aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEelco Dolstra <edolstra@gmail.com>2022-11-23 11:16:09 +0100
committerEelco Dolstra <edolstra@gmail.com>2022-11-23 11:16:09 +0100
commit6292d5616e19ae2b2e1e86d4494417b0e0d264d8 (patch)
treed9764227504bd5f4b1eec2aaa3d9d658e59b775f
parent3d23b9d0324ff415af9e5f35568aca98c04a90cc (diff)
parent05d0892443bbe92a6b6a1ee7b1d37ea05782d918 (diff)
Merge remote-tracking branch 'origin/master' into auto-uid-allocation
-rw-r--r--doc/manual/src/language/index.md2
-rw-r--r--src/libstore/build/local-derivation-goal.cc16
2 files changed, 17 insertions, 1 deletions
diff --git a/doc/manual/src/language/index.md b/doc/manual/src/language/index.md
index f9e9b9781..db34fde75 100644
--- a/doc/manual/src/language/index.md
+++ b/doc/manual/src/language/index.md
@@ -93,7 +93,7 @@ This is an incomplete overview of language features, by example.
`"hello ${ { a = "world" }.a }"`
- `"1 2 ${3}"`
+ `"1 2 ${toString 3}"`
`"${pkgs.bash}/bin/sh"`
diff --git a/src/libstore/build/local-derivation-goal.cc b/src/libstore/build/local-derivation-goal.cc
index 232440f74..d44694890 100644
--- a/src/libstore/build/local-derivation-goal.cc
+++ b/src/libstore/build/local-derivation-goal.cc
@@ -1637,6 +1637,22 @@ void setupSeccomp()
seccomp_arch_add(ctx, SCMP_ARCH_ARM) != 0)
printError("unable to add ARM seccomp architecture; this may result in spurious build failures if running 32-bit ARM processes");
+ if (nativeSystem == "mips64-linux" &&
+ seccomp_arch_add(ctx, SCMP_ARCH_MIPS) != 0)
+ printError("unable to add mips seccomp architecture");
+
+ if (nativeSystem == "mips64-linux" &&
+ seccomp_arch_add(ctx, SCMP_ARCH_MIPS64N32) != 0)
+ printError("unable to add mips64-*abin32 seccomp architecture");
+
+ if (nativeSystem == "mips64el-linux" &&
+ seccomp_arch_add(ctx, SCMP_ARCH_MIPSEL) != 0)
+ printError("unable to add mipsel seccomp architecture");
+
+ if (nativeSystem == "mips64el-linux" &&
+ seccomp_arch_add(ctx, SCMP_ARCH_MIPSEL64N32) != 0)
+ printError("unable to add mips64el-*abin32 seccomp architecture");
+
/* Prevent builders from creating setuid/setgid binaries. */
for (int perm : { S_ISUID, S_ISGID }) {
if (seccomp_rule_add(ctx, SCMP_ACT_ERRNO(EPERM), SCMP_SYS(chmod), 1,