grimm-nixos-laptop/common/tooling/apparmor/apparmor-d-package.nix

{ buildGoModule, fetchFromGitHub, git, lib }: 
buildGoModule {
  pname = "apparmor-d";
  version = "unstable-2024-10-12";

  src = fetchFromGitHub {
    rev = "116272b8ada281178150f1c9a564aac1967121f6";
    owner = "roddhjav";
    repo = "apparmor.d";
    hash = "sha256-Yx9UJdmBqjMSPVwFyvidQXfQ4pdEKaDMfvi7gF6GSVc=";
  };

  vendorHash = "sha256-YkOcpzn5AKFMDWUYbKY8DzGMiIMSyaDfexFmXv5HNQI=";
  
  doCheck = false;
  #dontBuild = true;

  nativeBuildInputs = [ git ];

  patches = [
    ./apparmor-d-paths.patch
  ];

  postInstall = ''
    mkdir -p $out/etc build/apparmor.d
    
    rm $out/bin/cmd $out/bin/aa
    mv $out/bin/prebuild build/prebuild
    
    DISTRIBUTION=arch ./build/prebuild --complain --abi 4 # fixme: replace with nixos support once available
    
    mv .build/apparmor.d $out/etc
  '';

  meta = {
    description = "Full set of AppArmor profiles (~ 1500 profiles) ";
    homepage = "https://github.com/roddhjav/apparmor.d";
    license = lib.licenses.gpl2Only;
    mainProgram = "aa-log";
    maintainers = with lib.maintainers; [ grimmauld ];
    platforms = lib.platforms.linux;
  };
}