···

       
202
       
 
       
    # to be built eventually, we would still like to get the error early and without

     

       
203
       
 
       
    # having to wait while nix builds a derivation that might not be used.

     

       
204
       
 
       
    # See also https://github.com/NixOS/nix/issues/4629

     

       
205
       
-
       
    optionalAttrs (attrs ? disallowedReferences) {

     

       
206
       
-
       
      disallowedReferences = map unsafeDerivationToUntrackedOutpath attrs.disallowedReferences;

     

       
207
       
-
       
    }

     

       
208
       
-
       
    // optionalAttrs (attrs ? disallowedRequisites) {

     

       
209
       
-
       
      disallowedRequisites = map unsafeDerivationToUntrackedOutpath attrs.disallowedRequisites;

     

       
210
       
-
       
    }

     

       
211
       
-
       
    // optionalAttrs (attrs ? allowedReferences) {

     

       
212
       
-
       
      allowedReferences = mapNullable unsafeDerivationToUntrackedOutpath attrs.allowedReferences;

     

       
213
       
-
       
    }

     

       
214
       
-
       
    // optionalAttrs (attrs ? allowedRequisites) {

     

       
215
       
-
       
      allowedRequisites = mapNullable unsafeDerivationToUntrackedOutpath attrs.allowedRequisites;

     

       
216
       
 
       
    };

     

       
217
       
 
       


     

       
218
       
 
       
  makeDerivationArgument =

     
···

       
478
       
 
       


     

       
479
       
 
       
        derivationArg =

     

       
480
       
 
       
          removeAttrs attrs removedOrReplacedAttrNames

     

       
481
       
-
       
          // (optionalAttrs (attrs ? name || (attrs ? pname && attrs ? version)) {

     

       
482
       
-
       
            name =

     

       
483
       
 
       
              let

     

       
484
       
 
       
                # Indicate the host platform of the derivation if cross compiling.

     

       
485
       
 
       
                # Fixed-output derivations like source tarballs shouldn't get a host

     
···

       
507
       
 
       
                  ) "The `version` attribute cannot be null.";

     

       
508
       
 
       
                  "${attrs.pname}${staticMarker}${hostSuffix}-${attrs.version}"

     

       
509
       
 
       
              );

     

       
510
       
-
       
          })

     

       
511
       
-
       
          // {

     

       
512
       
 
       
            builder = attrs.realBuilder or stdenv.shell;

     

       
513
       
 
       
            args =

     

       
514
       
 
       
              attrs.args or [

     
···

       
556
       
 
       
            inherit doCheck doInstallCheck;

     

       
557
       
 
       


     

       
558
       
 
       
            inherit outputs;

     

       
559
       
-
       
          }

     

       
560
       
-
       
          // optionalAttrs (__contentAddressed) {

     

       
561
       
-
       
            inherit __contentAddressed;

     

       
562
       
-
       
            # Provide default values for outputHashMode and outputHashAlgo because

     

       
563
       
-
       
            # most people won't care about these anyways

     

       
564
       
-
       
            outputHashAlgo = attrs.outputHashAlgo or "sha256";

     

       
565
       
-
       
            outputHashMode = attrs.outputHashMode or "recursive";

     

       
566
       
-
       
          }

     

       
567
       
-
       
          // optionalAttrs (enableParallelBuilding) {

     

       
568
       
-
       
            inherit enableParallelBuilding;

     

       
569
       
-
       
            enableParallelChecking = attrs.enableParallelChecking or true;

     

       
570
       
-
       
            enableParallelInstalling = attrs.enableParallelInstalling or true;

     

       
571
       
-
       
          }

     

       
572
       
-
       
          // optionalAttrs (hardeningDisable != [ ] || hardeningEnable != [ ] || stdenv.hostPlatform.isMusl) {

     

       
573
       
-
       
            NIX_HARDENING_ENABLE = builtins.concatStringsSep " " enabledHardeningOptions;

     

       
574
       
-
       
          }

     

       
575
       
-
       
          //

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
576
       
 
       
            # TODO: remove platform condition

     

       
577
       
 
       
            # Enabling this check could be a breaking change as it requires to edit nix.conf

     

       
578
       
 
       
            # NixOS module already sets gccarch, unsure of nix installers and other distributions

     

       
579
       
-
       
            optionalAttrs

     

       
580
       
-
       
              (

     

       
581
       
 
       
                stdenv.buildPlatform ? gcc.arch

     

       
582
       
 
       
                && !(

     

       
583
       
 
       
                  stdenv.buildPlatform.isAarch64

     
···

       
589
       
 
       
                      stdenv.buildPlatform.gcc.arch == "armv8-a"

     

       
590
       
 
       
                  )

     

       
591
       
 
       
                )

     

       
592
       
-
       
              )

     

       
593
       
-
       
              {

     

       
594
       
-
       
                requiredSystemFeatures = attrs.requiredSystemFeatures or [ ] ++ [

     

       
595
       
-
       
                  "gccarch-${stdenv.buildPlatform.gcc.arch}"

     

       
596
       
-
       
                ];

     

       
597
       
-
       
              }

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
598
       
 
       
          // optionalAttrs (stdenv.buildPlatform.isDarwin) (

     

       
599
       
 
       
            let

     

       
600
       
 
       
              allDependencies = concatLists (concatLists dependencies);

     

···

       
202
       
 
       
    # to be built eventually, we would still like to get the error early and without

     

       
203
       
 
       
    # having to wait while nix builds a derivation that might not be used.

     

       
204
       
 
       
    # See also https://github.com/NixOS/nix/issues/4629

     

       
205
       
+
       
    {

     

       
206
       
+
       
      ${if (attrs ? disallowedReferences) then "disallowedReferences" else null} =

     

       
207
       
+
       
        map unsafeDerivationToUntrackedOutpath attrs.disallowedReferences;

     

       
208
       
+
       
      ${if (attrs ? disallowedRequisites) then "disallowedRequisites" else null} =

     

       
209
       
+
       
        map unsafeDerivationToUntrackedOutpath attrs.disallowedRequisites;

     

       
210
       
+
       
      ${if (attrs ? allowedReferences) then "allowedReferences" else null} =

     

       
211
       
+
       
        mapNullable unsafeDerivationToUntrackedOutpath attrs.allowedReferences;

     

       
212
       
+
       
      ${if (attrs ? allowedRequisites) then "allowedRequisites" else null} =

     

       
213
       
+
       
        mapNullable unsafeDerivationToUntrackedOutpath attrs.allowedRequisites;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
214
       
 
       
    };

     

       
215
       
 
       


     

       
216
       
 
       
  makeDerivationArgument =

     
···

       
476
       
 
       


     

       
477
       
 
       
        derivationArg =

     

       
478
       
 
       
          removeAttrs attrs removedOrReplacedAttrNames

     

       
479
       
+
       
          // {

     

       
480
       
+
       
            ${if (attrs ? name || (attrs ? pname && attrs ? version)) then "name" else null} =

     

       
481
       
 
       
              let

     

       
482
       
 
       
                # Indicate the host platform of the derivation if cross compiling.

     

       
483
       
 
       
                # Fixed-output derivations like source tarballs shouldn't get a host

     
···

       
505
       
 
       
                  ) "The `version` attribute cannot be null.";

     

       
506
       
 
       
                  "${attrs.pname}${staticMarker}${hostSuffix}-${attrs.version}"

     

       
507
       
 
       
              );

     

       
508
       
+
       


     

       
0
       
 
       

     

       
509
       
 
       
            builder = attrs.realBuilder or stdenv.shell;

     

       
510
       
 
       
            args =

     

       
511
       
 
       
              attrs.args or [

     
···

       
553
       
 
       
            inherit doCheck doInstallCheck;

     

       
554
       
 
       


     

       
555
       
 
       
            inherit outputs;

     

       
556
       
+
       


     

       
557
       
+
       
            # When the derivations is content addressed provide default values

     

       
558
       
+
       
            # for outputHashMode and outputHashAlgo because most people won't

     

       
559
       
+
       
            # care about these anyways

     

       
560
       
+
       
            ${if __contentAddressed then "__contentAddressed" else null} = __contentAddressed;

     

       
561
       
+
       
            ${if __contentAddressed then "outputHashAlgo" else null} = attrs.outputHashAlgo or "sha256";

     

       
562
       
+
       
            ${if __contentAddressed then "outputHashMode" else null} = attrs.outputHashMode or "recursive";

     

       
563
       
+
       


     

       
564
       
+
       
            ${if enableParallelBuilding then "enableParallelBuilding" else null} = enableParallelBuilding;

     

       
565
       
+
       
            ${if enableParallelBuilding then "enableParallelChecking" else null} =

     

       
566
       
+
       
              attrs.enableParallelChecking or true;

     

       
567
       
+
       
            ${if enableParallelBuilding then "enableParallelInstalling" else null} =

     

       
568
       
+
       
              attrs.enableParallelInstalling or true;

     

       
569
       
+
       


     

       
570
       
+
       
            ${

     

       
571
       
+
       
              if (hardeningDisable != [ ] || hardeningEnable != [ ] || stdenv.hostPlatform.isMusl) then

     

       
572
       
+
       
                "NIX_HARDENING_ENABLE"

     

       
573
       
+
       
              else

     

       
574
       
+
       
                null

     

       
575
       
+
       
            } =

     

       
576
       
+
       
              builtins.concatStringsSep " " enabledHardeningOptions;

     

       
577
       
+
       


     

       
578
       
 
       
            # TODO: remove platform condition

     

       
579
       
 
       
            # Enabling this check could be a breaking change as it requires to edit nix.conf

     

       
580
       
 
       
            # NixOS module already sets gccarch, unsure of nix installers and other distributions

     

       
581
       
+
       
            ${

     

       
582
       
+
       
              if

     

       
583
       
 
       
                stdenv.buildPlatform ? gcc.arch

     

       
584
       
 
       
                && !(

     

       
585
       
 
       
                  stdenv.buildPlatform.isAarch64

     
···

       
591
       
 
       
                      stdenv.buildPlatform.gcc.arch == "armv8-a"

     

       
592
       
 
       
                  )

     

       
593
       
 
       
                )

     

       
594
       
+
       
              then

     

       
595
       
+
       
                "requiredSystemFeatures"

     

       
596
       
+
       
              else

     

       
597
       
+
       
                null

     

       
598
       
+
       
            } =

     

       
599
       
+
       
              attrs.requiredSystemFeatures or [ ] ++ [

     

       
600
       
+
       
                "gccarch-${stdenv.buildPlatform.gcc.arch}"

     

       
601
       
+
       
              ];

     

       
602
       
+
       
          }

     

       
603
       
 
       
          // optionalAttrs (stdenv.buildPlatform.isDarwin) (

     

       
604
       
 
       
            let

     

       
605
       
 
       
              allDependencies = concatLists (concatLists dependencies);