let
  nixpkgs = import .lib/nix/nixpkgs.nix;
  pkgs = import nixpkgs {
    config   = {}; # Make the config pure, ignoring user's config.
    overlays = import .lib/nixpkgs-commonsoft/build/overlays.nix;
  };
  commonsoft-nix-build-modules =
    (import .lib/nixpkgs-commonsoft/build/modules.nix {
      inherit pkgs;
      inherit (pkgs) lib;
      modules = [ ( import build/modules.nix ) ];
    }).config;
  /*
  commonsoft-nix-build =
    pkgs.stdenv.mkDerivation {
      name = "commonsoft-nix-build";
      preferLocalBuild = true;
      allowSubstitutes = false;
      inherit (pkgs) coreutils;
      builder = pkgs.writeText "builder.sh" commonsoft-nix-build-modules.init.builder;
    };
  */
  commonsoft-nix-build =
    pkgs.buildEnv {
      name        = "commonsoft-nix-build";
      pathsToLink = [ "/bin" ];
      paths       = with commonsoft-nix-build-modules; [
        gnupg.init
        #gnupg.gpg-fingerprint
        #nix-plugins.nix-with-extra-builtins
      ];
    };
in
pkgs.stdenv.mkDerivation {
  name = "commonsoft-nix";
  src = null;
  #preferLocalBuild = true;
  #allowSubstitutes = false;
  buildInputs = [
    commonsoft-nix-build
    nixpkgs
    #pkgs.binutils
    pkgs.coreutils
    pkgs.cryptsetup
    pkgs.curl
    pkgs.direnv
    #pkgs.dnsutils
    pkgs.git
    (pkgs.glibcLocales.override {
        allLocales = false;
        locales = [
          "en_US.UTF-8/UTF-8"
          "fr_FR.UTF-8/UTF-8"
        ];
      })
    pkgs.gnumake
    pkgs.gnupg
    pkgs.htop
    #pkgs.inetutils
    pkgs.less
    pkgs.libfaketime
    #pkgs.mailutils
    pkgs.man
    pkgs.ncdu
    pkgs.ncurses
    pkgs.nixops
    #pkgs.openssl
    pkgs.pass
    pkgs.procps
    #pkgs.rxvt_unicode.terminfo
    #pkgs.sqlite
    pkgs.sqlite
    pkgs.sudo
    pkgs.tig
    pkgs.time
    #pkgs.tmux
    pkgs.tree
    pkgs.utillinux
    pkgs.vim
    #pkgs.virtualbox
    pkgs.which
    pkgs.xdg_utils
  ];
  #enableParallelBuilding = true;
  shellHook = ''
    # nix
    export NIX_PATH="nixpkgs=${nixpkgs}:nixpkgs-commonsoft=$PWD/lib/nixpkgs-commonsoft"
    #NIX_PATH+=":nixpkgs-overlays="$PWD"/install/overlays.nix"
    #NIX_PATH+=""

    # executables
    PATH_NIX=$(dirname $(readlink ~/.nix-profile/bin/nix))
    PATH_NIXOS=/run/wrappers/bin
    PATH_FHS="$PWD"/.lib/nix/fhs-bin
    PATH_FHS_VBOX="$PWD"/.lib/fhs-vbox-bin
    export PATH="$PATH_NIXOS:$PATH_FHS_VBOX:$PATH_FHS:$PATH:$PATH_NIX"
    ln -sfn ${commonsoft-nix-build}/bin "$PWD"/.bin

    # NOTE: sudo needs to be own by root with the setuid bit,
    # but this won't be the case for the sudo provided by Nix outside NixOS,
    # hence the addition of $PATH_FHS in shellHook
    # to provide the host system's sudo.
    # WARNING: beware that sudo may reset the environment,
    # and especially PATH, to some system's default.

    # locales
    export LANG=fr_FR.UTF-8
    export LC_CTYPE=fr_FR.UTF-8

    # gpg
    gpgconf --launch gpg-agent
    export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
    export GPG_TTY=$(tty)
    export GNUPGHOME="$PWD"/../sec/gnupg
    install -dm700 "$GNUPGHOME"

    # password-store
    export PASSWORD_STORE_DIR="$PWD"/../sec/pass

    # git
    ln -fnsr \
     "$PWD"/.lib/git/hooks/prepare-commit-msg--longuest-common-prefix \
     "$PWD"/.git/hooks/prepare-commit-msg

    # nixops
    export NIXOPS_DEPLOYMENT="virtualbox"
    export NIXOPS_STATE="$PWD"/.var/nixops/state.nixops
    # Extend the Nix interpreter
    # to enable builtins.extraBuiltins,
    # which provides an unsafe exec useful to get secrets
    # from the local password-store.
    NIXOPS_OPTS+=" --show-trace"
    NIXOPS_OPTS+=" --option plugin-files ${pkgs.nix-plugins}/lib/nix/plugins/libnix-extra-builtins.so"
    NIXOPS_OPTS+=" --option extra-builtins-file ${commonsoft-nix-build-modules.nix-plugins.extra-builtins}"
    export NIXOPS_OPTS

    # disnix
    #export DISNIXOS_USE_NIXOPS=1
    #export DISNIX_CLIENT_INTERFACE=disnix-nixops-client
    #export DISNIX_PROFILE=default
    #export DISNIX_TARGET_PROPERTY=hostname
    #export DYSNOMIA_STATEDIR=var/dysnomia
  '';
}