summaryrefslogtreecommitdiff
path: root/gui-apps/1password/1password-8.12.42.ebuild
blob: 533bbcf2ae577d73f00aa40065c851fdfe30b238 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
# Copyright 2026 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2

EAPI=8

CHROMIUM_LANGS="af am ar bg bn ca cs da de el en-GB es es-419 et fa fi fil fr gu he
	hi hr hu id it ja kn ko lt lv ml mr ms nb nl pl pt-BR pt-PT ro ru sk sl sr
	sv sw ta te th tr uk ur vi zh-CN zh-TW"

inherit chromium-2 desktop optfeature xdg

DESCRIPTION="Password manager and secure wallet"
HOMEPAGE="https://1password.com"
SRC_URI="
	amd64? ( https://downloads.1password.com/linux/tar/stable/x86_64/${P}.x64.tar.gz )
	arm64? ( https://downloads.1password.com/linux/tar/stable/aarch64/${P}.arm64.tar.gz )"

LICENSE="all-rights-reserved"
SLOT="0"
KEYWORDS="-* ~amd64 ~arm64"
RESTRICT="bindist mirror strip"

RDEPEND="
	acct-group/onepassword
	acct-group/onepassword-mcp
	>=app-accessibility/at-spi2-core-2.46.0:2
	dev-libs/expat
	dev-libs/glib:2
	dev-libs/nspr
	dev-libs/nss
	media-libs/alsa-lib
	media-libs/mesa
	net-print/cups
	sys-apps/dbus
	sys-auth/polkit
	x11-libs/cairo
	x11-libs/gtk+:3
	x11-libs/libX11
	x11-libs/libXcomposite
	x11-libs/libXdamage
	x11-libs/libXext
	x11-libs/libXfixes
	x11-libs/libXrandr
	x11-libs/libxcb
	x11-libs/libxkbcommon
	x11-libs/pango
	x11-misc/xdg-utils
	virtual/libudev
	virtual/zlib
"

QA_PREBUILT="opt/1Password/*"

src_unpack() {
	default
	case ${ARCH} in
		amd64) S="${WORKDIR}/${P}.x64" ;;
		arm64) S="${WORKDIR}/${P}.arm64" ;;
		*) die "Unsupported architecture: ${ARCH}" ;;
	esac
}

src_prepare() {
	default

	# allow members of the onepassword group to authorize CLI and SSH agent
	sed -e 's/\${POLICY_OWNERS}/unix-group:onepassword/g' \
		com.1password.1Password.policy.tpl > "${T}"/com.1password.1Password.policy || die

	# remove the vendor installers
	rm install.sh after-install.sh after-remove.sh \
		install_biometrics_policy.sh || die
}

src_install() {
	# cleanup languages
	pushd locales > /dev/null || die
	chromium_remove_language_paks
	popd > /dev/null || die

	insinto /usr/share/polkit-1/actions
	doins "${T}"/com.1password.1Password.policy

	domenu resources/com.onepassword.OnePassword.desktop
	local size
	for size in 32 64 256 512; do
		doicon -s "${size}" \
		"resources/icons/hicolor/${size}x${size}/apps/1password.png" || die
	done

	dodoc resources/custom_allowed_browsers
	insinto /etc/1password
	doins resources/custom_allowed_browsers

	insinto /etc/apparmor.d
	newins resources/apparmor-profile 1password

	# Remove resources installed into system directories.
	rm -r \
		resources/icons \
		resources/com.onepassword.OnePassword.desktop \
		resources/custom_allowed_browsers \
		resources/apparmor-profile || die

	# Remove the source policy template.
	rm com.1password.1Password.policy.tpl || die

	dodir /opt
	mv "${S}" "${ED}/opt/1Password" || die

	dosym -r /opt/1Password/1password /usr/bin/1password
	dosym -r /opt/1Password/1password-mcp /usr/bin/1password-mcp
	# preserve the vendor-supported path used by existing MCP clients
	# source: after-install.sh
	dosym 1password-mcp /opt/1Password/onepassword-mcp

	# https://github.com/electron/electron/issues/17972
	fperms 4711 /opt/1Password/chrome-sandbox

	fowners :onepassword /opt/1Password/1Password-BrowserSupport
	fperms g+s /opt/1Password/1Password-BrowserSupport

	fowners :onepassword-mcp /opt/1Password/1password-mcp
	fperms g+s /opt/1Password/1password-mcp
}

pkg_postinst() {
	xdg_pkg_postinst

	elog "To enable browser integration, SSH agent, and CLI unlock,"
	elog "your user account must be part of the 'onepassword' group:"
	elog "    usermod -aG onepassword \$USER"

	if has_version "acct-group/onepassword-mcp"; then
		elog ""
		elog "To use the 1Password MCP integration, add your user to the 'onepassword-mcp' group:"
		elog "    usermod -aG onepassword-mcp \$USER"
	fi

	optfeature "1Password CLI" app-misc/1password-cli
}