tvl-depot/src/libstore/local.mk

libraries += libstore

libstore_NAME = libnixstore

libstore_DIR := $(d)

libstore_SOURCES := $(wildcard $(d)/*.cc)

libstore_LIBS = libutil libformat

libstore_LDFLAGS = $(SQLITE3_LIBS) -lbz2 $(LIBCURL_LIBS) $(SODIUM_LIBS) -pthread

ifeq ($(ENABLE_S3), 1)
	libstore_LDFLAGS += -laws-cpp-sdk-s3 -laws-cpp-sdk-core
endif

ifeq ($(OS), SunOS)
	libstore_LDFLAGS += -lsocket
endif

ifeq ($(OS), Linux)
	libstore_LDFLAGS += -lseccomp
endif

libstore_CXXFLAGS = \
 -DNIX_PREFIX=\"$(prefix)\" \
 -DNIX_STORE_DIR=\"$(storedir)\" \
 -DNIX_DATA_DIR=\"$(datadir)\" \
 -DNIX_STATE_DIR=\"$(localstatedir)/nix\" \
 -DNIX_LOG_DIR=\"$(localstatedir)/log/nix\" \
 -DNIX_CONF_DIR=\"$(sysconfdir)/nix\" \
 -DNIX_LIBEXEC_DIR=\"$(libexecdir)\" \
 -DNIX_BIN_DIR=\"$(bindir)\" \
 -DSANDBOX_SHELL="\"$(sandbox_shell)\"" \
 -DLSOF=\"$(lsof)\"

$(d)/local-store.cc: $(d)/schema.sql.gen.hh

sandbox-headers = $(d)/sandbox-defaults.sb.gen.hh $(d)/sandbox-network.sb.gen.hh $(d)/sandbox-minimal.sb.gen.hh

$(d)/build.cc: $(sandbox-headers)

%.gen.hh: %
	@echo 'R"foo(' >> $@.tmp
	$(trace-gen) cat $< >> $@.tmp
	@echo ')foo"' >> $@.tmp
	@mv $@.tmp $@

clean-files += $(d)/schema.sql.gen.hh $(sandbox-headers)

$(eval $(call install-file-in, $(d)/nix-store.pc, $(prefix)/lib/pkgconfig, 0644))
Update Makefile variable names 2014-02-01 12:23:14 +01:00			`libraries += libstore`
New non-recursive, plain Make-based build system 2013-11-22 15:54:18 +01:00
Use libnix as a prefix for all Nix libraries In particular "libutil" was always a problem because it collides with Glibc's libutil. Even if we install into $(libdir)/nix, the linker sometimes got confused (e.g. if a program links against libstore but not libutil, then ld would report undefined symbols in libstore because it was looking at Glibc's libutil). 2013-11-24 00:53:41 +01:00			`libstore_NAME = libnixstore`

Rename $(here) to $(d) for brevity, and remove trailing slash 2013-11-22 17:45:52 +01:00			`libstore_DIR := $(d)`
New non-recursive, plain Make-based build system 2013-11-22 15:54:18 +01:00
Update Makefiles 2014-01-09 16:53:47 +01:00			`libstore_SOURCES := $(wildcard $(d)/*.cc)`
New non-recursive, plain Make-based build system 2013-11-22 15:54:18 +01:00
Allow (dynamic) libraries to depend on other libraries 2013-11-23 21:11:02 +01:00			`libstore_LIBS = libutil libformat`

Make the aws-cpp-sdk dependency optional 2016-05-04 17:16:48 +02:00			`libstore_LDFLAGS = $(SQLITE3_LIBS) -lbz2 $(LIBCURL_LIBS) $(SODIUM_LIBS) -pthread`

			`ifeq ($(ENABLE_S3), 1)`
			`libstore_LDFLAGS += -laws-cpp-sdk-s3 -laws-cpp-sdk-core`
			`endif`
New non-recursive, plain Make-based build system 2013-11-22 15:54:18 +01:00
Fix compile errors on Illumos 2014-04-03 16:59:25 +02:00			`ifeq ($(OS), SunOS)`
			`libstore_LDFLAGS += -lsocket`
			`endif`

Add a seccomp filter to prevent creating setuid/setgid binaries This prevents builders from setting the S_ISUID or S_ISGID bits, preventing users from using a nixbld* user to create a setuid/setgid binary to interfere with subsequent builds under the same nixbld* uid. This is based on aszlig's seccomp code (47f587700d646f5b03a42f2fa57c28875a31efbe). Reported by Linus Heckemann. 2017-05-29 11:34:24 +02:00			`ifeq ($(OS), Linux)`
			`libstore_LDFLAGS += -lseccomp`
			`endif`

New non-recursive, plain Make-based build system 2013-11-22 15:54:18 +01:00			`libstore_CXXFLAGS = \`
Fix using restricted mode with chroots 2015-04-16 18:46:17 +02:00			`-DNIX_PREFIX=\"$(prefix)\" \`
New non-recursive, plain Make-based build system 2013-11-22 15:54:18 +01:00			`-DNIX_STORE_DIR=\"$(storedir)\" \`
			`-DNIX_DATA_DIR=\"$(datadir)\" \`
			`-DNIX_STATE_DIR=\"$(localstatedir)/nix\" \`
			`-DNIX_LOG_DIR=\"$(localstatedir)/log/nix\" \`
			`-DNIX_CONF_DIR=\"$(sysconfdir)/nix\" \`
			`-DNIX_LIBEXEC_DIR=\"$(libexecdir)\" \`
Add option ‘build-extra-chroot-dirs’ This is useful for extending (rather than overriding) the default set of chroot paths. 2014-08-04 18:00:00 +02:00			`-DNIX_BIN_DIR=\"$(bindir)\" \`
Add --with-sandbox-shell configure flag And add a 116 KiB ash shell from busybox to the release build. This helps to make sandbox builds work out of the box on non-NixOS systems and with diverted stores. 2017-05-15 17:30:33 +02:00			`-DSANDBOX_SHELL="\"$(sandbox_shell)\"" \`
Detect lsof Also, don't use lsof on Linux since it's not needed. Fixes #1328. 2017-04-20 19:11:45 +02:00			`-DLSOF=\"$(lsof)\"`
Generate schema.sql.hh 2014-01-09 22:10:35 +01:00
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration. 2017-05-30 17:40:12 +02:00			`$(d)/local-store.cc: $(d)/schema.sql.gen.hh`
Generate schema.sql.hh 2014-01-09 22:10:35 +01:00
Always use the Darwin sandbox Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries. 2017-06-06 18:44:49 +02:00			`sandbox-headers = $(d)/sandbox-defaults.sb.gen.hh $(d)/sandbox-network.sb.gen.hh $(d)/sandbox-minimal.sb.gen.hh`

			`$(d)/build.cc: $(sandbox-headers)`
Fix "make dist" 2014-02-01 14:28:31 +01:00
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration. 2017-05-30 17:40:12 +02:00			`%.gen.hh: %`
OS X sandbox: Improve builtin sandbox profile Also, add rules to allow fixed-output derivations to access the network. These rules are sufficient to build stdenvDarwin without any __sandboxProfile magic. 2017-05-31 17:23:27 +02:00			`@echo 'R"foo(' >> $@.tmp`
			`$(trace-gen) cat $< >> $@.tmp`
			`@echo ')foo"' >> $@.tmp`
			`@mv $@.tmp $@`
Darwin sandbox: Use sandbox-defaults.sb Issue #759. Also, remove nix.conf from the sandbox since I don't really see a legitimate reason for builders to access the Nix configuration. 2017-05-30 17:40:12 +02:00
Always use the Darwin sandbox Even with "build-use-sandbox = false", we now use sandboxing with a permissive profile that allows everything except the creation of setuid/setgid binaries. 2017-06-06 18:44:49 +02:00			`clean-files += $(d)/schema.sql.gen.hh $(sandbox-headers)`
Install some pkgconfig files 2014-09-18 12:00:40 +02:00
Update spec file http://hydra.nixos.org/build/14344391 2014-09-18 15:42:01 +02:00			`$(eval $(call install-file-in, $(d)/nix-store.pc, $(prefix)/lib/pkgconfig, 0644))`