Merge pull request #72093 from prusnak/go-fortify

stop using hardeningDisable = [ "fortify" ]; for Go packages
This commit is contained in:
adisbladis 2019-10-28 14:09:55 +01:00 committed by GitHub
commit 5dd330ef0e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
7 changed files with 0 additions and 22 deletions

View File

@ -10,9 +10,6 @@ buildGoPackage rec {
propagatedBuildInputs =
stdenv.lib.optionals stdenv.isDarwin [ libobjc IOKit ];
# Fixes Cgo related build failures (see https://github.com/NixOS/nixpkgs/issues/25959 )
hardeningDisable = [ "fortify" ];
src = fetchFromGitHub {
owner = "ethereum";
repo = pname;

View File

@ -16,8 +16,6 @@ buildGoPackage rec {
goPackagePath = "github.com/containerd/containerd";
outputs = [ "bin" "out" "man" ];
hardeningDisable = [ "fortify" ];
buildInputs = [ btrfs-progs go-md2man utillinux ];
buildFlags = "VERSION=v${version}";

View File

@ -37,8 +37,6 @@ rec {
rev = containerdRev;
sha256 = containerdSha256;
};
hardeningDisable = [ "fortify" ];
});
docker-tini = tini.overrideAttrs (oldAttrs: {
@ -82,9 +80,6 @@ rec {
sha256 = sha256;
};
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [ pkgconfig ];
buildInputs = [
makeWrapper removeReferencesTo go-md2man go libtool

View File

@ -18,8 +18,6 @@ buildGoPackage rec {
outputs = [ "bin" "out" "man" ];
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
nativeBuildInputs = [ pkgconfig go-md2man ];
buildInputs = [ btrfs-progs libseccomp gpgme lvm2 systemd ];

View File

@ -18,11 +18,6 @@ buildGoPackage rec {
buildInputs = [ pkgconfig ffmpeg ];
# XXX This removes the -O2 flag, to avoid errors like:
# cgo-dwarf-inference:2:8: error: enumerator value for '__cgo_enum__0' is not an integer constant
# This is a workaround for nixpkgs+golang BUG https://github.com/NixOS/nixpkgs/issues/25959
hardeningDisable = [ "fortify" ];
enableParallelBuilding = true;
meta = with stdenv.lib; {

View File

@ -4,9 +4,6 @@ buildGoPackage rec {
pname = "trezord-go";
version = "2.0.27";
# Fixes Cgo related build failures (see https://github.com/NixOS/nixpkgs/issues/25959 )
hardeningDisable = [ "fortify" ];
goPackagePath = "github.com/trezor/trezord-go";
src = fetchFromGitHub {

View File

@ -9,8 +9,6 @@ buildGoPackage rec {
goPackagePath = "github.com/coreos/flannel";
hardeningDisable = [ "fortify" ];
src = fetchFromGitHub {
inherit rev;
owner = "coreos";