macosmacos-mojavenixopenconnect

How would you install openconnect via nix on macOS latest?


I’m new to nix and would like to be able to install openconnect with it.

Darwin seems to be unsupported at this time via nix, though it can be installed with either brew or macports.

I’ve tried both a basic install and allowing unsupported. I didn’t see anything on google or stackoverflow as yet that helped.

Basic Install results

$ nix-env -i openconnect
warning: there are multiple derivations named 'openconnect-8.03'; using the first one
installing 'openconnect-8.03'
error: Package ‘«name-missing»’ in /nix/store/bsxpbjipz85ws3wbznhpgc38779pzak5-nixpkgs-19.09pre186574.88d9f776091/nixpkgs/pkgs/tools/networking/openconnect/default.nix:28 is not supported on ‘x86_64-darwin’, refusing to evaluate.

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

(use '--show-trace' to show detailed location information)

Allow Unsupported Results

$ NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM=1 nix-env -i openconnect
warning: there are multiple derivations named 'openconnect-8.03'; using the first one
installing 'openconnect-8.03'
these derivations will be built:
  /nix/store/rf9afn87lch36bj7q61ks6rr3igsbv83-builder.pl.drv
  /nix/store/25pr0lcpbgdx78vpv2jb99sngzwq6b44-nettools-1003.1-2008.drv
  /nix/store/v9i3z3bh3jjzs80wj4jbb5vn37mwflah-openresolv-3.9.0.drv
  /nix/store/1i8i9qww079gm1l82bnggkpxphg27v9w-vpnc-0.5.3-post-r550.drv
  /nix/store/1fzxm6cdd5d2mgizkvqqx0zi0vg9ilpk-openconnect-8.03.drv
these paths will be fetched (157.54 MiB download, 811.71 MiB unpacked):
  /nix/store/02cjbymr9q0abw1vdy9i4c67dklgq4iq-autogen-5.18.12-lib
  /nix/store/09cdrnckixb7i5fsv2fc33rd7p5zx0n8-libjpeg-turbo-2.0.2
  /nix/store/0cifmxw0r6lijng796a3z3nwq67ma5b3-llvm-7.1.0-lib
  /nix/store/0x4jdm1dhb593bpgazqclg7np5mb9yp2-vpnc-r550
  /nix/store/1d1xq0r2zg4r1mk8f1ydfygw19i84lpq-fontconfig-2.12.6
  /nix/store/1ki1m09g8wnd5vzadcxh0pjwfz27zk8z-expand-response-params
  /nix/store/1qkqjb02khxr13q8hhwicznz5zsvjvzv-gnused-4.7
  /nix/store/28ciaclbgwii11yna529xim4w1cnc7bn-expat-2.2.7
  /nix/store/29alwmfhca3y5gj0fki5raahi2s6330n-nettle-3.4.1-dev
  /nix/store/2ia88csiygmwq9bprdlwdpj9ajnjw1wd-gtk+3-3.24.8
  /nix/store/2pj2hdfy8jqy41hbh5h6z7sqhmcpi7xy-cctools-binutils-darwin
  /nix/store/2x82drnhq64vpw0pj4gkgid0qhm7f20q-gnutls-3.6.8-dev
  /nix/store/33whmhh30l2c1cx65pakygv520fjsi96-jasper-2.0.16
  /nix/store/4366mxm4p1032s9s8l6pyzwz56xr9inb-libxml2-2.9.9-py
  /nix/store/49nmvn7iaxlahhc66w8b4y9j66n8fjlb-autogen-5.18.12
  /nix/store/4mjyhc65kdri28g59gpnjvimjkb44vpy-gawk-4.2.1
  /nix/store/4zn384psyqihmm6fnmavxw5w3509qgnw-Security-osx-10.9.5

  ...

configuring
building
build flags: SHELL=/nix/store/d9wxsyxsj3ssjcbywwm35254d14yv87a-bash-4.4-p23/bin/bash
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        resolvconf.in > resolvconf
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        resolvconf.8.in > resolvconf.8
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        resolvconf.conf.5.in > resolvconf.conf.5
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        libc.in > libc
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        dnsmasq.in > dnsmasq
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        named.in > named
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        pdnsd.in > pdnsd
sed     -e 's:@SBINDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin:g' -e 's:@SYSCONFDIR@:/etc:g' -e 's:@LIBEXECDIR@:/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf:g' \
        -e 's:@VARDIR@:/run/resolvconf:g' \
        -e 's:@RCDIR@::g' -e 's:@RESTARTCMD@:false:g' -e 's:@RCDIR@::g' -e 's:@STATUSARG@::g' \
        unbound.in > unbound
installing
install flags: SHELL=/nix/store/d9wxsyxsj3ssjcbywwm35254d14yv87a-bash-4.4-p23/bin/bash SYSCONFDIR=\$\(out\)/etc install
install -d /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin
install -m 0755 resolvconf /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin
install -d /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/etc
test -e /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/etc/resolvconf.conf || \
install -m 0644 resolvconf.conf /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/etc
install -d /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf
install -m 0644 libc dnsmasq named pdnsd unbound /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec/resolvconf
install -d /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/share/man/man8
install -m 0444 resolvconf.8 /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/share/man/man8
install -d /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/share/man/man5
install -m 0444 resolvconf.conf.5 /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/share/man/man5
post-installation fixup
gzipping man pages under /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/share/man/
strip is /nix/store/2pj2hdfy8jqy41hbh5h6z7sqhmcpi7xy-cctools-binutils-darwin/bin/strip
stripping (with command strip and flags -S) in /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/libexec  /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin 
patching script interpreter paths in /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0
/nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin/.resolvconf-wrapped: interpreter directive changed from "/bin/sh" to "/nix/store/d9wxsyxsj3ssjcbywwm35254d14yv87a-bash-4.4-p23/bin/sh"
moving /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/sbin/* to /nix/store/izy3kb6035gl46dkxlhl09g2ghcg2hqp-openresolv-3.9.0/bin
building '/nix/store/25pr0lcpbgdx78vpv2jb99sngzwq6b44-nettools-1003.1-2008.drv'...
created 6 symlinks in user environment
building '/nix/store/1i8i9qww079gm1l82bnggkpxphg27v9w-vpnc-0.5.3-post-r550.drv'...
unpacking sources
unpacking source archive /nix/store/0x4jdm1dhb593bpgazqclg7np5mb9yp2-vpnc-r550
source root is vpnc-r550
patching sources
applying patch /nix/store/cjmd5815vwl3kfhm8f5yzrnd0zcms7ki-makefile.patch
patching file Makefile
Hunk #1 succeeded at 20 with fuzz 1.
Hunk #2 succeeded at 82 with fuzz 2 (offset 11 lines).
applying patch /nix/store/9lq5151d73q7m5d291qayz73828mky1f-no_default_route_when_netmask.patch
patching file vpnc-script
configuring
substituteStream(): WARNING: pattern '/usr/bin/perl' doesn't match anything in file 'pcf2vpnc'
no configure script, doing nothing

...


clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o config.o config.c
config.c:212:6: warning: variable 'pass' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
        if (WEXITSTATUS(status) != 0) {
            ^~~~~~~~~~~~~~~~~~~~~~~~
/nix/store/bhywddq18j79xr274n45byvqjb8fs52j-Libsystem-osx-10.12.6/include/sys/wait.h:144:24: note: expanded from macro 'WEXITSTATUS'
#define WEXITSTATUS(x)  ((_W_INT(x) >> 8) & 0x000000ff)
                        ^
config.c:242:9: note: uninitialized use occurs here
        return pass;
               ^~~~
config.c:212:2: note: remove the 'if' if its condition is always false
        if (WEXITSTATUS(status) != 0) {
        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
config.c:207:6: warning: variable 'pass' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
        if (!WIFEXITED(status)) {
            ^~~~~~~~~~~~~~~~~~
config.c:242:9: note: uninitialized use occurs here
        return pass;
               ^~~~
config.c:207:2: note: remove the 'if' if its condition is always false
        if (!WIFEXITED(status)) {
        ^~~~~~~~~~~~~~~~~~~~~~~~~
config.c:204:6: warning: variable 'pass' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
        if (r == -1)
            ^~~~~~~
config.c:242:9: note: uninitialized use occurs here
        return pass;
               ^~~~
config.c:204:2: note: remove the 'if' if its condition is always false
        if (r == -1)
        ^~~~~~~~~~~~
config.c:177:6: warning: variable 'pass' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
        if (pid == -1)
            ^~~~~~~~~
config.c:242:9: note: uninitialized use occurs here
        return pass;
               ^~~~
config.c:177:2: note: remove the 'if' if its condition is always false
        if (pid == -1)
        ^~~~~~~~~~~~~~
config.c:173:6: warning: variable 'pass' is used uninitialized whenever 'if' condition is true [-Wsometimes-uninitialized]
        if (pipe(fds) == -1)
            ^~~~~~~~~~~~~~~
config.c:242:9: note: uninitialized use occurs here
        return pass;
               ^~~~
config.c:173:2: note: remove the 'if' if its condition is always false
        if (pipe(fds) == -1)
        ^~~~~~~~~~~~~~~~~~~~
config.c:170:12: note: initialize the variable 'pass' to silence this warning
        char *pass;
                  ^
                   = NULL
5 warnings generated.
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o dh.o dh.c
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o math_group.o math_group.c
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o supp.o supp.c
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o decrypt-utils.o decrypt-utils.c
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o crypto.o crypto.c
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o crypto-openssl.o crypto-openssl.c
crypto-openssl.c:66:30: warning: unused parameter 'buf' [-Wunused-parameter]
static int password_cb(char *buf, int size, int rwflag, void *userdata)
                             ^
crypto-openssl.c:66:39: warning: unused parameter 'size' [-Wunused-parameter]
static int password_cb(char *buf, int size, int rwflag, void *userdata)
                                      ^
crypto-openssl.c:66:49: warning: unused parameter 'rwflag' [-Wunused-parameter]
static int password_cb(char *buf, int size, int rwflag, void *userdata)
                                                ^
crypto-openssl.c:66:63: warning: unused parameter 'userdata' [-Wunused-parameter]
static int password_cb(char *buf, int size, int rwflag, void *userdata)
                                                              ^
4 warnings generated.
clang -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -I/nix/store/f7pyl32f8jq8g2i62qqfrjwigi0znb1a-libgcrypt-1.8.4-dev/include -I/nix/store/5pnsm2flly4w5zi0d1qlvz0zs71jwlv9-libgpg-error-1.36-dev/include -DOPENSSL_GPL_VIOLATION -DCRYPTO_OPENSSL -DVERSION=\"0.5.3\"  -c -o vpnc.o vpnc.c
vpnc.c:1901:39: warning: 'memset' call operates on objects of type 'unsigned char' while the size is based on a different type 'unsigned char *' [-Wsizeof-pointer-memaccess]
                        memset(dh_shared_secret, 0, sizeof(dh_shared_secret));
                               ~~~~~~~~~~~~~~~~            ^~~~~~~~~~~~~~~~
vpnc.c:1901:39: note: did you mean to provide an explicit length?
                        memset(dh_shared_secret, 0, sizeof(dh_shared_secret));
                                                           ^~~~~~~~~~~~~~~~
1 warning generated.

...

checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether UID '501' is supported by ustar format... yes
checking whether GID '20' is supported by ustar format... yes
checking how to create a ustar tar archive... gnutar
checking whether make supports nested variables... (cached) yes
checking for style of include used by make... GNU
checking for gcc... clang
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether clang accepts -g... yes
checking for clang option to accept ISO C89... none needed
checking whether clang understands -c and -o together... yes
checking dependency style of clang... none
checking for fdevname_r... no
checking for statfs... yes
checking for getline... yes
checking for strcasestr... yes
checking for strndup... yes
checking for asprintf... yes
checking for vasprintf... yes
checking for supported compiler flags...  -Wall -Wextra -Wno-missing-field-initializers -Wno-sign-compare -Wno-unused-parameter -Werror=pointer-to-int-cast -Wdeclaration-after-statement -Werror-implicit-function-declaration -Wformat-nonliteral -Wformat-security -Winit-self -Wmissing-declarations -Wmissing-include-dirs -Wnested-externs -Wpointer-arith -Wwrite-strings
checking For memset_s... yes
checking for socket... yes
checking for inet_aton... yes
checking for IPV6_PATHMTU socket option... no
checking for __android_log_vprint... no
checking for __android_log_vprint in -llog... no
checking for nl_langinfo... yes
checking for ld used by clang... ld
checking if the linker (ld) is GNU ld... no
checking for shared library run path origin... done
checking how to run the C preprocessor... clang -E
checking for grep that handles long lines and -e... /nix/store/bzr287y1sy2qsrmywwkgxlkblz7vx61w-gnugrep-3.3/bin/grep
checking for egrep... /nix/store/bzr287y1sy2qsrmywwkgxlkblz7vx61w-gnugrep-3.3/bin/grep -E
checking for iconv... no, consider installing GNU libiconv
checking for GNUTLS... yes
checking for gnutls_system_key_add_x509... yes
checking for gnutls_pkcs11_add_provider... yes
checking for P11KIT... no
checking for tss library... no
checking for TASN1... no
checking for LIBLZ4... no
configure: WARNING:
***
*** lz4 not found.
*** 
checking for egrep... (cached) /nix/store/bzr287y1sy2qsrmywwkgxlkblz7vx61w-gnugrep-3.3/bin/grep -E
checking how to print strings... printf
checking for a sed that does not truncate output... /nix/store/1qkqjb02khxr13q8hhwicznz5zsvjvzv-gnused-4.7/bin/sed
checking for fgrep... /nix/store/bzr287y1sy2qsrmywwkgxlkblz7vx61w-gnugrep-3.3/bin/grep -F
checking for ld used by clang... ld
checking if the linker (ld) is GNU ld... no
checking for BSD- or MS-compatible name lister (nm)... nm
checking the name lister (nm) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 196608
checking how to convert x86_64-apple-darwin18.7.0 file names to x86_64-apple-darwin18.7.0 format... func_convert_file_noop
checking how to convert x86_64-apple-darwin18.7.0 file names to toolchain format... func_convert_file_noop
checking for ld option to reload object files... -r
checking for objdump... no
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for archiver @FILE support... no
checking for strip... strip
checking for ranlib... ranlib
checking command to parse nm output from clang object... ok
checking for sysroot... no
checking for a working dd... /nix/store/6964byz5cbs03s8zckqn72i6zq12ipqv-coreutils-8.31/bin/dd
checking how to truncate binary pipes... /nix/store/6964byz5cbs03s8zckqn72i6zq12ipqv-coreutils-8.31/bin/dd bs=4096 count=1
checking for mt... no
checking if : is a manifest tool... no
checking for dsymutil... dsymutil
checking for nmedit... no
checking for lipo... lipo
checking for otool... otool
checking for otool64... no
checking for -single_module linker flag... yes
checking for -exported_symbols_list linker flag... yes
checking for -force_load linker flag... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if clang supports -fno-rtti -fno-exceptions... yes
checking for clang option to produce PIC... -fno-common -DPIC
checking if clang PIC flag -fno-common -DPIC works... yes
checking if clang static flag -static works... no
checking if clang supports -c -o file.o... yes
checking if clang supports -c -o file.o... (cached) yes
checking whether the clang linker (ld) supports shared libraries... yes
checking dynamic linker characteristics... darwin18.7.0 dyld
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... no
checking linker version script flag... unsupported
checking for LIBXML2... yes
checking for ZLIB... yes
checking for LIBPROXY... no
checking for libproxy... no
checking for LIBSTOKEN... yes
checking for LIBPSKC... no
checking for krb5-config... no
checking gssapi/gssapi.h usability... no
checking gssapi/gssapi.h presence... no
checking for gssapi/gssapi.h... no
checking gssapi.h usability... no
checking gssapi.h presence... no
checking for gssapi.h... no
configure: WARNING: Cannot find <gssapi/gssapi.h> or <gssapi.h>
configure: WARNING: Building without GSSAPI support
checking if_tun.h usability... no
checking if_tun.h presence... no
checking for if_tun.h... no
checking linux/if_tun.h usability... no
checking linux/if_tun.h presence... no
checking for linux/if_tun.h... no
checking net/if_tun.h usability... no
checking net/if_tun.h presence... no
checking for net/if_tun.h... no
checking net/tun/if_tun.h usability... no
checking net/tun/if_tun.h presence... no
checking for net/tun/if_tun.h... no
checking for net/if_utun.h... yes
checking alloca.h usability... yes
checking alloca.h presence... yes
checking for alloca.h... yes
checking endian.h usability... no
checking endian.h presence... no
checking for endian.h... no
checking sys/endian.h usability... no
checking sys/endian.h presence... no
checking for sys/endian.h... no
checking sys/isa_defs.h usability... no
checking sys/isa_defs.h presence... no
checking for sys/isa_defs.h... no
checking for python3... no
checking for python2... no
checking for python... /usr/bin/python
checking if groff can create UTF-8 XHTML... no. Not building HTML pages
checking for CWRAP... no
checking for nuttcp... no
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating openconnect.pc
config.status: creating po/Makefile
config.status: creating www/Makefile
config.status: creating libopenconnect.map
config.status: creating openconnect.8
config.status: creating www/styles/Makefile
config.status: creating www/inc/Makefile
config.status: creating www/images/Makefile
config.status: creating tests/Makefile
config.status: creating tests/softhsm2.conf
config.status: creating tests/configs/test-user-cert.config
config.status: creating tests/configs/test-user-pass.config
config.status: creating config.h
config.status: executing depfiles commands
config.status: executing libtool commands
BUILD OPTIONS:
  SSL library:            GnuTLS
  PKCS#11 support:        no
  DTLS support:           yes
  ESP support:            yes
  libproxy support:       no
  RSA SecurID support:    yes
  PSKC OATH file support: no
  GSSAPI support:         no
  Yubikey support:        yes
  LZ4 compression:        no
  Java bindings:          no
  Build docs:             no
  Unit tests:             no
  Net namespace tests:    no
building
build flags: SHELL=/nix/store/d9wxsyxsj3ssjcbywwm35254d14yv87a-bash-4.4-p23/bin/bash
make  all-recursive
make[1]: Entering directory '/private/var/folders/6j/j96x43893xd3vst_44_w7pqm0000gn/T/nix-build-openconnect-8.03.drv-0/openconnect-8.03'
  CC       libopenconnect_la-version.lo
  CC       libopenconnect_la-ssl.lo
  CC       libopenconnect_la-http.lo
  CC       libopenconnect_la-http-auth.lo
  CC       libopenconnect_la-auth-common.lo
  CC       libopenconnect_la-library.lo
  CC       libopenconnect_la-compat.lo
  CC       libopenconnect_la-lzs.lo
  CC       libopenconnect_la-mainloop.lo
  CC       libopenconnect_la-script.lo
  CC       libopenconnect_la-ntlm.lo
  CC       libopenconnect_la-digest.lo
  CC       libopenconnect_la-oncp.lo
  CC       libopenconnect_la-lzo.lo
  CC       libopenconnect_la-auth-juniper.lo
  CC       libopenconnect_la-esp.lo
  CC       libopenconnect_la-esp-seqno.lo
  CC       libopenconnect_la-gnutls-esp.lo
  CC       libopenconnect_la-auth.lo
  CC       libopenconnect_la-cstp.lo
  CC       libopenconnect_la-dtls.lo
  CC       libopenconnect_la-gnutls-dtls.lo
  CC       libopenconnect_la-oath.lo
  CC       libopenconnect_la-gpst.lo
  CC       libopenconnect_la-auth-globalprotect.lo
  CC       libopenconnect_la-yubikey.lo
yubikey.c:63:10: fatal error: 'PCSC/wintypes.h' file not found
#include <PCSC/wintypes.h>
         ^~~~~~~~~~~~~~~~~
1 error generated.
make[1]: *** [Makefile:1163: libopenconnect_la-yubikey.lo] Error 1
make[1]: Leaving directory '/private/var/folders/6j/j96x43893xd3vst_44_w7pqm0000gn/T/nix-build-openconnect-8.03.drv-0/openconnect-8.03'
make: *** [Makefile:697: all] Error 2
builder for '/nix/store/1fzxm6cdd5d2mgizkvqqx0zi0vg9ilpk-openconnect-8.03.drv' failed with exit code 2
error: build of '/nix/store/1fzxm6cdd5d2mgizkvqqx0zi0vg9ilpk-openconnect-8.03.drv’ failed

Naturally I’d expect the install to succeed.

Does anyone know how to make this kind of install work on macos and how to configure it via nix?


Solution

  • The installation was failing because yubikey needs the PCSC framework dependency. I fixed the issue in this pull request. Since it has been merged into the nixpkgs master branch you should now be able to install openconnect on Catalina.