Установка vscode в NixOS с расширениями

{ config, pkgs, lib, ... }:

let
  unstable = import <unstable> { config.allowUnfree = true; };

  # пусть до файла со списком раширений
  vscode_ext = lib.importJSON "/etc/nixos/configs/vscode.json";
  extensions =
    unstable.vscode-utils.extensionsFromVscodeMarketplace vscode_ext; # [
  vscode-with-extensions =
    unstable.vscode-with-extensions.override { vscodeExtensions = extensions; };
in {
  # Доп пакеты необходимые для расширений работы расширений
  environment.systemPackages = with pkgs; [
    vscode-with-extensions
    graphviz
    plantuml
    adoptopenjdk-jre-bin
  ];
}

[
  {
    "name": "EditorConfig",
    "publisher": "EditorConfig",
    "version": "0.16.4",
    "sha256": "0fa4h9hk1xq6j3zfxvf483sbb4bd17fjl5cdm3rll7z9kaigdqwg"
  },
  {
    "name": "Nix",
    "publisher": "bbenoist",
    "version": "1.0.1",
    "sha256": "0zd0n9f5z1f0ckzfjr38xw2zzmcxg1gjrava7yahg5cvdcw6l35b"
  }
]

#!/usr/bin/env nix-shell
#!nix-shell -i bash -p curl jq unzip
set -eu -o pipefail

# Helper to just fail with a message and non-zero exit code.
function fail() {
    echo "$1" >&2
    exit 1
}

# Helper to clean up after ourself if we're killed by SIGINT
function clean_up() {
    TDIR="${TMPDIR:-/tmp}"
    echo "Script killed, cleaning up tmpdirs: $TDIR/vscode_exts_*" >&2
    rm -Rf "$TDIR/vscode_exts_*"
}

function get_vsixpkg() {
    N="$1.$2"

    # Create a tempdir for the extension download
    EXTTMP=$(mktemp -d -t vscode_exts_XXXXXXXX)

    URL="https://$1.gallery.vsassets.io/_apis/public/gallery/publisher/$1/extension/$2/latest/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage"

    # Quietly but delicately curl down the file, blowing up at the first sign of trouble.
    curl --silent --show-error --fail -X GET -o "$EXTTMP/$N.zip" "$URL"
    # Unpack the file we need to stdout then pull out the version
    VER=$(jq -r '.version' <(unzip -qc "$EXTTMP/$N.zip" "extension/package.json"))
    # Calculate the SHA
    SHA=$(nix-hash --flat --base32 --type sha256 "$EXTTMP/$N.zip")

    # Clean up.
    rm -Rf "$EXTTMP"
    # I don't like 'rm -Rf' lurking in my scripts but this seems appropriate

    # cat <<-EOF
  echo "{ \"name\": \"$2\", \"publisher\": \"$1\", \"version\": \"$VER\", \"sha256\": \"$SHA\" }"
# EOF | jq -R .
}

# See if can find our code binary somewhere.
if [ $# -ne 0 ]; then
    CODE=$1
else
    CODE=$(command -v code)
fi

if [ -z "$CODE" ]; then
    # Not much point continuing.
    fail "VSCode executable not found"
fi

# Try to be a good citizen and clean up after ourselves if we're killed.
trap clean_up SIGINT
function main () {
    # Begin the printing of the nix expression that will house the list of extensions.
    # printf '[\n'

    # Note that we are only looking to update extensions that are already installed.
    for i in $($CODE --list-extensions)
    do
        OWNER=$(echo "$i" | cut -d. -f1)
        EXT=$(echo "$i" | cut -d. -f2)

        get_vsixpkg "$OWNER" "$EXT" | jq '.'
    done
    # Close off the nix expression.
    # printf ']'
}

main | jq -s . | jq '.|=sort_by(.name)' > /etc/nixos/configs/vscode.json