akvorado/flake.nix

{
  inputs = {
    nixpkgs.url = "nixpkgs";
    flake-utils.url = "github:numtide/flake-utils";
  };
  outputs = { self, nixpkgs, flake-utils }:
    flake-utils.lib.eachDefaultSystem (system:
      let
        pkgs = nixpkgs.legacyPackages."${system}";
        deps = [
          pkgs.curl
          pkgs.git
          pkgs.go_1_19
          pkgs.nodejs-16_x
        ];
      in
      {
        # This can be built with "nix build --option sandbox false".
        # Not a good example on how to package things for Nix!
        packages.default = pkgs.stdenv.mkDerivation {
          name = "akvorado";
          src = ./.;
          nativeBuildInputs = deps;
          configurePhase = ''
            export HOME=$TMPDIR
            export SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt
            export GOFLAGS=-trimpath
          '';
          # We do not use a wrapper to set SSL_CERT_FILE because, either a
          # binary or a shell wrapper, it would pull the libc (~30M).
          installPhase = ''
            mkdir -p $out/bin $out/share/ca-certificates
            cp bin/akvorado $out/bin/.
            cp ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt $out/share/ca-certificates/.
          '';
        };

        # Activate with "nix develop"
        devShells.default = pkgs.mkShell {
          name = "akvorado-dev";
          buildInputs = deps;
        };
      });
}