From 256cbd88c53d15884f3519ce75890c7bd1626cb2 Mon Sep 17 00:00:00 2001
From: nsfisis <nsfisis@gmail.com>
Date: Wed, 3 Sep 2025 20:32:23 +0900
Subject: build: disable hardening of Nix GCC

---
 flake.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'flake.nix')

diff --git a/flake.nix b/flake.nix
index 385fcc1..5952538 100644
--- a/flake.nix
+++ b/flake.nix
@@ -36,6 +36,10 @@
           pname = "ducc";
           version = "0.1.0";
           src = ./.;
+          # Disable some kinds of hardening to disable GCC optimization.
+          # cf. https://nixos.wiki/wiki/C#Hardening_flags
+          # TODO: provide release build?
+          hardeningDisable = [ "fortify" ];
           installPhase = ''
             mkdir -p $out/bin
             cp build/ducc $out/bin
@@ -46,6 +50,9 @@
           packages = [
             pkgs.just
           ];
+          # Disable some kinds of hardening to disable GCC optimization.
+          # cf. https://nixos.wiki/wiki/C#Hardening_flags
+          hardeningDisable = [ "fortify" ];
         };
 
         formatter = treefmt.config.build.wrapper;
-- 
cgit v1.2.3-70-g09d2