public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

stop using hardeningDisable = [ "fortify" ]; for Go packages

Browse Source 
it seems that the issue #25959 is not present anymore
This commit is contained in:
Pavol Rusnak 2019-10-27 14:44:26 +01:00
parent e59c610d58
commit afd38ea1ee
No known key found for this signature in database
GPG Key ID: 91F3B339B9A02A3D
7 changed files with 0 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pkgs/applications/blockchains/go-ethereum.nix
View File

@ -10,9 +10,6 @@ buildGoPackage rec {
propagatedBuildInputs = propagatedBuildInputs =
stdenv.lib.optionals stdenv.isDarwin [ libobjc IOKit ]; stdenv.lib.optionals stdenv.isDarwin [ libobjc IOKit ];
# Fixes Cgo related build failures (see https://github.com/NixOS/nixpkgs/issues/25959 )
hardeningDisable = [ "fortify" ];
src = fetchFromGitHub { src = fetchFromGitHub {
owner = "ethereum"; owner = "ethereum";
repo = pname; repo = pname;

2
pkgs/applications/virtualization/containerd/default.nix
View File

@ -16,8 +16,6 @@ buildGoPackage rec {
goPackagePath = "github.com/containerd/containerd"; goPackagePath = "github.com/containerd/containerd";
outputs = [ "bin" "out" "man" ]; outputs = [ "bin" "out" "man" ];
hardeningDisable = [ "fortify" ];
buildInputs = [ btrfs-progs go-md2man utillinux ]; buildInputs = [ btrfs-progs go-md2man utillinux ];
buildFlags = "VERSION=v${version}"; buildFlags = "VERSION=v${version}";

5
pkgs/applications/virtualization/docker/default.nix
View File

@ -37,8 +37,6 @@ rec {
rev = containerdRev; rev = containerdRev;
sha256 = containerdSha256; sha256 = containerdSha256;
}; };
hardeningDisable = [ "fortify" ];
}); });
docker-tini = tini.overrideAttrs (oldAttrs: { docker-tini = tini.overrideAttrs (oldAttrs: {
@ -82,9 +80,6 @@ rec {
sha256 = sha256; sha256 = sha256;
}; };
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [ pkgconfig ]; nativeBuildInputs = [ pkgconfig ];
buildInputs = [ buildInputs = [
makeWrapper removeReferencesTo go-md2man go libtool makeWrapper removeReferencesTo go-md2man go libtool

2
pkgs/applications/virtualization/podman/default.nix
View File

@ -18,8 +18,6 @@ buildGoPackage rec {
outputs = [ "bin" "out" "man" ]; outputs = [ "bin" "out" "man" ];
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [ pkgconfig go-md2man ]; nativeBuildInputs = [ pkgconfig go-md2man ];
buildInputs = [ btrfs-progs libseccomp gpgme lvm2 systemd ]; buildInputs = [ btrfs-progs libseccomp gpgme lvm2 systemd ];

5
pkgs/servers/livepeer/default.nix
View File

@ -18,11 +18,6 @@ buildGoPackage rec {
buildInputs = [ pkgconfig ffmpeg ]; buildInputs = [ pkgconfig ffmpeg ];
# XXX This removes the -O2 flag, to avoid errors like:
# cgo-dwarf-inference:2:8: error: enumerator value for '__cgo_enum__0' is not an integer constant
# This is a workaround for nixpkgs+golang BUG https://github.com/NixOS/nixpkgs/issues/25959
hardeningDisable = [ "fortify" ];
enableParallelBuilding = true; enableParallelBuilding = true;
meta = with stdenv.lib; { meta = with stdenv.lib; {

3
pkgs/servers/trezord/default.nix
View File

@ -4,9 +4,6 @@ buildGoPackage rec {
pname = "trezord-go"; pname = "trezord-go";
version = "2.0.27"; version = "2.0.27";
# Fixes Cgo related build failures (see https://github.com/NixOS/nixpkgs/issues/25959 )
hardeningDisable = [ "fortify" ];
goPackagePath = "github.com/trezor/trezord-go"; goPackagePath = "github.com/trezor/trezord-go";
src = fetchFromGitHub { src = fetchFromGitHub {

2
pkgs/tools/networking/flannel/default.nix
View File

@ -9,8 +9,6 @@ buildGoPackage rec {
goPackagePath = "github.com/coreos/flannel"; goPackagePath = "github.com/coreos/flannel";
hardeningDisable = [ "fortify" ];
src = fetchFromGitHub { src = fetchFromGitHub {
inherit rev; inherit rev;
owner = "coreos"; owner = "coreos";