nexoniarz/SchOS
nexoniarz/SchOS
Watch
1
0
Fork
You've already forked SchOS
 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

shell.nix: no hardening flags

Browse source 
Nix's compiler wrapper adds -fPIC and friends to every compile. The
kernel is freestanding at fixed addresses, and clang refuses -fPIC for
the UEFI loader's PE target outright, so a plain make in nix-shell
stopped at BOOTX64.EFI.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S1giNvrHTrPMPw7V6x1kQ4
This commit is contained in:
Nexoniarz 2026-10-24 15:28:32 +02:00
commit 0f7bceeb50
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
shell.nix
View file

@ -16,6 +16,14 @@
pkgs.mkShell { pkgs.mkShell {
name = "schos"; name = "schos";
# Off, all of it. Nix's compiler wrapper adds -fPIC, -fstack-protector,
# -D_FORTIFY_SOURCE and friends to every compile, which is right for Linux
# programs and wrong for everything here: the kernel is freestanding and
# linked at fixed addresses, and the UEFI loader targets PE/COFF, where clang
# refuses -fPIC outright ("unsupported option '-fPIC' for target
# 'x86_64-unknown-windows-msvc'") and `make` stops at BOOTX64.EFI.
hardeningDisable = [ "all" ];
nativeBuildInputs = with pkgs; [ nativeBuildInputs = with pkgs; [
# The cross-compiler, and the reason this file exists. clang targets # The cross-compiler, and the reason this file exists. clang targets
# bare-metal ELF, 16-bit code and PE/COFF from one install; lld-link is what # bare-metal ELF, 16-bit code and PE/COFF from one install; lld-link is what