extern/flakelight
1
0
Fork 1
mirror of https://github.com/nix-community/flakelight.git synced 2024-11-25 00:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add hardeningDisable to devShell module

Browse Source
This commit is contained in:
Archit Gupta 2024-10-30 21:52:12 -07:00
parent 566fbde51a
commit aaf1441ff7
3 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
API_GUIDE.md
View File

@ -508,6 +508,9 @@ list.
initialization. It can optionally be a function taking the package set and initialization. It can optionally be a function taking the package set and
returning such a string. returning such a string.
`devShell.hardeningDisable` is a list of hardening options to disable. Setting
it to `["all"]` disables all Nix hardening.
`devShell.env` is for setting environment variables in the shell. It is an `devShell.env` is for setting environment variables in the shell. It is an
attribute set mapping variables to values. It can optionally be a function attribute set mapping variables to values. It can optionally be a function
taking the package set and returning such an attribute set. taking the package set and returning such an attribute set.

10
builtinModules/devShells.nix
View File

@ -25,6 +25,11 @@ let
default = ""; default = "";
}; };
hardeningDisable = mkOption {
type = listOf str;
default = [ ];
};
env = mkOption { env = mkOption {
type = optFunctionTo (lazyAttrsOf str); type = optFunctionTo (lazyAttrsOf str);
default = { }; default = { };
@ -59,7 +64,10 @@ let
else else
let cfg' = mapAttrs (_: v: v pkgs) cfg; in let cfg' = mapAttrs (_: v: v pkgs) cfg; in
pkgs.mkShell.override { inherit (cfg') stdenv; } pkgs.mkShell.override { inherit (cfg') stdenv; }
(cfg'.env // { inherit (cfg') inputsFrom packages shellHook; }); (cfg'.env // {
inherit (cfg') inputsFrom packages shellHook;
inherit (cfg) hardeningDisable;
});
in in
{ {
options = { options = {

1
tests/default.nix
View File

@ -343,6 +343,7 @@ in
''; '';
env.TEST_VAR = "test value"; env.TEST_VAR = "test value";
stdenv = pkgs: pkgs.clangStdenv; stdenv = pkgs: pkgs.clangStdenv;
hardeningDisable = [ "all" ];
}; };
}) })
(f: lib.isDerivation f.devShells.x86_64-linux.default); (f: lib.isDerivation f.devShells.x86_64-linux.default);