Commit Graph

27 Commits

Author SHA1 Message Date
Ihar Hrachyshka
8201374f52 gpclient: fix build in darwin sandbox 2026-08-11 19:48:15 -04:00
Peder Bergebakken Sundt
abfcddd50d gpclient: keep nixpkgs-update opt-out visible (#537978) 2026-07-18 17:27:05 +00:00
Ihar Hrachyshka
9fa6dd7cb9 gpclient: patch libexec fallback paths
Some additional fallback paths were added in the recent update. Nothing
is broken, but it's better to avoid impurities.
2026-07-02 20:04:38 -04:00
Ihar Hrachyshka
60f62af6ed gpclient: keep nixpkgs-update opt-out visible
In 344a3c2437 we attempted to disable bot updates on gpclient. But it
didn't work because of a quirk in bot logic.

Re-inherit the description locally so meta.position points at gpclient
while preserving the inherited metadata text.

Precedent: fab23265d6

Assisted-by: gpt-5.5 xhigh
2026-07-02 19:31:09 -04:00
Mariappan Ramasamy
4d50d7d087 gpclient: restore gpgui.desktop for globalprotectcallback scheme handler
PR #485779 dropped the gpgui.desktop install, reasoning that all gpgui
files require the proprietary gpgui binary. But the desktop file is not
gpgui-only: its Exec is `gpclient launch-gui %u`, the free CLI subcommand
that receives the SAML auth callback. Without it the
x-scheme-handler/globalprotectcallback handler is unregistered, so
external-browser SSO (`gpclient connect --browser <x>`) hangs after login
- the browser opens globalprotectcallback://<data> with nothing to handle
it, and the auth cookie never returns to the waiting connect process.

Reinstall the desktop file on Linux and point Exec at the gpclient in
$out, matching the pre-2.5.1 behaviour.
2026-06-19 18:54:41 +08:00
Ihar Hrachyshka
c65d8817de gp{auth,client}: 2.5.1 -> 2.5.4
gpclient now carries a custom vpnc-script so we have to include it and
patch for nixpkgs like we do for the upstream vpnc-script.

This change also fixes a broken gpauth path on darwin, allowing to use
the client on this platform too.

https://github.com/yuezk/GlobalProtect-openconnect/releases/tag/v2.5.2
https://github.com/yuezk/GlobalProtect-openconnect/releases/tag/v2.5.3
https://github.com/yuezk/GlobalProtect-openconnect/releases/tag/v2.5.4

Assisted-by: Codex, gpt-5.5 xhigh
2026-06-03 19:56:40 -04:00
Ihar Hrachyshka
344a3c2437 gpclient: disable automatic update 2026-06-03 19:25:58 -04:00
Ihar Hrachyshka
423aa92201 gpclient: sort arguments and variables 2026-02-11 20:57:15 -05:00
Ihar Hrachyshka
44915d8213 gpclient: use makeBinaryWrapper 2026-02-11 20:57:15 -05:00
Ihar Hrachyshka
88decd13ca gpclient: avoid unnecessary dependencies on darwin 2026-02-11 20:57:15 -05:00
Ihar Hrachyshka
6f76e5c7d2 gpclient: adopt postPatch and postInstall from upstream flake
Note that all gpgui related files are dropped because they require an
external proprietary gpgui binary that we don't package.
2026-02-11 20:57:15 -05:00
Ihar Hrachyshka
39a0975daf gpclient: use postFixup instead of preFixup 2026-02-11 20:57:15 -05:00
Ihar Hrachyshka
9c3a8dcab5 gpclient: don't install .desktop on darwin 2025-12-14 20:15:54 -05:00
Ihar Hrachyshka
3b0ee6d7ce gpclient: use postPatch to patch files 2025-12-14 20:15:54 -05:00
Ihar Hrachyshka
33e356bf26 gpauth: 2.4.6 -> 2.5.0
The new version has vendored openconnect.
2025-12-14 20:15:54 -05:00
Thibault Gagnaux
db8d5de6f5 {gpclient,gpauth}: update 2.4.1 -> 2.4.6 2025-10-22 13:53:19 +02:00
Thibault Gagnaux
d226448a62 gpclient: refactor to make update script work 2025-10-19 10:45:30 +02:00
TomaSajt
398b16e16c treewide: remove useFetchCargoVendor usages 2025-07-26 11:39:35 +02:00
Winter
a19cd4ffb1 Revert "treewide: replace rev with tag"
This reverts commit 65a333600d.

This wasn't tested for correctness with something like fodwatch [0],
and should not have been (self-)merged so quickly, especially without
further review.

It also resulted in the breakage of at least one package [1] (and that's
the one we know of and was caught).

A few packages that were updated in between this commit and this revert
were not reverted back to using `rev`, but other than that, this is a
1:1 revert.

[0]: https://codeberg.org/raphaelr/fodwatch
[1]: https://github.com/NixOS/nixpkgs/pull/396904 / 758551e458
2025-04-08 02:57:25 -04:00
Pol Dellaiera
65a333600d treewide: replace rev with tag 2025-04-07 16:57:22 +02:00
m1dugh
75fad36319 gpclient: decouples from gpauth (#380850)
* gpclient: decouples from gpauth

* Apply suggestions from code review

---------

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2025-02-16 22:24:09 +01:00
Alyssa Ross
63bff8c132 treewide: migrate to fetchCargoVendor, batch 1
Cargo 1.84.0 seems to have changed the output format of cargo vendor
again, once again invalidating fetchCargoTarball FOD hashes.  It's
time to fix this once and for all, switching across the board to
fetchCargoVendor, which is not dependent on cargo vendor's output
format.

It should be possible to reproduce this diff.  To do so, get the list
of files changed by this commit, e.g. with git diff --name-only, then
run the following two commands, each with that list of files as their
standard input:

	xargs sed -i 's/^\(. *\)\(cargoHash\)\b/\1useFetchCargoVendor = true;\n\1cargoHash/'
	cut -d / -f 4 | xargs -n 1 nix-update --version=skip

This will take a long time.  It might be possible to parallelize it
using xargs' -P option.  I haven't tested it.
2025-01-23 11:46:43 +01:00
m1dugh
6dcea19288 gpclient: 2.3.9 -> 2.4.1 2025-01-16 00:01:05 +01:00
Rahul Rameshbabu
d42fed462b {gpauth,gpclient}: 2.3.7 -> 2.3.9
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-11-13 19:47:34 -08:00
Rahul Rameshbabu
27787d0d25 gpclient: Remove absolute path in desktop entry
PR #308324 describes the various issues with using absolute paths in
desktop entries. This change makes gpclient comply with the direction
stated in that PR.

Suggested-by: @tomodachi94
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-11-13 19:47:32 -08:00
Markus Hauck
042afa604c gpclient: add gio-networking for embedded browser
Without this, login with the non-external browser results in:

> 2024-10-10T06:15:23Z WARN  gpauth::auth_window] Failed to load uri: <uri> with error: TLS/SSL support not available; install glib-networking

The login flow seems to work after adding glib-networking to
GIO_EXTRA_MODULES by wrapping the `gpclient` program.
2024-10-10 08:46:27 +02:00
Rahul Rameshbabu
156fe9a898 globalprotect-openconnect: add core logic and packages for 2.x releases
The GUI of GlobalProtect-openconnect is unfree software, while the CLI is
licensed as GPLv3-only. This packaging work focuses on the CLI, and
components required for the CLI.

Link: https://github.com/yuezk/GlobalProtect-openconnect
Signed-off-by: Rahul Rameshbabu <sergeantsagara@protonmail.com>
2024-09-21 10:36:31 -07:00