docs: add a note about compilation options

Closes #6371.
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2019-03-05 11:03:59 +01:00
parent 55dadc5c57
commit 57903f93c9

View file

@ -31,6 +31,20 @@ distribution:
print the initial transaction it would execute during boot-up.
This will also inform you about ordering loops and suchlike.
## Compilation options
The default configuration does not enable any optimization or hardening
options. This is suitable for development and testing, but not for end-user
installations.
For deployment, optimization (`-O2` or `-O3` compiler options), link time
optimization (`-Db_lto=true` meson option), and hardening (e.g.
`-D_FORTIFY_SOURCE=2`, `-fstack-protector-strong`, `-fstack-clash-protection`,
`-fcf-protection`, `-pie` compiler options, and `-z relro`, `-z now`,
`--as-needed` linker options) are recommended. The most appropriate set of
options depends on the architecture and distribution specifics so no default is
provided.
## NTP Pool
By default, systemd-timesyncd uses the Google Public NTP servers