fix the update-nix script

Author: manveru

nix/mantis.nix

@@ -60,14 +60,10 @@ in sbt.mkDerivation rec {
     })
   ];
 
-  #patchPhase = lib.optionalString (libsonic != null) ''
-  #  rm -rf src/main/resources
-  #  cp -r ${libsonic}/lib src/main/resources
-  #'';
-
   # This sha represents the change dependencies of mantis.
-  # Update this sha whenever you change the dependencies
-  depsSha256 = "0n7vv4k73cxjwg40qggr7gnkkg7vn8a179sf0wxnz3absj1700jj";
+  # Update this sha whenever you change the dependencies using the
+  # update-nix.sh script
+  depsSha256 = "sha256-csNBHVOC2bNSOjLjWleiVeS5ts3qFS7V8DxBv2nVDqE=";
 
   # this is the command used to to create the fixed-output-derivation
   depsWarmupCommand = "PROTOC_CACHE=.nix/protoc-cache; HOME=$TMPDIR; PATH=${PATH}:$PATH; sbt clean; sbt compile --debug";

nix/overlay.nix

@@ -10,6 +10,18 @@ rev: final: prev: {
     };
   };
 
+  mantis-hash = { ref, rev }:
+    (final.callPackage ./mantis.nix {
+      src = builtins.fetchGit {
+        url = "https://github.com/input-output-hk/mantis";
+        inherit rev ref;
+        submodules = true;
+      };
+    }).overrideAttrs (_: {
+      outputHash = "sha256-0000000000000000000000000000000000000000000=";
+      outputHashMode = "recursive";
+    });
+
   writeBashChecked = final.writers.makeScriptWriter {
     interpreter = "${final.bashInteractive}/bin/bash";
     check = final.writers.writeBash "shellcheck-check" ''

update-nix.sh

@@ -1,50 +1,70 @@
 #!/usr/bin/env bash
 
-set -e
+set -euo pipefail
 
-name=$(basename $0)
+name=$(basename "$0")
 
 usage() {
-        echo "$name - Tool used to validate and update the sbt nix build"
-        echo ""
-        echo "USAGE:"
-        echo "    $name [--check]"
-        echo ""
-        echo "OPTIONS:"
-        echo -e "    --check\t Check whether ./nix/pkgs/mantis.nix is up-to-date"
+  echo "$name - Tool used to validate and update the sbt nix build"
+  echo ""
+  echo "USAGE:"
+  echo "    $name [--check]"
+  echo ""
+  echo "OPTIONS:"
+  echo -e "    --check\t Check whether ./nix/mantis.nix is up-to-date"
 }
 
-if [ "$1" == "-h" -o "$1" == "--help" ]; then
-        usage
-        exit 1
+if [ "${1:-}" == "-h" ] || [ "${1:-}" == "--help" ]; then
+  usage
+  exit 1
 fi
 
 echo "Determining new sha for sbt build, this can take several minutes to do a 'sbt compile'"
 
-NEW_SHA=$(nix-build -E 'with import ./. {}; deps.overrideAttrs( _: { outputHash = "0000000000000000000000000000000000000000000000000000"; })' 2>&1 | grep "  got: " | head -n 1 | sed -r 's/\s+got:\s+//' | xargs nix-hash --to-base32 --type sha256 )
+branch="$(git rev-parse --abbrev-ref HEAD)"
+revision="$(git rev-parse HEAD)"
+
+output="$(
+nix build \
+  --impure \
+  --expr "
+    (builtins.getFlake (toString ./.)).legacyPackages.x86_64-linux.mantis-hash {
+      ref = \"${branch}\";
+      rev = \"${revision}\";
+    }
+  " 2>&1 || true
+)"
+
+NEW_SHA=$(
+echo "$output" \
+  | awk '/^\s+got: / { print $2 }'
+)
+
+if [ -z "$NEW_SHA" ]; then
+  echo "$output"
+  echo "calculating hash failed!"
+  exit 1
+fi
 
 echo "Calculated sha: $NEW_SHA"
 
 update_sha() {
-        echo "Updating sha in ./nix/pkgs/mantis.nix"
-        sed -r -i -e "s|depsSha256 = \"[^\"]+\";|depsSha256 = \"${NEW_SHA}\";|" ./nix/pkgs/mantis.nix
-        echo "./nix/pkgs/mantis.nix has been updated"
+  echo "Updating sha in ./nix/mantis.nix"
+  sed -r -i -e "s|depsSha256 = \"[^\"]+\";|depsSha256 = \"${NEW_SHA}\";|" ./nix/mantis.nix
+  echo "./nix/mantis.nix has been updated"
 }
 
-if [ $# == 1 -o "$1" == "--check" ]; then
-        current_sha=$(cat ./nix/pkgs/mantis.nix | grep depsSha256 | sed 's/\s*depsSha256\s*=\s*//g' | sed -e 's/"//g' -e 's/;//g' | xargs nix-hash --to-base32 --type sha256 )
-        if [ "$current_sha" == "$NEW_SHA" ]; then
-                echo "./nix/pkgs/mantis.nix is up-to-date"
-                exit 0
-        else
-                echo "wanted: $NEW_SHA"
-                echo "   got: $current_sha"
-                update_sha
-                exit 1
-        fi
+if [ $# == 1 ] || [ "${1:-}" == "--check" ]; then
+  current_sha=$(grep depsSha256 ./nix/mantis.nix | sed 's/\s*depsSha256\s*=\s*//g' | sed -e 's/"//g' -e 's/;//g' | xargs nix-hash --to-base32 --type sha256 )
+  if [ "$current_sha" == "$NEW_SHA" ]; then
+    echo "./nix/mantis.nix is up-to-date"
+    exit 0
+  else
+    echo "wanted: $NEW_SHA"
+    echo "   got: $current_sha"
+    update_sha
+    exit 1
+  fi
 fi
 
 update_sha
-
-
-