### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [June 22, 2023, 7:33am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/1 "2023-06-22T07:33:47Z")
Hello all,
I need to build some binaries, in nix, using an older `glibc` version (`glibc` 2.17). The approach I’ve taken is to create a local copy of the `nixpkgs` repo, and (at least, to get me off the ground) to replace the default `glibc` with `glibc` 2.17.
After some patching and trial and error, I’ve got things to the stage where I can do `nix build .#glibc` (I’m in the directory of my local nixpkgs) and see that `glibc` 2.17 is being built, and, therefore, the default `stdenv` uses glibc 2.17.
This unfortunately doesn’t fully solve my problem, because it seems that some of the utilities I need are still being built with glibc 2.27 - for example, if I try to build a test package using this `stdenv`, I am told:
```auto
/nix/store/d18ll2slr04w93pkzhn96748ssadldmj-binutils-patchelfed-ld-2.39/bin/ld: /nix/store/iqbzava2rqy6m0lq1j2mld74ll49j52b-glibc-2.17-224/lib/libc.so.6: version `GLIBC_2.27' not found (required by /nix/store/d18ll2slr04w93pkzhn96748ssadldmj-binutils-patchelfed-ld-2.39/bin/ld)
```
If I look at the bootstrap process that stdenv uses - in `pkgs/stdenv/linux/default.nix` of the current `nixpkgs` - it uses a tarball to kick off the build process:
```auto
bootstrapTools = import {
url = "http://tarballs.nixos.org/stdenv-linux/x86_64/c5aabb0d603e2c1ea05f5a93b3be82437f5ebf31/bootstrap-tools.tar.xz";
sha256 = "a5ce9c155ed09397614646c9717fc7cd94b1023d7b76b618d409e4fefd6e9d39";
};
```
and this tarball contains glibc 2.27, amongst other related files:
```auto
include-glibc/bits/libc-header-start.h
include-glibc/gnu/libc-version.h
include-glibc/linux/libc-compat.h
lib/libc-2.27.so
lib/libc.so
lib/libc.so.6
```
So I assume that this glibc is being injected early into the bootstrap process, and that some tools that are required for the bootstrap process - `automake`, `patchelf` etc - are built against this `glibc`, rather than my `glibc 2.17`, which gets inserted later into the bootstrap process.
Would anyone have a rough idea what might be the best way to work around this? It seems to me that I could:
- replace the libc-related binaries in the `bootstrap-tools` tarball with binaries built from glibc 2.17, or
- attempt to tweak the bootstrap process so that my glibc 2.17 gets used earlier on, or
- attempt to rebuild the affected tools (`patchelf` and whatever else) with glibc 2.17 further downstream
or some mysterious fourth thing I’ve not considered.
Thanks in advance, and also after the event
Chris
---
### Author:  [@7c6f434c](https://discourse.nixos.org/u/7c6f434c)
#### Post date: [June 22, 2023, 11:17am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/2 "2023-06-22T11:17:43Z")
Stupid question: how much work would it be to fork 2.17-era Nixpkgs and add whatever you need there?
(You can install stuff from multiple checkouts from Nixpkgs into the same profile, if necessary)
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [June 22, 2023, 12:38pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/3 "2023-06-22T12:38:54Z")
Not a stupid question, that was the first thing I tried. But nixpkgs from that era is lacking a lot of modern syntax (ie, overlays and overrideAttrs), as well as a modern GCC , so it turned out not to be practical.
---
### Author:  [@7c6f434c](https://discourse.nixos.org/u/7c6f434c)
#### Post date: [June 22, 2023, 1:18pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/4 "2023-06-22T13:18:35Z")
Hmm, and if you try to port just the bootstrap tools and glibc from there?
(I just hope the glibc you need and the gcc you need will play nicely together, which is also not 100% obvious…)
---
### Author:  [@Sandro](https://discourse.nixos.org/u/Sandro)
#### Post date: [June 22, 2023, 10:42pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/5 "2023-06-22T22:42:41Z")
if you are going to replace the bootstrap glibc with a very old version you will encounter compile errors. You probably want to rebuild the relevant tools against that older glibc version but they are probably not 100% isolated and dirty references will happen which could be hard to cleanup.
---
### Author:  [@kotborealis](https://discourse.nixos.org/u/kotborealis)
#### Post date: [January 3, 2024, 11:36am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/6 "2024-01-03T11:36:21Z")
@harris-chris Sorry to bother you half-a-year later, but did you have any success with this? I have exactly the same task, so i was hoping you could share your results 🙂
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [January 3, 2024, 11:22pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/7 "2024-01-03T23:22:13Z")
Hello, I didn’t find a generalisable solution to this, but I did manage to set up a few build environments, using older gccs and glibcs. What version are you looking for? I may be able to help.
---
### Author:  [@kotborealis](https://discourse.nixos.org/u/kotborealis)
#### Post date: [January 5, 2024, 9:00am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/8 "2024-01-05T09:00:00Z")
I’ve actually already found your github repo ([harris-chris/nix-development-configs/cpp-specific-toolchain](https://github.com/harris-chris/nix-development-configs/tree/main/cpp-specific-toolchain) and it actually almost works for my case, thank you so much.
But, I’ve encountered another problem: my goal is to use older glibc to compile a whole tree of C projects, a piece of software and _all_ of it’s dependencies. I’ve managed to apply custom stdenv to the nixpkgs tree, but it messes with the bootstrap process and outright refuses to work.
To be specific, I’m trying to compile Qemu to be as portable as possible, so ideally I need to recompile all of it’s dependencies - SDL2, x11, alsa, pixman, so on.
I think I might be able to pull it off by applying stdenv overlay to a specific list of packages, not a whole nixpkgs tree. But, right now, I could not get it to work as I have zero experience with nix and the learning process is a bit painfull 🙂
---
### Author:  [@7c6f434c](https://discourse.nixos.org/u/7c6f434c)
#### Post date: [January 5, 2024, 12:42pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/9 "2024-01-05T12:42:23Z")
> [@kotborealis](#):
>
> I’ve managed to apply custom stdenv to the nixpkgs tree, but it messes with the bootstrap process and outright refuses to work.
Is the problem arising via «gcc as we build it needs a fresher glibc» mechanism?
> [@kotborealis](#):
>
> To be specific, I’m trying to compile Qemu to be as portable as possible, so ideally I need to recompile all of it’s dependencies - SDL2, x11, alsa, pixman, so on.
And which of those things you need to be fresher than the Nixpkgs revision contemporary with the glibc version you want?
---
### Author:  [@kotborealis](https://discourse.nixos.org/u/kotborealis)
#### Post date: [January 5, 2024, 1:11pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/10 "2024-01-05T13:11:18Z")
> [@7c6f434c](#):
>
> Is the problem arising via «gcc as we build it needs a fresher glibc» mechanism?
No, it was triggering something like `assertion isFromBootstrapFiles failed`.
> [@7c6f434c](#):
>
> And which of those things you need to be fresher than the Nixpkgs revision contemporary with the glibc version you want?
Good catch, I probably don’t need anything to be really really fresh, but it would be nice. I should try it and see how it goes. I suspect that there might be a lot of work to patch CVEs in old nixpgks packages.
---
### Author:  [@7c6f434c](https://discourse.nixos.org/u/7c6f434c)
#### Post date: [January 5, 2024, 1:29pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/11 "2024-01-05T13:29:49Z")
I mean, you can start with an older checkout and override things forward (possibly using the packages from a newer checkout…)
As for CVEs, I guess it depends on your threat model — and you have some upper bounds on success rate; glibc has had recent CVEs of its own, and some of the new versions of other stuff wlll probably want fresh glibc, so… it’s a non-negligible project to get a good overview…
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [January 5, 2024, 10:33am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/12 "2024-01-05T10:33:20Z")
I think that that personal repo stuff is an earlier stage of my experimenting with this issue, I have the final thing on the work system. It’s a set of stdenvs, each representing a GCC and glibc version, so possibly what you need. I’ll put it up here in the next couple of days.
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [January 7, 2024, 4:19am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/13 "2024-01-07T04:19:04Z")
The way I did this is actually quite simple:
1. I got some older `glibc`s and `gcc`s from older nixpkgs revs:
```auto
glibc_2_18 = (import (builtins.fetchGit {
name = "glibc_2_18";
url = "https://github.com/NixOS/nixpkgs/";
ref = "refs/heads/nixpkgs-unstable";
rev = "ab6453c483e406b07c63503bca5038838c187ecf";
}) { inherit system; }).glibc;
gcc_8_3_0 = (import (builtins.fetchGit {
name = "gcc_8_3_0";
url = "https://github.com/NixOS/nixpkgs/";
ref = "refs/heads/nixpkgs-unstable";
rev = "a9eb3eed170fa916e0a8364e5227ee661af76fde";
}) { inherit system; }).gcc-unwrapped;
```
[Nix Package Versions](https://lazamar.co.uk/nix-versions/) is a good resource for finding older package versions within the nixpgks history.
1. I created a function which puts together one of these older gccs with an older glibc:
```auto
getCustomGccStdenv = customGcc: customGlibc: origStdenv: { pkgs, ... }:
with pkgs; let
compilerWrapped = wrapCCWith {
cc = customGcc;
bintools = wrapBintoolsWith {
bintools = binutils-unwrapped;
libc = customGlibc;
};
};
in
overrideCC origStdenv compilerWrapped;
```
1. Then I applied function to the glibcs/gccs to create some gcc/glibc combinations:
```auto
gcc_8_3_0_glibc_2_18 = getCustomGccStdenv
gcc_8_3_0 glibc_2_18 pkgs.stdenv pkgs;
```
1. … then passed that into my derivations. If you’re re-building existing nixpkgs derivations, then you can use `override` to pass the custom stdenv in, like `pkgs.examplePkg.override { stdenv = gcc_8_3_0_glibc_2_18; };`
(see [Overriding | nixpkgs](https://ryantm.github.io/nixpkgs/using/overrides/)) for more info on this. If you need all the dependencies of your target package to be re-built with the older gcc/glibc, then you might need to override the stdenv in `pkgs` with the custom stdenv.
I’m not sure if that precisely addresses your problem because the whole thing is quite fiddly, older nixpkgs revs don’t necessarily have the same API as newer ones so it requires tweaking on a case-by-case basis.
If any of that isn’t clear then please let me know.
---
### Author:  [@tejx](https://discourse.nixos.org/u/tejx)
#### Post date: [March 15, 2024, 7:51am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/14 "2024-03-15T07:51:18Z")
These functions look like exactly what I need, wondering if you pushed them to a git repo somewhere?
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [March 17, 2024, 12:18am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/15 "2024-03-17T00:18:28Z")
I haven’t, or at least not to a public one. They’re pretty much as I’ve written them above, I’d try it by copying and pasting from there. If you have any trouble feel free to ask.
---
### Author:  [@tejx](https://discourse.nixos.org/u/tejx)
#### Post date: [March 17, 2024, 6:15pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/16 "2024-03-17T18:15:16Z")
It worked perfectly for the hello example like this
```auto
# default.nix
let
nixpkgs = fetchTarball "https://github.com/NixOS/nixpkgs/tarball/nixos-22.11";
pkgs = import nixpkgs { config = {}; overlays = []; };
system = "x86_64-linux";
glibc_2_27 = (import (builtins.fetchGit {
name = "glibc_2_18";
url = "https://github.com/NixOS/nixpkgs/";
ref = "refs/heads/nixos-19.09";
rev = "b79f64b5eb5fa8ca2f844ddb4d7c186b6c69a293";
}) { inherit system; }).glibc;
gcc_8_3_0 = (import (builtins.fetchGit {
name = "gcc_8_3_0";
url = "https://github.com/NixOS/nixpkgs/";
ref = "refs/heads/nixpkgs-unstable";
rev = "a9eb3eed170fa916e0a8364e5227ee661af76fde";
}) { inherit system; }).gcc-unwrapped;
getCustomGccStdenv = customGcc: customGlibc: origStdenv: { pkgs, ... }:
with pkgs; let
compilerWrapped = wrapCCWith {
cc = customGcc;
bintools = wrapBintoolsWith {
bintools = binutils-unwrapped;
libc = customGlibc;
};
};
in
overrideCC origStdenv compilerWrapped;
gcc_8_3_0_glibc_2_27 = getCustomGccStdenv gcc_8_3_0 glibc_2_27 pkgs.stdenv pkgs;
in
{
hello = pkgs.callPackage ./hello.nix {stdenv = gcc_8_3_0_glibc_2_27; };
}
```
Now im trying to rebuild gdal from the [geospatial nix packages](https://geospatial-nix.today/) in a flake with custom glibc and gcc but not sure how to do it.
Here is the flake:
```auto
{
description = "Geospatial NIX";
nixConfig = {
extra-substituters = [
"https://geonix.cachix.org"
"https://devenv.cachix.org"
];
extra-trusted-public-keys = [
"geonix.cachix.org-1:iyhIXkDLYLXbMhL3X3qOLBtRF8HEyAbhPXjjPeYsCl0="
"devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw="
];
bash-prompt = "\\[\\033[1m\\][geonix]\\[\\033\[m\\]\\040\\w >\\040";
};
inputs = {
geonix.url = "github:imincik/geospatial-nix";
nixpkgs.follows = "geonix/nixpkgs";
devenv = {
url = "github:cachix/devenv";
inputs.nixpkgs.follows = "geonix/nixpkgs";
};
nix2container = {
url = "github:nlewo/nix2container";
inputs.nixpkgs.follows = "geonix/nixpkgs";
};
mk-shell-bin.url = "github:rrbutani/nix-mk-shell-bin";
};
outputs = inputs@{ flake-parts, ... }:
flake-parts.lib.mkFlake { inherit inputs; } {
imports = [
inputs.devenv.flakeModule
];
systems = ["x86_64-linux"];
perSystem = { config, self', inputs', pkgs, system, ... }: {
devenv.shells.default = {
imports = [
inputs.geonix.modules
./geonix.nix
];
};
packages.geonixcli = inputs.geonix.packages.${system}.geonixcli;
};
flake = { };
};
}
```
I know gdal is huge, if you could give a simple example with a flake that would be great.
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [March 17, 2024, 10:18pm UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/17 "2024-03-17T22:18:54Z")
OK, it should be as simple as:
- move the code which creates the `gcc_8_3_0_glibc_2_27` variable into the `perSystem = { config, self', inputs', pkgs, system, ... }: {...}` part of your flake, so that you have a `gcc_8_3_0_glibc_2_27` variable per system, and
- use `overrideAttrs` on your original `geonixcli`, so:
```auto
packages.geonixcli = inputs.geonix.packages.${system}.geonixcli.overrideAttrs (finalAttrs: previousAttrs: {
stdenv = gcc_8_3_0_glibc_2_27;
});
```
Let me know if that doesn’t work!
---
### Author:  [@tejx](https://discourse.nixos.org/u/tejx)
#### Post date: [March 18, 2024, 8:29am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/18 "2024-03-18T08:29:03Z")
I got an error saying undefined getCustomGccStdenv with that approach, so i modified it a bit like so
```auto
{
description = "Geospatial NIX";
nixConfig = {
extra-substituters = [
"https://geonix.cachix.org"
"https://devenv.cachix.org"
];
extra-trusted-public-keys = [
"geonix.cachix.org-1:iyhIXkDLYLXbMhL3X3qOLBtRF8HEyAbhPXjjPeYsCl0="
"devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw="
];
bash-prompt = "\\[\\033[1m\\][geonix]\\[\\033\[m\\]\\040\\w >\\040";
};
inputs = {
geonix.url = "github:imincik/geospatial-nix";
nixpkgs.follows = "geonix/nixpkgs";
devenv = {
url = "github:cachix/devenv";
inputs.nixpkgs.follows = "geonix/nixpkgs";
};
nix2container = {
url = "github:nlewo/nix2container";
inputs.nixpkgs.follows = "geonix/nixpkgs";
};
mk-shell-bin.url = "github:rrbutani/nix-mk-shell-bin";
};
outputs = inputs@{ flake-parts, ... }:
flake-parts.lib.mkFlake { inherit inputs; } {
imports = [
inputs.devenv.flakeModule
];
systems = ["x86_64-linux"];
perSystem = { config, self', inputs', pkgs, system, ... }:
let
glibc_2_27 = (import (builtins.fetchGit {
name = "glibc_2_18";
url = "https://github.com/NixOS/nixpkgs/";
ref = "refs/heads/nixos-19.09";
rev = "b79f64b5eb5fa8ca2f844ddb4d7c186b6c69a293";
}) { inherit system; }).glibc;
gcc_8_3_0 = (import (builtins.fetchGit {
name = "gcc_8_3_0";
url = "https://github.com/NixOS/nixpkgs/";
ref = "refs/heads/nixpkgs-unstable";
rev = "a9eb3eed170fa916e0a8364e5227ee661af76fde";
}) { inherit system; }).gcc-unwrapped;
getCustomGccStdenv = customGcc: customGlibc: origStdenv: { pkgs, ... }:
with pkgs; let
compilerWrapped = wrapCCWith {
cc = customGcc;
bintools = wrapBintoolsWith {
bintools = binutils-unwrapped;
libc = customGlibc;
};
};
in
overrideCC origStdenv compilerWrapped;
gcc_8_3_0_glibc_2_27 = getCustomGccStdenv gcc_8_3_0 glibc_2_27 pkgs.stdenv pkgs;
in
{
packages.geonixcli = inputs.geonix.packages.${system}.geonixcli;
packages.gdal = inputs.geonix.packages.${system}.gdal.overrideAttrs (finalAttrs: previousAttrs: {
stdenv = gcc_8_3_0_glibc_2_27;
});
};
flake = { };
};
}
```
Now when i run `rm flake.lock && nix build .#gdal` it seems to work, but the result bins are still with a newer glibc and not the 2.27 as expected.
---
### Author:  [@harris-chris](https://discourse.nixos.org/u/harris-chris)
#### Post date: [March 18, 2024, 8:49am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/19 "2024-03-18T08:49:36Z")
Hmm. How are you checking the glibc version?
---
### Author:  [@tejx](https://discourse.nixos.org/u/tejx)
#### Post date: [March 18, 2024, 9:19am UTC](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478/20 "2024-03-18T09:19:34Z")
```auto
ldd result/bin/ogrinfo | grep glibc
libm.so.6 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/libm.so.6 (0x00007f3f2c26f000)
libc.so.6 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/libc.so.6 (0x00007f3f2c065000)
libdl.so.2 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/libdl.so.2 (0x00007f3f2c03c000)
/nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/ld-linux-x86-64.so.2 => /lib64/ld-linux-x86-64.so.2 (0x00007f3f2e124000)
libpthread.so.0 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/libpthread.so.0 (0x00007f3f250d3000)
librt.so.1 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/librt.so.1 (0x00007f3f1e325000)
libresolv.so.2 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/libresolv.so.2 (0x00007f3f1dcc4000)
libmvec.so.1 => /nix/store/1zy01hjzwvvia6h9dq5xar88v77fgh9x-glibc-2.38-44/lib/libmvec.so.1 (0x00007f3f1d8a8000)
```
Also with the ‘file’ command. Do i have to clear my cache or something?
[Next page](https://discourse.nixos.org/t/including-an-older-glibc-in-stdenv/29478.md?page=2)