Reproducible build environment

.gitignore

@@ -67,3 +67,6 @@ manager_deepsec
 /Examples/session_equivalence/tests/scratch.dps
 /documentation/files/*
 !/documentation/files/.content
+
+.envrc
+.direnv

Makefile

@@ -79,7 +79,7 @@ config:
 
 # configures and compiles
 compil:
-	@ocamlbuild $(PACKAGES) main.$(EXTENSION) worker.$(EXTENSION) main_api.$(EXTENSION)
+	@ocamlbuild -use-ocamlfind $(PACKAGES) main.$(EXTENSION) worker.$(EXTENSION) main_api.$(EXTENSION)
 	@mv _build/Source/main.$(EXTENSION)  deepsec
 	@mv _build/Source/main_api.$(EXTENSION) deepsec_api
 	@mv _build/Source/distributed/worker.$(EXTENSION) deepsec_worker

flake.nix

@@ -0,0 +1,37 @@
+{
+  description = "DeepSec: Deciding Equivalence Properties in Security Protocols.
+
+Automated verification has become an essential part in the security evaluation of cryptographic protocols. Recently, there has been a considerable effort to lift the theory and tool support that existed for reachability properties to the more complex case of equivalence properties. **DeepSec** allows you to decide trace equivalence and session equivalence for a large variety of cryptographic primitives---those that can be represented by a subterm convergent destructor rewrite system.
+  ";
+
+  inputs = {
+    opam-nix.url = "github:tweag/opam-nix";
+    flake-utils.url = "github:numtide/flake-utils";
+    nixpkgs.follows = "opam-nix/nixpkgs";
+    # nixpkgs.url = "github:nixos/nixpkgs";
+  };
+
+  outputs = { self, flake-utils, opam-nix
+  , nixpkgs 
+}@inputs:
+    # Don't forget to put the package name instead of `throw':
+    let
+      package = "deepsec";
+    in
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = nixpkgs.legacyPackages.${system};
+        on = opam-nix.lib.${system};
+        scope =
+          on.buildOpamProject { } package ./. { ocaml-base-compiler = "*"; };
+        overlay = final: prev:
+          {
+            # Your overrides go here
+          };
+      in {
+        legacyPackages = scope.overrideScope overlay;
+
+        defaultPackage = self.legacyPackages.${system}.${package};
+
+      });
+}

script/check

@@ -1,4 +1,4 @@
-#! /bin/bash
+#!/nix/store/rj7zvmif800bgg3sbznq6g5g438jx104-bash-5.2p37/bin/bash
 
 # checks requirements for DeepSec installation
 

script/cpu_linux_osx

@@ -1,4 +1,4 @@
-#!/bin/sh
+#!/nix/store/rj7zvmif800bgg3sbznq6g5g438jx104-bash-5.2p37/bin/sh
 
 # macOS:           Use `sysctl -n hw.*cpu_max`, which returns the values of
 #                  interest directly.