Skip to content

Instantly share code, notes, and snippets.

98e2b90cf382 grsecurity doc: note that module autoload hardening is disabled
89a5f7de8364 brogue: disable fortify hardening to fix runtime error
67bec77c6825 brogue: fix crash by stackprotector hardening (#18888)
6607b9916837 haskell: port existing hardening overrides to use the new combinator
3ba99f83a7ac glibc: enable stackprotection hardening
8b96b391db09 gnome2.at_spi: disable hardening to fix build
9a0535248891 souffle: work around hardening bug on linux
71021a825dbe gtk-gnutella: disable bindnow/fortify/pic/relro hardening (#18195)
21282246208b linuxPackages.vhba: disable PIC hardening
57bd89e44791 fsg: disable format hardening
@Artturin
Artturin / trim-generations.sh
Created August 31, 2023 15:52 — forked from Bondrake/trim-generations.sh
NixOS script to keep 10 generations or 7 days, whichever is more (configurable, profile is selectable)
#!/usr/bin/env bash
set -euo pipefail
## Defaults
keepGensDef=10; keepDaysDef=7
keepGens=$keepGensDef; keepDays=$keepDaysDef
## Usage
usage () {
printf "Usage:\n\t trim-generations.sh (defaults are: Keep-Gens=$keepGensDef Keep-Days=$keepDaysDef Profile=user)\n\n"
@Artturin
Artturin / gist:08f126dde99721aadfc8b8617be33669
Last active June 15, 2023 21:56
`nix-diff "/nix/store/lbq2mq6ca0s5as410yam05p5qbs1h4a6-bash-5.2-p15-x86_64-unknown-linux-musl.drv" "/nix/store/hibnw3v9l9957pjxd9xjnm0frx5rzkl0-bash-5.2-p15-x86_64-unknown-linux-musl.drv"`
- /nix/store/lbq2mq6ca0s5as410yam05p5qbs1h4a6-bash-5.2-p15-x86_64-unknown-linux-musl.drv:{out}
+ /nix/store/hibnw3v9l9957pjxd9xjnm0frx5rzkl0-bash-5.2-p15-x86_64-unknown-linux-musl.drv:{out}
• The builders do not match
- /nix/store/xfb3ykw9r5hpayd05sr0cizwadzq1d8q-bash-5.2-p15/bin/bash
+ /nix/store/kq56vwq3zyvdjcbrpm757jdafcxbmn4r-bash-5.2-p15/bin/bash
• The input derivation named `bash-5.2-p15` differs
- /nix/store/5lz9p8xhf89kb1c1kk6jxrzskaiygnlh-bash-5.2-p15.drv:{out}
+ /nix/store/6x26rri7x12y3lzyf5f404r8nhhmb24a-bash-5.2-p15.drv:{out}
• The builders do not match
- /nix/store/dsn6vl7x1hbn1akgpxync19gpx2dzy8w-bootstrap-tools/bin/bash
- /nix/store/5lz9p8xhf89kb1c1kk6jxrzskaiygnlh-bash-5.2-p15.drv:{out}
+ /nix/store/1whiq03rsfrmch2ds3jhyqjaczfz97lb-bash-5.2-p15-x86_64-unknown-linux-gnu.drv:{out}
• The builders do not match
- /nix/store/dsn6vl7x1hbn1akgpxync19gpx2dzy8w-bootstrap-tools/bin/bash
+ /nix/store/xfb3ykw9r5hpayd05sr0cizwadzq1d8q-bash-5.2-p15/bin/bash
• The set of input source names do not match:
+ cross-file.conf
• The set of input derivation names do not match:
- bootstrap-stage4-gcc-wrapper-12.3.0
- bootstrap-stage4-stdenv-linux
@Artturin
Artturin / doedit.py
Created March 12, 2023 19:14
my old doedit script
#!/usr/bin/env nix-shell
#! nix-shell -i python3 -p python3Packages.colorama
# vim:ft=python
# by @Artturin
# Sudoedit but for doas
# packages needed(arch names): python-colorama opendoas(optional)
import os
import sys
import subprocess
@Artturin
Artturin / cross (build != host)
Created May 23, 2022 12:48
nix sandbox env-vars
declare -x AR="aarch64-unknown-linux-gnu-ar"
declare -x AS="aarch64-unknown-linux-gnu-as"
declare -x CC="aarch64-unknown-linux-gnu-gcc"
declare -x CMAKE_INCLUDE_PATH="/nix/store/q6wcj24cnw6a7pkap0chzqk0m9brvx43-libffi-aarch64-unknown-linux-gnu-3.4.2-dev/include:/nix/store/0db0p5db3578fhh3y843m8xrma79215y-pcre-aarch64-unknown-linux-gnu-8.45-dev/include:/nix/store/hkn7hnpxknfar9k1v6mj13q0x6x6vd1s-boehm-gc-aarch64-unknown-linux-gnu-8.0.6-dev/include:/nix/store/3hwcmj931qnif7zcv7hdln7mxv8907lp-json-c-aarch64-unknown-linux-gnu-0.15-dev/include"
declare -x CMAKE_LIBRARY_PATH="/nix/store/dhd5hcg45b5fpn282d9b672hfv72bg8x-libffi-aarch64-unknown-linux-gnu-3.4.2/lib:/nix/store/vk9bic8bqz98082mslwxzmsahp9jip2l-pcre-aarch64-unknown-linux-gnu-8.45/lib:/nix/store/22vya1vq9l7hq1p8nh5rl1ipm9zkjs57-boehm-gc-aarch64-unknown-linux-gnu-8.0.6/lib:/nix/store/ixpfzkxnxp6q3fbjc8br8kfbk1drl235-json-c-aarch64-unknown-linux-gnu-0.15/lib"
declare -x CMAKE_PREFIX_PATH="/nix/store/q6wcj24cnw6a7pkap0chzqk0m9brvx43-libffi-aarch64-unknown-lin
Первый канал
1up.com
20min
220.ro
23video
24video
3Q SDN
3sat
4tube
56.com