Johannes Kirschbauer
66241985dc
doc/treewide: replace "in order to" with "to"
...
Fixes a styleguide violation (doc/styleguide.md, "Filler Words and
Weak Phrases"). Release notes excluded.
2026-07-03 11:03:28 +02:00
Jack Rosenberg
4683c143f3
doc/stdenv: add a note about __structuredAttrs
2026-04-15 22:32:46 +02:00
Axel Karjalainen
9fdde482ab
doc: document pkgs<theirHost><theirTarget> better
...
Inspiration taken from code comments in `pkgs/top-level/stage.nix`.
2026-04-04 14:20:54 +03:00
Robert Scott
d8d07a0e82
bintools-wrapper: disable libcxxhardeningextensive hardening flag by default
2026-02-14 11:40:27 +00:00
Robert Scott
9a6599e26f
bintools-wrapper: enable strictflexarrays1 hardening flag by default ( #473648 )
2026-02-11 22:11:13 +00:00
Notarin Steele
34513330fc
doc/stdenv: revise line in Fixed-point arguments of mkDerivation
...
The line was in grammatical error or plain confusing, it has been revised to be grammatically correct, as well as revised to be a bit more technically correct, as well as useful to the reader.
Fixes #488258
Co-authored-by: Robert Hensing <robert@roberthensing.nl >
2026-02-08 10:36:03 -05:00
Tobias Mayer
cda3c8a1d5
doc/stdenv: add a note about strictDeps
2025-12-26 15:04:24 +01:00
Robert Scott
6980bafab2
bintools-wrapper: enable strictflexarrays1 hardening flag by default
2025-12-23 19:06:56 +00:00
André Schröder
69c7504aa6
doc: align formatting in dependency type tables
2025-12-10 11:32:28 +01:00
Robert Scott
2a45fd1039
cc-wrapper: add support for libcxxhardeningfast/extensive hardening flags
...
as with glibcxxassertions, we don't yet have a nice mechanism
for deferring support decisions to the c++ library in use, so
for now at least enabling this hardening flag will cause
_LIBCPP_HARDENING_MODE to be defined on all compilers
2025-10-08 18:53:17 +01:00
Luna Nova
834e9652c3
doc: drop pie flag from sec-hardening-in-nixpkgs
2025-09-30 09:21:41 -07:00
Fabián Heredia Montiel
3e04a8f0a8
Merge remote-tracking branch 'origin/staging-next' into staging
2025-08-29 13:28:18 -06:00
Robert Scott
d3afbb6da9
cc-wrapper: add glibcxxassertions hardening flag ( #414987 )
2025-08-29 20:20:39 +01:00
winston
7fd2872828
doc: replace path import path in separateDebugInfo with channel
2025-08-29 16:21:18 +02:00
winston
42882346bf
doc: prefer makeSearchPathOutput over symlinkJoin for separateDebugInfo
...
Avoids building an intermediate derivation and just uses a
colon-separated environment variable instead.
2025-08-29 16:21:18 +02:00
Ben Siraphob
cc5b731ed3
doc: fix typos
2025-08-27 11:46:26 -07:00
Robert Scott
3eec07ec59
cc-wrapper: add glibcxxassertions hardening flag
...
no platforms "unsupported" because we don't have a nice
mechanism for determining a platform's c++ lib and the flag
should be harmlessly ignored by a other c++ libs
2025-08-24 11:56:04 +01:00
n0099
8a815d6290
doc: fix link rot to --keep-failed in stdenv
2025-07-28 19:02:56 +00:00
Wolfgang Walther
62fe016519
treewide: run treefmt with mdcr/nixfmt
2025-07-24 13:52:31 +02:00
jade
20057ce6ee
doc: Add necessary details to understand dep propagation ( #423954 )
2025-07-15 18:40:03 -07:00
Jade Lovelace
a5fa5508db
doc: Add necessary details to understand dep propagation
...
This section has been the subject of too many jokes about nixpkgs and nix
overall being incomprehensible among people I know. In lieu of adding to
the fray I've had a go at correcting the reasons I couldn't read it
myself.
I don't actually think the math is a problem; it's actually probably the
more understandable part of the section once you actually understand the
definitions. The missing definitions and leaving the truth table as an
exercise to the reader really was not working for me though.
I've also added what each dependency group is actually *for*. This
hopefully makes the section easier to understand how it applies in
practice.
I generated the initial version of the table before reformatting it and
removing pointless rows with:
```python
def mapOffset(h, t, i):
return i + (h if i <= 0 else t - 1)
for h0 in (-1, 0, 1):
for t0 in (-1, 0, 1):
if t0 < h0: continue
heading = f'{h0:3} | {t0:3}'
for i in (-1, 0, 1):
if h0 + i not in (-1, 0, 1):
mapped = 'x'
else:
mapped = mapOffset(h0, t0, i)
heading += f' | {mapped:>2}'
print(heading)
```
2025-07-10 11:52:29 -07:00
Connor Baker
c02c4a4316
no-broken-symlinks: fail on links to /build ( #411775 )
2025-06-11 22:15:19 -07:00
Dominique Martinet
9b36201b94
no-broken-symlinks: fail on links to /build
...
The no-broken-symlinks hook does not fail if bad links exist out of
store, but /build is also a special directory for nix derivations: the
build directory in the builder mount namespace.
There should be no link to /build in the output derivation, so also
error on these directories (through $TMPDIR which default to that)
Closes #410508
2025-06-12 05:23:42 +09:00
nixpkgs-ci[bot]
cdd3b11ebb
Merge master into staging-next
2025-06-06 12:07:00 +00:00
Arnout Engelen
d311c0eaeb
doc: call out 'src' should ideally point to sources
...
And to mark packages otherwise.
2025-06-06 10:29:34 +02:00
Philip Taron
b76868988b
cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags ( #400408 )
2025-05-26 10:46:00 -07:00
Niklas Hambüchen
ee6c2bd2eb
doc: Fix missing pre/post hooks everywhere
2025-05-24 13:22:41 +00:00
Robert Scott
3f1a00c79d
cc-wrapper: add support for strictflexarrays1 & strictflexarrays3 hardening flags
...
adding strictflexarrays1 to pkgsExtraHardening
2025-05-24 11:10:20 +01:00
Naïm Camille Favier
9c4a331e76
makeWrapper: --add-flag and --append-flag arguments ( #400649 )
2025-04-28 20:43:03 +02:00
BirdeeHub
7b9c6346ff
makeWrapper: --add-flag and --append-flag arguments
...
also:
manual: differences in makeWrapper implementations better explained
Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/build-support/setup-hooks/make-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/build-support/setup-hooks/make-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/build-support/setup-hooks/make-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/build-support/setup-hooks/make-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/by-name/ma/makeBinaryWrapper/make-binary-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
Update pkgs/build-support/setup-hooks/make-wrapper.sh
Co-authored-by: Naïm Camille Favier <n@monade.li >
2025-04-25 12:57:29 -07:00
K900
1bb422239f
Merge remote-tracking branch 'origin/staging-next' into staging
2025-04-21 10:01:23 +03:00
Pol Dellaiera
b4515ff6c2
doc: use finalAttrs pattern
2025-04-21 07:02:49 +02:00
Pol Dellaiera
47f000d991
doc: add missing phase hooks
2025-04-21 07:02:49 +02:00
nixpkgs-ci[bot]
c229332680
Merge staging-next into staging
2025-04-17 00:16:17 +00:00
Pol Dellaiera
bcea0cf344
doc: update Nix code snippets format
...
Command: `mdcr --config doc/tests/mdcr-config.toml doc/`
2025-04-17 01:30:34 +02:00
nixpkgs-ci[bot]
bd5d8282de
Merge staging-next into staging
2025-04-13 18:04:59 +00:00
Robert Scott
1d03dcdba2
doc/stdenv: reword trivialautovarinit section to reduce confusion ( #380622 )
2025-04-13 13:51:18 +01:00
Robert Scott
781b42b87d
cc-wrapper: add nostrictaliasing hardening flag support
...
this equates to -fno-strict-aliasing
this is not a particularly new flag and is supported by all our
gcc and clang versions.
add to pkgsExtraHardening's defaultHardeningFlags.
2025-04-06 12:52:47 +01:00
Robert Scott
d8e8916c2c
doc/stdenv: reword trivialautovarinit section to reduce confusion
...
this paragraph makes more sense if the order of the sentences
is changed to be problem -> solution
2025-02-09 12:41:16 +00:00
Robert Scott
5fea611634
docs: mention promotion of stackclashprotection hardening flag to default enabled
2025-02-09 10:58:59 +00:00
K900
af55d5afc2
Merge remote-tracking branch 'origin/master' into staging-next
2025-02-05 09:44:25 +03:00
Pol Dellaiera
5b2753b035
doc/stdenv: fix typo in dependency propagation ( #379300 )
2025-02-05 06:41:33 +01:00
Lin Jian
edda698276
doc/stdenv: fix typo in dependency propagation
2025-02-04 17:19:53 +08:00
K900
945d2e2a7a
Merge remote-tracking branch 'origin/master' into staging-next
2025-02-03 18:00:08 +03:00
Lin Jian
9dde0e79a2
doc/stdenv: delete a confusing sentence for writableTmpDirAsHomeHook
2025-02-03 22:10:33 +08:00
Alyssa Ross
dffcaaaa64
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
pkgs/applications/virtualization/crosvm/default.nix
pkgs/by-name/as/ast-grep/package.nix
pkgs/by-name/ca/cargo-mobile2/package.nix
pkgs/by-name/cl/clang-tidy-sarif/package.nix
pkgs/by-name/gg/gg-jj/package.nix
pkgs/by-name/gi/git-warp-time/package.nix
pkgs/by-name/je/jellyfin-rpc/package.nix
pkgs/by-name/ne/netbox2netshot/package.nix
pkgs/by-name/sy/sydbox/package.nix
pkgs/by-name/te/television/package.nix
pkgs/development/python-modules/tinytuya/default.nix
2025-01-31 10:23:31 +01:00
Pol Dellaiera
f8110737ae
build-support: add writableTmpDirAsHomeHook hook
2025-01-27 19:41:13 +01:00
Pol Dellaiera
87521c59b6
build-support: add addBinToPathHook hook
2025-01-27 19:41:13 +01:00
Connor Baker
b2416f4485
no-broken-symlinks: restrict checks to symlinks pointing inside the store
2025-01-23 15:59:18 -08:00
Connor Baker
51b2764e9f
no-broken-symlinks: provide only dontCheckForBrokenSymlinks and test against absolute symlinks
2025-01-22 11:05:13 -08:00
