nixos/gnupg: create

hosts/main.nix

@@ -19,6 +19,7 @@
     ../nix-os/xdg-default-apps.nix
     ../nix-os/services/nix-binary-cache.nix
     ../nix-os/udev.nix
+    ../nix-os/gnupg.nix
 
     "${inputs.nixos-vscode-server}"
   ];

hosts/tablet.nix

@@ -8,6 +8,7 @@
     ../nix-os/adb.nix
     ../nix-os/locale.nix
     ../nix-os/shell.nix
+    ../nix-os/gnupg.nix
 
     ../nix-os/desktopManagers/gnome.nix
     ../nix-os/displayManagers/gdm.nix

nix-os/gnupg.nix

@@ -0,0 +1,15 @@
+{ pkgs, ... }:
+
+{
+  config = {
+    # Use pcscd for smartcard support
+    services.pcscd.enable = true;
+
+    environment.systemPackages = [(
+      pkgs.gnupg.overrideAttrs (superAttrs: {
+        configureFlags = superAttrs.configureFlags or []
+          ++ [ "--disable-ccid-driver" ];
+      })
+    )];
+  };
+}

pkgs/by-name/mk/mkScriptOverride/package.nix

@@ -0,0 +1,29 @@
+{
+  lib,
+  stdenv,
+}:
+
+{
+  src,
+  script,
+  ...
+} @ args:
+lib.hiPrio (stdenv.mkDerivation (
+  {
+    src = src;
+    name = "${src.name}-script-override";
+    phases = [ "installPhase" "scriptOverridePhase" ];
+    installPhase = ''
+      runHook preInstall
+
+      cp -r $src $out
+      chmod u+w -R $out
+
+      runHook postInstall
+    '';
+    scriptOverridePhase = script;
+  } // lib.removeAttrs args [
+    "pkg"
+    "commands"
+  ]
+))