Commit Graph

329 Commits

Author SHA1 Message Date
Randy Eckenrode
cdb5d3a13c doc/stdenv/platform-notes: add section about libc++ 2025-09-15 19:24:08 +01:00
Yuriy Taraday
dd12290517 Reapply "stdenv: Add CPE fields to meta"
This reverts commit de74f9caf0.
2025-09-15 17:25:11 +02:00
Vladimír Čunát
d95b37aeac Merge branch 'staging' into staging-next 2025-08-30 17:06:43 +02:00
K900
de74f9caf0 Revert "stdenv: Add CPE fields to meta" 2025-08-30 09:29:43 +03:00
K900
e4f14776e7 Merge remote-tracking branch 'origin/staging-next' into staging 2025-08-30 09:19:01 +03:00
Silvan Mosberger
e83e8dacb1 stdenv: Add CPE fields to meta (#409797) 2025-08-29 21:47:54 +02:00
Fabián Heredia Montiel
3e04a8f0a8 Merge remote-tracking branch 'origin/staging-next' into staging 2025-08-29 13:28:18 -06:00
Robert Scott
d3afbb6da9 cc-wrapper: add glibcxxassertions hardening flag (#414987) 2025-08-29 20:20:39 +01:00
winston
7fd2872828 doc: replace path import path in separateDebugInfo with channel 2025-08-29 16:21:18 +02:00
winston
42882346bf doc: prefer makeSearchPathOutput over symlinkJoin for separateDebugInfo
Avoids building an intermediate derivation and just uses a
colon-separated environment variable instead.
2025-08-29 16:21:18 +02:00
Yuriy Taraday
b0ce3dc09f stdenv: Add CPE fields to meta
Add `identifiers` attr to `meta` attribute with following attrs:
* `cpe` with the full CPE string when available
* `possibleCPEs` with the list of potential CPEs when not all
  information is provided
* `cpeParts` with the destructured CPE string, allowing to override it
  whenever needed
* `v1` attribute set with `cpe` and `cpeParts` from above and a
  guarantee of a backwards-compatible interface

Related issue: https://github.com/NixOS/nixpkgs/issues/354012
2025-08-29 15:40:03 +02:00
Ben Siraphob
cc5b731ed3 doc: fix typos 2025-08-27 11:46:26 -07:00
Peder Bergebakken Sundt
831fd42298 doc: fix link rot to --keep-failed in stdenv (#429167) 2025-08-26 20:01:59 +02:00
Robert Scott
3eec07ec59 cc-wrapper: add glibcxxassertions hardening flag
no platforms "unsupported" because we don't have a nice
mechanism for determining a platform's c++ lib and the flag
should be harmlessly ignored by a other c++ libs
2025-08-24 11:56:04 +01:00
Emily
2e3fd465be {darwin.*,overrideSDK}: convert compatibility stubs to throws 2025-08-16 03:25:14 +01:00
n0099
8a815d6290 doc: fix link rot to --keep-failed in stdenv 2025-07-28 19:02:56 +00:00
Wolfgang Walther
5a0711127c treewide: run nixfmt 1.0.0 2025-07-24 13:55:40 +02:00
Wolfgang Walther
62fe016519 treewide: run treefmt with mdcr/nixfmt 2025-07-24 13:52:31 +02:00
Andrew Voynov
610730340b doc: fix Markdown link syntax in stdenv/passthru.chapter.md 2025-07-18 18:26:12 +05:00
jade
20057ce6ee doc: Add necessary details to understand dep propagation (#423954) 2025-07-15 18:40:03 -07:00
Jade Lovelace
a5fa5508db doc: Add necessary details to understand dep propagation
This section has been the subject of too many jokes about nixpkgs and nix
overall being incomprehensible among people I know. In lieu of adding to
the fray I've had a go at correcting the reasons I couldn't read it
myself.

I don't actually think the math is a problem; it's actually probably the
more understandable part of the section once you actually understand the
definitions. The missing definitions and leaving the truth table as an
exercise to the reader really was not working for me though.

I've also added what each dependency group is actually *for*. This
hopefully makes the section easier to understand how it applies in
practice.

I generated the initial version of the table before reformatting it and
removing pointless rows with:

```python
def mapOffset(h, t, i):
    return i + (h if i <= 0 else t - 1)

for h0 in (-1, 0, 1):
    for t0 in (-1, 0, 1):
        if t0 < h0: continue
        heading = f'{h0:3} | {t0:3}'
        for i in (-1, 0, 1):
            if h0 + i not in (-1, 0, 1):
                mapped = 'x'
            else:
                mapped = mapOffset(h0, t0, i)
            heading += f'  |  {mapped:>2}'
        print(heading)
```
2025-07-10 11:52:29 -07:00
Connor Baker
c02c4a4316 no-broken-symlinks: fail on links to /build (#411775) 2025-06-11 22:15:19 -07:00
Dominique Martinet
9b36201b94 no-broken-symlinks: fail on links to /build
The no-broken-symlinks hook does not fail if bad links exist out of
store, but /build is also a special directory for nix derivations: the
build directory in the builder mount namespace.

There should be no link to /build in the output derivation, so also
error on these directories (through $TMPDIR which default to that)

Closes #410508
2025-06-12 05:23:42 +09:00
nixpkgs-ci[bot]
cdd3b11ebb Merge master into staging-next 2025-06-06 12:07:00 +00:00
Arnout Engelen
d311c0eaeb doc: call out 'src' should ideally point to sources
And to mark packages otherwise.
2025-06-06 10:29:34 +02:00
Philip Taron
b76868988b cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags (#400408) 2025-05-26 10:46:00 -07:00
Niklas Hambüchen
ee6c2bd2eb doc: Fix missing pre/post hooks everywhere 2025-05-24 13:22:41 +00:00
Robert Scott
3f1a00c79d cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags
adding strictflexarrays1 to pkgsExtraHardening
2025-05-24 11:10:20 +01:00
nixpkgs-ci[bot]
c283e7a623 Merge staging-next into staging 2025-05-01 06:06:34 +00:00
K900
24e0fd90ea Merge remote-tracking branch 'origin/master' into staging-next 2025-05-01 08:20:39 +03:00
Anthony ROUSSEL
c0a2db752e doc: add knownVulnerabilities 2025-04-30 23:23:03 +02:00
Naïm Camille Favier
9c4a331e76 makeWrapper: --add-flag and --append-flag arguments (#400649) 2025-04-28 20:43:03 +02:00
BirdeeHub
7b9c6346ff makeWrapper: --add-flag and --append-flag arguments
also:

manual: differences in makeWrapper implementations better explained

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>

Update pkgs/build-support/setup-hooks/make-wrapper.sh

Co-authored-by: Naïm Camille Favier <n@monade.li>
2025-04-25 12:57:29 -07:00
K900
1bb422239f Merge remote-tracking branch 'origin/staging-next' into staging 2025-04-21 10:01:23 +03:00
Aleksana
c4170d9f2d doc: cleanup (#400164) 2025-04-21 13:53:40 +08:00
Pol Dellaiera
b4515ff6c2 doc: use finalAttrs pattern 2025-04-21 07:02:49 +02:00
Pol Dellaiera
47f000d991 doc: add missing phase hooks 2025-04-21 07:02:49 +02:00
Tristan Ross
e2b2bc4033 docs: add new meta.teams 2025-04-17 23:54:29 -07:00
nixpkgs-ci[bot]
c229332680 Merge staging-next into staging 2025-04-17 00:16:17 +00:00
Pol Dellaiera
bcea0cf344 doc: update Nix code snippets format
Command: `mdcr --config doc/tests/mdcr-config.toml doc/`
2025-04-17 01:30:34 +02:00
nixpkgs-ci[bot]
bd5d8282de Merge staging-next into staging 2025-04-13 18:04:59 +00:00
Robert Scott
1d03dcdba2 doc/stdenv: reword trivialautovarinit section to reduce confusion (#380622) 2025-04-13 13:51:18 +01:00
Robert Scott
781b42b87d cc-wrapper: add nostrictaliasing hardening flag support
this equates to -fno-strict-aliasing

this is not a particularly new flag and is supported by all our
gcc and clang versions.

add to pkgsExtraHardening's defaultHardeningFlags.
2025-04-06 12:52:47 +01:00
Robert Scott
d8e8916c2c doc/stdenv: reword trivialautovarinit section to reduce confusion
this paragraph makes more sense if the order of the sentences
is changed to be problem -> solution
2025-02-09 12:41:16 +00:00
Robert Scott
5fea611634 docs: mention promotion of stackclashprotection hardening flag to default enabled 2025-02-09 10:58:59 +00:00
K900
af55d5afc2 Merge remote-tracking branch 'origin/master' into staging-next 2025-02-05 09:44:25 +03:00
Pol Dellaiera
5b2753b035 doc/stdenv: fix typo in dependency propagation (#379300) 2025-02-05 06:41:33 +01:00
Lin Jian
edda698276 doc/stdenv: fix typo in dependency propagation 2025-02-04 17:19:53 +08:00
K900
945d2e2a7a Merge remote-tracking branch 'origin/master' into staging-next 2025-02-03 18:00:08 +03:00
Lin Jian
9dde0e79a2 doc/stdenv: delete a confusing sentence for writableTmpDirAsHomeHook 2025-02-03 22:10:33 +08:00