dff0ba38a2
Because if you don't, the configure script assumes that your getcwd() function is broken. Which then makes bash use it's own getcwd() implementation, which doesn't work if the path to the current directory contains bind mounts in its paths. This shows up as: shell-init: error retrieving current directory: getcwd: cannot access parent directories: Bad file descriptor ... and fails the aarch64 glibc build with sandboxes enabled. Sigh.
131 lines
3.9 KiB
Nix
131 lines
3.9 KiB
Nix
{ stdenv, fetchurl, readline70 ? null, interactive ? false, texinfo ? null
|
|
, binutils ? null, bison
|
|
}:
|
|
|
|
assert interactive -> readline70 != null;
|
|
assert stdenv.isDarwin -> binutils != null;
|
|
|
|
let
|
|
version = "4.4";
|
|
realName = "bash-${version}";
|
|
shortName = "bash44";
|
|
baseConfigureFlags = if interactive then "--with-installed-readline" else "--disable-readline";
|
|
sha256 = "1jyz6snd63xjn6skk7za6psgidsd53k05cr3lksqybi0q6936syq";
|
|
|
|
upstreamPatches =
|
|
let
|
|
patch = nr: sha256:
|
|
fetchurl {
|
|
url = "mirror://gnu/bash/${realName}-patches/${shortName}-${nr}";
|
|
inherit sha256;
|
|
};
|
|
in
|
|
import ./bash-4.4-patches.nix patch;
|
|
|
|
inherit (stdenv.lib) optional optionalString;
|
|
in
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "${realName}-p${toString (builtins.length upstreamPatches)}";
|
|
|
|
src = fetchurl {
|
|
url = "mirror://gnu/bash/${realName}.tar.gz";
|
|
inherit sha256;
|
|
};
|
|
|
|
hardeningDisable = [ "format" ];
|
|
|
|
outputs = [ "out" "dev" "doc" "info" ];
|
|
|
|
# the man pages are small and useful enough
|
|
outputMan = if interactive then "out" else null;
|
|
|
|
NIX_CFLAGS_COMPILE = ''
|
|
-DSYS_BASHRC="/etc/bashrc"
|
|
-DSYS_BASH_LOGOUT="/etc/bash_logout"
|
|
-DDEFAULT_PATH_VALUE="/no-such-path"
|
|
-DSTANDARD_UTILS_PATH="/no-such-path"
|
|
-DNON_INTERACTIVE_LOGIN_SHELLS
|
|
-DSSH_SOURCE_BASHRC
|
|
'';
|
|
|
|
patchFlags = "-p0";
|
|
|
|
patches = upstreamPatches
|
|
++ [ (fetchurl {
|
|
# https://security.gentoo.org/glsa/201701-02
|
|
url = "https://gitweb.gentoo.org/repo/gentoo.git/plain/app-shells"
|
|
+ "/bash/files/bash-4.4-popd-offset-overflow.patch"
|
|
+ "?id=1bf1ceeb04a2f57e1e5e1636a8c288c4d0db6682";
|
|
sha256 = "02n08lw5spvsc2b1bll0gr6mg4qxcg7pzfjkw7ji5w7bjcikccbm";
|
|
}) ]
|
|
++ optional stdenv.isCygwin ./cygwin-bash-4.3.33-1.src.patch;
|
|
|
|
crossAttrs = {
|
|
configureFlags = baseConfigureFlags +
|
|
" bash_cv_job_control_missing=nomissing bash_cv_sys_named_pipes=nomissing bash_cv_getcwd_malloc=yes" +
|
|
optionalString stdenv.isCygwin ''
|
|
--without-libintl-prefix --without-libiconv-prefix
|
|
--with-installed-readline
|
|
bash_cv_dev_stdin=present
|
|
bash_cv_dev_fd=standard
|
|
bash_cv_termcap_lib=libncurses
|
|
'';
|
|
};
|
|
|
|
configureFlags = baseConfigureFlags;
|
|
|
|
# Note: Bison is needed because the patches above modify parse.y.
|
|
nativeBuildInputs = [bison]
|
|
++ optional (texinfo != null) texinfo
|
|
++ optional stdenv.isDarwin binutils;
|
|
|
|
buildInputs = optional interactive readline70;
|
|
|
|
# Bash randomly fails to build because of a recursive invocation to
|
|
# build `version.h'.
|
|
enableParallelBuilding = false;
|
|
|
|
postInstall = ''
|
|
ln -s bash "$out/bin/sh"
|
|
moveToOutput lib/bash/Makefile.inc "$dev"
|
|
'';
|
|
|
|
postFixup = if interactive
|
|
then ''
|
|
substituteInPlace "$out/bin/bashbug" \
|
|
--replace '${stdenv.shell}' "$out/bin/bash"
|
|
''
|
|
# most space is taken by locale data
|
|
else ''
|
|
rm -r "$out/share" "$out/bin/bashbug"
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
homepage = http://www.gnu.org/software/bash/;
|
|
description =
|
|
"GNU Bourne-Again Shell, the de facto standard shell on Linux" +
|
|
(if interactive then " (for interactive use)" else "");
|
|
|
|
longDescription = ''
|
|
Bash is the shell, or command language interpreter, that will
|
|
appear in the GNU operating system. Bash is an sh-compatible
|
|
shell that incorporates useful features from the Korn shell
|
|
(ksh) and C shell (csh). It is intended to conform to the IEEE
|
|
POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers
|
|
functional improvements over sh for both programming and
|
|
interactive use. In addition, most sh scripts can be run by
|
|
Bash without modification.
|
|
'';
|
|
|
|
license = licenses.gpl3Plus;
|
|
|
|
platforms = platforms.all;
|
|
|
|
maintainers = [ maintainers.peti ];
|
|
};
|
|
|
|
passthru = {
|
|
shellPath = "/bin/bash";
|
|
};
|
|
}
|