Merge commit '1a57d96edd156958b12782e8c8b6a374142a7248'

1 files changed, 58 insertions, 0 deletions

diff --git a/nixpkgs/pkgs/os-specific/solo5/default.nix b/nixpkgs/pkgs/os-specific/solo5/default.nix
new file mode 100644
index 000000000000..283cceb12405
--- /dev/null
+++ b/nixpkgs/pkgs/os-specific/solo5/default.nix
@@ -0,0 +1,58 @@
+{ lib, stdenv, fetchurl, pkgconfig, libseccomp }:
+
+let version = "0.6.7";
+in stdenv.mkDerivation {
+  pname = "solo5";
+  inherit version;
+
+  nativeBuildInputs = [ pkgconfig ];
+  buildInputs = lib.optional (stdenv.hostPlatform.isLinux) libseccomp;
+
+  src = fetchurl {
+    url =
+      "https://github.com/Solo5/solo5/releases/download/v${version}/solo5-v${version}.tar.gz";
+    sha256 = "05k9adg3440zk5baa6ry8z5dj8d8r8hvzafh2469pdgcnr6h45gr";
+  };
+
+  hardeningEnable = [ "pie" ];
+
+  configurePhase = ''
+    runHook preConfigure
+    sh configure.sh
+    runHook postConfigure
+  '';
+
+  enableParallelBuilding = true;
+
+  installPhase = ''
+    runHook preInstall
+    export DESTDIR=$out
+    export PREFIX=$out
+    make install-tools
+    ${lib.optionalString stdenv.hostPlatform.isLinux "make ${
+      (lib.concatMapStringsSep " " (x: "install-opam-${x}") [ "hvt" "spt" ])
+    }"}
+    runHook postInstall
+  '';
+
+  doCheck = true;
+  checkPhase = if stdenv.hostPlatform.isLinux then
+    ''
+    patchShebangs tests
+    ./tests/bats-core/bats ./tests/tests.bats
+    ''
+  else
+    null;
+
+  meta = with lib; {
+    description = "Sandboxed execution environment";
+    homepage = "https://github.com/solo5/solo5";
+    license = licenses.isc;
+    maintainers = [ maintainers.ehmry ];
+    platforms = lib.crossLists (arch: os: "${arch}-${os}") [
+      [ "aarch64" "x86_64" ]
+      [ "freebsd" "genode" "linux" "openbsd" ]
+    ];
+  };
+
+}