sed-key 0.1.1

Tool + library for controlling NVMe SED/OPAL lock states on Linux
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

{
  description = "sed-key: minimal OPAL unlock tool";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    flake-utils.url = "github:numtide/flake-utils";
  };

  outputs = { self, nixpkgs, flake-utils, ... }:
    flake-utils.lib.eachDefaultSystem (system:
      let
        pkgs = import nixpkgs { inherit system; };
      in {
        packages.default = pkgs.rustPlatform.buildRustPackage {
          pname = "sed-key";
          version = "0.1.0";

          src = ./.; # local source

          cargoLock.lockFile = ./Cargo.lock;

          # bring libclang + llvm-config into the sandbox
          nativeBuildInputs = with pkgs; [
            pkg-config
            llvmPackages.libclang
            llvmPackages.llvm
            linuxHeaders
          ];

          # explicitly tell clang-sys where to find stuff
          LIBCLANG_PATH = "${pkgs.llvmPackages.libclang.lib}/lib";
          LLVM_CONFIG_PATH = "${pkgs.llvmPackages.llvm.dev}/bin/llvm-config";

          # Add kernel header path to bindgen
          BINDGEN_EXTRA_CLANG_ARGS = "-I${pkgs.linuxHeaders}/include";

          meta = with pkgs.lib; {
            description = "Minimal Rust tool to unlock NVMe OPAL SED drives";
            homepage = "https://github.com/daveman1010221/sed-key";
            license = licenses.mit;
            platforms = platforms.linux;
          };
        };

        # Dev shell for hacking
        devShells.default = pkgs.mkShell {
          buildInputs = with pkgs; [
            rustc
            cargo
            pkg-config
            llvmPackages.libclang
            llvmPackages.llvm
            linuxHeaders
          ];

          LIBCLANG_PATH = "${pkgs.llvmPackages.libclang.lib}/lib";
          LLVM_CONFIG_PATH = "${pkgs.llvmPackages.llvm.dev}/bin/llvm-config";
          BINDGEN_EXTRA_CLANG_ARGS = "-I${pkgs.linuxHeaders}/include";
        };
      });
}