<commit_before>{ stdenv, fetchurl, makeWrapper, ninja, which

# default dependencies
, bzip2, flac, speex, icu, libopus
, libevent, expat, libjpeg, snappy
, libpng, libxml2, libxslt, v8
, xdg_utils, yasm, zlib, libwebp
, libusb1, libexif, pciutils

, python, pythonPackages, perl, pkgconfig
, nspr, udev, krb5
, utillinux, alsaLib
, gcc, bison, gperf
, glib, gtk, dbus_glib
, libXScrnSaver, libXcursor, libXtst, mesa
, protobuf, speechd, libXdamage

# optional dependencies
, libgcrypt ? null # gnomeSupport || cupsSupport

# package customization
, channel ? "stable"
, enableSELinux ? false, libselinux ? null
, enableNaCl ? false
, useOpenSSL ? false, nss ? null, openssl ? null
, gnomeSupport ? false, gconf ? null
, gnomeKeyringSupport ? false, libgnome_keyring3 ? null
, proprietaryCodecs ? true
, cupsSupport ? false
, pulseSupport ? false, pulseaudio ? null
}:

with stdenv.lib;

let
  src = with getAttr channel (import ./sources.nix); stdenv.mkDerivation {
    name = "chromium-source-${version}";

    src = fetchurl {
      inherit url sha256;
    };

    buildInputs = [ python ]; # cannot patch shebangs otherwise

    phases = [ "unpackPhase" "patchPhase" "installPhase" ];

    opensslPatches = optional useOpenSSL openssl.patches;

    prePatch = "patchShebangs .";

    patches = singleton ./sandbox_userns_31.patch;

    postPatch = ''
      sed -i -r \
        -e 's/-f(stack-protector)(-all)?/-fno-\1/' \
        -e 's|/bin/echo|echo|' \
        -e "/python_arch/s/: *'[^']*'/: '""'/" \
        build/common.gypi chrome/chrome_tests.gypi
      sed -i '/not RunGN/,+1d' build/gyp_chromium
      sed -i -e 's|/usr/bin/gcc|gcc|' \
        third_party/WebKit/Source/build/scripts/scripts.gypi \
        third_party/WebKit/Source/build/scripts/preprocessor.pm
    '' + optionalString useOpenSSL ''
      cat $opensslPatches | patch -p1 -d third_party/openssl/openssl
    '' + optionalString (!versionOlder version "192.168.127.12") ''
      sed -i '/import.*depot/d' build/gyp_chromium
    '';

    outputs = [ "out" "sandbox" "bundled" "main" ];
    installPhase = ''
      ensureDir "$out" "$sandbox" "$bundled" "$main"

      header "copying browser main sources to $main"
      find . -mindepth 1 -maxdepth 1 \
        \! -path ./sandbox \
        \! -path ./third_party \
        \! -path ./build \
        \! -path ./tools \
        \! -name '.*' \
        -print | xargs cp -rt "$main"
      stopNest

      header "copying sandbox components to $sandbox"
      cp -rt "$sandbox" sandbox/*
      stopNest

      header "copying third party sources to $bundled"
      cp -rt "$bundled" third_party/*
      stopNest

      header "copying build requisites to $out"
      cp -rt "$out" build tools
      stopNest

      rm -rf "$out/tools/gyp" # XXX: Don't even copy it in the first place.
    '';

    passthru = {
      inherit version;
    };
  };

  mkGypFlags =
    let
      sanitize = value:
        if value == true then "1"
        else if value == false then "0"
        else "${value}";
      toFlag = key: value: "-D${key}=${sanitize value}";
    in attrs: concatStringsSep " " (attrValues (mapAttrs toFlag attrs));

  gypFlagsUseSystemLibs = {
    use_system_bzip2 = true;
    use_system_flac = true;
    use_system_libevent = true;
    use_system_libexpat = true;
    use_system_libexif = true;
    use_system_libjpeg = true;
    use_system_libpng = true;
    use_system_libwebp = true;
    use_system_libxml = true;
    use_system_opus = true;
    use_system_snappy = true;
    use_system_speex = true;
    use_system_ssl = useOpenSSL;
    use_system_stlport = true;
    use_system_xdg_utils = true;
    use_system_yasm = true;
    use_system_zlib = false; # http://crbug.com/143623
    use_system_protobuf = true;

    use_system_harfbuzz = false;
    use_system_icu = false; # Doesn't support ICU 52 yet.
    use_system_libusb = false; # http://crbug.com/266149
    use_system_skia = false;
    use_system_sqlite = false; # http://crbug.com/22208
    use_system_v8 = !versionOlder src.version "192.168.127.12";
  };

  defaultDependencies = [
    bzip2 flac speex icu libopus
    libevent expat libjpeg snappy
    libpng libxml2 libxslt v8
    xdg_utils yasm zlib libwebp
    libusb1 libexif
  ];

  sandbox = import ./sandbox.nix {
    inherit stdenv;
    src = src.sandbox;<commit_msg>chromium: Build using minizip from nixpkgs.<commit_after>{ stdenv, fetchurl, makeWrapper, ninja, which

# default dependencies
, bzip2, flac, speex, icu, libopus
, libevent, expat, libjpeg, snappy
, libpng, libxml2, libxslt, v8
, xdg_utils, yasm, minizip, libwebp
, libusb1, libexif, pciutils

, python, pythonPackages, perl, pkgconfig
, nspr, udev, krb5
, utillinux, alsaLib
, gcc, bison, gperf
, glib, gtk, dbus_glib
, libXScrnSaver, libXcursor, libXtst, mesa
, protobuf, speechd, libXdamage

# optional dependencies
, libgcrypt ? null # gnomeSupport || cupsSupport

# package customization
, channel ? "stable"
, enableSELinux ? false, libselinux ? null
, enableNaCl ? false
, useOpenSSL ? false, nss ? null, openssl ? null
, gnomeSupport ? false, gconf ? null
, gnomeKeyringSupport ? false, libgnome_keyring3 ? null
, proprietaryCodecs ? true
, cupsSupport ? false
, pulseSupport ? false, pulseaudio ? null
}:

with stdenv.lib;

let
  src = with getAttr channel (import ./sources.nix); stdenv.mkDerivation {
    name = "chromium-source-${version}";

    src = fetchurl {
      inherit url sha256;
    };

    buildInputs = [ python ]; # cannot patch shebangs otherwise

    phases = [ "unpackPhase" "patchPhase" "installPhase" ];

    opensslPatches = optional useOpenSSL openssl.patches;

    prePatch = "patchShebangs .";

    patches = singleton ./sandbox_userns_31.patch;

    postPatch = ''
      sed -i -r \
        -e 's/-f(stack-protector)(-all)?/-fno-\1/' \
        -e 's|/bin/echo|echo|' \
        -e "/python_arch/s/: *'[^']*'/: '""'/" \
        build/common.gypi chrome/chrome_tests.gypi
      sed -i '/not RunGN/,+1d' build/gyp_chromium
      sed -i -e 's|/usr/bin/gcc|gcc|' \
        third_party/WebKit/Source/build/scripts/scripts.gypi \
        third_party/WebKit/Source/build/scripts/preprocessor.pm
    '' + optionalString useOpenSSL ''
      cat $opensslPatches | patch -p1 -d third_party/openssl/openssl
    '' + optionalString (!versionOlder version "192.168.127.12") ''
      sed -i '/import.*depot/d' build/gyp_chromium
    '';

    outputs = [ "out" "sandbox" "bundled" "main" ];
    installPhase = ''
      ensureDir "$out" "$sandbox" "$bundled" "$main"

      header "copying browser main sources to $main"
      find . -mindepth 1 -maxdepth 1 \
        \! -path ./sandbox \
        \! -path ./third_party \
        \! -path ./build \
        \! -path ./tools \
        \! -name '.*' \
        -print | xargs cp -rt "$main"
      stopNest

      header "copying sandbox components to $sandbox"
      cp -rt "$sandbox" sandbox/*
      stopNest

      header "copying third party sources to $bundled"
      cp -rt "$bundled" third_party/*
      stopNest

      header "copying build requisites to $out"
      cp -rt "$out" build tools
      stopNest

      rm -rf "$out/tools/gyp" # XXX: Don't even copy it in the first place.
    '';

    passthru = {
      inherit version;
    };
  };

  mkGypFlags =
    let
      sanitize = value:
        if value == true then "1"
        else if value == false then "0"
        else "${value}";
      toFlag = key: value: "-D${key}=${sanitize value}";
    in attrs: concatStringsSep " " (attrValues (mapAttrs toFlag attrs));

  gypFlagsUseSystemLibs = {
    use_system_bzip2 = true;
    use_system_flac = true;
    use_system_libevent = true;
    use_system_libexpat = true;
    use_system_libexif = true;
    use_system_libjpeg = true;
    use_system_libpng = true;
    use_system_libwebp = true;
    use_system_libxml = true;
    use_system_opus = true;
    use_system_snappy = true;
    use_system_speex = true;
    use_system_ssl = useOpenSSL;
    use_system_stlport = true;
    use_system_xdg_utils = true;
    use_system_yasm = true;
    use_system_zlib = true;
    use_system_protobuf = true;

    use_system_harfbuzz = false;
    use_system_icu = false; # Doesn't support ICU 52 yet.
    use_system_libusb = false; # http://crbug.com/266149
    use_system_skia = false;
    use_system_sqlite = false; # http://crbug.com/22208
    use_system_v8 = !versionOlder src.version "3172.16.17.32";
  };

  defaultDependencies = [
    bzip2 flac speex icu libopus
    libevent expat libjpeg snappy
    libpng libxml2 libxslt v8
    xdg_utils yasm minizip libwebp
    libusb1 libexif
  ];

  sandbox = import ./sandbox.nix {
    inherit stdenv;
    src = src.sandbox;
{'fraction_non_alphanumeric': 0.11991682070240296, 'fraction_numerical': 0.014209796672828096, 'mean_word_length': 2.7655502392344498, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 6}, 'pii_count': 4, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7389217', 'n_tokens_mistral': 3211, 'n_tokens_neox': 3015, 'n_words': 737}