flake.nix

@@ -187,6 +187,9 @@
         # perl-ldap fails cross-compile (Module::Install needs dynamic loading)
         # Strip it from john deps -- the perl scripts that need it are not critical
         john = prev.john.overrideAttrs (old: {
+          nativeBuildInputs = (old.nativeBuildInputs or []) ++ [
+            prev.buildPackages.python  # opencl_generate_dynamic_loader.py needs python
+          ];
           propagatedBuildInputs = builtins.filter
             (x: x?pname && x.pname != "perl-ldap")
             (old.propagatedBuildInputs or []);