Merge pull request #45 from movementlabsxyz/sebtomba/fortify-source

fix: Intel nix build issues with _FORTIFY_SOURCE

Author: l-monninger

.cargo/config.toml

@@ -98,5 +98,3 @@ rustflags = [
 check-revoke = false
 
 [env]
-CFLAGS = "-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=0"
-CXXFLAGS = "-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=0"

.github/workflows/nix-command.yml

@@ -21,16 +21,21 @@ jobs:
   run-command:
     runs-on: ubuntu-latest
     steps:
+      - name: Free Disk Space (Ubuntu)
+        uses: jlumbroso/free-disk-space@main
+        with:
+          tool-cache: true
+
       - uses: actions/checkout@v4
-      
+
       - name: Install Nix
         uses: DeterminateSystems/nix-installer-action@main
-        
+
       - name: Enable Nix Flakes
         run: |
           mkdir -p ~/.config/nix
           echo "experimental-features = nix-command flakes" >> ~/.config/nix/nix.conf
-          
+
       - name: Run Command in Nix Shell
         run: |
           echo "Running command: ${{ inputs.command }}"

.github/workflows/tests.yml

@@ -12,7 +12,7 @@ jobs:
           # cargo checks and tests
           - cargo check --all-targets
           - cargo test
-          
+
     with:
       command: ${{ matrix.command }}
       nix_flake_path: '.' 

flake.nix

@@ -62,7 +62,6 @@
           bzip2
           elfutils
           jemalloc
-          glibc
         ];
 
         testDependencies = with pkgs; [
@@ -91,7 +90,9 @@
           docker-build = pkgs.mkShell {
             ROCKSDB = pkgs.rocksdb;
             OPENSSL_DEV = pkgs.openssl.dev;
-         
+
+            hardeningDisable = ["fortify"];
+
             buildInputs = with pkgs; [
               # rust toolchain
               (toolchain pkgs)
@@ -101,6 +102,7 @@
 
             shellHook = ''
               #!/usr/bin/env ${pkgs.bash}
+
               # Export linker flags if on Darwin (macOS)
               if [[ "$(${pkgs.stdenv.hostPlatform.system})" =~ "darwin" ]]; then
                 export LDFLAGS="-L/opt/homebrew/opt/zlib/lib"