heather: pinchtab browser control plane (chromium + user service) + pay x86_64 build

home/pay.nix

@@ -7,6 +7,8 @@
   stdenv,
   fetchurl,
   lib,
+  autoPatchelfHook,
+  openssl,
   system ? builtins.currentSystem,
 }:
 let
@@ -31,7 +33,7 @@ let
       };
       "x86_64-linux" = {
         name = "pay-x86_64-unknown-linux-gnu.tar.gz";
-        hash = lib.fakeSha256; # fill if needed
+          hash = "1vyf5pw4j7phyffa1aw66ms2j3r983qjj47wlsiyi0sdmwvzy9pi";
       };
     }
     .${system} or (throw "pay: no prebuilt binary for system ${system}");
@@ -49,6 +51,9 @@ stdenv.mkDerivation {
   sourceRoot = ".";
 
   # tarball contains a single prebuilt `pay` binary at its root.
+  nativeBuildInputs = [ autoPatchelfHook ];
+  buildInputs = [ openssl stdenv.cc.cc.lib ];
+
   dontConfigure = true;
   dontBuild = true;