Skip to content

Commit 0311282

Browse files
yosifkityosifkit
committed
Add explanation for clfags and ldflags
1 parent cae3c03 commit 0311282

File tree

23 files changed

+138
-0
lines changed

23 files changed

+138
-0
lines changed

‎5.6/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3232
##<autogenerated>##
3333
##</autogenerated>##
3434

35+
# Apply stack smash protection to functions using local buffers and alloca()
36+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
37+
# Enable optimization (-O2)
38+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
39+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
40+
# https://github.com/docker-library/php/issues/272
3541
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3642
ENV CPPFLAGS="$CFLAGS"
3743
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎5.6/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3737
##<autogenerated>##
3838
##</autogenerated>##
3939

40+
# Apply stack smash protection to functions using local buffers and alloca()
41+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
42+
# Enable optimization (-O2)
43+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
44+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
45+
# https://github.com/docker-library/php/issues/272
4046
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4147
ENV CPPFLAGS="$CFLAGS"
4248
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎5.6/apache/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,12 @@ ENV PHP_EXTRA_BUILD_DEPS apache2-dev
8888
ENV PHP_EXTRA_CONFIGURE_ARGS --with-apxs2
8989
##</autogenerated>##
9090

91+
# Apply stack smash protection to functions using local buffers and alloca()
92+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
93+
# Enable optimization (-O2)
94+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
95+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
96+
# https://github.com/docker-library/php/issues/272
9197
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
9298
ENV CPPFLAGS="$CFLAGS"
9399
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎5.6/fpm/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3333
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data
3434
##</autogenerated>##
3535

36+
# Apply stack smash protection to functions using local buffers and alloca()
37+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
38+
# Enable optimization (-O2)
39+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
40+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
41+
# https://github.com/docker-library/php/issues/272
3642
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3743
ENV CPPFLAGS="$CFLAGS"
3844
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎5.6/fpm/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3838
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data
3939
##</autogenerated>##
4040

41+
# Apply stack smash protection to functions using local buffers and alloca()
42+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
43+
# Enable optimization (-O2)
44+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
45+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
46+
# https://github.com/docker-library/php/issues/272
4147
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4248
ENV CPPFLAGS="$CFLAGS"
4349
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎5.6/zts/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3333
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-maintainer-zts
3434
##</autogenerated>##
3535

36+
# Apply stack smash protection to functions using local buffers and alloca()
37+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
38+
# Enable optimization (-O2)
39+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
40+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
41+
# https://github.com/docker-library/php/issues/272
3642
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3743
ENV CPPFLAGS="$CFLAGS"
3844
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎5.6/zts/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3838
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-maintainer-zts
3939
##</autogenerated>##
4040

41+
# Apply stack smash protection to functions using local buffers and alloca()
42+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
43+
# Enable optimization (-O2)
44+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
45+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
46+
# https://github.com/docker-library/php/issues/272
4147
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4248
ENV CPPFLAGS="$CFLAGS"
4349
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3232
##<autogenerated>##
3333
##</autogenerated>##
3434

35+
# Apply stack smash protection to functions using local buffers and alloca()
36+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
37+
# Enable optimization (-O2)
38+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
39+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
40+
# https://github.com/docker-library/php/issues/272
3541
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3642
ENV CPPFLAGS="$CFLAGS"
3743
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3737
##<autogenerated>##
3838
##</autogenerated>##
3939

40+
# Apply stack smash protection to functions using local buffers and alloca()
41+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
42+
# Enable optimization (-O2)
43+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
44+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
45+
# https://github.com/docker-library/php/issues/272
4046
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4147
ENV CPPFLAGS="$CFLAGS"
4248
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/apache/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,12 @@ ENV PHP_EXTRA_BUILD_DEPS apache2-dev
8888
ENV PHP_EXTRA_CONFIGURE_ARGS --with-apxs2
8989
##</autogenerated>##
9090

91+
# Apply stack smash protection to functions using local buffers and alloca()
92+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
93+
# Enable optimization (-O2)
94+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
95+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
96+
# https://github.com/docker-library/php/issues/272
9197
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
9298
ENV CPPFLAGS="$CFLAGS"
9399
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/fpm/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3333
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data
3434
##</autogenerated>##
3535

36+
# Apply stack smash protection to functions using local buffers and alloca()
37+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
38+
# Enable optimization (-O2)
39+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
40+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
41+
# https://github.com/docker-library/php/issues/272
3642
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3743
ENV CPPFLAGS="$CFLAGS"
3844
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/fpm/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3838
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data
3939
##</autogenerated>##
4040

41+
# Apply stack smash protection to functions using local buffers and alloca()
42+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
43+
# Enable optimization (-O2)
44+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
45+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
46+
# https://github.com/docker-library/php/issues/272
4147
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4248
ENV CPPFLAGS="$CFLAGS"
4349
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/zts/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3333
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-maintainer-zts
3434
##</autogenerated>##
3535

36+
# Apply stack smash protection to functions using local buffers and alloca()
37+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
38+
# Enable optimization (-O2)
39+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
40+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
41+
# https://github.com/docker-library/php/issues/272
3642
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3743
ENV CPPFLAGS="$CFLAGS"
3844
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.0/zts/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3838
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-maintainer-zts
3939
##</autogenerated>##
4040

41+
# Apply stack smash protection to functions using local buffers and alloca()
42+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
43+
# Enable optimization (-O2)
44+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
45+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
46+
# https://github.com/docker-library/php/issues/272
4147
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4248
ENV CPPFLAGS="$CFLAGS"
4349
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3232
##<autogenerated>##
3333
##</autogenerated>##
3434

35+
# Apply stack smash protection to functions using local buffers and alloca()
36+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
37+
# Enable optimization (-O2)
38+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
39+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
40+
# https://github.com/docker-library/php/issues/272
3541
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3642
ENV CPPFLAGS="$CFLAGS"
3743
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3737
##<autogenerated>##
3838
##</autogenerated>##
3939

40+
# Apply stack smash protection to functions using local buffers and alloca()
41+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
42+
# Enable optimization (-O2)
43+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
44+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
45+
# https://github.com/docker-library/php/issues/272
4046
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4147
ENV CPPFLAGS="$CFLAGS"
4248
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/apache/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,12 @@ ENV PHP_EXTRA_BUILD_DEPS apache2-dev
8888
ENV PHP_EXTRA_CONFIGURE_ARGS --with-apxs2
8989
##</autogenerated>##
9090

91+
# Apply stack smash protection to functions using local buffers and alloca()
92+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
93+
# Enable optimization (-O2)
94+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
95+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
96+
# https://github.com/docker-library/php/issues/272
9197
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
9298
ENV CPPFLAGS="$CFLAGS"
9399
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/fpm/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3333
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data
3434
##</autogenerated>##
3535

36+
# Apply stack smash protection to functions using local buffers and alloca()
37+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
38+
# Enable optimization (-O2)
39+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
40+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
41+
# https://github.com/docker-library/php/issues/272
3642
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3743
ENV CPPFLAGS="$CFLAGS"
3844
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/fpm/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3838
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data
3939
##</autogenerated>##
4040

41+
# Apply stack smash protection to functions using local buffers and alloca()
42+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
43+
# Enable optimization (-O2)
44+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
45+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
46+
# https://github.com/docker-library/php/issues/272
4147
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4248
ENV CPPFLAGS="$CFLAGS"
4349
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/zts/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3333
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-maintainer-zts
3434
##</autogenerated>##
3535

36+
# Apply stack smash protection to functions using local buffers and alloca()
37+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
38+
# Enable optimization (-O2)
39+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
40+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
41+
# https://github.com/docker-library/php/issues/272
3642
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3743
ENV CPPFLAGS="$CFLAGS"
3844
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎7.1/zts/alpine/Dockerfile

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3838
ENV PHP_EXTRA_CONFIGURE_ARGS --enable-maintainer-zts
3939
##</autogenerated>##
4040

41+
# Apply stack smash protection to functions using local buffers and alloca()
42+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
43+
# Enable optimization (-O2)
44+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
45+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
46+
# https://github.com/docker-library/php/issues/272
4147
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
4248
ENV CPPFLAGS="$CFLAGS"
4349
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎Dockerfile-alpine.template

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
3131
##<autogenerated>##
3232
##</autogenerated>##
3333

34+
# Apply stack smash protection to functions using local buffers and alloca()
35+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
36+
# Enable optimization (-O2)
37+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
38+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
39+
# https://github.com/docker-library/php/issues/272
3440
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3541
ENV CPPFLAGS="$CFLAGS"
3642
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

‎Dockerfile-debian.template

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,12 @@ RUN mkdir -p $PHP_INI_DIR/conf.d
2626
##<autogenerated>##
2727
##</autogenerated>##
2828

29+
# Apply stack smash protection to functions using local buffers and alloca()
30+
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64)
31+
# Enable optimization (-O2)
32+
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default)
33+
# Adds GNU HASH segments to generated executables (this is used if present, and is much faster than sysv hash; in this configuration, sysv hash is also generated)
34+
# https://github.com/docker-library/php/issues/272
2935
ENV CFLAGS="-fstack-protector-strong -fpic -fpie -O2"
3036
ENV CPPFLAGS="$CFLAGS"
3137
ENV LDFLAGS="-Wl,-O1 -Wl,--hash-style=both"

0 commit comments

Comments
 (0)