#pragma once

#include "types.hh"
#include "hash.hh"

#include <map>


namespace nix {


/* Extension of derivations in the Nix store. */
const string drvExtension = ".drv";


/* Abstract syntax of derivations. */

struct DerivationOutput
{
    Path path;
    string hashAlgo; /* hash used for expected hash computation */
    string hash; /* expected hash, may be null */
    DerivationOutput()
    {
    }
    DerivationOutput(Path path, string hashAlgo, string hash)
    {
        this->path = path;
        this->hashAlgo = hashAlgo;
        this->hash = hash;
    }
    void parseHashInfo(bool & recursive, HashType & hashType, Hash & hash) const;
};

typedef std::map<string, DerivationOutput> DerivationOutputs;

/* For inputs that are sub-derivations, we specify exactly which
   output IDs we are interested in. */
typedef std::map<Path, StringSet> DerivationInputs;

typedef std::map<string, string> StringPairs;

struct Derivation
{
    DerivationOutputs outputs; /* keyed on symbolic IDs */
    DerivationInputs inputDrvs; /* inputs that are sub-derivations */
    PathSet inputSrcs; /* inputs that are sources */
    string platform;
    Path builder;
    Strings args;
    StringPairs env;
};


class StoreAPI;


/* Write a derivation to the Nix store, and return its path. */
Path writeDerivation(StoreAPI & store,
    const Derivation & drv, const string & name, bool repair = false);

/* Read a derivation from a file. */
Derivation readDerivation(const Path & drvPath);

/* Print a derivation. */
string unparseDerivation(const Derivation & drv);

/* Check whether a file name ends with the extensions for
   derivations. */
bool isDerivation(const string & fileName);

/* Return true iff this is a fixed-output derivation. */
bool isFixedOutputDrv(const Derivation & drv);

Hash hashDerivationModulo(StoreAPI & store, Derivation drv);

/* Memoisation of hashDerivationModulo(). */
typedef std::map<Path, Hash> DrvHashes;

extern DrvHashes drvHashes;

/* Split a string specifying a derivation and a set of outputs
   (/nix/store/hash-foo!out1,out2,...) into the derivation path and
   the outputs. */
typedef std::pair<string, std::set<string> > DrvPathWithOutputs;
DrvPathWithOutputs parseDrvPathWithOutputs(const string & s);

Path makeDrvPathWithOutputs(const Path & drvPath, const std::set<string> & outputs);

bool wantOutput(const string & output, const std::set<string> & wanted);

PathSet outputPaths(const Derivation & drv);

}
cm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/secret-service.scm?id=782e9975dc11e614fe38f9899806b968f9cd7d70&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=d5366500ec1aeecad6fc292b195088e30aa715fd'>secret-service: Add proper logging procedure and log to syslog.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (log): New macro.
(secret-service-send-secrets, secret-service-receive-secrets): Use it
instead of raw 'format' calls.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=59261a22f9819b1fdf797ffba17af17d385d6c92'>services: secret-service: Add initial client/server handshake.</a><span class='msg-avail'>...<span class='msg-tooltip'>This allows the client running on the host to know when it's actually
connect to the server running in the guest.  Failing that, the client
would connect right away to QEMU and send secrets even though the server
is not running yet in the guest, which is unreliable.

* gnu/build/secret-service.scm (secret-service-send-secrets): Add
 #:handshake-timeout.  Read from SOCK an initial message from the
server.  Return #f on error.
(secret-service-receive-secrets): Send 'secret-service-server' message
to the client.  Close SOCK upon timeout.
* gnu/services/virtualization.scm (hurd-vm-shepherd-service): 'start'
method returns #f when 'secret-service-send-secrets' returns #f.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=f9090015c58e6f47be74fe6116ef10a90378a899'>secret-service: Fix file port leak in 'secret-service-send-secrets'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-send-secrets): Use
'call-with-input-file' instead of 'open-input-file'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=4d047853da76dc5fa5dd50ecb750c861342ef47b'>secret-service: Add a timeout when waiting for a client.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-receive-secrets)
[wait-for-client]: Call 'select' with a 60s timeout before 'accept'.
Return #f upon timeout.
[read-secrets]: Return FILES on success.
Adjust caller of 'wait-for-client' to handle #f.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:26 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=118b6dbb46ff3376db7467301fe59673c042d220'>secret-service: Clarify the origin of messages.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-send-secrets)
(secret-service-receive-secrets): Prefix messages by "secret service".
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-01 16:06:38 +0200'>2020-09-01</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=ec32d4f291b3cc039a99f8090b6c2b2444be5a83'>services: Add secret-service-type.</a><span class='msg-avail'>...<span class='msg-tooltip'>This adds a "secret-service" that can be added to a Childhurd VM to receive
out-of-band secrets (keys) sent from the host.

Co-authored-by: Ludovic Courtès &lt;ludo@gnu.org&gt;

* gnu/services/virtualization.scm (secret-service-activation): New procedure.
(secret-service-type): New variable.
* gnu/build/secret-service.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
</span></span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>