{
  lib,
  stdenv,
  fetchFromGitHub,
  cmake,
  ninja,
  pkg-config,
  avahi,
  cjson,
  http-parser,
  systemd,
  cpputest,
}:

stdenv.mkDerivation rec {
  pname = "ot-br-posix";
  version = "20230710";

  src = fetchFromGitHub {
    owner = "openthread";
    repo = "ot-br-posix";
    rev = "thread-reference-${version}";
    hash = "sha256-q7SHmFLfCUYPB7WEUSyYL6hI8/tbkkJkDJ0FBJVwffw=";
    fetchSubmodules = true;
  };

  postPatch = ''
    rm -rf third_party/{cJSON,http-parser}
  '';

  nativeBuildInputs = [
    cmake
    ninja
    pkg-config
  ];

  cmakeFlags = [
    "-Dsystemdsystemunitdir=${placeholder "out"}/lib/systemd/system"
    "-DOTBR_SYSTEMD_UNIT_DIR=${placeholder "out"}/lib/systemd/system"
  ];

  buildInputs = [
    avahi
    http-parser
    cjson
    #systemd
  ];

  # greps /var/log/syslog in the build sandbox
  doCheck = false;

  nativeCheckInputs = [ cpputest ];

  meta = {
    description = "OpenThread Border Router, a Thread border router for POSIX-based platforms";
    homepage = "https://github.com/openthread/ot-br-posix";
    license = lib.licenses.bsd3;
    maintainers = with lib.maintainers; [ ];
    mainProgram = "ot-br-posix";
    platforms = lib.platforms.all;
  };
}

In reply to @hexa:lossy.network
also uses a vendored submodule for openthread

ExecStartPre=service avahi-daemon start

otbr-agent[948518]: [NOTE]-AGENT---: Running 0.3.0
otbr-agent[948518]: [NOTE]-AGENT---: Thread version: 1.3.0
otbr-agent[948518]: [NOTE]-AGENT---: Thread interface: wpan0
otbr-agent[948518]: [NOTE]-AGENT---: Radio URL: spinel+hdlc+uart:///dev/ttyACM0
otbr-agent[948518]: [NOTE]-AGENT---: Radio URL: trel://lo
otbr-agent[948518]: [NOTE]-ILS-----: Infra link selected: lo
otbr-agent[948518]: [INFO]-NCP-----: OpenThread log level changed to 4
otbr-agent[948518]: 51d.05:14:46.770 [I] Platform------: RCP reset: RESET_POWER_ON
otbr-agent[948518]: 51d.05:14:46.770 [I] Platform------: Software reset RCP successfully
otbr-agent[948518]: 51d.05:14:46.770 [I] Platform------: RCP reset: RESET_POWER_ON
otbr-agent[948518]: 51d.05:14:46.772 [I] Platform------: [netif] Sent request#1 to set addr_gen_mode to 1
otbr-agent[948518]: 00:00:00.003 [I] ChildSupervsn-: Timeout: 0 -> 190
otbr-agent[948518]: [INFO]-UTILS---: Set state callback: OK
otbr-agent[948518]: [INFO]-MDNS----: Avahi client state changed to 101
otbr-agent[948518]: [INFO]-MDNS----: Avahi client is connecting to the server
otbr-agent[948518]: [INFO]-BA------: Start Thread Border Agent: OK
otbr-agent[948518]: [INFO]-APP-----: Thread Border Router started on AIL lo.
otbr-agent[948518]: 00:00:00.004 [I] Notifier------: StateChanged (0x00038200) [NetData PanId NetName ExtPanId]
sh: line 1: ipset: command not found
otbr-agent[948518]: 00:00:00.006 [I] Platform------: Execute command `ipset flush otbr-ingress-allow-dst-swap` = 32512
otbr-agent[948518]: 00:00:00.006 [I] Platform------: Got an error when executing command `ipset flush otbr-ingress-allow-dst-swap`: `Resource temporarily unavailable`
otbr-agent[948518]: 00:00:00.006 [W] Platform------: Failed to update ipsets: Failed
otbr-agent[948518]: [INFO]-BA------: Publish meshcop service OpenThread BorderRouter #0B34._meshcop._udp.local.
otbr-agent[948518]: 00:00:00.006 [I] Settings------: Read BorderAgentId {id:e742a5c2b74409078488017c10f7403d}
otbr-agent[948518]: [WARN]-BA------: Result of publish meshcop service OpenThread BorderRouter #0B34._meshcop._udp.local: Invalid state
otbr-agent[948518]: 00:00:00.006 [I] RouterTable---: Route table
otbr-agent[948518]: 00:00:00.007 [I] Platform------: [netif] Host netif is down
otbr-agent[948518]: 00:00:00.007 [I] Platform------: [netif] Succeeded to process request#1
otbr-agent[948518]: 00:00:31.507 [I] Platform------: Session socket is ready

progress!

In reply to @hexa:lossy.network
I though it would at least complain about the missing deps after removing them https://github.com/openthread/ot-br-posix/blob/thread-reference-20230710/.gitmodules