From 673b648bd35285a1dbfc0348716dd6bdd8064a51 Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Wed, 26 Feb 2025 19:46:43 +0900
Subject: cmd/fpkg: call app in-process

Wrapping fortify is slow, painful and error-prone. Start apps in-process instead.

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 package.nix | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

(limited to 'package.nix')

diff --git a/package.nix b/package.nix
index 595fa2a7..056a9c53 100644
--- a/package.nix
+++ b/package.nix
@@ -44,18 +44,15 @@ buildGoModule rec {
         ldflags ++ [ "-X git.gensokyo.uk/security/fortify/internal.${name}=${value}" ]
       )
       (
-        [
-          "-s -w"
-        ]
+        [ "-s -w" ]
         ++ lib.optionals withStatic [
           "-linkmode external"
           "-extldflags \"-static\""
         ]
       )
       {
-        Version = "v${version}";
-        Fsu = "/run/wrappers/bin/fsu";
-        Fortify = "${placeholder "out"}/libexec/fortify";
+        version = "v${version}";
+        fsu = "/run/wrappers/bin/fsu";
       };
 
   # nix build environment does not allow acls
-- 
cgit v1.3.1