237 lines
6.8 KiB
Nix
237 lines
6.8 KiB
Nix
{ lib
|
|
, stdenv
|
|
, fetchFromGitHub
|
|
, buildGoModule
|
|
, makeWrapper
|
|
, cacert
|
|
, moreutils
|
|
, jq
|
|
, git
|
|
, pkg-config
|
|
, yarn
|
|
, python3
|
|
, esbuild
|
|
, nodejs
|
|
, node-gyp
|
|
, libsecret
|
|
, libkrb5
|
|
, xorg
|
|
, ripgrep
|
|
, AppKit
|
|
, Cocoa
|
|
, Security
|
|
, cctools
|
|
, nixosTests
|
|
}:
|
|
|
|
let
|
|
system = stdenv.hostPlatform.system;
|
|
|
|
yarn' = yarn.override { inherit nodejs; };
|
|
defaultYarnOpts = [ "frozen-lockfile" "non-interactive" "no-progress" ];
|
|
|
|
vsBuildTarget = {
|
|
x86_64-linux = "linux-x64";
|
|
aarch64-linux = "linux-arm64";
|
|
x86_64-darwin = "darwin-x64";
|
|
aarch64-darwin = "darwin-arm64";
|
|
}.${system} or (throw "Unsupported system ${system}");
|
|
|
|
esbuild' = esbuild.override {
|
|
buildGoModule = args: buildGoModule (args // rec {
|
|
version = "0.17.14";
|
|
src = fetchFromGitHub {
|
|
owner = "evanw";
|
|
repo = "esbuild";
|
|
rev = "v${version}";
|
|
hash = "sha256-4TC1d5FOZHUMuEMTcTOBLZZM+sFUswhyblI5HVWyvPA=";
|
|
};
|
|
vendorHash = "sha256-+BfxCyg0KkDQpHt/wycy/8CTG6YBA/VJvJFhhzUnSiQ=";
|
|
});
|
|
};
|
|
|
|
# replaces esbuild's download script with a binary from nixpkgs
|
|
patchEsbuild = path: version: ''
|
|
mkdir -p ${path}/node_modules/esbuild/bin
|
|
jq "del(.scripts.postinstall)" ${path}/node_modules/esbuild/package.json | sponge ${path}/node_modules/esbuild/package.json
|
|
sed -i 's/${version}/${esbuild'.version}/g' ${path}/node_modules/esbuild/lib/main.js
|
|
ln -s -f ${esbuild'}/bin/esbuild ${path}/node_modules/esbuild/bin/esbuild
|
|
'';
|
|
in
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "openvscode-server";
|
|
version = "1.88.1";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "gitpod-io";
|
|
repo = "openvscode-server";
|
|
rev = "openvscode-server-v${finalAttrs.version}";
|
|
hash = "sha256-Yc16L13Z8AmsGoSFbvy+4+KBdHxvqLMwZLeU2/dAQVU=";
|
|
};
|
|
|
|
yarnCache = stdenv.mkDerivation {
|
|
name = "${finalAttrs.pname}-${finalAttrs.version}-${system}-yarn-cache";
|
|
inherit (finalAttrs) src;
|
|
nativeBuildInputs = [ cacert yarn' git ];
|
|
buildPhase = ''
|
|
export HOME=$PWD
|
|
|
|
yarn config set yarn-offline-mirror $out
|
|
find "$PWD" -name "yarn.lock" -printf "%h\n" | \
|
|
xargs -I {} yarn --cwd {} \
|
|
--frozen-lockfile --ignore-scripts --ignore-platform \
|
|
--ignore-engines --no-progress --non-interactive
|
|
'';
|
|
|
|
installPhase = ''
|
|
echo yarnCache
|
|
'';
|
|
|
|
outputHashMode = "recursive";
|
|
outputHashAlgo = "sha256";
|
|
outputHash = "sha256-89c6GYLT2RzHqwxBKegYqB6g5rEJ6/nH53cnfV7b0Ts=";
|
|
};
|
|
|
|
nativeBuildInputs = [
|
|
nodejs
|
|
yarn'
|
|
python3
|
|
pkg-config
|
|
makeWrapper
|
|
git
|
|
jq
|
|
moreutils
|
|
];
|
|
|
|
buildInputs = lib.optionals (!stdenv.isDarwin) [ libsecret ]
|
|
++ (with xorg; [ libX11 libxkbfile libkrb5 ])
|
|
++ lib.optionals stdenv.isDarwin [
|
|
AppKit
|
|
Cocoa
|
|
Security
|
|
cctools
|
|
];
|
|
|
|
patches = [
|
|
# Patch out remote download of nodejs from build script
|
|
./remove-node-download.patch
|
|
];
|
|
|
|
# Disable NAPI_EXPERIMENTAL to allow to build with Node.js≥18.20.0.
|
|
env.NIX_CFLAGS_COMPILE = "-DNODE_API_EXPERIMENTAL_NOGC_ENV_OPT_OUT";
|
|
|
|
postPatch = ''
|
|
export HOME=$PWD
|
|
|
|
# remove all built-in extensions, as these are 3rd party extensions that
|
|
# get downloaded from vscode marketplace
|
|
jq --slurp '.[0] * .[1]' "product.json" <(
|
|
cat << EOF
|
|
{
|
|
"builtInExtensions": []
|
|
}
|
|
EOF
|
|
) | sponge product.json
|
|
'';
|
|
|
|
configurePhase = ''
|
|
runHook preConfigure
|
|
|
|
# set default yarn opts
|
|
${lib.concatMapStrings (option: ''
|
|
yarn --offline config set ${option}
|
|
'') defaultYarnOpts}
|
|
|
|
# set offline mirror to yarn cache we created in previous steps
|
|
yarn --offline config set yarn-offline-mirror "${finalAttrs.yarnCache}"
|
|
|
|
# set nodedir to prevent node-gyp from downloading headers
|
|
# taken from https://nixos.org/manual/nixpkgs/stable/#javascript-tool-specific
|
|
mkdir -p $HOME/.node-gyp/${nodejs.version}
|
|
echo 9 > $HOME/.node-gyp/${nodejs.version}/installVersion
|
|
ln -sfv ${nodejs}/include $HOME/.node-gyp/${nodejs.version}
|
|
export npm_config_nodedir=${nodejs}
|
|
|
|
# use updated node-gyp. fixes the following error on Darwin:
|
|
# PermissionError: [Errno 1] Operation not permitted: '/usr/sbin/pkgutil'
|
|
export npm_config_node_gyp=${node-gyp}/lib/node_modules/node-gyp/bin/node-gyp.js
|
|
|
|
runHook postConfigure
|
|
'';
|
|
|
|
buildPhase = ''
|
|
runHook preBuild
|
|
|
|
# install dependencies
|
|
yarn --offline --ignore-scripts
|
|
|
|
# run yarn install everywhere, skipping postinstall so we can patch esbuild
|
|
find . -path "*node_modules" -prune -o \
|
|
-path "./*/*" -name "yarn.lock" -printf "%h\n" | \
|
|
xargs -I {} yarn --cwd {} \
|
|
--frozen-lockfile --offline --ignore-scripts --ignore-engines
|
|
|
|
${patchEsbuild "./build" "0.12.6"}
|
|
${patchEsbuild "./extensions" "0.11.23"}
|
|
|
|
# patch shebangs of node_modules to allow binary packages to build
|
|
patchShebangs ./remote/node_modules
|
|
|
|
# put ripgrep binary into bin so postinstall does not try to download it
|
|
find -path "*@vscode/ripgrep" -type d \
|
|
-execdir mkdir -p {}/bin \; \
|
|
-execdir ln -s ${ripgrep}/bin/rg {}/bin/rg \;
|
|
'' + lib.optionalString stdenv.isDarwin ''
|
|
# use prebuilt binary for @parcel/watcher, which requires macOS SDK 10.13+
|
|
# (see issue #101229)
|
|
pushd ./remote/node_modules/@parcel/watcher
|
|
mkdir -p ./build/Release
|
|
mv ./prebuilds/darwin-x64/node.napi.glibc.node ./build/Release/watcher.node
|
|
jq "del(.scripts) | .gypfile = false" ./package.json | sponge ./package.json
|
|
popd
|
|
'' + ''
|
|
export NODE_OPTIONS=--openssl-legacy-provider
|
|
|
|
# rebuild binaries, we use npm here, as yarn does not provide an alternative
|
|
# that would not attempt to try to reinstall everything and break our
|
|
# patching attempts
|
|
npm --prefix ./remote rebuild --build-from-source
|
|
|
|
# run postinstall scripts after patching
|
|
find . -path "*node_modules" -prune -o \
|
|
-path "./*/*" -name "yarn.lock" -printf "%h\n" | \
|
|
xargs -I {} sh -c 'jq -e ".scripts.postinstall" {}/package.json >/dev/null && yarn --cwd {} postinstall --frozen-lockfile --offline || true'
|
|
|
|
# build and minify
|
|
yarn --offline gulp vscode-reh-web-${vsBuildTarget}-min
|
|
|
|
runHook postBuild
|
|
'';
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
mkdir -p $out
|
|
cp -R -T ../vscode-reh-web-${vsBuildTarget} $out
|
|
ln -s ${nodejs}/bin/node $out
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
passthru.tests = {
|
|
inherit (nixosTests) openvscode-server;
|
|
};
|
|
|
|
meta = {
|
|
description = "Run VS Code on a remote machine";
|
|
longDescription = ''
|
|
Run upstream VS Code on a remote machine with access through a modern web
|
|
browser from any device, anywhere.
|
|
'';
|
|
homepage = "https://github.com/gitpod-io/openvscode-server";
|
|
license = lib.licenses.mit;
|
|
maintainers = with lib.maintainers; [ dguenther ghuntley emilytrau ];
|
|
platforms = [ "x86_64-linux" "aarch64-linux" "x86_64-darwin" "aarch64-darwin" ];
|
|
mainProgram = "openvscode-server";
|
|
};
|
|
})
|