aff1f4ab94
The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
126 lines
3.8 KiB
Nix
126 lines
3.8 KiB
Nix
{ stdenv, fetchurl, fetchFromSavannah, autogen, flex, bison, python, autoconf, automake
|
|
, gettext, ncurses, libusb, freetype, qemu, devicemapper
|
|
, zfs ? null
|
|
, efiSupport ? false
|
|
, zfsSupport ? true
|
|
}:
|
|
|
|
with stdenv.lib;
|
|
let
|
|
pcSystems = {
|
|
"i686-linux".target = "i386";
|
|
"x86_64-linux".target = "i386";
|
|
};
|
|
|
|
efiSystems = {
|
|
"i686-linux".target = "i386";
|
|
"x86_64-linux".target = "x86_64";
|
|
};
|
|
|
|
canEfi = any (system: stdenv.system == system) (mapAttrsToList (name: _: name) efiSystems);
|
|
inPCSystems = any (system: stdenv.system == system) (mapAttrsToList (name: _: name) pcSystems);
|
|
|
|
version = "2.x-2015-11-16";
|
|
|
|
unifont_bdf = fetchurl {
|
|
url = "http://unifoundry.com/unifont-5.1.20080820.bdf.gz";
|
|
sha256 = "0s0qfff6n6282q28nwwblp5x295zd6n71kl43xj40vgvdqxv0fxx";
|
|
};
|
|
|
|
po_src = fetchurl {
|
|
name = "grub-2.02-beta2.tar.gz";
|
|
url = "http://alpha.gnu.org/gnu/grub/grub-2.02~beta2.tar.gz";
|
|
sha256 = "1lr9h3xcx0wwrnkxdnkfjwy08j7g7mdlmmbdip2db4zfgi69h0rm";
|
|
};
|
|
|
|
in (
|
|
|
|
assert efiSupport -> canEfi;
|
|
assert zfsSupport -> zfs != null;
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "grub-${version}";
|
|
|
|
src = fetchFromSavannah {
|
|
repo = "grub";
|
|
rev = "50d6f38febe80d4d3088dae1ee639b341787ab71";
|
|
sha256 = "1pyn2qa8hwiabhgnzj86y4b69y4a37dh5n0j4csmm7xmgc13vvww";
|
|
};
|
|
|
|
nativeBuildInputs = [ autogen flex bison python autoconf automake ];
|
|
buildInputs = [ ncurses libusb freetype gettext devicemapper ]
|
|
++ optional doCheck qemu
|
|
++ optional zfsSupport zfs;
|
|
|
|
hardeningDisable = [ "all" ];
|
|
|
|
preConfigure =
|
|
'' for i in "tests/util/"*.in
|
|
do
|
|
sed -i "$i" -e's|/bin/bash|/bin/sh|g'
|
|
done
|
|
|
|
# Apparently, the QEMU executable is no longer called
|
|
# `qemu-system-i386', even on i386.
|
|
#
|
|
# In addition, use `-nodefaults' to avoid errors like:
|
|
#
|
|
# chardev: opening backend "stdio" failed
|
|
# qemu: could not open serial device 'stdio': Invalid argument
|
|
#
|
|
# See <http://www.mail-archive.com/qemu-devel@nongnu.org/msg22775.html>.
|
|
sed -i "tests/util/grub-shell.in" \
|
|
-e's/qemu-system-i386/qemu-system-x86_64 -nodefaults/g'
|
|
'';
|
|
|
|
prePatch =
|
|
'' tar zxf ${po_src} grub-2.02~beta2/po
|
|
rm -rf po
|
|
mv grub-2.02~beta2/po po
|
|
sh autogen.sh
|
|
gunzip < "${unifont_bdf}" > "unifont.bdf"
|
|
sed -i "configure" \
|
|
-e "s|/usr/src/unifont.bdf|$PWD/unifont.bdf|g"
|
|
'';
|
|
|
|
patches = [ ./fix-bash-completion.patch ];
|
|
|
|
configureFlags = optional zfsSupport "--enable-libzfs"
|
|
++ optionals efiSupport [ "--with-platform=efi" "--target=${efiSystems.${stdenv.system}.target}" "--program-prefix=" ];
|
|
|
|
# save target that grub is compiled for
|
|
grubTarget = if efiSupport
|
|
then "${efiSystems.${stdenv.system}.target}-efi"
|
|
else if inPCSystems
|
|
then "${pcSystems.${stdenv.system}.target}-pc"
|
|
else "";
|
|
|
|
doCheck = false;
|
|
enableParallelBuilding = true;
|
|
|
|
postInstall = ''
|
|
paxmark pms $out/sbin/grub-{probe,bios-setup}
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "GNU GRUB, the Grand Unified Boot Loader (2.x beta)";
|
|
|
|
longDescription =
|
|
'' GNU GRUB is a Multiboot boot loader. It was derived from GRUB, GRand
|
|
Unified Bootloader, which was originally designed and implemented by
|
|
Erich Stefan Boleyn.
|
|
|
|
Briefly, the boot loader is the first software program that runs when a
|
|
computer starts. It is responsible for loading and transferring
|
|
control to the operating system kernel software (such as the Hurd or
|
|
the Linux). The kernel, in turn, initializes the rest of the
|
|
operating system (e.g., GNU).
|
|
'';
|
|
|
|
homepage = http://www.gnu.org/software/grub/;
|
|
|
|
license = licenses.gpl3Plus;
|
|
|
|
platforms = platforms.gnu;
|
|
};
|
|
})
|