nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-03 13:30:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

signal-desktop: 8.26.0 -> 8.28.0

Browse Source 
Use a SQL query because sqlite3's `.tables` command exits successfully
without reading the encrypted database.

Assisted-by: GPT-5.6 Sol
This commit is contained in:
Angel J
2026-09-24 05:00:33 -07:00
parent 694f78e1ba
commit e52e21e1e4
2 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/tests/signal-desktop.nix
View File

@@ -69,7 +69,7 @@ in
)
# Only SQLCipher should be able to read the encrypted DB:
machine.fail(
"su - alice -c 'sqlite3 ~/.config/Signal/sql/db.sqlite .tables'"
"su - alice -c 'sqlite3 ~/.config/Signal/sql/db.sqlite \"SELECT count(*) FROM sqlite_master\"'"
)
print(machine.succeed(
"su - alice -c 'sqlcipher ~/.config/Signal/sql/db.sqlite'"

14
pkgs/by-name/si/signal-desktop/package.nix
View File

@@ -9,7 +9,7 @@
fetchPnpmDeps,
pnpmConfigHook,
pnpmBuildHook,
electron_43,
electron_44,
python3,
makeWrapper,
callPackage,
@@ -34,7 +34,7 @@ assert lib.warnIf (commandLineArgs != "")
let
nodejs = nodejs_24;
pnpm = pnpm_11;
electron = electron_43;
electron = electron_44;
libsignal-node = callPackage ./libsignal-node.nix { inherit nodejs; };
signal-sqlcipher = callPackage ./signal-sqlcipher.nix {
@@ -45,13 +45,13 @@ let
webrtc = callPackage ./webrtc.nix { };
ringrtc = callPackage ./ringrtc.nix { inherit webrtc; };
version = "8.26.0";
version = "8.28.0";
src = fetchFromGitHub {
owner = "signalapp";
repo = "Signal-Desktop";
tag = "v${version}";
hash = "sha256-GgNFy7ZNft4rwTmS+OGp4eis6izlc7RGubnmSc8OeKc=";
hash = "sha256-zQQ5z9abHoVSYt9d/buN7G9gsG+JhaBW1xgcja98iZI=";
# Emoji font files will be added in `postFetch` if `withAppleEmojis` is enabled. They
# are fetched separately below.
postFetch = ''
@@ -84,7 +84,7 @@ let
pnpm config set fetch-timeout 300000
'';
fetcherVersion = 4;
hash = "sha256-9LC62SFDnP4GMDqsP8NcSiACUA+BkPwnbdmNnvJ8gKg=";
hash = "sha256-vYMT1yBAZ+ABQN9KXfBX4j08i3xKw5BUfpG2kYqs8MY=";
};
strictDeps = true;
@@ -191,7 +191,7 @@ stdenv.mkDerivation (finalAttrs: {
pnpm config set fetch-timeout 300000
'';
fetcherVersion = 4;
hash = "sha256-9LC62SFDnP4GMDqsP8NcSiACUA+BkPwnbdmNnvJ8gKg=";
hash = "sha256-vYMT1yBAZ+ABQN9KXfBX4j08i3xKw5BUfpG2kYqs8MY=";
};
env = {
@@ -199,7 +199,7 @@ stdenv.mkDerivation (finalAttrs: {
SIGNAL_ENV = "production";
# Signal enforces that builds expire 90 days after the last source code change to disallow sending messages from older versions.
# We set the source-changed date to match the corresponding upstream release date.
SOURCE_DATE_EPOCH = 1788454304;
SOURCE_DATE_EPOCH = 1790198139;
};
preBuild = ''