diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-02-26 19:46:43 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-02-26 19:51:44 +0900 |
| commit | 673b648bd35285a1dbfc0348716dd6bdd8064a51 (patch) | |
| tree | 7fa388c20fb7509060964e0380f744bf9178a006 /package.nix | |
| parent | 45ad788c6d03bf368010fa8e2a39028bdf0fc078 (diff) | |
cmd/fpkg: call app in-process
Wrapping fortify is slow, painful and error-prone. Start apps in-process instead.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'package.nix')
| -rw-r--r-- | package.nix | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/package.nix b/package.nix index 595fa2a7..056a9c53 100644 --- a/package.nix +++ b/package.nix @@ -44,18 +44,15 @@ buildGoModule rec { ldflags ++ [ "-X git.gensokyo.uk/security/fortify/internal.${name}=${value}" ] ) ( - [ - "-s -w" - ] + [ "-s -w" ] ++ lib.optionals withStatic [ "-linkmode external" "-extldflags \"-static\"" ] ) { - Version = "v${version}"; - Fsu = "/run/wrappers/bin/fsu"; - Fortify = "${placeholder "out"}/libexec/fortify"; + version = "v${version}"; + fsu = "/run/wrappers/bin/fsu"; }; # nix build environment does not allow acls |