pshash: init at 0.1.11.0

[thornoar]

Summary

Adding a simple password generation tool called pshash, designed to create very secure passwords using a pseudo-hashing function and a set of public and private keys, without storing the resulting passwords anywhere. E.g. running pshash google 123 456 (with private keys 123 and 456) will yield VLCJXY4y*tm&Z3Db$5a0h#?jo, which can then be used as one's password to Google. See more at https://github.com/thornoar/pshash#synopsis and even more in the accompanying paper proposal at https://github.com/thornoar/pshash/blob/master/documentation/main.pdf.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module

---

Add a 👍 reaction to pull requests you find important.

[donovanglover]

Welcome to nixpkgs! To make things easier for reviewers, please avoid changing the checklist and make sure that your pull request adheres to CONTRIBUTING.md.

[thornoar]

Welcome to nixpkgs! To make things easier for reviewers, please avoid changing the checklist and make sure that your pull request adheres to CONTRIBUTING.md.

Thank you for maintaining this wonderful project! I apologize for my ill-written pull request, all checks run successfully now, and I reverted the checklist to default.

[donovanglover]

Looks better now but there should be two commits. See #361576 (comment) for a similar Haskell PR that was accepted recently

[thornoar]

Thank you for your detailed feedback! I made changes accordingly.

[donovanglover]

LGTM

[FliegendeWurst]

I would suggest to run the tests:

diff --git a/pkgs/by-name/ps/pshash/package.nix b/pkgs/by-name/ps/pshash/package.nix
index a708709141f7..d73b7774929b 100644
--- a/pkgs/by-name/ps/pshash/package.nix
+++ b/pkgs/by-name/ps/pshash/package.nix
@@ -13,9 +13,15 @@ haskellPackages.mkDerivation rec {
     hash = "sha256-2lb8WxZb9e3hTnBiXAbyOer9EqbBEsnOAbJfPPdvIGc=";
   };
 
+  postPatch = ''
+    patchShebangs --build test/output.sh
+    substituteInPlace test/output.sh \
+      --replace-fail 'compare "$cmd -f /' "# "
+  '';
+
   isLibrary = false;
   isExecutable = true;
-  doCheck = false;
+  doCheck = true;
 
   executableHaskellDepends = with haskellPackages; [
     base
@@ -23,6 +29,12 @@ haskellPackages.mkDerivation rec {
     directory
   ];
 
+  checkPhase = ''
+    runHook preCheck
+    test/output.sh dist/build/pshash/pshash
+    runHook postCheck
+  '';
+
   license = lib.licenses.mit;
   description = "Functional pseudo-hash password creation tool";
   homepage = "https://github.com/thornoar/pshash";