f2f76e460793da9.patch?full_index=1";
|
|
hash = "sha256-Y6drcBg4gnbSvnCGw69b42Q/QfLI3u56BGRUEkpdB0M=";
|
|
})
|
|
# Fix build with gcc15 by using c99 for preprocessing
|
|
# The first patch is needed to apply the second; it doesn't affect us
|
|
(fetchpatch {
|
|
url = "https://github.com/tpm2-software/tpm2-pytss/commit/55d28b259f1a68f60c937ea8be7815685d32757f.patch";
|
|
hash = "sha256-sGxUyQ2W2Jl9ROSt1w0E0dVTgFPAmYWlNgcpHcTVv90=";
|
|
})
|
|
(fetchpatch {
|
|
url = "https://github.com/tpm2-software/tpm2-pytss/commit/61d00b4dcca131b3f03f674ceabf4260bdbd6a61.patch";
|
|
hash = "sha256-0dwfyW0Fi5FkzYnaMOb2ua9O6eyCnMgJqT09tTT56vY=";
|
|
})
|
|
]
|
|
++ lib.optionals isCross [
|
|
# pytss will regenerate files from headers of tpm2-tss.
|
|
# Those headers are fed through a compiler via pycparser. pycparser expects `cpp`
|
|
# to be in the path.
|
|
# This is put in the path via stdenv when not cross-compiling, but this is absent
|
|
# when cross-compiling is turned on.
|
|
# This patch changes the call to pycparser.preprocess_file to provide the name
|
|
# of the cross-compiling cpp
|
|
# NOTE: This patch could be dropped after next release. 3.0.0-rc0 already have proper `$CC -E` invocation
|
|
(replaceVars ./cross.patch {
|
|
crossPrefix = stdenv.hostPlatform.config;
|
|
})
|
|
];
|
|
|
|
# Hardening has to be disabled
|
|
# due to pycparsing handling it poorly.
|
|
# See https://github.com/NixOS/nixpkgs/issues/252023
|
|
# for more details.
|
|
hardeningDisable = [ "fortify" ];
|
|
|
|
nativeBuildInputs = [
|
|
cffi
|
|
pkgconfig # this is the Python module
|
|
pkg-config # this is the actual pkg-config tool
|
|
setuptools-scm
|
|
];
|
|
|
|
buildInputs = [ tpm2-tss ];
|
|
|
|
propagatedBuildInputs = [
|
|
cffi
|
|
asn1crypto
|
|
cryptography
|
|
pyyaml
|
|
];
|
|
|
|
nativeCheckInputs = [
|
|
pytestCheckHook
|
|
tpm2-tools
|
|
swtpm
|
|
];
|
|
|
|
preCheck = ''
|
|
export TSS2_FAPICONF=${tpm2-tss.out}/etc/tpm2-tss/fapi-config-test.json
|
|
'';
|
|
|
|
pythonImportsCheck = [ "tpm2_pytss" ];
|
|
|
|
meta = {
|
|
homepage = "https://github.com/tpm2-software/tpm2-pytss";
|
|
changelog = "https://github.com/tpm2-software/tpm2-pytss/blob/${version}/CHANGELOG.md";
|
|
description = "TPM2 TSS Python bindings for Enhanced System API (ESYS)";
|
|
license = lib.licenses.bsd2;
|
|
maintainers = with lib.maintainers; [
|
|
baloo
|
|
scottstephens
|
|
];
|
|
};
|
|
}
|