chore: use snowfall lib for nix flake

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>

packages/container-vault-auth-tee/default.nix

@@ -0,0 +1,25 @@
+{ pkgs
+, vat
+, vault
+, ...
+}:
+pkgs.dockerTools.buildLayeredImage {
+  name = "vault-auth-tee";
+  tag = "test";
+
+  config.Entrypoint = [ "/bin/sh" ];
+
+  contents = pkgs.buildEnv {
+    name = "image-root";
+
+    paths = with pkgs.dockerTools; [
+      vat.vault-auth-tee
+      vault
+      usrBinEnv
+      binSh
+      caCertificates
+      fakeNss
+    ];
+    pathsToLink = [ "/bin" "/etc" ];
+  };
+}

packages/vault-auth-tee/default.nix

@@ -0,0 +1,26 @@
+{ lib
+, pkgs
+, ...
+}:
+
+pkgs.buildGoModule {
+  buildInputs = with pkgs; [
+    nixsgx.sgx-sdk
+    nixsgx.sgx-dcap
+    nixsgx.sgx-dcap.quote_verify
+  ];
+
+  name = "vault-auth-tee";
+  src = with lib.fileset; toSource {
+    root = ./../..;
+    fileset = unions [
+      ../../go.mod
+      ../../go.sum
+      ../../cmd
+      ../../test-fixtures
+      (fileFilter (file: file.hasExt "go") ./../..)
+    ];
+  };
+
+  vendorHash = "sha256-t59C0yzJzFAXNXYOFbta2g5CYlkfvlukq42cxCwLaGY=";
+}