nixpkgs/nixos/modules/system
Winter b2d04c1155 nixos/luksroot: build pbkdf2-sha512 binary in its own derivation
Since this feature's inception, we've compiled a binary that uses OpenSSL
to perform PBKDF-SHA512 during the extra-utils build. In addition to this
being inefficient, it broke as of 6ea1a2a1be,
which switched the extra-utils derivation to use stdenvNoCC.

For now, I think the path of least resistence is to move the pbkdf-sha512
build to its own derivation, to fix the breakage, as well as improving
the efficiency of the extra-utils build.

(I do believe that at some point, we should revisit this binary -- perhaps
rewriting it -- as Clang even just on its default settings emits more
warnings than you'd want to see in a security-related codebase when
compiling it.)
2023-02-07 23:06:11 -05:00
..
activation nixos/version: add config.system.nixos.distroName and config.system.nixos.distroId 2023-01-14 16:19:06 -05:00
boot nixos/luksroot: build pbkdf2-sha512 binary in its own derivation 2023-02-07 23:06:11 -05:00
etc nixos/etc: skip resolv.conf in nixos-enter chroot 2023-01-02 01:41:29 +01:00
build.nix treewide: automatically md-convert option descriptions 2022-07-30 15:16:34 +02:00