<samueldr> in the off-chance sopine/pine a64-lts support interests someone here: https://github.com/NixOS/nixpkgs/pull/32553
<andi-> Mhmm, hardening disabled. I wonder what it would take to make that compatible with arm. Or even what options there are on ARM.
<Dezgeg> compiler hardening needs special support from the libc so it practically never works on those low-level boot things
<samueldr> I've just tested without disabling it (and was writing a comment)
<samueldr> looks like only stackprotector stops the build
<samueldr> now, I have no test suite other than "it boots!"
<samueldr> but it did boot
<samueldr> (possibly through adding no feature to the actual built output)
<Dezgeg> yeah
<Dezgeg> "relro", "bindnow" don't affect anything since there is no dynamic linking, "format" just turns an warning to an error, "pic" is probably already there as u-boot is generally relocatable to any position in RAM
<samueldr> (and I commented)
<Dezgeg> "fortify" needs glibc support and "stackprotector" most likely as well (I presume it fails to build due to a missing symbol)
<samueldr> indeed, stackprotector failure came from missing symbols
<samueldr> thanks Dezgeg for the other merge :D
<andi-> Dezgeg: that low-level thing was what I thought after writing the above.. wanted to check when I was back in the office but never did... It probably is alright to disable it (in general) when building stuff like firmware
Dezgeg has quit [(Ping timeout: 264 seconds)]
Dezgeg has joined joined #nixos-aarch64
Dezgeg has quit [(Ping timeout: 255 seconds)]
Dezgeg has joined joined #nixos-aarch64
Dezgeg has quit [(Ping timeout: 250 seconds)]
Dezgeg has joined joined #nixos-aarch64
Dezgeg has quit [(Ping timeout: 240 seconds)]
Dezgeg has joined joined #nixos-aarch64
Dezgeg has quit [(Ping timeout: 246 seconds)]
Dezgeg has joined joined #nixos-aarch64