final: prev:
{
  clevis = prev.clevis.overrideAttrs (oldAttrs: {
    buildInputs = (oldAttrs.buildInputs or []) ++ [final.tpm2-tools];
    nativeBuildInputs = (oldAttrs.nativeBuildInputs or []) ++ [final.makeWrapper];

    preFixup = ''
      ${oldAttrs.preFixup or ""}

      for bin in $out/bin/*; do
        test -x $bin || continue

        substituteInPlace $bin \
          --replace /bin/cat ${final.coreutils}/bin/cat

        wrapProgram $bin \
          --prefix PATH : ${final.tpm2-tools}/bin \
          --prefix PATH : ${final.jose}/bin \
          --prefix PATH : ${final.libpwquality}/bin
      done
    '';
  });

  tpm2-tools = prev.tpm2-tools.overrideAttrs (oldAttrs: {
    fixupPhase = ''
      ${oldAttrs.fixupPhase or ""}

      for wrapper in $out/bin/tpm2_*; do
        symlink=.''${wrapper}-wrapped

        test -h $symlink || continue

        mv -v $symlink $wrapper
      done
    '';
  });
}