nomicon/pkgs/applications/misc/1password/default.nix

{ lib, stdenv, fetchzip, autoPatchelfHook, fetchurl, xar, cpio }:

stdenv.mkDerivation rec {
  pname = "1password-cli";
  version = "1.12.2";
  src =
    if stdenv.isLinux then
      fetchzip
        {
          url = {
            "i686-linux" = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_linux_386_v${version}.zip";
            "x86_64-linux" = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_linux_amd64_v${version}.zip";
            "aarch64-linux" = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_linux_arm64_v${version}.zip";
          }.${stdenv.hostPlatform.system};
          sha256 = {
            "i686-linux" = "tCm/vDBASPN9FBSVRJ6BrFc7hdtZWPEAgvokJhjazPg=";
            "x86_64-linux" = "3VkVMuTAfeEowkguJi2fd1kG7GwO1VN5GBPgNaH3Zv4=";
            "aarch64-linux" = "12h1s9c97w0gb6bia3hy7773mwpfnyrn40sbjm1zc37y4zyi5dyp";
          }.${stdenv.hostPlatform.system};
          stripRoot = false;
        } else
      fetchurl {
        url = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_apple_universal_v${version}.pkg";
        sha256 = "xG/6YZdkJxr5Py90rkIyG4mK40yFTmNSfih9jO2uF+4=";
      };

  buildInputs = lib.optionals stdenv.isDarwin [ xar cpio ];

  unpackPhase = lib.optionalString stdenv.isDarwin ''
    xar -xf $src
    zcat op.pkg/Payload | cpio -i
  '';

  installPhase = ''
    install -D op $out/bin/op
  '';

  dontStrip = stdenv.isDarwin;

  nativeBuildInputs = lib.optionals stdenv.isLinux [ autoPatchelfHook ];

  doInstallCheck = true;

  installCheckPhase = ''
    $out/bin/op --version
  '';

  meta = with lib; {
    description = "1Password command-line tool";
    homepage = "https://support.1password.com/command-line/";
    downloadPage = "https://app-updates.agilebits.com/product_history/CLI";
    maintainers = with maintainers; [ joelburget marsam ];
    license = licenses.unfree;
    platforms = [ "i686-linux" "x86_64-linux" "x86_64-darwin" "aarch64-linux" "aarch64-darwin" ];
  };
}
treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 3 years ago			`{ lib, stdenv, fetchzip, autoPatchelfHook, fetchurl, xar, cpio }:`
1password: init at version 0.4 (#40158) 6 years ago
			`stdenv.mkDerivation rec {`
_1password: rename pname to avoid collisions with 1password gui Fixes https://github.com/NixOS/nixpkgs/issues/157752 2 years ago			`pname = "1password-cli";`
_1password: 1.11.2 -> 1.12.2 The most desirable change in this update range is the ability to create items via files, instead of via specifying the contents base64-encoded on the command line (which leaks secrets to anybody who can list processes). 3 years ago			`version = "1.12.2";`
1password: Fix darwin build 6 years ago			`src =`
_1password: 1.11.2 -> 1.12.2 The most desirable change in this update range is the ability to create items via files, instead of via specifying the contents base64-encoded on the command line (which leaks secrets to anybody who can list processes). 3 years ago			`if stdenv.isLinux then`
			`fetchzip`
			`{`
			`url = {`
			`"i686-linux" = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_linux_386_v${version}.zip";`
			`"x86_64-linux" = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_linux_amd64_v${version}.zip";`
_1password: download arm64 binary for aarch64-linux 2 years ago			`"aarch64-linux" = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_linux_arm64_v${version}.zip";`
_1password: 1.11.2 -> 1.12.2 The most desirable change in this update range is the ability to create items via files, instead of via specifying the contents base64-encoded on the command line (which leaks secrets to anybody who can list processes). 3 years ago			`}.${stdenv.hostPlatform.system};`
			`sha256 = {`
			`"i686-linux" = "tCm/vDBASPN9FBSVRJ6BrFc7hdtZWPEAgvokJhjazPg=";`
			`"x86_64-linux" = "3VkVMuTAfeEowkguJi2fd1kG7GwO1VN5GBPgNaH3Zv4=";`
_1password: download arm64 binary for aarch64-linux 2 years ago			`"aarch64-linux" = "12h1s9c97w0gb6bia3hy7773mwpfnyrn40sbjm1zc37y4zyi5dyp";`
_1password: 1.11.2 -> 1.12.2 The most desirable change in this update range is the ability to create items via files, instead of via specifying the contents base64-encoded on the command line (which leaks secrets to anybody who can list processes). 3 years ago			`}.${stdenv.hostPlatform.system};`
			`stripRoot = false;`
			`} else`
			`fetchurl {`
			`url = "https://cache.agilebits.com/dist/1P/op/pkg/v${version}/op_apple_universal_v${version}.pkg";`
			`sha256 = "xG/6YZdkJxr5Py90rkIyG4mK40yFTmNSfih9jO2uF+4=";`
			`};`
1password: init at version 0.4 (#40158) 6 years ago
pkgs/applications: stdenv.lib -> lib 3 years ago			`buildInputs = lib.optionals stdenv.isDarwin [ xar cpio ];`
1password: 0.7.0 -> 0.9.4 4 years ago
pkgs/applications: stdenv.lib -> lib 3 years ago			`unpackPhase = lib.optionalString stdenv.isDarwin ''`
1password: 0.7.0 -> 0.9.4 4 years ago			`xar -xf $src`
_1password: Fix Darwin Builds The latest update to 1.9.1 broke builds on darwin, due to some paths changing in the unpacked darwin package. This updates the darwin unpackPhase to use the updated path. 3 years ago			`zcat op.pkg/Payload \| cpio -i`
1password: 0.7.0 -> 0.9.4 4 years ago			`'';`

1password: init at version 0.4 (#40158) 6 years ago			`installPhase = ''`
1password: Fix darwin build 6 years ago			`install -D op $out/bin/op`
			`'';`
1password: 0.7.0 -> 0.9.4 4 years ago
_1password: do not strip binary on darwin(OSX) (#88091) Stripping the binary on OSX causes op(1password) to fail immediately. Setting dontStrip = true; fixes the issue. Additionally, adding a very simple installCheck section for testing purposes. Co-authored-by: Corban Raun <craun@instructure.com> 4 years ago			`dontStrip = stdenv.isDarwin;`

pkgs/applications: stdenv.lib -> lib 3 years ago			`nativeBuildInputs = lib.optionals stdenv.isLinux [ autoPatchelfHook ];`
1password: init at version 0.4 (#40158) 6 years ago
_1password: do not strip binary on darwin(OSX) (#88091) Stripping the binary on OSX causes op(1password) to fail immediately. Setting dontStrip = true; fixes the issue. Additionally, adding a very simple installCheck section for testing purposes. Co-authored-by: Corban Raun <craun@instructure.com> 4 years ago			`doInstallCheck = true;`

			`installCheckPhase = ''`
			`$out/bin/op --version`
			`'';`

treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 3 years ago			`meta = with lib; {`
_1password: 1.11.2 -> 1.12.2 The most desirable change in this update range is the ability to create items via files, instead of via specifying the contents base64-encoded on the command line (which leaks secrets to anybody who can list processes). 3 years ago			`description = "1Password command-line tool";`
			`homepage = "https://support.1password.com/command-line/";`
1password: 0.7.0 -> 0.9.4 4 years ago			`downloadPage = "https://app-updates.agilebits.com/product_history/CLI";`
_1password: 1.11.2 -> 1.12.2 The most desirable change in this update range is the ability to create items via files, instead of via specifying the contents base64-encoded on the command line (which leaks secrets to anybody who can list processes). 3 years ago			`maintainers = with maintainers; [ joelburget marsam ];`
			`license = licenses.unfree;`
Add aarch64-darwin to platforms list 3 years ago			`platforms = [ "i686-linux" "x86_64-linux" "x86_64-darwin" "aarch64-linux" "aarch64-darwin" ];`
1password: init at version 0.4 (#40158) 6 years ago			`};`
			`}`