github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-21 10:51:29 +00:00
Code Issues Projects Releases Wiki Activity

Build non-static binaries with PIE buildmode

Browse Source 
We now add the `-buildmode pie` flag when building non-static binaries,
which enables the ASLR security mechanism.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
Sascha Grunert 2021-05-26 09:45:44 +02:00
parent 6db6c80656
commit 39d9e98a6f
No known key found for this signature in database
GPG Key ID: 09D97D153EF94D93
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
hack/lib/golang.sh
View File

@ -412,6 +412,10 @@ kube::golang::set_platform_envs() {
export CGO_ENABLED=1 export CGO_ENABLED=1
export CC=${KUBE_LINUX_AMD64_CC:-x86_64-linux-gnu-gcc} export CC=${KUBE_LINUX_AMD64_CC:-x86_64-linux-gnu-gcc}
;; ;;
"linux/386")
export CGO_ENABLED=1
export CC=${KUBE_LINUX_386_CC:-i686-linux-gnu-gcc}
;;
"linux/arm") "linux/arm")
export CGO_ENABLED=1 export CGO_ENABLED=1
export CC=${KUBE_LINUX_ARM_CC:-arm-linux-gnueabihf-gcc} export CC=${KUBE_LINUX_ARM_CC:-arm-linux-gnueabihf-gcc}
@ -721,6 +725,7 @@ kube::golang::build_binaries_for_platform() {
-gcflags "${gogcflags:-}" -gcflags "${gogcflags:-}"
-asmflags "${goasmflags:-}" -asmflags "${goasmflags:-}"
-ldflags "${goldflags:-}" -ldflags "${goldflags:-}"
-buildmode pie
-tags "${gotags:-}" -tags "${gotags:-}"
) )
kube::golang::build_some_binaries "${nonstatics[@]}" kube::golang::build_some_binaries "${nonstatics[@]}"