Commit graph

178 commits

Author SHA1 Message Date
Fabián Heredia Montiel 3e04a8f0a8 Merge remote-tracking branch 'origin/staging-next' into staging 2025-08-29 13:28:18 -06:00
Robert Scott d3afbb6da9
cc-wrapper: add glibcxxassertions hardening flag (#414987) 2025-08-29 20:20:39 +01:00
winston 7fd2872828 doc: replace path import path in separateDebugInfo with channel 2025-08-29 16:21:18 +02:00
winston 42882346bf doc: prefer makeSearchPathOutput over symlinkJoin for separateDebugInfo
Avoids building an intermediate derivation and just uses a
colon-separated environment variable instead.
2025-08-29 16:21:18 +02:00
Ben Siraphob cc5b731ed3
doc: fix typos 2025-08-27 11:46:26 -07:00
Robert Scott 3eec07ec59 cc-wrapper: add glibcxxassertions hardening flag
no platforms "unsupported" because we don't have a nice
mechanism for determining a platform's c++ lib and the flag
should be harmlessly ignored by a other c++ libs
2025-08-24 11:56:04 +01:00
n0099 8a815d6290 doc: fix link rot to --keep-failed in stdenv 2025-07-28 19:02:56 +00:00
Wolfgang Walther 62fe016519
treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
jade 20057ce6ee
doc: Add necessary details to understand dep propagation (#423954) 2025-07-15 18:40:03 -07:00
Jade Lovelace a5fa5508db doc: Add necessary details to understand dep propagation
This section has been the subject of too many jokes about nixpkgs and nix
overall being incomprehensible among people I know. In lieu of adding to
the fray I've had a go at correcting the reasons I couldn't read it
myself.

I don't actually think the math is a problem; it's actually probably the
more understandable part of the section once you actually understand the
definitions. The missing definitions and leaving the truth table as an
exercise to the reader really was not working for me though.

I've also added what each dependency group is actually *for*. This
hopefully makes the section easier to understand how it applies in
practice.

I generated the initial version of the table before reformatting it and
removing pointless rows with:

```python
def mapOffset(h, t, i):
    return i + (h if i <= 0 else t - 1)

for h0 in (-1, 0, 1):
    for t0 in (-1, 0, 1):
        if t0 < h0: continue
        heading = f'{h0:3} | {t0:3}'
        for i in (-1, 0, 1):
            if h0 + i not in (-1, 0, 1):
                mapped = 'x'
            else:
                mapped = mapOffset(h0, t0, i)
            heading += f'  |  {mapped:>2}'
        print(heading)
```
2025-07-10 11:52:29 -07:00
Connor Baker c02c4a4316
no-broken-symlinks: fail on links to /build (#411775) 2025-06-11 22:15:19 -07:00
Dominique Martinet 9b36201b94 no-broken-symlinks: fail on links to /build
The no-broken-symlinks hook does not fail if bad links exist out of
store, but /build is also a special directory for nix derivations: the
build directory in the builder mount namespace.

There should be no link to /build in the output derivation, so also
error on these directories (through $TMPDIR which default to that)

Closes #410508
2025-06-12 05:23:42 +09:00
nixpkgs-ci[bot] cdd3b11ebb
Merge master into staging-next 2025-06-06 12:07:00 +00:00
Arnout Engelen d311c0eaeb
doc: call out 'src' should ideally point to sources
And to mark packages otherwise.
2025-06-06 10:29:34 +02:00
Philip Taron b76868988b
cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags (#400408) 2025-05-26 10:46:00 -07:00
Niklas Hambüchen ee6c2bd2eb doc: Fix missing pre/post hooks everywhere 2025-05-24 13:22:41 +00:00
Robert Scott 3f1a00c79d cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags
adding strictflexarrays1 to pkgsExtraHardening
2025-05-24 11:10:20 +01:00
Naïm Camille Favier 9c4a331e76
makeWrapper: --add-flag and --append-flag arguments (#400649) 2025-04-28 20:43:03 +02:00
BirdeeHub 7b9c6346ff makeWrapper: --add-flag and --append-flag arguments
also:

manual: differences in makeWrapper implementations better explained

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>
2025-04-25 12:57:29 -07:00
K900 1bb422239f Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-21 10:01:23 +03:00
Pol Dellaiera b4515ff6c2 doc: use finalAttrs pattern 2025-04-21 07:02:49 +02:00
Pol Dellaiera 47f000d991 doc: add missing phase hooks 2025-04-21 07:02:49 +02:00
nixpkgs-ci[bot] c229332680
Merge staging-next into staging 2025-04-17 00:16:17 +00:00
Pol Dellaiera bcea0cf344 doc: update Nix code snippets format
Command: `mdcr --config doc/tests/mdcr-config.toml doc/`
2025-04-17 01:30:34 +02:00
nixpkgs-ci[bot] bd5d8282de
Merge staging-next into staging 2025-04-13 18:04:59 +00:00
Robert Scott 1d03dcdba2
doc/stdenv: reword trivialautovarinit section to reduce confusion (#380622) 2025-04-13 13:51:18 +01:00
Robert Scott 781b42b87d cc-wrapper: add nostrictaliasing hardening flag support
this equates to -fno-strict-aliasing

this is not a particularly new flag and is supported by all our
gcc and clang versions.

add to pkgsExtraHardening's defaultHardeningFlags.
2025-04-06 12:52:47 +01:00
Robert Scott d8e8916c2c doc/stdenv: reword trivialautovarinit section to reduce confusion
this paragraph makes more sense if the order of the sentences
is changed to be problem -> solution
2025-02-09 12:41:16 +00:00
Robert Scott 5fea611634 docs: mention promotion of stackclashprotection hardening flag to default enabled 2025-02-09 10:58:59 +00:00
K900 af55d5afc2 Merge remote-tracking branch 'origin/master' into staging-next 2025-02-05 09:44:25 +03:00
Pol Dellaiera 5b2753b035
doc/stdenv: fix typo in dependency propagation (#379300) 2025-02-05 06:41:33 +01:00
Lin Jian edda698276
doc/stdenv: fix typo in dependency propagation 2025-02-04 17:19:53 +08:00
K900 945d2e2a7a Merge remote-tracking branch 'origin/master' into staging-next 2025-02-03 18:00:08 +03:00
Lin Jian 9dde0e79a2
doc/stdenv: delete a confusing sentence for writableTmpDirAsHomeHook 2025-02-03 22:10:33 +08:00
Alyssa Ross dffcaaaa64
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/applications/virtualization/crosvm/default.nix
	pkgs/by-name/as/ast-grep/package.nix
	pkgs/by-name/ca/cargo-mobile2/package.nix
	pkgs/by-name/cl/clang-tidy-sarif/package.nix
	pkgs/by-name/gg/gg-jj/package.nix
	pkgs/by-name/gi/git-warp-time/package.nix
	pkgs/by-name/je/jellyfin-rpc/package.nix
	pkgs/by-name/ne/netbox2netshot/package.nix
	pkgs/by-name/sy/sydbox/package.nix
	pkgs/by-name/te/television/package.nix
	pkgs/development/python-modules/tinytuya/default.nix
2025-01-31 10:23:31 +01:00
Pol Dellaiera f8110737ae build-support: add writableTmpDirAsHomeHook hook 2025-01-27 19:41:13 +01:00
Pol Dellaiera 87521c59b6 build-support: add addBinToPathHook hook 2025-01-27 19:41:13 +01:00
Connor Baker b2416f4485 no-broken-symlinks: restrict checks to symlinks pointing inside the store 2025-01-23 15:59:18 -08:00
Connor Baker 51b2764e9f no-broken-symlinks: provide only dontCheckForBrokenSymlinks and test against absolute symlinks 2025-01-22 11:05:13 -08:00
Connor Baker 4e8e175c7c doc: add stdenv entry for no-broken-symlinks.sh 2025-01-21 17:35:14 -08:00
nixpkgs-ci[bot] 0cae90809c
Merge master into staging-next 2025-01-18 18:04:10 +00:00
Arne Keller a3838482c1
doc/stdenv: accurately describe propagatedNativeBuildInputs (#354341) 2025-01-18 14:33:39 +01:00
Wolfgang Walther cf127c9dc3
treewide: load structured attributes in all bash builders consistently
It's hard to put the sourcing of ./.attrs.sh into all builder
consistently - mistakes will happen. Thus, load structured attrs once in
make-derivation and then source the remaining builder on top.

This should fix quite a few builders with structured attributes in
principle. Most importantly it helps substitute / substituteAll, which
are required for bootstrap on some platforms.
2024-12-29 18:36:47 +01:00
Peter Waller 3fc1a00773 bintools-wrapper: introduce ld-wrapper-hook
The existing post-link-hook is in an unfortunate position since it does
not enable interposing the arguments of the compiler.

This is an RFC to add a hook which enables that.

Signed-off-by: Peter Waller <p@pwaller.net>
2024-12-20 23:53:25 +00:00
FliegendeWurst ae2d745af6 doc/stdenv: accurately describe propagatedNativeBuildInputs 2024-11-07 23:22:53 +01:00
Jared Baur d38743dce8
stdenv: fix documentation for stripAllFlags and stripDebugFlags
The documentation for the default flags used for both fields were incomplete.
2024-10-29 08:02:35 -07:00
github-actions[bot] 1c4acc409e
Merge staging-next into staging 2024-09-16 06:05:33 +00:00
Tomodachi94 066125b663
doc/stdenv/stdenv: document runHook function
Not quite satisfied with this, but it's better than nothing.
2024-09-14 21:28:09 -07:00
Philip Taron 4160ccc634
treewide: handle *Phases variables __structuredAttrs-agnostically (#339117) 2024-09-07 09:17:57 -07:00
seth 8bc8bbd1c9
doc/stdenv: fix typo in sourceRoot section 2024-09-04 14:43:23 -04:00