The test runner's buildInputs (writableTmpDirAsHomeHook, openssl)
need to be nativeBuildInputs. In the static (cross-musl) build,
strictDeps is enabled and only nativeBuildInputs are added to PATH.
With buildInputs, openssl was not in PATH, causing
HttpsBinaryCacheStoreTest.queryPathInfo to crash.
Master already contains the GHSA-g3g9-5vj6-r3gj sandbox escape fix and
the landlock abstract socket hardening, so drop the now-redundant
downstream backports.
This is a port of
cb5b0c30aa
from https://github.com/NixOS/nix/pull/14489 but adopted to preserve
dependency order, and this not cause rebuilds.
We only need the one commit of that PR because we don't care about a dev
shell for Nix in Nixpkgs.
Git version was lagging behind 2.32 a lot. A lot of commits to catch up on.
There are some notable changes like dropping the aws-sdk-cpp in favor of the much
lighter aws-crt-cpp.
Diff: 07b96c1d14...479b6b73a9
This turns out to be a big problem for performance of Bison
generated code, that for whatever reason cannot be made internal
to the shared library. This causes GCC to make a bunch of function
calls go through PLT. Ideally these hot functions (like move/copy ctor) could become
inline in upstream Bison. That will make sure that GCC can do interprocedular
optimizations without -fno-semantic-interposition [^]. Considering that
LLVM already does inlining and whatnot is a good motivation for this change.
I don't know of any case where Nix relies on LD_PRELOAD tricks for the shared
libraries in production use-cases.
[^]: https://maskray.me/blog/2021-05-09-fno-semantic-interposition
Tons of errors like:
/nix/store/y3bib7c8vpx66xypjflw783ml392105l-powerpc64-unknown-linux-gnuabielfv1-binutils-2.44/bin/powerpc64-unknown-linux-gnuabielfv1-ld.gold: error: /build/ccg9tPoL.debug.temp.o: could not decompress section .debug_str
/nix/store/y3bib7c8vpx66xypjflw783ml392105l-powerpc64-unknown-linux-gnuabielfv1-binutils-2.44/bin/powerpc64-unknown-linux-gnuabielfv1-ld.gold: error: /build/ccg9tPoL.debug.temp.o: could not decompress section .debug_line_str
/nix/store/y3bib7c8vpx66xypjflw783ml392105l-powerpc64-unknown-linux-gnuabielfv1-binutils-2.44/bin/powerpc64-unknown-linux-gnuabielfv1-ld.gold: warning: /build/ccg9tPoL.debug.temp.o: last entry in mergeable string section '.debug_line_str' not null terminated
