Commit graph

335 commits

Author SHA1 Message Date
d068328 e47455f51d Revert "stdenv: pURL implementation (#421125)"
This reverts commit 5427115670, reversing
changes made to 88ee2ac331.
2025-10-18 20:41:01 +00:00
Arian van Putten 5427115670
stdenv: pURL implementation (#421125) 2025-10-17 09:30:32 +00:00
Hans Joachim Kliemeck 81dc446ee3
stdenv: pURL review suggestions - align naming
Co-authored-by: Philippe Ombredanne <pombredanne@gmail.com>
2025-10-10 17:17:13 +02:00
Hans Joachim Kliemeck 25f90d7d20
stdenv: pURL review suggestions - part 3 2025-10-10 14:38:19 +02:00
Hans Joachim Kliemeck 2e46d00d76 stdenv: pURL docu enhancements & list interface 2025-10-03 21:19:09 +00:00
h0nIg 4e2614fc07 stdenv: pURL implementation 2025-10-03 21:19:09 +00:00
Randy Eckenrode cdb5d3a13c doc/stdenv/platform-notes: add section about libc++ 2025-09-15 19:24:08 +01:00
Yuriy Taraday dd12290517 Reapply "stdenv: Add CPE fields to meta"
This reverts commit de74f9caf0.
2025-09-15 17:25:11 +02:00
Vladimír Čunát d95b37aeac
Merge branch 'staging' into staging-next 2025-08-30 17:06:43 +02:00
K900 de74f9caf0
Revert "stdenv: Add CPE fields to meta" 2025-08-30 09:29:43 +03:00
K900 e4f14776e7 Merge remote-tracking branch 'origin/staging-next' into staging 2025-08-30 09:19:01 +03:00
Silvan Mosberger e83e8dacb1
stdenv: Add CPE fields to meta (#409797) 2025-08-29 21:47:54 +02:00
Fabián Heredia Montiel 3e04a8f0a8 Merge remote-tracking branch 'origin/staging-next' into staging 2025-08-29 13:28:18 -06:00
Robert Scott d3afbb6da9
cc-wrapper: add glibcxxassertions hardening flag (#414987) 2025-08-29 20:20:39 +01:00
winston 7fd2872828 doc: replace path import path in separateDebugInfo with channel 2025-08-29 16:21:18 +02:00
winston 42882346bf doc: prefer makeSearchPathOutput over symlinkJoin for separateDebugInfo
Avoids building an intermediate derivation and just uses a
colon-separated environment variable instead.
2025-08-29 16:21:18 +02:00
Yuriy Taraday b0ce3dc09f stdenv: Add CPE fields to meta
Add `identifiers` attr to `meta` attribute with following attrs:
* `cpe` with the full CPE string when available
* `possibleCPEs` with the list of potential CPEs when not all
  information is provided
* `cpeParts` with the destructured CPE string, allowing to override it
  whenever needed
* `v1` attribute set with `cpe` and `cpeParts` from above and a
  guarantee of a backwards-compatible interface

Related issue: https://github.com/NixOS/nixpkgs/issues/354012
2025-08-29 15:40:03 +02:00
Ben Siraphob cc5b731ed3
doc: fix typos 2025-08-27 11:46:26 -07:00
Peder Bergebakken Sundt 831fd42298
doc: fix link rot to --keep-failed in stdenv (#429167) 2025-08-26 20:01:59 +02:00
Robert Scott 3eec07ec59 cc-wrapper: add glibcxxassertions hardening flag
no platforms "unsupported" because we don't have a nice
mechanism for determining a platform's c++ lib and the flag
should be harmlessly ignored by a other c++ libs
2025-08-24 11:56:04 +01:00
Emily 2e3fd465be {darwin.*,overrideSDK}: convert compatibility stubs to throws 2025-08-16 03:25:14 +01:00
n0099 8a815d6290 doc: fix link rot to --keep-failed in stdenv 2025-07-28 19:02:56 +00:00
Wolfgang Walther 5a0711127c
treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Wolfgang Walther 62fe016519
treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
Andrew Voynov 610730340b
doc: fix Markdown link syntax in stdenv/passthru.chapter.md 2025-07-18 18:26:12 +05:00
jade 20057ce6ee
doc: Add necessary details to understand dep propagation (#423954) 2025-07-15 18:40:03 -07:00
Jade Lovelace a5fa5508db doc: Add necessary details to understand dep propagation
This section has been the subject of too many jokes about nixpkgs and nix
overall being incomprehensible among people I know. In lieu of adding to
the fray I've had a go at correcting the reasons I couldn't read it
myself.

I don't actually think the math is a problem; it's actually probably the
more understandable part of the section once you actually understand the
definitions. The missing definitions and leaving the truth table as an
exercise to the reader really was not working for me though.

I've also added what each dependency group is actually *for*. This
hopefully makes the section easier to understand how it applies in
practice.

I generated the initial version of the table before reformatting it and
removing pointless rows with:

```python
def mapOffset(h, t, i):
    return i + (h if i <= 0 else t - 1)

for h0 in (-1, 0, 1):
    for t0 in (-1, 0, 1):
        if t0 < h0: continue
        heading = f'{h0:3} | {t0:3}'
        for i in (-1, 0, 1):
            if h0 + i not in (-1, 0, 1):
                mapped = 'x'
            else:
                mapped = mapOffset(h0, t0, i)
            heading += f'  |  {mapped:>2}'
        print(heading)
```
2025-07-10 11:52:29 -07:00
Connor Baker c02c4a4316
no-broken-symlinks: fail on links to /build (#411775) 2025-06-11 22:15:19 -07:00
Dominique Martinet 9b36201b94 no-broken-symlinks: fail on links to /build
The no-broken-symlinks hook does not fail if bad links exist out of
store, but /build is also a special directory for nix derivations: the
build directory in the builder mount namespace.

There should be no link to /build in the output derivation, so also
error on these directories (through $TMPDIR which default to that)

Closes #410508
2025-06-12 05:23:42 +09:00
nixpkgs-ci[bot] cdd3b11ebb
Merge master into staging-next 2025-06-06 12:07:00 +00:00
Arnout Engelen d311c0eaeb
doc: call out 'src' should ideally point to sources
And to mark packages otherwise.
2025-06-06 10:29:34 +02:00
Philip Taron b76868988b
cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags (#400408) 2025-05-26 10:46:00 -07:00
Niklas Hambüchen ee6c2bd2eb doc: Fix missing pre/post hooks everywhere 2025-05-24 13:22:41 +00:00
Robert Scott 3f1a00c79d cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags
adding strictflexarrays1 to pkgsExtraHardening
2025-05-24 11:10:20 +01:00
nixpkgs-ci[bot] c283e7a623
Merge staging-next into staging 2025-05-01 06:06:34 +00:00
K900 24e0fd90ea Merge remote-tracking branch 'origin/master' into staging-next 2025-05-01 08:20:39 +03:00
Anthony ROUSSEL c0a2db752e doc: add knownVulnerabilities 2025-04-30 23:23:03 +02:00
Naïm Camille Favier 9c4a331e76
makeWrapper: --add-flag and --append-flag arguments (#400649) 2025-04-28 20:43:03 +02:00
BirdeeHub 7b9c6346ff makeWrapper: --add-flag and --append-flag arguments
also:

manual: differences in makeWrapper implementations better explained

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>
2025-04-25 12:57:29 -07:00
K900 1bb422239f Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-21 10:01:23 +03:00
Aleksana c4170d9f2d
doc: cleanup (#400164) 2025-04-21 13:53:40 +08:00
Pol Dellaiera b4515ff6c2 doc: use finalAttrs pattern 2025-04-21 07:02:49 +02:00
Pol Dellaiera 47f000d991 doc: add missing phase hooks 2025-04-21 07:02:49 +02:00
Tristan Ross e2b2bc4033
docs: add new meta.teams 2025-04-17 23:54:29 -07:00
nixpkgs-ci[bot] c229332680
Merge staging-next into staging 2025-04-17 00:16:17 +00:00
Pol Dellaiera bcea0cf344 doc: update Nix code snippets format
Command: `mdcr --config doc/tests/mdcr-config.toml doc/`
2025-04-17 01:30:34 +02:00
nixpkgs-ci[bot] bd5d8282de
Merge staging-next into staging 2025-04-13 18:04:59 +00:00
Robert Scott 1d03dcdba2
doc/stdenv: reword trivialautovarinit section to reduce confusion (#380622) 2025-04-13 13:51:18 +01:00
Robert Scott 781b42b87d cc-wrapper: add nostrictaliasing hardening flag support
this equates to -fno-strict-aliasing

this is not a particularly new flag and is supported by all our
gcc and clang versions.

add to pkgsExtraHardening's defaultHardeningFlags.
2025-04-06 12:52:47 +01:00
Robert Scott d8e8916c2c doc/stdenv: reword trivialautovarinit section to reduce confusion
this paragraph makes more sense if the order of the sentences
is changed to be problem -> solution
2025-02-09 12:41:16 +00:00