diff --git a/pkgs/os-specific/linux/firmware/fwupdate/default.nix b/pkgs/os-specific/linux/firmware/fwupdate/default.nix
new file mode 100644
index 00000000000..3fc7af91636
--- /dev/null
+++ b/pkgs/os-specific/linux/firmware/fwupdate/default.nix
@@ -0,0 +1,35 @@
+{ stdenv, fetchurl, gnu-efi, efivar, libsmbios, popt, pkgconfig
+, gettext }:
+let version = "8"; in
+  stdenv.mkDerivation
+    { name = "fwupdate-${version}";
+      src = fetchurl
+        { url = "https://github.com/rhinstaller/fwupdate/releases/download/${version}/fwupdate-${version}.tar.bz2";
+          sha256 = "10q8k1kghvbcb5fwcl2smzp8vqdfzimx9dkk0c3hz39py1phy4n8";
+        };
+      makeFlags =
+        [ "EFIDIR=nixos"
+          "LIBDIR=$(out)/lib"
+          "GNUEFIDIR=${gnu-efi}/lib"
+          "TARGETDIR=$(out)/boot/efi/nixos/"
+          "prefix=$(out)/"
+        ];
+      buildInputs = [ gnu-efi libsmbios popt pkgconfig gettext ];
+      propagatedBuildInputs = [ efivar ];
+      # TODO: Just apply the disable to the efi subdir
+      hardeningDisable = "all";
+      patchPhase = ''
+        sed -i 's|/usr/include/smbios_c/token.h|smbios_c/token.h|' \
+          linux/libfwup.c
+        sed -i 's|/usr/share|$(prefix)share|' linux/Makefile
+        sed -i "s|/usr/include|$out/include|" linux/fwup.pc.in
+      '';
+      configurePhase = ''
+        arch=$(cc -dumpmachine | cut -f1 -d- | sed 's,i[3456789]86,ia32,' )
+        export NIX_CFLAGS_COMPILE="$NIX_CFLAGS_COMPILE -I${gnu-efi}/include/efi -I${efivar}/include/efivar -I${gnu-efi}/include/efi/$arch"
+      '';
+      meta =
+        { license = [ stdenv.lib.licenses.gpl2 ];
+          platforms = stdenv.lib.platforms.linux;
+        };
+    }
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index c7d9be8a185..d625c0cb3f7 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -11089,6 +11089,8 @@ with pkgs;
 
   dstat = callPackage ../os-specific/linux/dstat { };
 
+  fwupdate = callPackage ../os-specific/linux/firmware/fwupdate { };
+
   libossp_uuid = callPackage ../development/libraries/libossp-uuid { };
 
   libuuid =