From 729315fe2ed7e4fa1b9af242ebb878b9c085ff6e Mon Sep 17 00:00:00 2001 From: Aiden Fox Ivey Date: Wed, 30 Oct 2024 17:42:15 -0400 Subject: [PATCH] Add nix flake Signed-off-by: Aiden Fox Ivey --- README.md | 39 ++++++++++++++++++++++++ flake.lock | 61 ++++++++++++++++++++++++++++++++++++++ flake.nix | 87 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 187 insertions(+) create mode 100644 flake.lock create mode 100644 flake.nix diff --git a/README.md b/README.md index e10e71891..b28a6095b 100644 --- a/README.md +++ b/README.md @@ -15,6 +15,7 @@ liboqs is an open source C library for quantum-safe cryptographic algorithms. - [Linux and Mac](#linux-and-mac) - [Windows](#windows) - [Cross compilation](#cross-compilation) + - [Nix Flake](#nix-flake) - [Documentation](#documentation) - [Contributing](#contributing) - [License](#license) @@ -167,6 +168,44 @@ If you want to create Visual Studio build files, e.g., if not using `ninja`, be You can cross compile liboqs for various platforms. Detailed information is available [in the Wiki](https://github.com/open-quantum-safe/liboqs/wiki/Platform-specific-notes-for-building-liboqs#cross-compiling). +### Nix Flake + +Nix is a tool that makes builds and developer environments deterministic. With just Nix installed, you can install `liboqs` using one command. + +Need to install Nix? Consider using the [Lix installer](https://git.lix.systems/lix-project/lix-installer), a modern, community-focused implementation of the Nix tool, available for Linux and MacOS. + +#### Building with Nix + +You can build this easily with `nix build github:open-quantum-safe/liboqs/` if you only need the artifact `liboqs.a`. + +If you want to build from a local version of the code, clone the repository and then run one of the following commands (depending on which toolchain you want to use and style of library you want to build): + +```bash +# build a shared library using gcc +nix build .#gcc.shared + +# build a static library using gcc +nix build .#gcc.static + +# build a shared library using clang +nix build .#clang.shared + +# build a static library using clang +nix build .#clang.static +``` + +#### Running the developer shell + +In order to run a developer shell with the specified version of each dependency, you can run `nix develop`: + +```bash +# using clang toolchain +nix develop .#clang + +# using gcc toolchain +nix develop .#gcc +``` + ## Documentation More detailed information on building, optional build parameters, example applications, coding conventions and more can be found in the [wiki](https://github.com/open-quantum-safe/liboqs/wiki). diff --git a/flake.lock b/flake.lock new file mode 100644 index 000000000..441515129 --- /dev/null +++ b/flake.lock @@ -0,0 +1,61 @@ +{ + "nodes": { + "flake-utils": { + "inputs": { + "systems": "systems" + }, + "locked": { + "lastModified": 1726560853, + "narHash": "sha256-X6rJYSESBVr3hBoH0WbKE5KvhPU5bloyZ2L4K60/fPQ=", + "owner": "numtide", + "repo": "flake-utils", + "rev": "c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a", + "type": "github" + }, + "original": { + "owner": "numtide", + "repo": "flake-utils", + "type": "github" + } + }, + "nixpkgs": { + "locked": { + "lastModified": 1730741070, + "narHash": "sha256-edm8WG19kWozJ/GqyYx2VjW99EdhjKwbY3ZwdlPAAlo=", + "owner": "NixOS", + "repo": "nixpkgs", + "rev": "d063c1dd113c91ab27959ba540c0d9753409edf3", + "type": "github" + }, + "original": { + "owner": "NixOS", + "ref": "nixos-24.05", + "repo": "nixpkgs", + "type": "github" + } + }, + "root": { + "inputs": { + "flake-utils": "flake-utils", + "nixpkgs": "nixpkgs" + } + }, + "systems": { + "locked": { + "lastModified": 1681028828, + "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=", + "owner": "nix-systems", + "repo": "default", + "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e", + "type": "github" + }, + "original": { + "owner": "nix-systems", + "repo": "default", + "type": "github" + } + } + }, + "root": "root", + "version": 7 +} diff --git a/flake.nix b/flake.nix new file mode 100644 index 000000000..50d16186f --- /dev/null +++ b/flake.nix @@ -0,0 +1,87 @@ +{ + inputs = { + nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05"; + flake-utils.url = "github:numtide/flake-utils"; + }; + outputs = { + self, + nixpkgs, + flake-utils, + }: + flake-utils.lib.eachDefaultSystem (system: let + name = "liboqs"; + src = ./.; + pkgs = nixpkgs.legacyPackages.${system}; + + # Function to create compiler-specific package sets + mkPackageSet = compiler: let + # Override the stdenv to use the specified compiler + stdenv = + if compiler == "clang" + then pkgs.clangStdenv + else pkgs.stdenv; + + mkLib = shared: + stdenv.mkDerivation { + inherit name src; + nativeBuildInputs = with pkgs; + [cmake ninja doxygen pkg-config graphviz] + ++ ( + if compiler == "clang" + then [pkgs.clang] + else [pkgs.gcc] + ); + + buildInputs = with pkgs; [openssl]; + + cmakeFlags = [ + "-GNinja" + "-DOQS_DIST_BUILD=ON" + "-DOQS_BUILD_ONLY_LIB=ON" + "-DBUILD_SHARED_LIBS=${ + if shared + then "ON" + else "OFF" + }" + "-DCMAKE_INSTALL_LIBDIR=lib" + "-DCMAKE_INSTALL_INCLUDEDIR=include" + "-DCMAKE_INSTALL_PREFIX=${placeholder "out"}" + "-DCMAKE_INSTALL_FULL_LIBDIR=${placeholder "out"}/lib" + "-DCMAKE_INSTALL_FULL_INCLUDEDIR=${placeholder "out"}/include" + ]; + }; + in { + shared = mkLib true; + static = mkLib false; + }; + + # Create development shell for specified compiler + mkDevShell = compiler: let + packageSet = mkPackageSet compiler; + in + pkgs.mkShell { + inherit (packageSet.shared) nativeBuildInputs buildInputs; + + # astyle formats C source code and alejandra formats nix source code + packages = with pkgs; [astyle alejandra]; + + shellHook = '' + export CMAKE_EXPORT_COMPILE_COMMANDS=1 + echo "Using ${compiler} toolchain" + ''; + }; + in { + packages = { + default = (mkPackageSet "gcc").shared; # default is gcc shared + gcc = mkPackageSet "gcc"; + clang = mkPackageSet "clang"; + }; + + # Development shells + devShells = { + default = mkDevShell "gcc"; + gcc = mkDevShell "gcc"; + clang = mkDevShell "clang"; + }; + }); +}