Commit graph

311 commits

Author SHA1 Message Date
Andrew Voynov 610730340b
doc: fix Markdown link syntax in stdenv/passthru.chapter.md 2025-07-18 18:26:12 +05:00
jade 20057ce6ee
doc: Add necessary details to understand dep propagation (#423954) 2025-07-15 18:40:03 -07:00
Jade Lovelace a5fa5508db doc: Add necessary details to understand dep propagation
This section has been the subject of too many jokes about nixpkgs and nix
overall being incomprehensible among people I know. In lieu of adding to
the fray I've had a go at correcting the reasons I couldn't read it
myself.

I don't actually think the math is a problem; it's actually probably the
more understandable part of the section once you actually understand the
definitions. The missing definitions and leaving the truth table as an
exercise to the reader really was not working for me though.

I've also added what each dependency group is actually *for*. This
hopefully makes the section easier to understand how it applies in
practice.

I generated the initial version of the table before reformatting it and
removing pointless rows with:

```python
def mapOffset(h, t, i):
    return i + (h if i <= 0 else t - 1)

for h0 in (-1, 0, 1):
    for t0 in (-1, 0, 1):
        if t0 < h0: continue
        heading = f'{h0:3} | {t0:3}'
        for i in (-1, 0, 1):
            if h0 + i not in (-1, 0, 1):
                mapped = 'x'
            else:
                mapped = mapOffset(h0, t0, i)
            heading += f'  |  {mapped:>2}'
        print(heading)
```
2025-07-10 11:52:29 -07:00
Connor Baker c02c4a4316
no-broken-symlinks: fail on links to /build (#411775) 2025-06-11 22:15:19 -07:00
Dominique Martinet 9b36201b94 no-broken-symlinks: fail on links to /build
The no-broken-symlinks hook does not fail if bad links exist out of
store, but /build is also a special directory for nix derivations: the
build directory in the builder mount namespace.

There should be no link to /build in the output derivation, so also
error on these directories (through $TMPDIR which default to that)

Closes #410508
2025-06-12 05:23:42 +09:00
nixpkgs-ci[bot] cdd3b11ebb
Merge master into staging-next 2025-06-06 12:07:00 +00:00
Arnout Engelen d311c0eaeb
doc: call out 'src' should ideally point to sources
And to mark packages otherwise.
2025-06-06 10:29:34 +02:00
Philip Taron b76868988b
cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags (#400408) 2025-05-26 10:46:00 -07:00
Niklas Hambüchen ee6c2bd2eb doc: Fix missing pre/post hooks everywhere 2025-05-24 13:22:41 +00:00
Robert Scott 3f1a00c79d cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags
adding strictflexarrays1 to pkgsExtraHardening
2025-05-24 11:10:20 +01:00
nixpkgs-ci[bot] c283e7a623
Merge staging-next into staging 2025-05-01 06:06:34 +00:00
K900 24e0fd90ea Merge remote-tracking branch 'origin/master' into staging-next 2025-05-01 08:20:39 +03:00
Anthony ROUSSEL c0a2db752e doc: add knownVulnerabilities 2025-04-30 23:23:03 +02:00
Naïm Camille Favier 9c4a331e76
makeWrapper: --add-flag and --append-flag arguments (#400649) 2025-04-28 20:43:03 +02:00
BirdeeHub 7b9c6346ff makeWrapper: --add-flag and --append-flag arguments
also:

manual: differences in makeWrapper implementations better explained

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>
2025-04-25 12:57:29 -07:00
K900 1bb422239f Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-21 10:01:23 +03:00
Aleksana c4170d9f2d
doc: cleanup (#400164) 2025-04-21 13:53:40 +08:00
Pol Dellaiera b4515ff6c2 doc: use finalAttrs pattern 2025-04-21 07:02:49 +02:00
Pol Dellaiera 47f000d991 doc: add missing phase hooks 2025-04-21 07:02:49 +02:00
Tristan Ross e2b2bc4033
docs: add new meta.teams 2025-04-17 23:54:29 -07:00
nixpkgs-ci[bot] c229332680
Merge staging-next into staging 2025-04-17 00:16:17 +00:00
Pol Dellaiera bcea0cf344 doc: update Nix code snippets format
Command: `mdcr --config doc/tests/mdcr-config.toml doc/`
2025-04-17 01:30:34 +02:00
nixpkgs-ci[bot] bd5d8282de
Merge staging-next into staging 2025-04-13 18:04:59 +00:00
Robert Scott 1d03dcdba2
doc/stdenv: reword trivialautovarinit section to reduce confusion (#380622) 2025-04-13 13:51:18 +01:00
Robert Scott 781b42b87d cc-wrapper: add nostrictaliasing hardening flag support
this equates to -fno-strict-aliasing

this is not a particularly new flag and is supported by all our
gcc and clang versions.

add to pkgsExtraHardening's defaultHardeningFlags.
2025-04-06 12:52:47 +01:00
Robert Scott d8e8916c2c doc/stdenv: reword trivialautovarinit section to reduce confusion
this paragraph makes more sense if the order of the sentences
is changed to be problem -> solution
2025-02-09 12:41:16 +00:00
Robert Scott 5fea611634 docs: mention promotion of stackclashprotection hardening flag to default enabled 2025-02-09 10:58:59 +00:00
K900 af55d5afc2 Merge remote-tracking branch 'origin/master' into staging-next 2025-02-05 09:44:25 +03:00
Pol Dellaiera 5b2753b035
doc/stdenv: fix typo in dependency propagation (#379300) 2025-02-05 06:41:33 +01:00
Lin Jian edda698276
doc/stdenv: fix typo in dependency propagation 2025-02-04 17:19:53 +08:00
K900 945d2e2a7a Merge remote-tracking branch 'origin/master' into staging-next 2025-02-03 18:00:08 +03:00
Lin Jian 9dde0e79a2
doc/stdenv: delete a confusing sentence for writableTmpDirAsHomeHook 2025-02-03 22:10:33 +08:00
Alyssa Ross dffcaaaa64
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/applications/virtualization/crosvm/default.nix
	pkgs/by-name/as/ast-grep/package.nix
	pkgs/by-name/ca/cargo-mobile2/package.nix
	pkgs/by-name/cl/clang-tidy-sarif/package.nix
	pkgs/by-name/gg/gg-jj/package.nix
	pkgs/by-name/gi/git-warp-time/package.nix
	pkgs/by-name/je/jellyfin-rpc/package.nix
	pkgs/by-name/ne/netbox2netshot/package.nix
	pkgs/by-name/sy/sydbox/package.nix
	pkgs/by-name/te/television/package.nix
	pkgs/development/python-modules/tinytuya/default.nix
2025-01-31 10:23:31 +01:00
Pol Dellaiera f8110737ae build-support: add writableTmpDirAsHomeHook hook 2025-01-27 19:41:13 +01:00
Pol Dellaiera 87521c59b6 build-support: add addBinToPathHook hook 2025-01-27 19:41:13 +01:00
Connor Baker b2416f4485 no-broken-symlinks: restrict checks to symlinks pointing inside the store 2025-01-23 15:59:18 -08:00
Connor Baker 51b2764e9f no-broken-symlinks: provide only dontCheckForBrokenSymlinks and test against absolute symlinks 2025-01-22 11:05:13 -08:00
Connor Baker 4e8e175c7c doc: add stdenv entry for no-broken-symlinks.sh 2025-01-21 17:35:14 -08:00
nixpkgs-ci[bot] 0cae90809c
Merge master into staging-next 2025-01-18 18:04:10 +00:00
Arne Keller a3838482c1
doc/stdenv: accurately describe propagatedNativeBuildInputs (#354341) 2025-01-18 14:33:39 +01:00
nixpkgs-ci[bot] d4a1995529
Merge master into staging-next 2025-01-16 00:14:11 +00:00
Emily 54f484c80e doc/stdenv/platform-notes: fix typo 2025-01-15 02:04:39 +00:00
Wolfgang Walther cf127c9dc3
treewide: load structured attributes in all bash builders consistently
It's hard to put the sourcing of ./.attrs.sh into all builder
consistently - mistakes will happen. Thus, load structured attrs once in
make-derivation and then source the remaining builder on top.

This should fix quite a few builders with structured attributes in
principle. Most importantly it helps substitute / substituteAll, which
are required for bootstrap on some platforms.
2024-12-29 18:36:47 +01:00
Philip Taron 558c04a4dc
cc-wrapper, bintools-wrapper: Improve hooks that run before invocation (#366960) 2024-12-23 13:30:33 -08:00
Peter Waller 3fc1a00773 bintools-wrapper: introduce ld-wrapper-hook
The existing post-link-hook is in an unfortunate position since it does
not enable interposing the arguments of the compiler.

This is an RFC to add a hook which enables that.

Signed-off-by: Peter Waller <p@pwaller.net>
2024-12-20 23:53:25 +00:00
github-actions[bot] 9568438652
Merge staging-next into staging 2024-12-14 00:15:31 +00:00
github-actions[bot] fa3898acdb
Merge master into staging-next 2024-12-14 00:15:05 +00:00
Philip Taron e65ef57a0f
stdenv: fix documentation for stripAllFlags and stripDebugFlags (#352127) 2024-12-13 12:47:26 -08:00
Simon Žlender 4a61ef6376 release-cross: replace x86_64-darwin with aarch64-darwin 2024-12-03 19:37:34 +01:00
github-actions[bot] 56d0ebd983
Merge staging-next into staging 2024-11-21 18:05:12 +00:00