···3333 # netns tests need bwrap+userns the build sandbox lacks.
3434 doCheck = false;
35353636+ # The repo's .cargo/config.toml builds x86_64-linux for x86-64-v3 (AVX2),
3737+ # which dies with SIGILL on pre-Haswell CPUs (icarus, shodan: Ivy Bridge).
3838+ # An env RUSTFLAGS replaces those target rustflags (cargo doesn't merge
3939+ # them): keep the frame pointers, drop the CPU floor. Same as upstream's
4040+ # nix/tincd.nix baselineCpu; the AEAD is OpenSSL with runtime dispatch.
4141+ env.RUSTFLAGS = "-C force-frame-pointers=yes";
4242+3643 # tinc-crypto's ChaPoly backend links openssl-sys against system openssl.
3744 nativeBuildInputs = [
3845 installShellFiles