65be8f20e0
* users/grfn/system/home/yeren: remove obsolete awscli2 overrides * ops: make new isSystemUser || isNormalUser assertion happy * users/grfn/system/system/mugwump: make buildkite agents system users * users/tazjin/nixos/camden: set isSystemUser = true for git * users/tazjin/emacs: Remove missing & broken packages * third_party/openldap: remove, as the argon2 module is now enabled upstream * third_party/gerrit_plugins: Pinned new unstable hashes * third_party/nix, third_party/grpc: Disabled CI as these are broken * third_party/overlays/emacs: Bumped version to stay in sync with channel * third_party/buzz: Update LIBCLANG_PATH to reference libclang.lib, since libclang's default output no longer contains libclang.so * users/grfn/system/home: Install julia-stable instead of julia (which aliases to julia-lts), as the latter depends on an insecure version of libgit Change-Id: Iff33b0ecb0ef07a82d1de35e23c40d2f4bf0f8ed Reviewed-on: https://cl.tvl.fyi/c/depot/+/3001 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: grfn <grfn@gws.fyi>
26 lines
885 B
Nix
26 lines
885 B
Nix
{ depot, pkgs, ... }@args:
|
|
|
|
let
|
|
inherit (import ../builder.nix args) buildGerritBazelPlugin;
|
|
in buildGerritBazelPlugin rec {
|
|
name = "oauth";
|
|
depsOutputHash = "sha256:008xqrvy77x06y4dd74pd1vv8rzbp0jd2dw2sqcv9b5qhav7ilyw";
|
|
src = pkgs.fetchgit {
|
|
url = "https://gerrit.googlesource.com/plugins/oauth";
|
|
rev = "4aa7322db5ec221b2419e12a9ec7af5b8c66659c";
|
|
sha256 = "1szra3pjl0axf4a7k96flpk7rhfvp37rdxay4gbglh939gzbba88";
|
|
};
|
|
overlayPluginCmd = ''
|
|
chmod +w "$out" "$out/plugins/external_plugin_deps.bzl"
|
|
cp -R "${src}" "$out/plugins/${name}"
|
|
cp "${src}/external_plugin_deps.bzl" "$out/plugins/external_plugin_deps.bzl"
|
|
'';
|
|
|
|
# The code in the OAuth repo expects CAS to return oauth2 access tokens as urlencoded.
|
|
# Our version of CAS returns them as JSON instead.
|
|
postPatch = ''
|
|
pushd plugins/oauth
|
|
patch -p1 <${./cas-6x.patch}
|
|
popd
|
|
'';
|
|
}
|