ananicy-cpp: make bpfSupport optional

[JohnRTitor]

Description of changes

ananicy-cpp compiled with bpfSupport does not work on hardened kernels
So we make it optional to allow users to disable it.

#327382

This is still enabled by default.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[MrQubo]

I already started working on that.

[MrQubo]

I think we can use stdenv instead of clangStdenv with bpfSupport set to false.

[MrQubo]

Haven't checked yet, but we can probably make hardeningDisable optional on bpfSupport.

[JohnRTitor]

I think we can use stdenv instead of clangStdenv with bpfSupport set to false.

According to the docs, we could use GCC if bpf is disabled. But let's not complicate it further, my motto is "if its not broken don't fix it". Clang is better supported by ananicy-cpp anyway.

[MrQubo]

I think the option should be named withBpf instead of bpfSupport. It's not about ananicy-cpp supporting bpf or not, but whether bpf is enabled for ananicy-cpp.