org.keepassxc.KeePassXC.yml

id: org.keepassxc.KeePassXC
runtime: org.kde.Platform
runtime-version: '5.15-24.08'
sdk: org.kde.Sdk
command: keepassxc-wrapper
finish-args:
    # X11 + XShm access
  - --share=ipc
  - --socket=x11
    # Wayland access
  - --socket=wayland
    # Notification access
  - --talk-name=org.freedesktop.Notifications
    # Screen Lock Listener
  - --talk-name=org.freedesktop.ScreenSaver
  - --system-talk-name=org.freedesktop.login1
  - --talk-name=org.gnome.ScreenSaver
  - --talk-name=org.gnome.SessionManager
  - --talk-name=org.gnome.SessionManager.Presence
  - --talk-name=com.canonical.Unity.Session
    # System Tray Icon (Test at every major update)
  - --talk-name=org.kde.StatusNotifierWatcher
    # Secret Service
  - --own-name=org.freedesktop.secrets
    # Favicon Download
  - --share=network
    # YubiKey USB access
  - --device=all
    # Nitrokey Smartcard access
  - --socket=pcsc
    # SSH Agent access
  - --socket=ssh-auth
  - --env=SSH_AUTH_SOCK=$SSH_AUTH_SOCK
    # Host access: workaround extensive portal issues
    # (use beta branch for testing of portals based file access)
  - --filesystem=host
    # Access to temporary files (Remove if RuntimeDirectory patch is upstreamed)
  - --filesystem=/tmp
    # Required for native messaging (Tor browser)
    # TODO uncomment when host access is no longer required.
    # - --filesystem=xdg-data
    # Required for native messaging (Non-Firefox)
    # TODO uncomment when host access is no longer required.
    # - --filesystem=xdg-config
    # Network filesystems
  - --filesystem=xdg-run/gvfs
cleanup:
  - '*.a'
  - '*.h'
  - '*.la'
  - /include
  - /lib/pkgconfig
  - /share/doc
  - /share/man
modules:
  - name: keepassxc
    buildsystem: cmake-ninja
    build-options:
      env:
        GEM_PATH: /app/lib/ruby/gems/2.7.1
    config-opts:
      - -DCMAKE_BUILD_TYPE=Release
      - -DKEEPASSXC_DIST_TYPE=Flatpak
      - -DKEEPASSXC_BUILD_TYPE=Release
      - -DWITH_TESTS=OFF
      - -DCMAKE_INSTALL_LIBDIR=lib
      - -DWITH_XC_UPDATECHECK=OFF
      - -DWITH_XC_ALL=ON
    sources:
      - type: git
        url: https://github.com/keepassxreboot/keepassxc.git
        tag: 2.7.9
        commit: 8f6dd13b0add1dd3fb666cc43ae1e5db478b1827
    post-install:
      - install -Dm755 ./utils/keepassxc-flatpak-wrapper.sh /app/bin/keepassxc-wrapper
      - |
        for f in COPYING LICENSE*; do
          install -Dm644 $f /app/share/licenses/org.keepassxc.KeePassXC/$f
        done
    cleanup:
      - /share/man

    modules:

      - shared-modules/libusb/libusb.json

      - name: minizip
        subdir: contrib/minizip
        sources:
          - type: git
            url: 'https://github.com/madler/zlib'
            tag: 'v1.3'
            commit: 09155eaa2f9270dc4ed1fa13e2b4b2613e6e4851
          - type: script
            dest: contrib/minizip/
            dest-filename: autogen.sh
            commands:
              - autoreconf -ifv

      - name: libargon2
        no-autogen: true
        make-args:
          - PREFIX=/app
          - OPTTARGET=none
          - LIBRARY_REL=lib
        make-install-args:
          - PREFIX=/app
          - OPTTARGET=none
          - LIBRARY_REL=lib
        sources:
          - type: git
            url: 'https://github.com/P-H-C/phc-winner-argon2.git'
            tag: '20190702'
            commit: 62358ba2123abd17fccf2a108a301d4b52c01a7c
        post-install:
          - install -Dm644 -t /app/share/licenses/libargon2 LICENSE
        cleanup:
          - /bin

      - name: botan
        buildsystem: simple
        build-commands:
          - "python3 ./configure.py \
              --disable-cc-tests \
              --disable-static-library \
              --prefix=/app \
              --with-zlib \
              --without-documentation"
          - make -j${FLATPAK_BUILDER_N_JOBS}
          - make install
        sources:
          - type: git
            url: https://github.com/randombit/botan.git
            tag: 3.3.0
            commit: 9074b04c1303a24e2084f8325fa570a5ad4f2478
        post-install:
          - install -Dm644 -t /app/share/licenses/botan license.txt

      - name: pcsclite
        config-opts:
          - --sbindir=/app/bin
        sources:
          - type: git
            url: https://github.com/LudovicRousseau/PCSC
            tag: 2.0.0
            commit: 549922c1355fdd1e85eb0a952fefda7bb96e286a
        cleanup:
          - /bin
        post-install:
          - install -Dm644 -t /app/share/licenses/pcsclite COPYING

      - name: asciidoctor
        buildsystem: simple
        build-commands:
          - gem install --ignore-dependencies --no-user-install --verbose --local
                        --install-dir /app/lib/ruby/gems/2.7.1 --bindir /app/bin
                        asciidoctor-2.0.22.gem
        sources:
          - type: file
            url: https://rubygems.org/downloads/asciidoctor-2.0.22.gem
            sha256: a6d8f1bb593a3617c0334fdf36b1e25186c4f4d0e15636538c5811de9bb1cad6
        cleanup:
          - '*'