feat: add gatekeeper

Author: staaldraad

flake.lock

@@ -28,17 +28,20 @@
     git-hooks.inputs.nixpkgs.follows = "nixpkgs";
     nixpkgs-go124.url = "github:Nixos/nixpkgs/d2ac4dfa61fba987a84a0a81555da57ae0b9a2b0";
     nixpkgs-pgbackrest.url = "github:nixos/nixpkgs/nixos-unstable-small";
+    gatekeeper.url = "git+ssh://git@github.com/supabase/jit-db-gatekeeper?ref=dev";
   };
 
   outputs =
     { flake-utils, ... }@inputs:
-    inputs.flake-parts.lib.mkFlake { inherit inputs; } (_: {
+    inputs.flake-parts.lib.mkFlake { inherit inputs; } (args: let
       systems = with flake-utils.lib; [
         system.x86_64-linux
         system.aarch64-linux
         system.aarch64-darwin
       ];
+    in {
 
+      systems = systems;
       imports = [
         nix/apps.nix
         nix/checks.nix
@@ -50,5 +53,16 @@
         nix/packages
         nix/overlays
       ];
+
+      packages = builtins.listToAttrs (map (system:
+        let
+          pkgs = import inputs.nixpkgs { inherit system; };
+        in {
+          name = system;
+          value = {
+            pamModule = inputs.gatekeeper.packages.${system}.default;
+          };
+        }) systems );
+
     });
 }

flake.nix

@@ -0,0 +1,40 @@
+{
+  description = "Gatekeeper PAM";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+
+    gatekeeper.url = "git+ssh://git@github.com/supabase/jit-db-gatekeeper";
+  };
+
+  outputs = { self, nixpkgs, gatekeeper }:
+    let
+      pkgs = import nixpkgs { system = "x86_64-linux"; };
+    in {
+      packages.x86_64-linux.default = pkgs.stdenv.mkDerivation {
+        pname = "gatekeeper";
+        version = "0.1.0";
+
+        # Use lib/include from your module
+        buildInputs = [ gatekeeper.packages.x86_64-linux.default ];
+
+        src = ./.;
+      };
+    };
+}
+
+{ stdenv, go, gcc, pamModulePackage, ... }:
+
+stdenv.mkDerivation {
+  pname = "consumer";
+  version = "0.1.0";
+
+  buildInputs = [
+    pamModulePackage   # this brings in the .so, headers, etc.
+  ];
+
+  buildPhase = ''
+    echo "Building consumer project..."
+    ls -lh ${pamModulePackage}/lib/security
+  '';
+}