colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #72093 from prusnak/go-fortify

Browse Source 
stop using hardeningDisable = [ "fortify" ]; for Go packages
This commit is contained in:
adisbladis 2019-10-28 14:09:55 +01:00 committed by GitHub
commit 5dd330ef0e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
7 changed files with 0 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkgs/applications/blockchains/go-ethereum.nix
View File

@ -10,9 +10,6 @@ buildGoPackage rec {
propagatedBuildInputs =
stdenv.lib.optionals stdenv.isDarwin [ libobjc IOKit ];
# Fixes Cgo related build failures (see https://github.com/NixOS/nixpkgs/issues/25959 )
hardeningDisable = [ "fortify" ];
src = fetchFromGitHub {
owner = "ethereum";
repo = pname;

2
pkgs/applications/virtualization/containerd/default.nix
View File

@ -16,8 +16,6 @@ buildGoPackage rec {
goPackagePath = "github.com/containerd/containerd";
outputs = [ "bin" "out" "man" ];
hardeningDisable = [ "fortify" ];
buildInputs = [ btrfs-progs go-md2man utillinux ];
buildFlags = "VERSION=v${version}";

5
pkgs/applications/virtualization/docker/default.nix
View File

@ -37,8 +37,6 @@ rec {
rev = containerdRev;
sha256 = containerdSha256;
};
hardeningDisable = [ "fortify" ];
});
docker-tini = tini.overrideAttrs (oldAttrs: {
@ -82,9 +80,6 @@ rec {
sha256 = sha256;
};
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [ pkgconfig ];
buildInputs = [
makeWrapper removeReferencesTo go-md2man go libtool

2
pkgs/applications/virtualization/podman/default.nix
View File

@ -18,8 +18,6 @@ buildGoPackage rec {
outputs = [ "bin" "out" "man" ];
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [ pkgconfig go-md2man ];
buildInputs = [ btrfs-progs libseccomp gpgme lvm2 systemd ];

5
pkgs/servers/livepeer/default.nix
View File

@ -18,11 +18,6 @@ buildGoPackage rec {
buildInputs = [ pkgconfig ffmpeg ];
# XXX This removes the -O2 flag, to avoid errors like:
# cgo-dwarf-inference:2:8: error: enumerator value for '__cgo_enum__0' is not an integer constant
# This is a workaround for nixpkgs+golang BUG https://github.com/NixOS/nixpkgs/issues/25959
hardeningDisable = [ "fortify" ];
enableParallelBuilding = true;
meta = with stdenv.lib; {

3
pkgs/servers/trezord/default.nix
View File

@ -4,9 +4,6 @@ buildGoPackage rec {
pname = "trezord-go";
version = "2.0.27";
# Fixes Cgo related build failures (see https://github.com/NixOS/nixpkgs/issues/25959 )
hardeningDisable = [ "fortify" ];
goPackagePath = "github.com/trezor/trezord-go";
src = fetchFromGitHub {

2
pkgs/tools/networking/flannel/default.nix
View File

@ -9,8 +9,6 @@ buildGoPackage rec {
goPackagePath = "github.com/coreos/flannel";
hardeningDisable = [ "fortify" ];
src = fetchFromGitHub {
inherit rev;
owner = "coreos";