Something went wrong. Try again.
lol
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298{ lib, stdenv, buildPackages, fetchurl, updateAutotoolsGnuConfigScriptsHook, bison, util-linuxMinimal, coreutils, libredirect, glibcLocales, gnused,
interactive ? true, readline, withDocs ? null, forFHSEnv ? false,
pkgsStatic,}:
let upstreamPatches = import ./bash-5.3-patches.nix ( nr: sha256: fetchurl { url = "mirror://gnu/bash/bash-5.3-patches/bash53-${nr}"; inherit sha256; } );inlib.warnIf (withDocs != null) '' bash: `.override { withDocs = true; }` is deprecated, the docs are always included. '' stdenv.mkDerivation (fa: { pname = "bash${lib.optionalString interactive "-interactive"}"; version = "5.3${fa.patch_suffix}"; patch_suffix = "p${toString (builtins.length upstreamPatches)}";
src = fetchurl { url = "mirror://gnu/bash/bash-${lib.removeSuffix fa.patch_suffix fa.version}.tar.gz"; hash = "sha256-DVzYaWX4aaJs9k9Lcb57lvkKO6iz104n6OnZ1VUPMbo="; };
hardeningDisable = [ "format" ] # bionic libc is super weird and has issues with fortify outside of its own libc, check this comment: # https://github.com/NixOS/nixpkgs/pull/192630#discussion_r978985593 # or you can check libc/include/sys/cdefs.h in bionic source code ++ lib.optionals (stdenv.hostPlatform.libc == "bionic") [ "fortify" ];
outputs = [ "out" "dev" "man" "doc" "info" ];
separateDebugInfo = true;
env.NIX_CFLAGS_COMPILE = '' -DSYS_BASHRC="/etc/bashrc" -DSYS_BASH_LOGOUT="/etc/bash_logout" '' + lib.optionalString (!forFHSEnv) '' -DDEFAULT_PATH_VALUE="/no-such-path" -DSTANDARD_UTILS_PATH="/no-such-path" -DDEFAULT_LOADABLE_BUILTINS_PATH="${placeholder "out"}/lib/bash:." '' + '' -DNON_INTERACTIVE_LOGIN_SHELLS -DSSH_SOURCE_BASHRC '' # Bash's configure script assumes that CC and CC_FOR_BUILD have the # same default -std=... flags. But at this moment, for cross llvm and FreeBSD, we # have CC_FOR_BUILD that defaults to c23, and a CC that default to # something older, perhaps c17. This breaks the build because of # bash's faulty assumptions. # # To fix, we simply force the standard to be the higher for CC to # match CC_FOR_BUILD. # # Once FreeBSD and other contexts are built with a newer version of clang, # this hack should be removed. + lib.optionalString stdenv.cc.isClang '' -std=c23 '';
patchFlags = [ "-p0" ];
patches = upstreamPatches ++ [ # Enable PGRP_PIPE independently of the kernel of the build machine. # This doesn't seem to be upstreamed despite such a mention of in https://github.com/NixOS/nixpkgs/pull/77196, # which originally introduced the patch # Some related discussion can be found in # https://lists.gnu.org/archive/html/bug-bash/2015-05/msg00071.html ./pgrp-pipe-5.patch ];
configureFlags = [ # At least on Linux bash memory allocator has pathological performance # in scenarios involving use of larger memory: # https://lists.gnu.org/archive/html/bug-bash/2023-08/msg00052.html # Various distributions default to system allocator. Let's nixpkgs # do the same. "--without-bash-malloc" (if interactive then "--with-installed-readline" else "--disable-readline") ] ++ lib.optionals (stdenv.hostPlatform != stdenv.buildPlatform) [ "bash_cv_job_control_missing=nomissing" "bash_cv_sys_named_pipes=nomissing" "bash_cv_getcwd_malloc=yes" # This check cannot be performed when cross compiling. The "yes" # default is fine for static linking on Linux (weak symbols?) but # not with BSDs, when it does clash with the regular `getenv`. "bash_cv_getenv_redef=${ lib.boolToYesNo (!(with stdenv.hostPlatform; isStatic && (isOpenBSD || isFreeBSD))) }" ] ++ lib.optionals stdenv.hostPlatform.isCygwin [ "bash_cv_dev_stdin=present" "bash_cv_dev_fd=standard" "gt_cv_func_printf_posix=yes" ] ++ lib.optionals (stdenv.hostPlatform.libc == "musl") [ "--disable-nls" ] ++ lib.optionals stdenv.hostPlatform.isFreeBSD [ # /dev/fd is optional on FreeBSD. we need it to work when built on a system # with it and transferred to a system without it! This includes linux cross. "bash_cv_dev_fd=absent" ];
strictDeps = true; # Note: Bison is needed because the patches above modify parse.y. depsBuildBuild = [ buildPackages.stdenv.cc ]; nativeBuildInputs = [ updateAutotoolsGnuConfigScriptsHook bison ] ++ lib.optionals stdenv.hostPlatform.isDarwin [ stdenv.cc.bintools ];
buildInputs = lib.optionals interactive [ readline ];
enableParallelBuilding = true;
doCheck = false; # Can't be enabled by default due to dependency cycle, use passthru.tests.withChecks instead
postInstall = '' ln -s bash${stdenv.hostPlatform.extensions.executable} "$out/bin/sh" rm -f $out/lib/bash/Makefile.inc '';
postFixup = if interactive then '' substituteInPlace "$out/bin/bashbug" \ --replace '#!/bin/sh' "#!$out/bin/bash" '' # most space is taken by locale data else '' rm -rf "$out/share" "$out/bin/bashbug" '';
passthru = { shellPath = "/bin/bash"; tests.static = pkgsStatic.bash; tests.withChecks = fa.finalPackage.overrideAttrs (attrs: { doCheck = true;
nativeCheckInputs = attrs.nativeCheckInputs or [ ] ++ [ util-linuxMinimal libredirect.hook glibcLocales gnused ];
meta = attrs.meta // { # Ignore Darwin for now, because the tests fail in many more ways than on Linux broken = attrs.meta.broken or false || stdenv.buildPlatform.isDarwin; };
patches = attrs.patches or [ ] ++ [ # See commit comment, also submitted upstream: https://lists.gnu.org/archive/html/bug-bash/2025-10/msg00054.html ./fail-tests.patch # See commit comment, also submitted upstream: https://lists.gnu.org/archive/html/bug-bash/2025-10/msg00055.html ./failed-tests-output.patch # The run-builtins test _almost_ succeeds, only has a bit of PATH trouble # and some odd terminal column mismatch ./fix-builtins-tests.patch # The run-invocation test _almost_ succeeds, only has a bit of PATH trouble ./fix-invocation-tests.patch ];
preCheck = attrs.preCheck or "" + '' # Allows looking at actual outputs for failed tests export BASH_TSTOUT_KEEPDIR=$(mktemp -d) export HOME=$(mktemp -d) export NIX_REDIRECTS=${ lib.concatMapAttrsStringSep ":" (name: value: "${name}=${value}") { "/bin/echo" = lib.getExe' coreutils "echo"; "/bin/cat" = lib.getExe' coreutils "cat"; "/bin/rm" = lib.getExe' coreutils "rm"; "/usr" = "$(mktemp -d)"; } }
disabled_checks=( # Unsets PATH and breaks, not clear run-execscript
# Fails on ZFS & needs a ja_JP.SJIS locale, which glibcLocales doesn't have run-intl
# These error with "echo: write error: Broken pipe" run-histexpand run-lastpipe run-comsub run-comsub2
# For some reason has an extra 'declare -x version="5.2p37"' run-nameref
# These print some extra 'trap -- ''' SIGPIPE' run-trap run-varenv
# These rely on /dev/tty run-read run-test run-vredir
# Might also be related to not having a tty: "Inappropriate ioctl for device" run-history
# Can be enabled in 5.4 run-printf
# This is probably fixable without too much trouble, but just not having a hardcoded PATH in type5.sub doesn't cut it # 142,143c142,147 # < type5.sub: line 23: mkdir: command not found # < type5.sub: line 24: cd: /build/type-23722: No such file or directory # --- # > cat is /bin/cat # > cat is aliased to `echo cat' # > /bin/cat # > break is a shell builtin # > break is a special shell builtin # > ./e run-type ) for check in "''${disabled_checks[@]}"; do # Exit before running the test script sed -i "1iecho 'Skipping test $check' >&2 && exit 0" "tests/$check" done ''; }); };
meta = { homepage = "https://www.gnu.org/software/bash/"; description = "GNU Bourne-Again Shell, the de facto standard shell on Linux" + lib.optionalString interactive " (for interactive use)"; longDescription = '' Bash is the shell, or command language interpreter, that will appear in the GNU operating system. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification. ''; license = lib.licenses.gpl3Plus; platforms = lib.platforms.all; # https://github.com/NixOS/nixpkgs/issues/333338 badPlatforms = [ lib.systems.inspect.patterns.isMinGW ]; maintainers = with lib.maintainers; [ infinisil ]; teams = [ lib.teams.security-review ]; mainProgram = "bash"; identifiers.cpeParts = let versionSplit = lib.split "p" fa.version; in { vendor = "gnu"; product = "bash"; version = lib.elemAt versionSplit 0; update = lib.elemAt versionSplit 2; }; }; })