···67## `buildPhase` {#just-hook-buildPhase}
89-This phase attempts to invoke `just` with [the default recipe](https://just.systems/man/en/chapter_23.html).
1011[]{#just-hook-dontUseJustBuild} This behavior can be disabled by setting `dontUseJustBuild` to `true`.
12
···67## `buildPhase` {#just-hook-buildPhase}
89+This phase attempts to invoke `just` with [the default recipe](https://just.systems/man/en/the-default-recipe.html).
1011[]{#just-hook-dontUseJustBuild} This behavior can be disabled by setting `dontUseJustBuild` to `true`.
12
···160 }
161 });
162 '';
00163164 # We don't use the existing gobgp NixOS module and package, because the gobgp
165 # version might not be compatible with fastnetmon. Also, the service name
···160 }
161 });
162 '';
163+ # dbus/polkit with DynamicUser is broken with the default implementation
164+ services.dbus.implementation = "broker";
165166 # We don't use the existing gobgp NixOS module and package, because the gobgp
167 # version might not be compatible with fastnetmon. Also, the service name
+2-2
nixos/modules/system/boot/stage-1.nix
···405 ${lib.optionalString (config.boot.initrd.secrets == {})
406 "exit 0"}
407408- export PATH=${pkgs.coreutils}/bin:${pkgs.libarchive}/bin:${pkgs.gzip}/bin:${pkgs.findutils}/bin
409410 function cleanup {
411 if [ -n "$tmp" -a -d "$tmp" ]; then
···426 }
427428 # mindepth 1 so that we don't change the mode of /
429- (cd "$tmp" && find . -mindepth 1 | xargs touch -amt 197001010000 && find . -mindepth 1 -print0 | sort -z | bsdtar --uid 0 --gid 0 -cnf - -T - | bsdtar --null -cf - --format=newc @-) | \
430 ${compressorExe} ${lib.escapeShellArgs initialRamdisk.compressorArgs} >> "$1"
431 '';
432
···405 ${lib.optionalString (config.boot.initrd.secrets == {})
406 "exit 0"}
407408+ export PATH=${pkgs.coreutils}/bin:${pkgs.cpio}/bin:${pkgs.gzip}/bin:${pkgs.findutils}/bin
409410 function cleanup {
411 if [ -n "$tmp" -a -d "$tmp" ]; then
···426 }
427428 # mindepth 1 so that we don't change the mode of /
429+ (cd "$tmp" && find . -mindepth 1 | xargs touch -amt 197001010000 && find . -mindepth 1 -print0 | sort -z | cpio --quiet -o -H newc -R +0:+0 --reproducible --null) | \
430 ${compressorExe} ${lib.escapeShellArgs initialRamdisk.compressorArgs} >> "$1"
431 '';
432
···252 # We also need enable_widevine_cdm_component to be false. Unfortunately it isn't exposed as gn
253 # flag (declare_args) so we simply hardcode it to false.
254 ./patches/widevine-disable-auto-download-allow-bundle.patch
255- ] ++ lib.optionals (versionRange "125" "126") [
256- # Fix building M125 with ninja 1.12. Not needed for M126+.
257- # https://issues.chromium.org/issues/336911498
258- # https://chromium-review.googlesource.com/c/chromium/src/+/5487538
259- (githubPatch {
260- commit = "a976cb05b4024b7a6452d1541378d718cdfe33e6";
261- hash = "sha256-K2PSeJAvhGH2/Yp63/4mJ85NyqXqDDkMWY+ptrpgmOI=";
262- })
263 ] ++ lib.optionals (versionRange "127" "128") [
264 # Fix missing chrome/browser/ui/webui_name_variants.h dependency
265 # and ninja 1.12 compat in M127.
···293 # Chromium reads initial_preferences from its own executable directory
294 # This patch modifies it to read /etc/chromium/initial_preferences
295 ./patches/chromium-initial-prefs.patch
296- ] ++ lib.optionals (versionRange "120" "126") [
297- # Partial revert to build M120+ with LLVM 17:
298 # https://github.com/chromium/chromium/commit/02b6456643700771597c00741937e22068b0f956
299 # https://github.com/chromium/chromium/commit/69736ffe943ff996d4a88d15eb30103a8c854e29
300- ./patches/chromium-120-llvm-17.patch
301- ] ++ lib.optionals (chromiumVersionAtLeast "126") [
302- # Rebased variant of patch right above to build M126+ with LLVM 17.
303 # staging-next will bump LLVM to 18, so we will be able to drop this soon.
304 ./patches/chromium-126-llvm-17.patch
305- ] ++ lib.optionals (versionRange "121" "126") [
306- # M121 is the first version to require the new rust toolchain.
307 # Partial revert of https://github.com/chromium/chromium/commit/3687976b0c6d36cf4157419a24a39f6770098d61
308 # allowing us to use our rustc and our clang.
309- ./patches/chromium-121-rust.patch
310- ] ++ lib.optionals (versionRange "126" "129") [
311 # Rebased variant of patch right above to build M126+ with our rust and our clang.
312 ./patches/chromium-126-rust.patch
313 ] ++ lib.optionals (chromiumVersionAtLeast "129") [
···252 # We also need enable_widevine_cdm_component to be false. Unfortunately it isn't exposed as gn
253 # flag (declare_args) so we simply hardcode it to false.
254 ./patches/widevine-disable-auto-download-allow-bundle.patch
00000000255 ] ++ lib.optionals (versionRange "127" "128") [
256 # Fix missing chrome/browser/ui/webui_name_variants.h dependency
257 # and ninja 1.12 compat in M127.
···285 # Chromium reads initial_preferences from its own executable directory
286 # This patch modifies it to read /etc/chromium/initial_preferences
287 ./patches/chromium-initial-prefs.patch
00288 # https://github.com/chromium/chromium/commit/02b6456643700771597c00741937e22068b0f956
289 # https://github.com/chromium/chromium/commit/69736ffe943ff996d4a88d15eb30103a8c854e29
290+ # Rebased variant of patch to build M126+ with LLVM 17.
00291 # staging-next will bump LLVM to 18, so we will be able to drop this soon.
292 ./patches/chromium-126-llvm-17.patch
293+ ] ++ lib.optionals (versionRange "126" "129") [
0294 # Partial revert of https://github.com/chromium/chromium/commit/3687976b0c6d36cf4157419a24a39f6770098d61
295 # allowing us to use our rustc and our clang.
00296 # Rebased variant of patch right above to build M126+ with our rust and our clang.
297 ./patches/chromium-126-rust.patch
298 ] ++ lib.optionals (chromiumVersionAtLeast "129") [
···1---- a/build/config/compiler/BUILD.gn
2-+++ b/build/config/compiler/BUILD.gn
3-@@ -1629,16 +1629,6 @@
4- configs += [ "//build/config/c++:runtime_library" ]
5- }
6-7-- # Rust and C++ both provide intrinsics for LLVM to call for math operations. We
8-- # want to use the C++ intrinsics, not the ones in the Rust compiler_builtins
9-- # library. The Rust symbols are marked as weak, so that they can be replaced by
10-- # the C++ symbols. This config ensures the C++ symbols exist and are strong in
11-- # order to cause that replacement to occur by explicitly linking in clang's
12-- # compiler-rt library.
13-- if (is_clang && toolchain_has_rust) {
14-- configs += [ "//build/config/clang:compiler_builtins" ]
15-- }
16--
17- # TODO(crbug.com/830987): Come up with a better name for is POSIX + Fuchsia
18- # configuration.
19- if (is_posix || is_fuchsia) {
···10 src
11 ;
1213- sourceRoot = "${mullvad.src.name}/wireguard/libwg";
14-15- vendorHash = "sha256-gaU3na3sjzM6lvmsGRkuGtV2AHvkl6IgzmyGx3R5ZpM=";
1617 # XXX: hack to make the ar archive go to the correct place
18 # This is necessary because passing `-o ...` to `ldflags` does not work
19 # (this doesn't get communicated everywhere in the chain, apparently, so
20 # `go` complains that it can't find an `a.out` file).
21 GOBIN = "${placeholder "out"}/lib";
22- ldflags = [ "-s" "-w" "-buildmode=c-archive" ];
2324- patches = [
25- ];
02627 postInstall = ''
28 mv $out/lib/libwg{,.a}
···3031 meta = with lib; {
32 description = "Tiny wrapper around wireguard-go";
33- homepage = "https://github.com/mullvad/mullvadvpn-app/tree/main/wireguard/libwg";
34 license = licenses.gpl3Only;
35 maintainers = with maintainers; [ cole-h ];
36 };
···10 src
11 ;
1213+ modRoot = "wireguard-go-rs/libwg";
14+ proxyVendor = true;
15+ vendorHash = "sha256-uyAzY1hoCtS7da3wtjxTGx5wBb9c9m749TzihVr94rc=";
1617 # XXX: hack to make the ar archive go to the correct place
18 # This is necessary because passing `-o ...` to `ldflags` does not work
19 # (this doesn't get communicated everywhere in the chain, apparently, so
20 # `go` complains that it can't find an `a.out` file).
21 GOBIN = "${placeholder "out"}/lib";
02223+ subPackages = [ "." ];
24+ ldflags = [ "-s" "-w" "-buildmode=c-archive" ];
25+ tags = [ "daita" ];
2627 postInstall = ''
28 mv $out/lib/libwg{,.a}
···3031 meta = with lib; {
32 description = "Tiny wrapper around wireguard-go";
33+ homepage = "https://github.com/mullvad/mullvadvpn-app/tree/main/wireguard-go-rs/libwg";
34 license = licenses.gpl3Only;
35 maintainers = with maintainers; [ cole-h ];
36 };
···1-diff --git a/src/pstoeditoptions.h b/src/pstoeditoptions.h
2-index 7846883..0fb6a6f 100755
3---- a/src/pstoeditoptions.h
4-+++ b/src/pstoeditoptions.h
5-@@ -453,7 +453,7 @@ private:
6- "Later versions of Ghostscript will probably support -dDELAYBIND again. "
7- "But also in that case the security risk remains. So be careful with what "
8- "files you process with pstoedit and Ghostscript.",
9-- false), //
10-+ true), //
11- #endif
12- pagetoextract (true, "-page","page number",g_t,"extract a specific page: 0 means all pages",
13- "Select a single page from a multi-page PostScript or PDF file.",