security communication with openssl and simplify netio

src/nixSupport/xce.nix

@@ -5,7 +5,6 @@
   myCommitId,
   withDebug? false,
   withAsan? false,
-  withoutDb? false,
   ...
 }:
 
@@ -16,27 +15,29 @@ stdenv.mkDerivation {
 
   src = ./..;
 
-  nativeBuildInputs = [
-    pkgs.meson
-    pkgs.ninja
-    pkgs.capnproto
-    pkgs.pkg-config
-    pkgs.cmake
-    pkgs.go
-    pkgs.openssl
-    pkgs.libtirpc
-    pkgs.readline
-    pkgs.ncurses
-    pkgs.capnpc
-    pkgs.which
-    pkgs.findutils
-    pkgs.libuv
-    pkgs.elogind
-    pkgs.sqlite
-    pkgs.hwloc
-    pkgs.linux-pam
-    pkgs.tinylog
-    pkgs.unity_test_with_color
+  nativeBuildInputs = with pkgs; [
+    meson
+    ninja
+    capnproto
+    pkg-config
+    cmake
+    go
+    (openssl.overrideAttrs (oldAttrs: {
+      separateDebugInfo = true;
+    }))
+    libtirpc
+    readline
+    ncurses
+    capnpc
+    which
+    findutils
+    libuv
+    elogind
+    sqlite
+    hwloc
+    linux-pam
+    tinylog
+    unity_test_with_color
   ];
 
   build-system = [ pkgs.meson ];
@@ -47,9 +48,8 @@ stdenv.mkDerivation {
   impureEnvVars = [ "HOME" ];
 
   mesonFlags =[
-    (lib.optional withDebug "-Dwith_debug=true")
+    (lib.optional withDebug "--buildtype=debug")
     (lib.optional withAsan "-Db_sanitize=address")
-    (lib.optional withoutDb "-Dwithout_db=true")
     ("-Dcommit_id=" + myCommitId)
     #    (lib.optional (!with_debug) "-Dbuildtype=release")
   ];