NixOS/nix
NixOS/nix
1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2024-09-20 11:11:03 -04:00
Code Activity
nix/src/libstore/local.mk

52 lines
1.2 KiB
Makefile
Raw Normal View History

Update Makefile variable names
2014-02-01 06:23:14 -05:00
libraries += libstore
New non-recursive, plain Make-based build system
2013-11-22 09:54:18 -05:00
Use libnix as a prefix for all Nix libraries In particular "libutil" was always a problem because it collides with Glibc's libutil. Even if we install into $(libdir)/nix, the linker sometimes got confused (e.g. if a program links against libstore but not libutil, then ld would report undefined symbols in libstore because it was looking at Glibc's libutil).
2013-11-23 18:53:41 -05:00
libstore_NAME = libnixstore
Rename $(here) to $(d) for brevity, and remove trailing slash
2013-11-22 11:45:52 -05:00
libstore_DIR := $(d)
New non-recursive, plain Make-based build system
2013-11-22 09:54:18 -05:00
Update Makefiles
2014-01-09 10:53:47 -05:00
libstore_SOURCES := $(wildcard $(d)/*.cc)
New non-recursive, plain Make-based build system
2013-11-22 09:54:18 -05:00
Allow (dynamic) libraries to depend on other libraries
2013-11-23 15:11:02 -05:00
libstore_LIBS = libutil libformat
Make the aws-cpp-sdk dependency optional
2016-05-04 11:16:48 -04:00
libstore_LDFLAGS = $(SQLITE3_LIBS) -lbz2 $(LIBCURL_LIBS) $(SODIUM_LIBS) -pthread
ifeq ($(ENABLE_S3), 1)
libstore_LDFLAGS += -laws-cpp-sdk-s3 -laws-cpp-sdk-core
endif
New non-recursive, plain Make-based build system
2013-11-22 09:54:18 -05:00
Fix compile errors on Illumos
2014-04-03 10:59:25 -04:00
ifeq ($(OS), SunOS)
libstore_LDFLAGS += -lsocket
endif
Add a seccomp filter to prevent creating setuid/setgid binaries This prevents builders from setting the S_ISUID or S_ISGID bits, preventing users from using a nixbld* user to create a setuid/setgid binary to interfere with subsequent builds under the same nixbld* uid. This is based on aszlig's seccomp code (47f587700d646f5b03a42f2fa57c28875a31efbe). Reported by Linus Heckemann.
2017-05-29 05:34:24 -04:00
ifeq ($(OS), Linux)
libstore_LDFLAGS += -lseccomp
endif
New non-recursive, plain Make-based build system
2013-11-22 09:54:18 -05:00
libstore_CXXFLAGS = \
Fix using restricted mode with chroots
2015-04-16 12:46:17 -04:00
-DNIX_PREFIX=\"$(prefix)\" \
New non-recursive, plain Make-based build system
2013-11-22 09:54:18 -05:00
-DNIX_STORE_DIR=\"$(storedir)\" \
-DNIX_DATA_DIR=\"$(datadir)\" \
-DNIX_STATE_DIR=\"$(localstatedir)/nix\" \
-DNIX_LOG_DIR=\"$(localstatedir)/log/nix\" \
-DNIX_CONF_DIR=\"$(sysconfdir)/nix\" \
-DNIX_LIBEXEC_DIR=\"$(libexecdir)\" \
Add option ‘build-extra-chroot-dirs’ This is useful for extending (rather than overriding) the default set of chroot paths.
2014-08-04 12:00:00 -04:00
-DNIX_BIN_DIR=\"$(bindir)\" \
Add --with-sandbox-shell configure flag And add a 116 KiB ash shell from busybox to the release build. This helps to make sandbox builds work out of the box on non-NixOS systems and with diverted stores.
2017-05-15 11:30:33 -04:00
-DSANDBOX_SHELL="\"$(sandbox_shell)\"" \
Detect lsof Also, don't use lsof on Linux since it's not needed. Fixes #1328.
2017-04-20 13:11:45 -04:00
-DLSOF=\"$(lsof)\"
Generate schema.sql.hh
2014-01-09 16:10:35 -05:00
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration.
2017-05-30 11:40:12 -04:00
$(d)/local-store.cc: $(d)/schema.sql.gen.hh
Generate schema.sql.hh
2014-01-09 16:10:35 -05:00
Always use the Darwin sandbox Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries.
2017-06-06 12:44:49 -04:00
sandbox-headers = $(d)/sandbox-defaults.sb.gen.hh $(d)/sandbox-network.sb.gen.hh $(d)/sandbox-minimal.sb.gen.hh
$(d)/build.cc: $(sandbox-headers)
Fix "make dist"
2014-02-01 08:28:31 -05:00
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration.
2017-05-30 11:40:12 -04:00
%.gen.hh: %
OS X sandbox: Improve builtin sandbox profile Also, add rules to allow fixed-output derivations to access the network. These rules are sufficient to build stdenvDarwin without any __sandboxProfile magic.
2017-05-31 11:23:27 -04:00
@echo 'R"foo(' >> $@.tmp
$(trace-gen) cat $< >> $@.tmp
@echo ')foo"' >> $@.tmp
@mv $@.tmp $@
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration.
2017-05-30 11:40:12 -04:00
Always use the Darwin sandbox Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries.
2017-06-06 12:44:49 -04:00
clean-files += $(d)/schema.sql.gen.hh $(sandbox-headers)
Install some pkgconfig files
2014-09-18 06:00:40 -04:00
Update spec file http://hydra.nixos.org/build/14344391
2014-09-18 09:42:01 -04:00
$(eval $(call install-file-in, $(d)/nix-store.pc, $(prefix)/lib/pkgconfig, 0644))
Copy permalink