[Backport release-26.05] tack: init at 1.0.0; init module (#542852)

nixos/modules/module-list.nix

@@ -327,6 +327,7 @@
   ./programs/sysdig.nix
   ./programs/system-config-printer.nix
   ./programs/systemtap.nix
+  ./programs/tack.nix
   ./programs/tcpdump.nix
   ./programs/television.nix
   ./programs/throne.nix

nixos/modules/programs/tack.nix

@@ -0,0 +1,26 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.programs.tack;
+in
+{
+  options.programs.tack = {
+    enable = lib.mkEnableOption "tack, flake-like toml nix pins";
+
+    package = lib.mkPackageOption pkgs "tack" { };
+
+    nixConfTokens = lib.mkEnableOption "tack reading access tokens from nix.conf (significantly improves comparison speed)";
+  };
+
+  config = lib.mkIf cfg.enable {
+    environment.systemPackages = [ cfg.package ];
+
+    environment.sessionVariables = lib.mkIf cfg.nixConfTokens {
+      TACK_NIX_CONF_TOKENS = "1";
+    };
+  };
+}

pkgs/by-name/ta/tack/package.nix

@@ -0,0 +1,43 @@
+{
+  lib,
+  rustPlatform,
+  fetchFromGitHub,
+  nix-update-script,
+}:
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "tack";
+  version = "1.0.0";
+  src = fetchFromGitHub {
+    owner = "manic-systems";
+    repo = "tack";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-KhJb0NWLhj8AkD8uWEbXt179YlFLemk0OgOltw4jEk8=";
+  };
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  cargoHash = "sha256-3vDMM5uTsmRso6McH/b3+RpjeKjhgQm9V1piBrnSRjk=";
+
+  prePatch = ''
+    rm .cargo/config.toml
+  '';
+
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = {
+    homepage = "https://github.com/manic-systems/tack";
+    description = "flake-like toml nix pins, lazily fetched and transformed";
+    mainProgram = "tack";
+    license = [ lib.licenses.eupl12 ];
+    maintainers = with lib.maintainers; [
+      amaanq
+      atagen
+      faukah
+      max
+      NotAShelf
+    ];
+  };
+})