Create Portage env directory. Add Portage envs.

portage/env/basic.conf

@@ -0,0 +1,25 @@
+# Clang - Basic.
+
+
+# Toolchain.
+AR="llvm-ar"
+CC="clang"
+CPP="clang-cpp"
+CXX="clang++"
+LD="ld.lld"
+STRINGS="llvm-strings"
+STRIP="llvm-strip"
+NM="llvm-nm"
+RANLIB="llvm-ranlib"
+READELF="llvm-readelf"
+OBJCOPY="llvm-objcopy"
+OBJDUMP="llvm-objdump"
+
+
+# Flags.
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -U__gnu_linux__"
+CXXFLAGS="-march=znver1 -O2 -pipe"
+
+## Linker flags.
+LDFLAGS="-fuse-ld=lld -rtlib=compiler-rt -unwindlib=libunwind"

portage/env/gcc-basic.conf

@@ -0,0 +1,18 @@
+# GCC - Basic.
+
+
+# Toolchain.
+CC="gcc"
+CXX="g++"
+AR="ar"
+NM="nm"
+RANLIB="ranlib"
+
+
+# Flags.
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -U__gnu_linux__"
+CXXFLAGS="-march=znver1 -O2 -pipe"
+
+## Linker flags.
+LDFLAGS="-Wl,-O2"

portage/env/gcc-nolto-nopie.conf

@@ -0,0 +1,22 @@
+# GCC - No LTO, no PIE.
+
+
+# Toolchain.
+CC="gcc"
+CXX="g++"
+AR="ar"
+NM="nm"
+RANLIB="ranlib"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-Wl,-O2 ${LD_HARDENING}"

portage/env/gcc-nolto.conf

@@ -0,0 +1,22 @@
+# GCC - No LTO.
+
+
+# Toolchain.
+CC="gcc"
+CXX="g++"
+AR="ar"
+NM="nm"
+RANLIB="ranlib"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,-pie -Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-Wl,-O2 ${LD_HARDENING}"

portage/env/gcc-nopie.conf

@@ -0,0 +1,22 @@
+# GCC - No PIE.
+
+
+# Toolchain.
+CC="gcc"
+CXX="g++"
+AR="ar"
+NM="nm"
+RANLIB="ranlib"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -flto=4 -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe -flto=4 ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-Wl,-O2 ${LD_HARDENING}"

portage/env/gcc.conf

@@ -0,0 +1,22 @@
+# GCC.
+
+
+# Toolchain.
+CC="gcc"
+CXX="g++"
+AR="ar"
+NM="nm"
+RANLIB="ranlib"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,-pie -Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -flto=4 -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe -flto=4 ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-Wl,-O2 ${LD_HARDENING}"

portage/env/nolto-nopie.conf

@@ -0,0 +1,29 @@
+# Clang - No LTO, no PIE.
+
+
+# Toolchain.
+AR="llvm-ar"
+CC="clang"
+CPP="clang-cpp"
+CXX="clang++"
+LD="ld.lld"
+STRINGS="llvm-strings"
+STRIP="llvm-strip"
+NM="llvm-nm"
+RANLIB="llvm-ranlib"
+READELF="llvm-readelf"
+OBJCOPY="llvm-objcopy"
+OBJDUMP="llvm-objdump"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-fuse-ld=lld -rtlib=compiler-rt -unwindlib=libunwind ${LD_HARDENING}"

portage/env/nolto.conf

@@ -0,0 +1,29 @@
+# Clang - No LTO.
+
+
+# Toolchain.
+AR="llvm-ar"
+CC="clang"
+CPP="clang-cpp"
+CXX="clang++"
+LD="ld.lld"
+STRINGS="llvm-strings"
+STRIP="llvm-strip"
+NM="llvm-nm"
+RANLIB="llvm-ranlib"
+READELF="llvm-readelf"
+OBJCOPY="llvm-objcopy"
+OBJDUMP="llvm-objdump"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,-pie -Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-fuse-ld=lld -rtlib=compiler-rt -unwindlib=libunwind ${LD_HARDENING}"

portage/env/nopie.conf

@@ -0,0 +1,29 @@
+# Clang - No PIE.
+
+
+# Toolchain.
+AR="llvm-ar"
+CC="clang"
+CPP="clang-cpp"
+CXX="clang++"
+LD="ld.lld"
+STRINGS="llvm-strings"
+STRIP="llvm-strip"
+NM="llvm-nm"
+RANLIB="llvm-ranlib"
+READELF="llvm-readelf"
+OBJCOPY="llvm-objcopy"
+OBJDUMP="llvm-objdump"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,--strip-all -Wl,-z,defs -Wl,-z,now -Wl,-z,relro"
+
+## Common flags.
+CFLAGS="-march=znver1 -O2 -pipe -flto=full -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O2 -pipe -flto=full ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-fuse-ld=lld -rtlib=compiler-rt -unwindlib=libunwind ${LD_HARDENING}"

portage/env/werror.conf

@@ -0,0 +1,29 @@
+# Clang - Wno-error.
+
+
+# Toolchain.
+AR="llvm-ar"
+CC="clang"
+CPP="clang-cpp"
+CXX="clang++"
+LD="ld.lld"
+STRINGS="llvm-strings"
+STRIP="llvm-strip"
+NM="llvm-nm"
+RANLIB="llvm-ranlib"
+READELF="llvm-readelf"
+OBJCOPY="llvm-objcopy"
+OBJDUMP="llvm-objdump"
+
+
+# Flags.
+## Hardening flags.
+C_HARDENING="-fPIE -fPIC -fstack-protector-all -fstack-clash-protection -D_FORTIFY_SOURCE=2"
+LD_HARDENING="-Wl,-z,now -Wl,-z,relro -pie -Wl,--strip-all"
+
+## Common flags.
+CFLAGS="-march=znver1 -O1 -pipe -flto=full -Wno-error -U__gnu_linux__ ${C_HARDENING}"
+CXXFLAGS="-march=znver1 -O1 -pipe -flto=full ${C_HARDENING}"
+
+## Linker flags.
+LDFLAGS="-fuse-ld=lld -rtlib=compiler-rt -unwindlib=libunwind ${LD_HARDENING}"