How to build with PIE buildmode

[cryptomilk]

How do you build position independent executables (PIE) with promu?

For go it is:

go build -buildmode=pie

I'm trying to get a prometheus binary with PIE enabled which is normally required by distributions.

[simonpasquier]

You can to the flags entry in .promu.yml

[cryptomilk]

I've tried, but the resulting binary is not a PIE binary.

[cryptomilk]

magrathea:~ # hardening-check /usr/bin/prometheus 
/usr/bin/prometheus:
 Position Independent Executable: no, normal executable!
 Stack protected: no, not found!
 Fortify Source functions: unknown, no protectable libc functions used
 Read-only relocations: yes
 Immediate binding: no, not found!

[cryptomilk]

Also adding -extldflags=-pie to ldflags: doesn't help.

[cryptomilk]

Strange that RELRO worked.

[simonpasquier]

promu build is just a wrapper around go build and promu build -v will show you the executed command.