···

       
77
       
 
       


     

       
78
       
 
       
    , ... } @ attrs:

     

       
79
       
 
       


     

       
80
       
-
       
    # TODO(@Ericson2314): Make this more modular, and not O(n^2).

     

       
81
       
 
       
    let

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
82
       
 
       
      supportedHardeningFlags = [ "fortify" "stackprotector" "pie" "pic" "strictoverflow" "format" "relro" "bindnow" ];

     

       
83
       
 
       
      defaultHardeningFlags = lib.remove "pie" supportedHardeningFlags;

     

       
84
       
 
       
      enabledHardeningOptions =

     
···

       
168
       
 
       
          # A hack to make `nix-env -qa` and `nix search` ignore broken packages.

     

       
169
       
 
       
          # TODO(@oxij): remove this assert when something like NixOS/nix#1771 gets merged into nix.

     

       
170
       
 
       
          name = assert validity.handled; name + lib.optionalString

     

       
171
       
-
       
            (stdenv.hostPlatform != stdenv.buildPlatform)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
172
       
 
       
            ("-" + stdenv.hostPlatform.config);

     

       
173
       
 
       


     

       
174
       
 
       
          builder = attrs.realBuilder or stdenv.shell;

     

···

       
77
       
 
       


     

       
78
       
 
       
    , ... } @ attrs:

     

       
79
       
 
       


     

       
0
       
 
       

     

       
80
       
 
       
    let

     

       
81
       
+
       
      fixedOutputDrv = attrs ? outputHash;

     

       
82
       
+
       
      noNonNativeDeps = builtins.length (depsBuildTarget ++ depsBuildTargetPropagated

     

       
83
       
+
       
                                      ++ depsHostHost ++ depsHostHostPropagated

     

       
84
       
+
       
                                      ++ buildInputs ++ propagatedBuildInputs

     

       
85
       
+
       
                                      ++ depsTargetTarget ++ depsTargetTargetPropagated) == 0;

     

       
86
       
+
       
      runtimeSensativeIfFixedOutput = fixedOutputDrv -> !noNonNativeDeps;

     

       
87
       
 
       
      supportedHardeningFlags = [ "fortify" "stackprotector" "pie" "pic" "strictoverflow" "format" "relro" "bindnow" ];

     

       
88
       
 
       
      defaultHardeningFlags = lib.remove "pie" supportedHardeningFlags;

     

       
89
       
 
       
      enabledHardeningOptions =

     
···

       
173
       
 
       
          # A hack to make `nix-env -qa` and `nix search` ignore broken packages.

     

       
174
       
 
       
          # TODO(@oxij): remove this assert when something like NixOS/nix#1771 gets merged into nix.

     

       
175
       
 
       
          name = assert validity.handled; name + lib.optionalString

     

       
176
       
+
       
            # Fixed-output derivations like source tarballs shouldn't get a host

     

       
177
       
+
       
            # suffix. But we have some weird ones with run-time deps that are

     

       
178
       
+
       
            # just used for their side-affects. Those might as well since the

     

       
179
       
+
       
            # hash can't be the same. See #32986.

     

       
180
       
+
       
            (stdenv.hostPlatform != stdenv.buildPlatform && runtimeSensativeIfFixedOutput)

     

       
181
       
 
       
            ("-" + stdenv.hostPlatform.config);

     

       
182
       
 
       


     

       
183
       
 
       
          builder = attrs.realBuilder or stdenv.shell;

     

···

       
31
       
 
       
    then defaultBuildHostScope

     

       
32
       
 
       
    else assert pkgs.hostPlatform == pkgs.buildPlatform; defaultHostTargetScope;

     

       
33
       
 
       
  defaultHostHostScope = {}; # unimplemented

     

       
34
       
-
       
  # TODO(@Ericson2314): we shouldn't preclude run-time fetching by removing

     

       
35
       
-
       
  # these attributes. We should have a more general solution for selecting

     

       
36
       
-
       
  # whether `nativeDrv` or `crossDrv` is the default in `defaultScope`.

     

       
37
       
-
       
  pkgsWithoutFetchers = lib.filterAttrs (n: _: !lib.hasPrefix "fetch" n) pkgs;

     

       
38
       
-
       
  targetPkgsWithoutFetchers = lib.filterAttrs (n: _: !lib.hasPrefix "fetch" n) pkgs.targetPackages;

     

       
39
       
-
       
  defaultHostTargetScope = pkgsWithoutFetchers // pkgs.xorg;

     

       
40
       
-
       
  defaultTargetTargetScope = targetPkgsWithoutFetchers // targetPkgsWithoutFetchers.xorg or {};

     

       
41
       
 
       


     

       
42
       
 
       
  splicer = pkgsBuildBuild: pkgsBuildHost: pkgsBuildTarget:

     

       
43
       
 
       
            pkgsHostHost: pkgsHostTarget:

     

···

       
31
       
 
       
    then defaultBuildHostScope

     

       
32
       
 
       
    else assert pkgs.hostPlatform == pkgs.buildPlatform; defaultHostTargetScope;

     

       
33
       
 
       
  defaultHostHostScope = {}; # unimplemented

     

       
34
       
+
       
  defaultHostTargetScope = pkgs // pkgs.xorg;

     

       
35
       
+
       
  defaultTargetTargetScope = pkgs.targetPackages // pkgs.targetPackages.xorg or {};

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
36
       
 
       


     

       
37
       
 
       
  splicer = pkgsBuildBuild: pkgsBuildHost: pkgsBuildTarget:

     

       
38
       
 
       
            pkgsHostHost: pkgsHostTarget: