edc88c9d01
* Use finalAttrs and fetchzip * Updated gpl3 -> gpl3Plus * Added meaningful description * Fix segmentation fault trace traps by needing udev * Fix Electron sandbox issue with --in-gpu-process * Add sourceProvenance and changelog to meta
128 lines
2.6 KiB
Nix
128 lines
2.6 KiB
Nix
{ lib
|
|
, stdenv
|
|
, fetchzip
|
|
, makeWrapper
|
|
, alsa-lib
|
|
, at-spi2-atk
|
|
, at-spi2-core
|
|
, atk
|
|
, cairo
|
|
, cups
|
|
, dbus
|
|
, expat
|
|
, fontconfig
|
|
, freetype
|
|
, gdk-pixbuf
|
|
, glib
|
|
, gtk3
|
|
, libGL
|
|
, libappindicator-gtk3
|
|
, libdrm
|
|
, libnotify
|
|
, libpulseaudio
|
|
, libuuid
|
|
, libxcb
|
|
, libxkbcommon
|
|
, libxshmfence
|
|
, mesa
|
|
, nspr
|
|
, nss
|
|
, pango
|
|
, systemd
|
|
, udev
|
|
, unzip
|
|
, xdg-utils
|
|
, xorg
|
|
}:
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "bloodhound";
|
|
version = "4.3.1";
|
|
|
|
src = fetchzip {
|
|
url = "https://github.com/BloodHoundAD/BloodHound/releases/download/v${finalAttrs.version}/BloodHound-linux-x64.zip";
|
|
hash = "sha256-gGfZ5Mj8rmz3dwKyOitRExkgOmSVDOqKpPxvGlE4izw=";
|
|
};
|
|
|
|
rpath = lib.makeLibraryPath [
|
|
alsa-lib
|
|
at-spi2-atk
|
|
at-spi2-core
|
|
atk
|
|
cairo
|
|
cups
|
|
dbus
|
|
expat
|
|
fontconfig
|
|
freetype
|
|
gdk-pixbuf
|
|
glib
|
|
gtk3
|
|
libGL
|
|
libappindicator-gtk3
|
|
libdrm
|
|
libnotify
|
|
libpulseaudio
|
|
libuuid
|
|
libxcb
|
|
libxkbcommon
|
|
mesa
|
|
nspr
|
|
nss
|
|
pango
|
|
systemd
|
|
stdenv.cc.cc.lib
|
|
udev
|
|
xorg.libX11
|
|
xorg.libXScrnSaver
|
|
xorg.libXcomposite
|
|
xorg.libXcursor
|
|
xorg.libXdamage
|
|
xorg.libXext
|
|
xorg.libXfixes
|
|
xorg.libXi
|
|
xorg.libXrandr
|
|
xorg.libXrender
|
|
xorg.libXtst
|
|
xorg.libxkbfile
|
|
xorg.libxshmfence
|
|
];
|
|
|
|
buildInputs = [
|
|
gtk3 # needed for GSETTINGS_SCHEMAS_PATH
|
|
];
|
|
|
|
nativeBuildInputs = [ makeWrapper unzip ];
|
|
|
|
dontBuild = true;
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
mkdir -p $out/{bin,/lib/BloodHound}
|
|
mv * $out/lib/BloodHound
|
|
chmod +x $out/lib/BloodHound/BloodHound
|
|
|
|
patchelf --set-interpreter ${stdenv.cc.bintools.dynamicLinker} \
|
|
$out/lib/BloodHound/BloodHound --set-rpath ${finalAttrs.rpath}:$out/lib/BloodHound \
|
|
--add-needed libudev.so # Needed to fix trace trap (core dump)
|
|
|
|
makeWrapper $out/lib/BloodHound/BloodHound $out/bin/BloodHound \
|
|
--prefix XDG_DATA_DIRS : $GSETTINGS_SCHEMAS_PATH \
|
|
--suffix PATH : ${lib.makeBinPath [xdg-utils]} \
|
|
--append-flags "--in-process-gpu" # fix for sandbox issues
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "Active Directory reconnaissance and attack path management tool";
|
|
homepage = "https://github.com/BloodHoundAD/BloodHound";
|
|
sourceProvenance = with sourceTypes; [ binaryNativeCode ];
|
|
changelog = "https://github.com/BloodHoundAD/BloodHound/releases/tag/v${finalAttrs.version}";
|
|
downloadPage = "https://github.com/BloodHoundAD/BloodHound/releases";
|
|
license = licenses.gpl3Plus;
|
|
maintainers = with maintainers; [ akechishiro ];
|
|
platforms = [ "x86_64-linux" ];
|
|
mainProgram = "BloodHound";
|
|
};
|
|
})
|