···99 graphene-hardened = {
1010 libPath = "${pkgs.graphene-hardened-malloc}/lib/libhardened_malloc.so";
1111 description = ''
1212- An allocator designed to mitigate memory corruption attacks, such as
1313- those caused by use-after-free bugs.
1212+ Hardened memory allocator coming from GrapheneOS project.
1313+ The default configuration template has all normal optional security
1414+ features enabled and is quite aggressive in terms of sacrificing
1515+ performance and memory usage for security.
1616+ '';
1717+ };
1818+1919+ graphene-hardened-light = {
2020+ libPath = "${pkgs.graphene-hardened-malloc}/lib/libhardened_malloc-light.so";
2121+ description = ''
2222+ Hardened memory allocator coming from GrapheneOS project.
2323+ The light configuration template disables the slab quarantines,
2424+ write after free check, slot randomization and raises the guard
2525+ slab interval from 1 to 8 but leaves zero-on-free and slab canaries enabled.
2626+ The light configuration has solid performance and memory usage while still
2727+ being far more secure than mainstream allocators with much better security
2828+ properties.
1429 '';
1530 };
1631
···11+# etcd
22+33+44+## Upstream release cadence and support
55+66+The etcd project maintains release branches for the current version and previous release.
77+88+For example, when v3.5 is the current version, v3.4 is supported. When v3.6 is released, v3.4 goes out of support.
99+1010+Reference: https://etcd.io/docs/v3.5/op-guide/versioning/
1111+1212+1313+## NixOS release and etcd version upkeep
1414+1515+Every major/minor version bump of `etcd` top-level alias in nixpkgs requires a notification in the next NixOS release notes scheduling the removal of the now unsupported etcd version.
1616+1717+After every NixOS release, the unsupported etcd versions should be removed by etcd maintainers.
1818+1919+2020+## User guidelines on etcd upgrades
2121+2222+Before upgrading a NixOS release, certify to upgrade etcd to the latest version in the current used release.
2323+2424+Manual steps might be required for the upgrade.
2525+2626+NixOS release notes might have instructions on how to proceed on upgrades.