aff1f4ab94
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
75 lines
2.0 KiB
Nix
75 lines
2.0 KiB
Nix
{ stdenv, fetchurl, perl, cross ? null }:
|
|
|
|
assert cross == null -> stdenv.isLinux;
|
|
|
|
let
|
|
|
|
version = "3.18.14";
|
|
|
|
kernelHeadersBaseConfig =
|
|
if cross == null
|
|
then stdenv.platform.kernelHeadersBaseConfig
|
|
else cross.platform.kernelHeadersBaseConfig;
|
|
|
|
in
|
|
|
|
stdenv.mkDerivation {
|
|
name = "linux-headers-${version}";
|
|
|
|
src = fetchurl {
|
|
url = "mirror://kernel/linux/kernel/v3.x/linux-${version}.tar.xz";
|
|
sha256 = "1xh0vvn1l2g1kkg54f0mg0inbpsiqs24ybgsakksmcpcadjgqk1i";
|
|
};
|
|
|
|
targetConfig = if cross != null then cross.config else null;
|
|
|
|
platform =
|
|
if cross != null then cross.platform.kernelArch else
|
|
if stdenv.system == "i686-linux" then "i386" else
|
|
if stdenv.system == "x86_64-linux" then "x86_64" else
|
|
if stdenv.system == "powerpc-linux" then "powerpc" else
|
|
if stdenv.isArm then "arm" else
|
|
if stdenv.platform ? kernelArch then stdenv.platform.kernelArch else
|
|
abort "don't know what the kernel include directory is called for this platform";
|
|
|
|
buildInputs = [perl];
|
|
|
|
# FIXME needs gcc 4.9 in bootstrap tools
|
|
hardeningDisable = [ "stackprotector" ];
|
|
|
|
extraIncludeDirs =
|
|
if cross != null then
|
|
(if cross.arch == "powerpc" then ["ppc"] else [])
|
|
else if stdenv.system == "powerpc-linux" then ["ppc"] else [];
|
|
|
|
buildPhase = ''
|
|
if test -n "$targetConfig"; then
|
|
export ARCH=$platform
|
|
fi
|
|
make ${kernelHeadersBaseConfig} SHELL=bash
|
|
make mrproper headers_check SHELL=bash
|
|
'';
|
|
|
|
installPhase = ''
|
|
make INSTALL_HDR_PATH=$out headers_install
|
|
|
|
# Some builds (e.g. KVM) want a kernel.release.
|
|
mkdir -p $out/include/config
|
|
echo "${version}-default" > $out/include/config/kernel.release
|
|
'';
|
|
|
|
# !!! hacky
|
|
fixupPhase = ''
|
|
ln -s asm $out/include/asm-$platform
|
|
if test "$platform" = "i386" -o "$platform" = "x86_64"; then
|
|
ln -s asm $out/include/asm-x86
|
|
fi
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "Header files and scripts for Linux kernel";
|
|
license = licenses.gpl2;
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|