lanzaboote-stub: init at 0.3.0

pkgs/tools/system/lanzaboote/stub.nix

@@ -0,0 +1,24 @@
+{ rustPlatform, fetchFromGitHub, stdenv, lib }:
+
+rustPlatform.buildRustPackage {
+  pname = "lanzaboote-stub";
+  version = "0.3.0";
+
+  src = fetchFromGitHub {
+    owner = "nix-community";
+    repo = "lanzaboote";
+    rev = "v0.3.0";
+    hash = "sha256-Fb5TeRTdvUlo/5Yi2d+FC8a6KoRLk2h1VE0/peMhWPs=";
+  };
+
+  sourceRoot = "source/rust/stub";
+
+  cargoHash = "sha256-FlnheCgowYsEHcFMn6k8ESxDuggbO4tNdQlOjUIj7oE=";
+
+  # `cc-wrapper`/our clang doesn't understand MSVC link opts (hack):
+  RUSTFLAGS = "-Clinker=${stdenv.cc.bintools}/bin/${stdenv.cc.targetPrefix}lld-link -Clinker-flavor=lld-link";
+  # NIX_ENFORCE_PURITY = "0";
+
+  # TODO: limit supported platforms to UEFI
+  meta.platforms = lib.platforms.all;
+}

pkgs/tools/system/lanzaboote/tool.nix

@@ -0,0 +1,28 @@
+{ rustPlatform, fetchFromGitHub, systemd, binutils-unwrapped, sbsigntool }:
+
+rustPlatform.buildRustPackage {
+  pname = "lanzaboote-tool";
+  version = "0.3.0";
+
+  src = fetchFromGitHub {
+    owner = "nix-community";
+    repo = "lanzaboote";
+    rev = "v0.3.0";
+    hash = "sha256-Fb5TeRTdvUlo/5Yi2d+FC8a6KoRLk2h1VE0/peMhWPs=";
+  };
+
+  checkInputs = [
+    binutils-unwrapped
+    sbsigntool
+  ];
+
+  sourceRoot = "source/rust/tool";
+
+  cargoHash = "sha256-g4WzqfH6DZVUuNb0jV3MFdm3h7zy2bQ6d3agrXesWgc=";
+
+  TEST_SYSTEMD = systemd;
+  RUST_BACKTRACE = "full";
+
+  # TODO: limit supported platforms to UEFI
+  meta.platforms = [ "x86_64-linux" "aarch64-linux" ]; # lib.platforms.uefi;
+}

pkgs/top-level/all-packages.nix

@@ -9511,6 +9511,10 @@ with pkgs;
 
   jump = callPackage ../tools/system/jump { };
 
+  lanzaboote-stub = callPackage ../tools/system/lanzaboote/stub.nix { };
+
+  lanzaboote-tool = callPackage ../tools/system/lanzaboote/tool.nix { };
+
   larynx = callPackage ../tools/audio/larynx { };
 
   larynx-train = with python3Packages; toPythonApplication larynx-train;