1{2 lib,3 stdenvNoCC,4 cacert,5 jrsonnet,6}:7{8 lockfile,9 vendorHash,10 name ? "jrq-vendor",11}:12stdenvNoCC.mkDerivation (finalAttrs: {13 name = "${name}-${builtins.substring 0 8 (builtins.hashFile "sha256" lockfile)}";1415 outputHashMode = "recursive";16 outputHashAlgo = "sha256";17 outputHash = vendorHash;1819 nativeBuildInputs = [20 jrsonnet21 cacert22 ];2324 dontUnpack = true;25 dontConfigure = true;26 dontInstall = true;27 dontFixup = true;2829 SSL_CERT_FILE = "${cacert}/etc/ssl/certs/ca-bundle.crt";30 GIT_SSL_CAINFO = "${cacert}/etc/ssl/certs/ca-bundle.crt";3132 buildPhase = ''33 runHook preBuild3435 export HOME=$TMPDIR3637 install -m644 ${lockfile} jsonnetfile.json38 install -m644 ${lockfile} jsonnetfile.lock.json3940 mkdir -p "$out"41 jrb --jsonnetpkg-home "$out" install4243 runHook postBuild44 '';4546 passthru = {47 inherit lockfile vendorHash;48 };49})