scottk/kubernetes
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/kubernetes.git synced 2025-11-03 19:58:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Build non-static binaries with PIE buildmode

Browse Source 
We now add the `-buildmode pie` flag when building non-static binaries,
which enables the ASLR security mechanism.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
Sascha Grunert
2021-05-26 09:45:44 +02:00
parent 6db6c80656
commit 39d9e98a6f
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hack/lib/golang.sh
View File

@@ -412,6 +412,10 @@ kube::golang::set_platform_envs() {
export CGO_ENABLED=1 export CGO_ENABLED=1
export CC=${KUBE_LINUX_AMD64_CC:-x86_64-linux-gnu-gcc} export CC=${KUBE_LINUX_AMD64_CC:-x86_64-linux-gnu-gcc}
;; ;;
"linux/386")
export CGO_ENABLED=1
export CC=${KUBE_LINUX_386_CC:-i686-linux-gnu-gcc}
;;
"linux/arm") "linux/arm")
export CGO_ENABLED=1 export CGO_ENABLED=1
export CC=${KUBE_LINUX_ARM_CC:-arm-linux-gnueabihf-gcc} export CC=${KUBE_LINUX_ARM_CC:-arm-linux-gnueabihf-gcc}
@@ -721,6 +725,7 @@ kube::golang::build_binaries_for_platform() {
-gcflags "${gogcflags:-}" -gcflags "${gogcflags:-}"
-asmflags "${goasmflags:-}" -asmflags "${goasmflags:-}"
-ldflags "${goldflags:-}" -ldflags "${goldflags:-}"
-buildmode pie
-tags "${gotags:-}" -tags "${gotags:-}"
) )
kube::golang::build_some_binaries "${nonstatics[@]}" kube::golang::build_some_binaries "${nonstatics[@]}"