flake.nix

@@ -188,8 +188,14 @@
         # Strip it from john deps -- the perl scripts that need it are not critical
         john = prev.john.overrideAttrs (old: {
           nativeBuildInputs = (old.nativeBuildInputs or []) ++ [
-            prev.buildPackages.python  # opencl_generate_dynamic_loader.py needs python
+            prev.buildPackages.python3  # opencl_generate_dynamic_loader.py needs python3
           ];
+          preConfigure = (old.preConfigure or '') + ''
+            # configure script calls 'python' not 'python3'
+            mkdir -p "$TMPDIR/bin"
+            ln -sf "${prev.buildPackages.python3}/bin/python3" "$TMPDIR/bin/python"
+            export PATH="$TMPDIR/bin:$PATH"
+          '';
           propagatedBuildInputs = builtins.filter
             (x: x?pname && x.pname != "perl-ldap")
             (old.propagatedBuildInputs or []);