aff1f4ab94
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
53 lines
1.8 KiB
Nix
53 lines
1.8 KiB
Nix
{stdenv, fetchurl, cmake, luajit, kernel, zlib, ncurses, perl, jsoncpp, libb64, openssl, curl}:
|
|
let
|
|
inherit (stdenv.lib) optional optionalString;
|
|
baseName = "sysdig";
|
|
version = "0.8.0";
|
|
in
|
|
stdenv.mkDerivation {
|
|
name="${baseName}-${version}";
|
|
|
|
src = fetchurl {
|
|
url = "https://github.com/draios/sysdig/archive/${version}.tar.gz";
|
|
sha256 = "1939k3clwxg09m1bn0szqiy2nxg66srl72n7476jc58hgaraq3dr";
|
|
};
|
|
|
|
buildInputs = [
|
|
cmake zlib luajit ncurses perl jsoncpp libb64 openssl curl
|
|
];
|
|
|
|
hardeningDisable = [ "pic" ];
|
|
|
|
cmakeFlags = [
|
|
"-DUSE_BUNDLED_DEPS=OFF"
|
|
] ++ optional (kernel == null) "-DBUILD_DRIVER=OFF";
|
|
|
|
preConfigure = ''
|
|
export INSTALL_MOD_PATH="$out"
|
|
'' + optionalString (kernel != null) ''
|
|
export KERNELDIR="${kernel.dev}/lib/modules/${kernel.modDirVersion}/build"
|
|
'';
|
|
|
|
postInstall = optionalString (kernel != null) ''
|
|
make install_driver
|
|
kernel_dev=${kernel.dev}
|
|
kernel_dev=''${kernel_dev#/nix/store/}
|
|
kernel_dev=''${kernel_dev%%-linux*dev*}
|
|
if test -f "$out/lib/modules/${kernel.modDirVersion}/extra/sysdig-probe.ko"; then
|
|
sed -i "s#$kernel_dev#................................#g" $out/lib/modules/${kernel.modDirVersion}/extra/sysdig-probe.ko
|
|
else
|
|
xz -d $out/lib/modules/${kernel.modDirVersion}/extra/sysdig-probe.ko.xz
|
|
sed -i "s#$kernel_dev#................................#g" $out/lib/modules/${kernel.modDirVersion}/extra/sysdig-probe.ko
|
|
xz $out/lib/modules/${kernel.modDirVersion}/extra/sysdig-probe.ko
|
|
fi
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "A tracepoint-based system tracing tool for Linux (with clients for other OSes)";
|
|
license = licenses.gpl2;
|
|
maintainers = [maintainers.raskin];
|
|
platforms = platforms.linux ++ platforms.darwin;
|
|
downloadPage = "https://github.com/draios/sysdig/releases";
|
|
};
|
|
}
|