Something went wrong. Try again.
lol
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689{ lib, stdenv, fetchurl, fetchpatch2, fetchFromGitHub, python, ada, brotli, c-ares, gtest, hdrhistogram_c, libuv, lief, llhttp, merve, nbytes, nghttp2, nghttp3, ngtcp2, openssl, simdjson, simdutf, simdutf_6 ? ( simdutf.overrideAttrs { version = "6.5.0";
src = fetchFromGitHub { owner = "simdutf"; repo = "simdutf"; rev = "v6.5.0"; hash = "sha256-bZ4r62GMz2Dkd3fKTJhelitaA8jUBaDjG6jOysEg8Nk="; }; } ), sqlite, uvwasi, zlib, zstd, icu, bash, ninja, pkgconf, unixtools, runCommand, buildPackages, testers, # for `.pkgs` attribute callPackage, # Updater dependencies writeScript, coreutils, gnugrep, jq, curl, common-updater-scripts, runtimeShell, gnupg, installShellFiles, darwin,}:
{ version, sha256, patches ? [ ],}@args:
let
majorVersion = lib.versions.major version; minorVersion = lib.versions.minor version;
pname = "nodejs-slim";
canExecute = stdenv.buildPlatform.canExecute stdenv.hostPlatform; emulator = stdenv.hostPlatform.emulator buildPackages; canEmulate = stdenv.hostPlatform.emulatorAvailable buildPackages; buildNode = buildPackages."${pname}_${majorVersion}";
# See valid_os and valid_arch in configure.py. destOS = let platform = stdenv.hostPlatform; in if platform.isiOS then "ios" else if platform.isAndroid then "android" else if platform.isWindows then "win" else if platform.isDarwin then "mac" else if platform.isLinux then "linux" else if platform.isOpenBSD then "openbsd" else if platform.isFreeBSD then "freebsd" else throw "unsupported os ${platform.uname.system}"; destARMFPU = let platform = stdenv.hostPlatform; in if platform.isAarch32 && platform ? gcc.fpu then lib.throwIfNot (builtins.elem platform.gcc.fpu [ "vfp" "vfpv2" "vfpv3" "vfpv3-d16" "neon" ]) "unsupported ARM FPU ${platform.gcc.fpu}" platform.gcc.fpu else null; destARMFloatABI = let platform = stdenv.hostPlatform; in if platform.isAarch32 && platform ? gcc.float-abi then lib.throwIfNot (builtins.elem platform.gcc.float-abi [ "soft" "softfp" "hard" ]) "unsupported ARM float ABI ${platform.gcc.float-abi}" platform.gcc.float-abi else null; # TODO: also handle MIPS flags (mips_arch, mips_fpu, mips_float_abi).
useSharedAdaAndSimd = lib.versionAtLeast version "22.2"; useSharedGtestAndHistogram = lib.versionAtLeast version ( if majorVersion == 24 then "24.14.0" else "25.4" ); useSharedNBytes = lib.versionAtLeast version (if majorVersion == 24 then "24.14.0" else "25.5"); useSharedLief = lib.versionAtLeast version "25.6"; useSharedMerve = lib.versionAtLeast version (if majorVersion == 24 then "24.14.0" else "25.6.1"); useSharedSQLite = lib.versionAtLeast version "22.5"; useSharedZstd = lib.versionAtLeast version "22.15";
sharedLibDeps = { inherit brotli libuv nghttp3 ngtcp2 openssl uvwasi zlib ; cares = c-ares; http-parser = llhttp; nghttp2 = nghttp2.overrideAttrs { patches = [ (fetchpatch2 { url = "https://github.com/nghttp2/nghttp2/commit/7784fa979d0bcf801a35f1afbb25fb048d815cd7.patch?full_index=1"; hash = "sha256-RG87Qifjpl7HTP9ac2JwHj2XAbDlFgOpAnpZX3ET6gU="; excludes = [ "lib/includes/nghttp2/nghttp2.h" ]; revert = true; }) ]; }; } // (lib.optionalAttrs useSharedAdaAndSimd { inherit ada simdjson ; simdutf = if lib.versionAtLeast version "25" then simdutf else simdutf_6; }) // (lib.optionalAttrs useSharedSQLite { inherit sqlite; }) // (lib.optionalAttrs useSharedGtestAndHistogram { inherit gtest; hdr-histogram = hdrhistogram_c; }) // (lib.optionalAttrs useSharedLief { inherit lief; }) // (lib.optionalAttrs useSharedNBytes { inherit nbytes; }) // (lib.optionalAttrs useSharedMerve { inherit merve; }) // (lib.optionalAttrs useSharedZstd { inherit zstd; });
copyLibHeaders = map (name: "${lib.getDev sharedLibDeps.${name}}/include/*") ( builtins.attrNames sharedLibDeps );
bundlesCorepack = !lib.versionAtLeast version "25.0.0";
# Currently stdenv sets CC/LD/AR/etc environment variables to program names # instead of absolute paths. If we add cctools to nativeBuildInputs, that # would shadow stdenv’s bintools and potentially break other parts of the # build. The correct behavior is to use absolute paths, and there is a PR for # that, see https://github.com/NixOS/nixpkgs/pull/314920. As a temporary # workaround, we use only a single program we need (and that is not part of # the stdenv). darwin-cctools-only-libtool = # Would be nice to have onlyExe builder similar to onlyBin… runCommand "darwin-cctools-only-libtool" { cctools = lib.getBin buildPackages.cctools; } '' mkdir -p "$out/bin" ln -s "$cctools/bin/libtool" "$out/bin/libtool" '';
# a script which claims to be a different script but switches to simply touching its output # when an environment variable is set. See CC_host, --cross-compiling, and postConfigure. touchScript = real: writeScript "touch-script" '' #!${stdenv.shell} if [ -z "$FAKE_TOUCH" ]; then exec "${real}" "$@" fi while [ "$#" != "0" ]; do if [ "$1" == "-o" ]; then shift touch "$1" fi shift done '';
downloadDir = if lib.strings.hasInfix "-rc." version then "download/rc" else "dist";
package = stdenv.mkDerivation ( finalAttrs: let /** the final package fixed point, after potential overrides */ self = finalAttrs.finalPackage; in { inherit pname version;
src = fetchurl { url = "https://nodejs.org/${downloadDir}/v${version}/node-v${version}.tar.xz"; inherit sha256; };
strictDeps = true;
env = { # Tell ninja to avoid ANSI sequences, otherwise we don’t see build # progress in Nix logs. # # Note: do not set TERM=dumb environment variable globally, it is used in # test-ci-js test suite to skip tests that otherwise run fine. NINJA = "TERM=dumb ninja"; } // lib.optionalAttrs (!canExecute && !canEmulate) { # these are used in the --cross-compiling case. see comment at postConfigure. CC_host = touchScript "${buildPackages.stdenv.cc}/bin/cc"; CXX_host = touchScript "${buildPackages.stdenv.cc}/bin/c++"; AR_host = touchScript "${buildPackages.stdenv.cc}/bin/ar"; };
# NB: technically, we do not need bash in build inputs since all scripts are # wrappers over the corresponding JS scripts. There are some packages though # that use bash wrappers, e.g. polaris-web. buildInputs = [ bash icu ] ++ builtins.attrValues sharedLibDeps;
nativeBuildInputs = [ installShellFiles ninja pkgconf python ] ++ lib.optionals stdenv.buildPlatform.isDarwin [ # gyp checks `sysctl -n hw.memsize` if `sys.platform == "darwin"`. unixtools.sysctl ] ++ lib.optionals stdenv.hostPlatform.isDarwin [ # For gyp-mac-tool if `flavor == "mac"`. darwin-cctools-only-libtool ];
# We currently rely on Makefile and stdenv for build phases, so do not let # ninja’s setup hook to override default stdenv phases. dontUseNinjaBuild = true; dontUseNinjaCheck = true; dontUseNinjaInstall = true;
outputs = [ "out" "libv8" "npm" ] ++ lib.optional bundlesCorepack "corepack" ++ lib.optionals (stdenv.hostPlatform == stdenv.buildPlatform) [ "dev" ]; setOutputFlags = false; moveToDev = false;
configureFlags = [ "--ninja" "--with-intl=system-icu" "--openssl-use-def-ca-store" # --cross-compiling flag enables use of CC_host et. al (if canExecute || canEmulate then "--no-cross-compiling" else "--cross-compiling") "--dest-os=${destOS}" "--dest-cpu=${stdenv.hostPlatform.node.arch}" ] ++ lib.optionals (destARMFPU != null) [ "--with-arm-fpu=${destARMFPU}" ] ++ lib.optionals (destARMFloatABI != null) [ "--with-arm-float-abi=${destARMFloatABI}" ] ++ lib.optionals (!canExecute && canEmulate) [ # Node.js requires matching bitness between build and host platforms, e.g. # for V8 startup snapshot builder (see tools/snapshot) and some other # tools. We apply a patch that runs these tools using a host platform # emulator and avoid cross-compiling altogether (from the build system’s # perspective). "--emulator=${emulator}" ] ++ lib.optionals (lib.versionOlder version "19") [ "--without-dtrace" ] ++ lib.concatMap (name: [ "--shared-${name}" "--shared-${name}-libpath=${lib.getLib sharedLibDeps.${name}}/lib" /** Closure notes: we explicitly avoid specifying --shared-*-includes, as that would put the paths into bin/nodejs. Including pkg-config in build inputs would also have the same effect!
FIXME: the statement above is outdated, we have to include pkg-config in build inputs for system-icu. */ ]) (builtins.attrNames sharedLibDeps);
configurePlatforms = [ ];
dontDisableStatic = true;
configureScript = writeScript "nodejs-configure" '' exec ${python.executable} configure.py "$@" '';
# In order to support unsupported cross configurations, we copy some intermediate executables # from a native build and replace all the build-system tools with a script which simply touches # its outfile. We have to indiana-jones-swap the build-system-targeted tools since they are # tested for efficacy at configure time. postConfigure = lib.optionalString (!canEmulate && !canExecute) '' cp ${buildNode.dev}/bin/* out/Release export FAKE_TOUCH=1 '';
enableParallelBuilding = true;
# Don't allow enabling content addressed conversion as `nodejs` # checksums it's image before conversion happens and image loading # breaks: # $ nix build -f. nodejs --arg config '{ contentAddressedByDefault = true; }' # $ ./result/bin/node # Check failed: VerifyChecksum(blob). __contentAddressed = false;
passthru.interpreterName = "nodejs";
setupHook = ./setup-hook.sh;
pos = builtins.unsafeGetAttrPos "version" args;
inherit patches;
postPatch = '' substituteInPlace tools/install.py \ --replace-fail ' corepack_files(options, action)' " oip=options.install_path;options.install_path='$corepack';corepack_files(options, action);options.install_path=oip" \ --replace-fail ' npm_files(options, action)' " oip=options.install_path;options.install_path='$npm';npm_files(options, action);options.install_path=oip" '' + lib.optionalString stdenv.hostPlatform.isDarwin '' substituteInPlace test/parallel/test-macos-app-sandbox.js \ --subst-var-by codesign '${darwin.sigtool}/bin/codesign' '';
__darwinAllowLocalNetworking = true; # for tests __structuredAttrs = true; # for outputChecks
doCheck = canExecute;
# See https://github.com/nodejs/node/issues/22006 enableParallelChecking = false;
# Some dependencies required for tools/doc/node_modules (and therefore # test-addons, jstest and others) target are not included in the tarball. # Run test targets that do not require network access. checkTarget = lib.concatStringsSep " " ( [ "build-js-native-api-tests" "build-node-api-tests" "tooltest" "cctest" ] ++ lib.optionals (!stdenv.buildPlatform.isDarwin || lib.versionAtLeast version "20") [ # There are some test failures on macOS before v20 that are not worth the # time to debug for a version that would be eventually removed in less # than a year (Node.js 18 will be EOL at 2025-04-30). Note that these # failures are specific to Nix sandbox on macOS and should not affect # actual functionality. "test-ci-js" ] );
checkFlags = [ # Do not create __pycache__ when running tests. "PYTHONDONTWRITEBYTECODE=1" ] ++ lib.optionals (stdenv.buildPlatform.isDarwin && stdenv.buildPlatform.isx86_64) [ # Python 3.12 introduced a warning for calling `os.fork()` in a # multi‐threaded program. For some reason, the Node.js # `tools/pseudo-tty.py` program used for PTY‐related tests # triggers this warning on Hydra, on `x86_64-darwin` only, # despite not creating any threads itself. This causes the # Node.js test runner to misinterpret the warnings as part of the # test output and fail. It does not reproduce reliably off Hydra # on Intel Macs, or occur on the `aarch64-darwin` builds. # # This seems likely to be related to Rosetta 2, but it could also # be some strange x86‐64‐only threading behaviour of the Darwin # system libraries, or a bug in CPython, or something else # haunted about the Nixpkgs/Hydra build environment. We silence # the warnings in the hope that closing our eyes will make the # ghosts go away. "PYTHONWARNINGS=ignore::DeprecationWarning" ] ++ lib.optionals (!stdenv.buildPlatform.isDarwin || lib.versionAtLeast version "20") [ "FLAKY_TESTS=skip" # Skip some tests that are not passing in this context "CI_SKIP_TESTS=${ lib.concatStringsSep "," ( [ # Tests don't work in sandbox. "test-child-process-exec-env" "test-child-process-uid-gid" "test-fs-write-stream-eagain" "test-process-euid-egid" "test-process-initgroups" "test-process-setgroups" "test-process-uid-gid" # This is a bit weird, but for some reason fs watch tests fail with # sandbox. "test-fs-promises-watch" "test-fs-watch" "test-fs-watch-encoding" "test-fs-watch-non-recursive" "test-fs-watch-recursive-add-file" "test-fs-watch-recursive-add-file-to-existing-subfolder" "test-fs-watch-recursive-add-file-to-new-folder" "test-fs-watch-recursive-add-file-with-url" "test-fs-watch-recursive-add-folder" "test-fs-watch-recursive-assert-leaks" "test-fs-watch-recursive-promise" "test-fs-watch-recursive-symlink" "test-fs-watch-recursive-sync-write" "test-fs-watch-recursive-update-file" "test-fs-watchfile" "test-runner-run" "test-runner-watch-mode" "test-watch-mode-files_watcher"
# fail on openssl 3.6.0 "test-http2-server-unknown-protocol" "test-tls-ocsp-callback" ] ++ lib.optionals (!lib.versionAtLeast version "22") [ "test-tls-multi-key" ] ++ lib.optionals stdenv.hostPlatform.is32bit [ # utime (actually utimensat) fails with EINVAL on 2038 timestamp "test-fs-utimes-y2K38" ] ++ lib.optionals stdenv.buildPlatform.isDarwin [ # Disable tests that don’t work under macOS sandbox. # uv_os_setpriority returned EPERM (operation not permitted) "test-os" "test-os-process-priority"
# Debugger tests failing on macOS 15.4 "test-debugger-extract-function-name" "test-debugger-random-port-with-inspect-port" "test-debugger-launch" "test-debugger-pid"
# Those are annoyingly flaky, but not enough to be marked as such upstream. "test-wasi"
# This is failing on newer macOS versions, no fix has yet been provided upstream: "test-cluster-dgram-1" ] ++ lib.optionals stdenv.hostPlatform.isMusl [ # Doesn't work in sandbox on x86_64. "test-dns-set-default-order" ] ++ lib.optionals (stdenv.buildPlatform.isDarwin && stdenv.buildPlatform.isx86_64) [ # These tests fail on x86_64-darwin (even without sandbox). # TODO: revisit at a later date. "test-fs-readv" "test-fs-readv-sync" "test-vm-memleak"
# Those are annoyingly flaky, but not enough to be marked as such upstream. "test-tick-processor-arguments" "test-set-raw-mode-reset-signal" ] # Those are annoyingly flaky, but not enough to be marked as such upstream. ++ lib.optional (majorVersion == "22") "test-child-process-stdout-flush-exit" ++ lib.optional ( majorVersion == "22" && stdenv.buildPlatform.isDarwin ) "test/sequential/test-http-server-request-timeouts-mixed.js" ) }" ];
outputChecks = { out = { disallowedReferences = [ "libv8" "npm" ] ++ lib.optional bundlesCorepack "corepack"; }; corepack = { disallowedReferences = [ "libv8" "npm" ]; }; libv8 = { disallowedReferences = [ "out" "npm" ] ++ lib.optional bundlesCorepack "corepack"; }; npm = { disallowedReferences = [ "libv8" ] ++ lib.optional bundlesCorepack "corepack"; }; };
sandboxProfile = '' (allow file-read* (literal "/Library/Keychains/System.keychain") (literal "/private/var/db/mds/system/mdsDirectory.db") (literal "/private/var/db/mds/system/mdsObject.db"))
; Allow files written by Module Directory Services (MDS), which is used ; by Security.framework: https://apple.stackexchange.com/a/411476 ; These rules are based on the system sandbox profiles found in ; /System/Library/Sandbox/Profiles. (allow file-write* (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsDirectory\.db$") (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsObject\.db_?$") (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mds\.lock$"))
(allow mach-lookup (global-name "com.apple.FSEvents") (global-name "com.apple.SecurityServer") (global-name "com.apple.system.opendirectoryd.membership")) '';
postInstall = let # nodejs_18 does not have node_js2c, and we don't want to rebuild the other ones # FIXME: fix this cleanly in staging tools = if majorVersion == "18" then "{bytecode_builtins_list_generator,mksnapshot,torque,gen-regexp-special-case}" else "{bytecode_builtins_list_generator,mksnapshot,torque,node_js2c,gen-regexp-special-case}"; in lib.optionalString (stdenv.hostPlatform == stdenv.buildPlatform) '' mkdir -p $dev/bin cp out/Release/${tools} $dev/bin '' + ''
${lib.optionalString canExecute '' $out/bin/node --completion-bash > node.bash installShellCompletion node.bash ''}
mkdir -p $npm/share/bash-completion/completions ln -s $npm/lib/node_modules/npm/lib/utils/completion.sh \ $npm/share/bash-completion/completions/npm
# install the missing headers for node-gyp # TODO: use propagatedBuildInputs instead of copying headers. cp -r ${lib.concatStringsSep " " copyLibHeaders} $out/include/node
# assemble a static v8 library and put it in the 'libv8' output mkdir -p $libv8/lib pushd out/Release/obj find . -path "**/torque_*/**/*.o" -or -path "**/v8*/**/*.o" \ -and -not -name "torque.*" \ -and -not -name "mksnapshot.*" \ -and -not -name "gen-regexp-special-case.*" \ -and -not -name "bytecode_builtins_list_generator.*" \ | sort -u >files test -s files # ensure that the list is not empty $AR -cqs $libv8/lib/libv8.a @files popd
# copy v8 headers cp -r deps/v8/include $libv8/
# create a pkgconfig file for v8 major=$(grep V8_MAJOR_VERSION deps/v8/include/v8-version.h | cut -d ' ' -f 3) minor=$(grep V8_MINOR_VERSION deps/v8/include/v8-version.h | cut -d ' ' -f 3) patch=$(grep V8_PATCH_LEVEL deps/v8/include/v8-version.h | cut -d ' ' -f 3) mkdir -p $libv8/lib/pkgconfig cat > $libv8/lib/pkgconfig/v8.pc << EOF Name: v8 Description: V8 JavaScript Engine Version: $major.$minor.$patch Libs: -L$libv8/lib -lv8 -pthread -licui18n -licuuc Cflags: -I$libv8/include EOF '' + lib.optionalString (stdenv.hostPlatform == stdenv.buildPlatform) '' cp -r $out/include $dev/include '';
postFixup = '' HOST_PATH=$out/bin patchShebangs --host $out ${lib.optionalString bundlesCorepack "$corepack"} $npm
for dir in "$npm/lib/node_modules/npm/man/"*; do mkdir -p $npm/share/man/$(basename "$dir") for page in "$dir"/*; do ln -rs $page $npm/share/man/$(basename "$dir") done done '';
passthru.tests = { version = testers.testVersion { package = self; version = "v${lib.head (lib.strings.splitString "-rc." version)}"; }; };
passthru.updateScript = import ./update.nix { inherit writeScript common-updater-scripts coreutils curl fetchurl gnugrep gnupg jq runtimeShell ; inherit lib; inherit majorVersion; };
meta = { description = "Event-driven I/O framework for the V8 JavaScript engine"; homepage = "https://nodejs.org"; changelog = "https://github.com/nodejs/node/releases/tag/v${version}"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ aduh95 ]; # https://github.com/nodejs/node/blob/732ab9d658e057af5191d4ecd156d38487509462/BUILDING.md#platform-list platforms = (lib.lists.intersectLists ( lib.platforms.linux ++ lib.platforms.darwin ++ lib.platforms.freebsd ) lib.platforms.littleEndian) ++ [ "s390x-linux" ]; # This broken condition is likely too conservative. Feel free to loosen it if it works. broken = !canExecute && !canEmulate && (stdenv.buildPlatform.parsed.cpu != stdenv.hostPlatform.parsed.cpu); mainProgram = "node"; knownVulnerabilities = lib.optional (lib.versionOlder version "18") "This NodeJS release has reached its end of life. See https://nodejs.org/en/about/releases/."; };
passthru.python = python; # to ensure nodeEnv uses the same version } );inpackage