flake.nix

{
  description = "Optimism op-node with custom p2p listener patch";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    flake-utils.url = "github:numtide/flake-utils";
  };

  outputs = { self, nixpkgs, flake-utils }:
    flake-utils.lib.eachDefaultSystem (system:
      let
        pkgs = nixpkgs.legacyPackages.${system};

        # Optimism source at op-node/v1.16.3
        optimismSrc = pkgs.fetchFromGitHub {
          owner = "ethereum-optimism";
          repo = "optimism";
          rev = "op-node/v1.16.3";
          hash = "sha256-CO/8VGmOh4HgRqLezST/2AkK/Wsrvv/grSNXtBkeKkc=";
          fetchSubmodules = true;
        };

        # Apply the patch
        patchedSrc = pkgs.stdenv.mkDerivation {
          name = "optimism-patched-src";
          src = optimismSrc;

          patches = [ ./0001-expose-block-commitments-api.patch ];

          phases = [ "unpackPhase" "patchPhase" "installPhase" ];

          installPhase = ''
            cp -r . $out
          '';
        };

        op-node = pkgs.buildGoModule {
          pname = "op-node";
          version = "unstable-2024";

          src = patchedSrc;

          vendorHash = "sha256-ADvgOcU4gYiS8pzDyttrqKUX56q/sgn6FrZazy1MUvQ=";

          # Build only op-node
          subPackages = [ "op-node/cmd" ];

          ldflags = [
            "-s"
            "-w"
          ];

          # Rename the binary from 'cmd' to 'op-node'
          postInstall = ''
            mv $out/bin/cmd $out/bin/op-node
          '';

          # Skip tests during build
          doCheck = false;

          meta = with pkgs.lib; {
            description = "Optimism Node with block commitments exposed";
            homepage = "https://github.com/ethereum-optimism/optimism";
            license = licenses.mit;
          };
        };

        # Container image using buildLayeredImage for efficient layers
        op-node-image = pkgs.dockerTools.buildLayeredImage {
          name = "op-node";
          tag = "latest";

          contents = [
            op-node
            # Include CA certificates for HTTPS connections
            pkgs.cacert
          ];

          config = {
            Entrypoint = [ "${op-node}/bin/op-node" ];
            Env = [
              "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
            ];
          };
        };

        # Script to push image to Docker Hub using skopeo
        # Usage: DOCKER_REPO=username/op-node nix run .#push-image [-- extra-skopeo-args]
        push-image = pkgs.writeShellScriptBin "push-image" ''
          set -euo pipefail

          DOCKER_REPO="''${DOCKER_REPO:-}"
          IMAGE_TAG="''${IMAGE_TAG:-latest}"

          if [ -z "$DOCKER_REPO" ]; then
            echo "Error: DOCKER_REPO environment variable is required"
            echo "Usage: DOCKER_REPO=username/op-node nix run .#push-image [-- extra-skopeo-args]"
            exit 1
          fi

          DEST="docker://docker.io/$DOCKER_REPO:$IMAGE_TAG"
          echo "Pushing image to $DEST..."

          ${pkgs.skopeo}/bin/skopeo copy \
            --insecure-policy \
            "docker-archive:${op-node-image}" \
            "$DEST" \
            "$@"

          echo "Successfully pushed to $DEST"
        '';

      in {
        packages = {
          default = op-node;
          op-node = op-node;
          op-node-image = op-node-image;
          push-image = push-image;
        };

        apps.push-image = {
          type = "app";
          program = "${push-image}/bin/push-image";
        };

        devShells.default = pkgs.mkShell {
          buildInputs = with pkgs; [
            go_1_24
            gopls
            go-tools
            skopeo
          ];
        };
      }
    );
}