build.sh

apt-get update && apt-get install -y --no-install-recommends \
  wget

wget -O - http://apt.llvm.org/llvm-snapshot.gpg.key|apt-key add -
  
echo "deb http://apt.llvm.org/jessie/ llvm-toolchain-jessie-4.0 main
deb-src http://apt.llvm.org/jessie/ llvm-toolchain-jessie-4.0 main" >> /etc/apt/sources.list

apt-get update && apt-get install -y --no-install-recommends \
  clang-4.0 \
  lldb-4.0 \
  lld-4.0 \
  libc6-dev \
  liblua5.3-dev \
  libpcre3-dev \
  libssl-dev \
  make

export HAPROXY_MAJOR=1.7
export HAPROXY_VERSION=1.7.2
wget -O haproxy.tar.gz "http://www.haproxy.org/download/${HAPROXY_MAJOR}/src/haproxy-${HAPROXY_VERSION}.tar.gz"

sha256sum === f95b40f52a4d61feaae363c9b15bf411c16fe8f61fddb297c7afcca0072e4b2f

wget -O libressl.tar.gz http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.5.1.tar.gz

sha256sum === f71ae0a824b78fb1a47ffa23c9c26e9d96c5c9b29234eacedce6b4c7740287cd

make TARGET=linux2628 \
  USE_LUA=1 LUA_INC=/usr/include/lua5.3 \
  USE_OPENSSL=1 \
  USE_PCRE=1 PCREDIR= \
  USE_ZLIB=1 \
  CC="clang-4.0" \
  CFLAGS="-w -fPIE -DPIE -D_FORTIFY_SOURCE=2 -O2 -fstack-protector -fvisibility=hidden -flto -fsanitize=cfi -fuse-ld=gold" \
  LDFLAGS="-fuse-ld=gold -pie -z relro -z now -flto -v"

links.md

https://wiki.debian.org/Hardening http://blog.quarkslab.com/clang-hardening-cheat-sheet.html https://github.com/docker-library/haproxy/blob/20816337017096e325c64627e58141e7c9628004/1.7/Dockerfile https://gist.github.com/codingtony/24fab751202dff4d547c