flake.nix

##################################################
# Notes:
#
#   # Build & run container
#   nix build --impure ".#packages.\"${BUILD_SYSTEM}.${HOST_SYSTEM}\".${CONTAINER}"
#   docker load < result
#   docker run -it --rm ${CONTAINER}:latest
#   Examples: https://github.com/NixOS/nixpkgs/blob/master/pkgs/build-support/docker/examples.nix
#
#   # Use devShell
#   nix develop
#
#   # Pre-fetch into cache
#   nix build <PACKAGE_HERE> --json | jq '.[0].outputs.out' | cachix push salt-labs
#
##################################################
{
  description = "Containers";

  nixConfig = {
    extra-trusted-public-keys = "devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw=";
    extra-substituters = "https://devenv.cachix.org";
  };

  inputs = {
    nixpkgs = {
      type = "github";
      owner = "cachix";
      repo = "devenv-nixpkgs";
      ref = "bump-rolling";
      flake = true;
    };

    nixpkgs-unstable = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "nixos-unstable";
      flake = true;
    };

    pre-commit-hooks = {
      type = "github";
      owner = "cachix";
      repo = "pre-commit-hooks.nix";
      ref = "master";
      flake = true;
      inputs.nixpkgs.follows = "nixpkgs";
    };

    devenv = {
      type = "github";
      owner = "cachix";
      repo = "devenv";
      ref = "main";
      flake = true;
      inputs.nixpkgs.follows = "nixpkgs";
    };

    nixos-generators = {
      type = "github";
      owner = "nix-community";
      repo = "nixos-generators";
      ref = "master";
      flake = true;
      inputs.nixpkgs.follows = "nixpkgs";
    };

    fenix = {
      type = "github";
      owner = "nix-community";
      repo = "fenix";
      ref = "main";
      flake = true;
      inputs.nixpkgs.follows = "nixpkgs";
    };

    poetry2nix = {
      type = "github";
      owner = "nix-community";
      repo = "poetry2nix";
      ref = "master";
      flake = true;
      inputs.nixpkgs.follows = "nixpkgs";
    };

    #codestream-cli = {
    #  type = "github";
    #  owner = "salt-labs";
    #  repo = "codestream-cli";
    #  ref = "trunk";
    #  flake = true;
    #};

    loopy = {
      type = "github";
      owner = "salt-labs";
      repo = "loopy";
      ref = "trunk";
      flake = true;
    };
  };

  outputs =
    {
      self,
      nixpkgs,
      nixpkgs-unstable,
      devenv,
      #poetry2nix,
      #codestream-cli,
      #loopy,
      ...
    }@inputs:
    let
      inherit (self) ;

      supportedSystems = [
        #"aarch64-darwin"
        #"aarch64-linux"
        #"x86_64-darwin"
        "x86_64-linux"
      ];

      forAllSystems =
        f:
        builtins.listToAttrs (
          map (buildPlatform: {
            name = buildPlatform;
            value = builtins.listToAttrs (
              map (hostPlatform: {
                name = hostPlatform;
                value = f buildPlatform hostPlatform;
              }) supportedSystems
            );
          }) supportedSystems
        );

      pkgsImportCrossSystem =
        buildPlatform: hostPlatform:
        import nixpkgs {
          system = buildPlatform;
          overlays = [ ];
          config = {
            allowUnfree = true;
            allowUnfreePredicate = _: true;
          };
          crossSystem =
            if buildPlatform == hostPlatform then
              null
            else
              {
                config = hostPlatform;
              };
        };

      pkgsImportCrossSystemUnstable =
        buildPlatform: hostPlatform:
        import nixpkgs-unstable {
          system = buildPlatform;
          overlays = [ ];
          config = {
            allowUnfree = true;
            allowUnfreePredicate = _: true;
          };
          crossSystem =
            if buildPlatform == hostPlatform then
              null
            else
              {
                config = hostPlatform;
              };
        };

      flattenPackages =
        systems:
        builtins.foldl' (
          acc: system:
          builtins.foldl' (
            innerAcc: hostPlatform:
            innerAcc // { "${system}.${hostPlatform}" = systems.${system}.${hostPlatform}; }
          ) acc (builtins.attrNames systems.${system})
        ) { } (builtins.attrNames systems);

      _pkgsAllowUnfree = {
        nixpkgs = {
          config = {
            allowUnfree = true;
            allowUnfreePredicate = _: true;
          };
        };
      };
    in
    {
      ###############
      # Packages
      ###############
      packages = flattenPackages (
        forAllSystems (
          buildPlatform: hostPlatform:
          let
            # Build Platform
            system = buildPlatform;
            pkgs = pkgsImportCrossSystem buildPlatform buildPlatform;
            pkgsUnstable = pkgsImportCrossSystemUnstable buildPlatform buildPlatform;

            # Host Platform
            crossPkgs = pkgsImportCrossSystem buildPlatform hostPlatform;
            crossPkgsUnstable = pkgsImportCrossSystemUnstable buildPlatform hostPlatform;

            # codestream-cli
            #pkgCodestreamCLI = codestream-cli.packages.${hostPlatform}.codestream-cli;

          in
          # Loopy
          #pkgLoopy = loopy.packages.${hostPlatform}.loopy;
          {
            brakeman = import ./nix/oci/brakeman {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            buildah = import ./nix/oci/buildah {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            carvel = import ./nix/oci/carvel {
              inherit self;
              inherit pkgs;
              inherit pkgsUnstable;
              inherit crossPkgs;
            };

            caddy = import ./nix/oci/caddy {
              inherit self;
              inherit pkgs;
              inherit pkgsUnstable;
              inherit crossPkgs;
            };

            clair = import ./nix/oci/clair {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            cmake = import ./nix/oci/cmake {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            #codestream-ci = import ./nix/oci/codestream-ci {
            #inherit self;
            #  inherit pkgs;
            #  inherit pkgsUnstable;
            #  inherit crossPkgs;
            #  inherit crossPkgsUnstable;
            #  #inherit pkgCodestreamCLI;
            #};

            codeql = import ./nix/oci/codeql {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            cosign = import ./nix/oci/cosign {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            flawfinder = import ./nix/oci/flawfinder {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            gitleaks = import ./nix/oci/gitleaks {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            gnumake = import ./nix/oci/gnumake {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            gosec = import ./nix/oci/gosec {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            govc = import ./nix/oci/govc {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            grype = import ./nix/oci/grype {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            hadolint = import ./nix/oci/hadolint {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            hello = import ./nix/oci/hello {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            helm = import ./nix/oci/helm {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            hugo = import ./nix/oci/hugo {
              inherit self;
              inherit pkgs;
              inherit pkgsUnstable;
              inherit crossPkgs;
            };

            # TODO: fix
            #idem = import ./nix/oci/idem {
            #  inherit self;
            #  inherit nixpkgs;
            #  inherit pkgs;
            #  inherit system;
            #  inherit poetry2nix;
            #  inherit crossPkgs;
            #};

            kaniko = import ./nix/oci/kaniko {
              inherit self;
              inherit pkgs;
              inherit pkgsUnstable;
              inherit crossPkgs;
            };

            kics = import ./nix/oci/kics {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            kpack = import ./nix/oci/kpack {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            kube-linter = import ./nix/oci/kube-linter {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            kubectl = import ./nix/oci/kubectl {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            kubesec = import ./nix/oci/kubesec {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            license_finder = import ./nix/oci/license_finder {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            #loopy = import ./nix/oci/loopy {
            #  inherit self;
            #  inherit pkgs;
            #  inherit pkgsUnstable;
            #  inherit crossPkgs;
            #  inherit crossPkgsUnstable;
            #  inherit pkgLoopy;
            #};

            packer = import ./nix/oci/packer {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            #podman = import ./nix/oci/podman {
            #  inherit self;
            #  inherit pkgs;
            #  inherit pkgsUnstable;
            #  inherit crossPkgs;
            #  inherit crossPkgsUnstable;
            #};

            pivnet = import ./nix/oci/pivnet {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            salt = import ./nix/oci/salt {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            secretscanner = import ./nix/oci/secretscanner {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            semgrep = import ./nix/oci/semgrep {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            skopeo = import ./nix/oci/skopeo {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            snyk = import ./nix/oci/snyk {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            syft = import ./nix/oci/syft {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            k8s-tools = import ./nix/oci/k8s-tools {
              inherit self;
              inherit pkgs;
              inherit pkgsUnstable;
              inherit crossPkgs;
              inherit crossPkgsUnstable;
            };

            terraform = import ./nix/oci/terraform {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            terraform-ls = import ./nix/oci/terraform-ls {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            tflint = import ./nix/oci/tflint {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            tfsec = import ./nix/oci/tfsec {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };

            trivy = import ./nix/oci/trivy {
              inherit self;
              inherit pkgs;
              inherit crossPkgs;
            };
          }
        )
      );

      ###############
      # DevShells
      ###############
      devShells = flattenPackages (
        forAllSystems (
          buildPlatform: hostPlatform:
          let
            # Build Platform
            system = buildPlatform;
            pkgs = pkgsImportCrossSystem buildPlatform buildPlatform;
            pkgsUnstable = pkgsImportCrossSystemUnstable buildPlatform buildPlatform;

            # Host Platform
            crossPkgs = pkgsImportCrossSystem buildPlatform hostPlatform;
            crossPkgsUnstable = pkgsImportCrossSystemUnstable buildPlatform hostPlatform;
          in
          {
            devenv = import ./nix/devshells/devenv {
              inherit inputs;
              inherit system;
              inherit pkgs;
              inherit pkgsUnstable;
              inherit crossPkgs;
              inherit crossPkgsUnstable;
            };

            default = self.devShells."${system}.${system}".devenv;
          }
        )
      );

      # Set the default devshell to the one for the current system.
      devShell = builtins.listToAttrs (
        map (system: {
          name = system;
          value = self.devShells."${system}.${system}".devenv;
        }) supportedSystems
      );
    };
}