From e2eb3ac1c3778f77865b6b6b8dd3b2ee9c62d5dd Mon Sep 17 00:00:00 2001
From: Alexander Nikolaev <alexander.nikolaev@tii.ae>
Date: Mon, 23 Feb 2026 11:25:19 +0200
Subject: [PATCH] sssd: don't pull compiler into result closure via debug info

Signed-off-by: Alexander Nikolaev <alexander.nikolaev@tii.ae>
---
 pkgs/os-specific/linux/sssd/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pkgs/os-specific/linux/sssd/default.nix b/pkgs/os-specific/linux/sssd/default.nix
index 0eba0aae426d..fa7ddbd97817 100644
--- a/pkgs/os-specific/linux/sssd/default.nix
+++ b/pkgs/os-specific/linux/sssd/default.nix
@@ -82,6 +82,13 @@ stdenv.mkDerivation (finalAttrs: {
     patchShebangs ./sbus_generate.sh.in
   '';
 
+  outputs = [
+    "out"
+    "dev"
+    "man"
+  ];
+  separateDebugInfo = true;
+
   # Something is looking for <libxml/foo.h> instead of <libxml2/libxml/foo.h>
   env.NIX_CFLAGS_COMPILE = toString [
     "-DRENEWAL_PROG_PATH=\"${adcli}/bin/adcli\""