58 lines
1.6 KiB
Nix
58 lines
1.6 KiB
Nix
{ lib
|
|
, stdenv
|
|
, fetchFromGitHub
|
|
, installShellFiles
|
|
, makeWrapper
|
|
, coreutils
|
|
, openssh
|
|
, gnupg
|
|
, perl
|
|
, procps
|
|
, gnugrep
|
|
, gawk
|
|
, findutils
|
|
, gnused
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "keychain";
|
|
version = "2.8.5";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "funtoo";
|
|
repo = "keychain";
|
|
rev = version;
|
|
sha256 = "1bkjlg0a2bbdjhwp37ci1rwikvrl4s3xlbf2jq2z4azc96dr83mj";
|
|
};
|
|
|
|
nativeBuildInputs = [ installShellFiles makeWrapper ];
|
|
buildInputs = [ perl ];
|
|
|
|
installPhase = ''
|
|
mkdir -p $out/bin
|
|
cp keychain $out/bin/keychain
|
|
installManPage keychain.1
|
|
wrapProgram $out/bin/keychain \
|
|
--prefix PATH ":" "${lib.makeBinPath [ coreutils findutils gawk gnupg gnugrep gnused openssh procps ]}" \
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "Keychain management tool";
|
|
longDescription = ''
|
|
Keychain helps you to manage SSH and GPG keys in a convenient and secure
|
|
manner. It acts as a frontend to ssh-agent and ssh-add, but allows you
|
|
to easily have one long running ssh-agent process per system, rather
|
|
than the norm of one ssh-agent per login session.
|
|
|
|
This dramatically reduces the number of times you need to enter your
|
|
passphrase. With keychain, you only need to enter a passphrase once
|
|
every time your local machine is rebooted. Keychain also makes it easy
|
|
for remote cron jobs to securely "hook in" to a long-running ssh-agent
|
|
process, allowing your scripts to take advantage of key-based logins.
|
|
'';
|
|
homepage = "https://www.funtoo.org/Keychain";
|
|
license = licenses.gpl2;
|
|
platforms = platforms.unix;
|
|
maintainers = with maintainers; [ sigma ];
|
|
};
|
|
}
|