aff1f4ab94
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
43 lines
1.0 KiB
Nix
43 lines
1.0 KiB
Nix
{ stdenv, fetchgit, perl, cdrkit, syslinux }:
|
|
|
|
let
|
|
date = "20141124";
|
|
rev = "5cbdc41778622c07429e00f5aee383b575532bf0";
|
|
in
|
|
|
|
stdenv.mkDerivation {
|
|
name = "ipxe-${date}-${builtins.substring 0 7 rev}";
|
|
|
|
buildInputs = [ perl cdrkit syslinux ];
|
|
|
|
src = fetchgit {
|
|
url = git://git.ipxe.org/ipxe.git;
|
|
sha256 = "22f427df9141a2bbb319b51bdca4f2b7d3a4cbb5d1b2dcb35a43460eac59d305";
|
|
inherit rev;
|
|
};
|
|
|
|
preConfigure = "cd src";
|
|
|
|
# not possible due to assembler code
|
|
hardeningDisable = [ "pic" "stackprotector" ];
|
|
|
|
makeFlags =
|
|
[ "ECHO_E_BIN_ECHO=echo" "ECHO_E_BIN_ECHO_E=echo" # No /bin/echo here.
|
|
"ISOLINUX_BIN_LIST=${syslinux}/share/syslinux/isolinux.bin"
|
|
];
|
|
|
|
installPhase =
|
|
''
|
|
mkdir $out
|
|
cp bin/ipxe.dsk bin/ipxe.usb bin/ipxe.iso bin/ipxe.lkrn bin/undionly.kpxe $out
|
|
'';
|
|
|
|
meta = with stdenv.lib;
|
|
{ description = "Network boot firmware";
|
|
homepage = http://ipxe.org/;
|
|
license = licenses.gpl2;
|
|
maintainers = with maintainers; [ ehmry ];
|
|
platforms = platforms.all;
|
|
};
|
|
}
|