security/fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 35 Wiki Activity

cmd/fpkg/build: prepend extra nix flags
All checks were successful
Test / Create distribution (push) Successful in 25s
Details
Test / Data race detector (push) Successful in 35s
Details
Test / Fortify (push) Successful in 35s
Details
Test / Flake checks (push) Successful in 39s
Details

Browse Source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-02-23 20:21:09 +09:00
parent 71135f339a
commit 0fb72e5d99
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cmd/fpkg/build.nix
View File

@ -180,14 +180,16 @@ in
writeScriptBin "build-fpkg-${pname}" '' writeScriptBin "build-fpkg-${pname}" ''
#!${runtimeShell} -el #!${runtimeShell} -el
NIX="nix --offline --extra-experimental-features nix-command"
OUT="$(mktemp -d)" OUT="$(mktemp -d)"
TAR="$(mktemp -u)" TAR="$(mktemp -u)"
set -x set -x
nix copy --no-check-sigs --to "$OUT" "${nix}" "${nixos.config.system.build.toplevel}" $NIX copy --no-check-sigs --to "$OUT" "${nix}" "${nixos.config.system.build.toplevel}"
nix store --store "$OUT" optimise $NIX store --store "$OUT" optimise
chmod -R +r "$OUT/nix/var" chmod -R +r "$OUT/nix/var"
nix copy --no-check-sigs --to "file://$OUT/res?compression=zstd&compression-level=19&parallel-compression=true" \ $NIX copy --no-check-sigs --to "file://$OUT/res?compression=zstd&compression-level=19&parallel-compression=true" \
"${homeManagerConfiguration.activationPackage}" \ "${homeManagerConfiguration.activationPackage}" \
"${launcher}" ${if gpu then "${mesaWrappers} ${nixGL}" else ""} "${launcher}" ${if gpu then "${mesaWrappers} ${nixGL}" else ""}
mkdir -p "$OUT/etc" mkdir -p "$OUT/etc"