{
  buildSystem ? builtins.currentSystem,
  hostSystem ? buildSystem,
  pkgsNix ? (import ./nix/pkgs.nix),

  revision ? "dev",
  releaseName ? "dev",
}: let

  pkgs = pkgsNix.default {
    inherit buildSystem hostSystem;
  };

  pkgsNative = pkgsNix.default {
    inherit buildSystem;
    hostSystem = buildSystem;
  };

  garageNix = (import ./nix/garage.nix);

in rec {

  version = pkgs.stdenv.mkDerivation {
    name = "isle-version";

    inherit buildSystem hostSystem revision releaseName;

    nativeBuildInputs = [ pkgsNative.git ];

    goVersion = pkgs.go.version;
    garageVersion = garageNix.version;
    nixpkgsVersion = pkgsNix.version;

    builder = builtins.toFile "builder.sh" ''
      source $stdenv/setup

      versionFile=version

      echo "Release:         $releaseName"    >> "$versionFile"
      echo "Platform:        $hostSystem"     >> "$versionFile"
      echo "Git Revision:    $revision"       >> "$versionFile"
      echo "Go Version:      $goVersion"      >> "$versionFile"
      echo "Garage Version:  $garageVersion"  >> "$versionFile"
      echo "NixPkgs Version: $nixpkgsVersion" >> "$versionFile"
      echo "Build Platform:  $buildSystem"    >> "$versionFile"

      mkdir -p "$out"/share
      cp "$versionFile" "$out"/share
    '';
  };

  goBinaries = pkgs.buildGoModule {
    pname = "isle-go-binaries";
    version = "unstable";

    # If this seems pointless, that's because it is! buildGoModule doesn't like
    # it if the src derivation's name ends in "-go". So this mkDerivation here
    # only serves to give buildGoModule a src derivation with a name it likes.
    src = pkgs.stdenv.mkDerivation {
      name = "isle-go-src";
      src = ./go;
      builder = builtins.toFile "builder.sh" ''
        source $stdenv/setup
        cp -r "$src" "$out"
      '';
    };

    vendorHash = "sha256-xAm2DqgXpZEErjASSZQoEH9GPwFbBh4h2cY4FWzPVZM=";

    subPackages = [
      "./cmd/entrypoint"
    ];
  };

  dnsmasq = (pkgs.callPackage ./nix/dnsmasq.nix {
    stdenv = pkgs.pkgsStatic.stdenv;
  });

  nebula = pkgs.callPackage ./nix/nebula.nix {};

  garage = let

    hostPlatform = pkgs.stdenv.hostPlatform.parsed;

  in pkgs.callPackage garageNix.package {

    inherit buildSystem;
    hostSystem = "${hostPlatform.cpu.name}-unknown-${hostPlatform.kernel.name}-musl";
    pkgsSrc = pkgsNix.src;

  };

  appDirBase = pkgs.buildEnv {
    name = "isle-AppDir-base";
    paths = [
      ./AppDir
      version
      dnsmasq
      nebula
      garage
      pkgs.minio-client
    ];
  };

  appDir = pkgs.stdenv.mkDerivation {
    name = "isle-AppDir";

    src = appDirBase;
    inherit goBinaries;

    builder = builtins.toFile "build.sh" ''
      source $stdenv/setup
      cp -rL "$src" "$out"
      chmod +w "$out" -R

      cd "$out"
      cp $goBinaries/bin/entrypoint ./AppRun
    '';
  };

  devShell = pkgs.mkShell {
    buildInputs = [
      pkgs.go
      pkgs.golangci-lint
      pkgs.gopls
      (pkgs.callPackage ./nix/gowrap.nix {})
    ];
    shellHook = ''
      true # placeholder
    '';
  };

  testShell = pkgs.mkShell {
    APPDIR = appDirBase;
    buildInputs = [
      pkgs.go
    ];
  };

  build = rec {
    appImage = pkgs.stdenv.mkDerivation {
      name = "isle-AppImage";
      src = appDir;

      nativeBuildInputs = [
        (pkgsNative.callPackage ./nix/appimagetool.nix {})
      ];

      ARCH = pkgs.stdenv.hostPlatform.parsed.cpu.name;

      builder = builtins.toFile "build.sh" ''
        source $stdenv/setup
        cp -rL "$src" isle.AppDir
        chmod +w isle.AppDir -R

        export VERSION=debug

        # https://github.com/probonopd/go-appimage/issues/155
        unset SOURCE_DATE_EPOCH

        appimagetool ./isle.AppDir
        mkdir -p "$out"/bin
        mv Isle-* "$out"/bin/isle
      '';
    };

    archPkg = ((import ./dist/linux/arch) {
      inherit hostSystem releaseName appImage;
      pkgs = pkgsNative;
    });
  };
}