nix-super/src/libstore/local.mk

libraries += libstore

libstore_NAME = libnixstore

libstore_DIR := $(d)

libstore_SOURCES := $(wildcard $(d)/*.cc)

libstore_LIBS = libutil libformat

libstore_LDFLAGS = $(SQLITE3_LIBS) -lbz2 $(LIBCURL_LIBS) $(SODIUM_LIBS) -pthread

libstore_FILES = sandbox-defaults.sb sandbox-minimal.sb sandbox-network.sb

$(foreach file,$(libstore_FILES),$(eval $(call install-data-in,$(d)/$(file),$(datadir)/nix/sandbox)))

ifeq ($(ENABLE_S3), 1)
	libstore_LDFLAGS += -laws-cpp-sdk-s3 -laws-cpp-sdk-core
endif

ifeq ($(OS), SunOS)
	libstore_LDFLAGS += -lsocket
endif

ifeq ($(OS), Linux)
	libstore_LDFLAGS += -lseccomp
endif

libstore_CXXFLAGS = \
 -DNIX_PREFIX=\"$(prefix)\" \
 -DNIX_STORE_DIR=\"$(storedir)\" \
 -DNIX_DATA_DIR=\"$(datadir)\" \
 -DNIX_STATE_DIR=\"$(localstatedir)/nix\" \
 -DNIX_LOG_DIR=\"$(localstatedir)/log/nix\" \
 -DNIX_CONF_DIR=\"$(sysconfdir)/nix\" \
 -DNIX_LIBEXEC_DIR=\"$(libexecdir)\" \
 -DNIX_BIN_DIR=\"$(bindir)\" \
 -DSANDBOX_SHELL="\"$(sandbox_shell)\"" \
 -DLSOF=\"$(lsof)\"

$(d)/local-store.cc: $(d)/schema.sql.gen.hh

$(d)/build.cc:

%.gen.hh: %
	@echo 'R"foo(' >> $@.tmp
	$(trace-gen) cat $< >> $@.tmp
	@echo ')foo"' >> $@.tmp
	@mv $@.tmp $@

clean-files += $(d)/schema.sql.gen.hh

$(eval $(call install-file-in, $(d)/nix-store.pc, $(prefix)/lib/pkgconfig, 0644))
Update Makefile variable names 2014-02-01 13:23:14 +02:00			`libraries += libstore`
New non-recursive, plain Make-based build system 2013-11-22 16:54:18 +02:00
Use libnix as a prefix for all Nix libraries In particular "libutil" was always a problem because it collides with Glibc's libutil. Even if we install into $(libdir)/nix, the linker sometimes got confused (e.g. if a program links against libstore but not libutil, then ld would report undefined symbols in libstore because it was looking at Glibc's libutil). 2013-11-24 01:53:41 +02:00			`libstore_NAME = libnixstore`

Rename $(here) to $(d) for brevity, and remove trailing slash 2013-11-22 18:45:52 +02:00			`libstore_DIR := $(d)`
New non-recursive, plain Make-based build system 2013-11-22 16:54:18 +02:00
Update Makefiles 2014-01-09 17:53:47 +02:00			`libstore_SOURCES := $(wildcard $(d)/*.cc)`
New non-recursive, plain Make-based build system 2013-11-22 16:54:18 +02:00
Allow (dynamic) libraries to depend on other libraries 2013-11-23 22:11:02 +02:00			`libstore_LIBS = libutil libformat`

Make the aws-cpp-sdk dependency optional 2016-05-04 18:16:48 +03:00			`libstore_LDFLAGS = $(SQLITE3_LIBS) -lbz2 $(LIBCURL_LIBS) $(SODIUM_LIBS) -pthread`

Shift Darwin sandbox to separate installed files This makes it slightly more manageable to see at a glance what in a build's sandbox profile is unique to the build and what is standard. Also a first step to factoring more of our Darwin logic into scheme functions that will allow us a bit more flexibility. And of course less of that nasty codegen in C++! 😀 2017-10-18 02:15:51 +03:00			`libstore_FILES = sandbox-defaults.sb sandbox-minimal.sb sandbox-network.sb`

			`$(foreach file,$(libstore_FILES),$(eval $(call install-data-in,$(d)/$(file),$(datadir)/nix/sandbox)))`

Make the aws-cpp-sdk dependency optional 2016-05-04 18:16:48 +03:00			`ifeq ($(ENABLE_S3), 1)`
			`libstore_LDFLAGS += -laws-cpp-sdk-s3 -laws-cpp-sdk-core`
			`endif`
New non-recursive, plain Make-based build system 2013-11-22 16:54:18 +02:00
Fix compile errors on Illumos 2014-04-03 17:59:25 +03:00			`ifeq ($(OS), SunOS)`
			`libstore_LDFLAGS += -lsocket`
			`endif`

Add a seccomp filter to prevent creating setuid/setgid binaries This prevents builders from setting the S_ISUID or S_ISGID bits, preventing users from using a nixbld* user to create a setuid/setgid binary to interfere with subsequent builds under the same nixbld* uid. This is based on aszlig's seccomp code (47f587700d646f5b03a42f2fa57c28875a31efbe). Reported by Linus Heckemann. 2017-05-29 12:34:24 +03:00			`ifeq ($(OS), Linux)`
			`libstore_LDFLAGS += -lseccomp`
			`endif`

New non-recursive, plain Make-based build system 2013-11-22 16:54:18 +02:00			`libstore_CXXFLAGS = \`
Fix using restricted mode with chroots 2015-04-16 19:46:17 +03:00			`-DNIX_PREFIX=\"$(prefix)\" \`
New non-recursive, plain Make-based build system 2013-11-22 16:54:18 +02:00			`-DNIX_STORE_DIR=\"$(storedir)\" \`
			`-DNIX_DATA_DIR=\"$(datadir)\" \`
			`-DNIX_STATE_DIR=\"$(localstatedir)/nix\" \`
			`-DNIX_LOG_DIR=\"$(localstatedir)/log/nix\" \`
			`-DNIX_CONF_DIR=\"$(sysconfdir)/nix\" \`
			`-DNIX_LIBEXEC_DIR=\"$(libexecdir)\" \`
Add option ‘build-extra-chroot-dirs’ This is useful for extending (rather than overriding) the default set of chroot paths. 2014-08-04 19:00:00 +03:00			`-DNIX_BIN_DIR=\"$(bindir)\" \`
Add --with-sandbox-shell configure flag And add a 116 KiB ash shell from busybox to the release build. This helps to make sandbox builds work out of the box on non-NixOS systems and with diverted stores. 2017-05-15 18:30:33 +03:00			`-DSANDBOX_SHELL="\"$(sandbox_shell)\"" \`
Detect lsof Also, don't use lsof on Linux since it's not needed. Fixes #1328. 2017-04-20 20:11:45 +03:00			`-DLSOF=\"$(lsof)\"`
Generate schema.sql.hh 2014-01-09 23:10:35 +02:00
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration. 2017-05-30 18:40:12 +03:00			`$(d)/local-store.cc: $(d)/schema.sql.gen.hh`
Generate schema.sql.hh 2014-01-09 23:10:35 +02:00
Shift Darwin sandbox to separate installed files This makes it slightly more manageable to see at a glance what in a build's sandbox profile is unique to the build and what is standard. Also a first step to factoring more of our Darwin logic into scheme functions that will allow us a bit more flexibility. And of course less of that nasty codegen in C++! 😀 2017-10-18 02:15:51 +03:00			`$(d)/build.cc:`
Fix "make dist" 2014-02-01 15:28:31 +02:00
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration. 2017-05-30 18:40:12 +03:00			`%.gen.hh: %`
OS X sandbox: Improve builtin sandbox profile Also, add rules to allow fixed-output derivations to access the network. These rules are sufficient to build stdenvDarwin without any __sandboxProfile magic. 2017-05-31 18:23:27 +03:00			`@echo 'R"foo(' >> $@.tmp`
			`$(trace-gen) cat $< >> $@.tmp`
			`@echo ')foo"' >> $@.tmp`
			`@mv $@.tmp $@`
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration. 2017-05-30 18:40:12 +03:00
Shift Darwin sandbox to separate installed files This makes it slightly more manageable to see at a glance what in a build's sandbox profile is unique to the build and what is standard. Also a first step to factoring more of our Darwin logic into scheme functions that will allow us a bit more flexibility. And of course less of that nasty codegen in C++! 😀 2017-10-18 02:15:51 +03:00			`clean-files += $(d)/schema.sql.gen.hh`
Install some pkgconfig files 2014-09-18 13:00:40 +03:00
Update spec file http://hydra.nixos.org/build/14344391 2014-09-18 16:42:01 +03:00			`$(eval $(call install-file-in, $(d)/nix-store.pc, $(prefix)/lib/pkgconfig, 0644))`