| 26 Aug 2025 |
vcunat | The discussion applies also to NixOS 25.05. | 14:25:14 |
hexa | if nothing moves I can restore the buildinfo patch later tonight or tomorrow | 14:26:13 |
Christoph | In reply to @hexa:lossy.network Christoph: that means floorp is affected as well and should finally move to 12.x Yeah, should be done by the weekend at latest. | 14:32:24 |
vcunat | https://github.com/NixOS/nixpkgs/pull/437162 | 15:45:39 |
@aloisw:julia0815.de | It does not lead to increased closure size, but https://github.com/NixOS/nixpkgs/pull/436667 also looks to have dropped the system_dir patch. | 16:07:48 |
hexa | oh, that was for the native messaging stuff apparently | 16:17:50 |
hexa | sorry, what a mess π | 16:21:29 |
hexa | will clean this up tonight | 16:22:19 |
hexa | was also looking why we don't have PIE enabled for firefox and didn't manage to make it build with PIE enabled | 16:24:43 |
@aloisw:julia0815.de | aloisw@exodus ~> file /nix/store/jx2i47bhvyjpjgiskd31m8j103rky12i-firefox-142.0/lib/firefox/firefox
/nix/store/jx2i47bhvyjpjgiskd31m8j103rky12i-firefox-142.0/lib/firefox/firefox: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /nix/store/8p33is69mjdw3bi1wmi8v2zpsxir8nwd-glibc-2.40-66/lib/ld-linux-x86-64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=c69e6e577c620c5f5dd652db72bde2490f45bb08, not stripped
That does seem to be a PIE? | 16:38:29 |
hexa | huh | 16:39:24 |
hexa | i was trusting checksec π€ͺ | 16:39:31 |
@aloisw:julia0815.de | That also tells mit it's a PIE? | 16:41:11 |
hexa | fml | 16:41:25 |
hexa | I was probably looking at the wrapper on the unwrapped package | 16:41:37 |
@aloisw:julia0815.de | That's a position-dependent executable indeed. Weirdly in the wrapped one it's a shell script. | 16:45:29 |
emily | we gotta turn on PIE by default⦠| 16:56:32 |
emily | we're behind like every other distro on that | 16:56:38 |
emily | I forget what the last blocker was | 16:56:41 |
hexa | yep, 10 years or so | 16:56:44 |
@aloisw:julia0815.de | Go stuff is still broken I think as it had none of the fix PRs merged. | 17:31:40 |