docker: add libseccomp to build

This commit is contained in:
Heitham Omar 2017-07-22 19:27:44 +01:00 committed by Robin Gloster
parent 05c9a95d0e
commit 6dcc77bdb8

View File

@ -2,7 +2,7 @@
, go-md2man, go, containerd, runc, docker-proxy, tini, libtool , go-md2man, go, containerd, runc, docker-proxy, tini, libtool
, sqlite, iproute, bridge-utils, devicemapper, systemd , sqlite, iproute, bridge-utils, devicemapper, systemd
, btrfs-progs, iptables, e2fsprogs, xz, utillinux, xfsprogs , btrfs-progs, iptables, e2fsprogs, xz, utillinux, xfsprogs
, procps , procps, libseccomp
}: }:
with lib; with lib;
@ -63,9 +63,12 @@ rec {
]; ];
}); });
# Optimizations break compilation of libseccomp c bindings
hardeningDisable = [ "fortify" ];
buildInputs = [ buildInputs = [
makeWrapper removeReferencesTo pkgconfig go-md2man go makeWrapper removeReferencesTo pkgconfig go-md2man go
sqlite devicemapper btrfs-progs systemd libtool sqlite devicemapper btrfs-progs systemd libtool libseccomp
]; ];
dontStrip = true; dontStrip = true;
@ -73,7 +76,8 @@ rec {
DOCKER_BUILDTAGS = [] DOCKER_BUILDTAGS = []
++ optional (systemd != null) [ "journald" ] ++ optional (systemd != null) [ "journald" ]
++ optional (btrfs-progs == null) "exclude_graphdriver_btrfs" ++ optional (btrfs-progs == null) "exclude_graphdriver_btrfs"
++ optional (devicemapper == null) "exclude_graphdriver_devicemapper"; ++ optional (devicemapper == null) "exclude_graphdriver_devicemapper"
++ optional (libseccomp != null) "seccomp";
buildPhase = '' buildPhase = ''
# build engine # build engine