mirror of
https://github.com/flatcar/scripts.git
synced 2026-05-04 19:56:32 +02:00
sys-fs/cryptsetup: Sync with Gentoo
It's from Gentoo commit cf7e681c1a49951ffab38072745e8515d545f4f6.
This commit is contained in:
parent
9790736c88
commit
5e20bf34a9
@ -1,2 +1 @@
|
||||
DIST cryptsetup-2.4.3.tar.xz 11242152 BLAKE2B f5859d794d626cb19426a2c9afc4655fac3a1bae462daa42b37b925882804d5146aadff8733799dea89dcfdc311e628e5b806754495824705709ba105f91682f SHA512 2d52498497be37a837126d9cdc9b6331236eccf857c3482fe3347eb88fccc3cd0fd3d8b4490569603e18cfaa462431ae194bce0328f3eafa8bfe3e02e135a26e
|
||||
DIST cryptsetup-2.6.1.tar.xz 11402380 BLAKE2B efd7a64d89d863876de68ff3e89d8c94ad5eca6a8d2236c52c234fbe51e9d9ee303a0c7fe7dac7df10e0062003b9c0aeddc8dc342582106c157ab2d1e742155e SHA512 0cbddbf33cbac2b834ed7e2dd47a9fc787131031a1c729f373f5c974600a838097e9cc0555f13719fc79c384a2a34b404f94ba4cc2f35f0bb1d70aef2233fd18
|
||||
|
||||
@ -1,139 +0,0 @@
|
||||
# Copyright 1999-2023 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=7
|
||||
|
||||
inherit linux-info tmpfiles
|
||||
|
||||
DESCRIPTION="Tool to setup encrypted devices with dm-crypt"
|
||||
HOMEPAGE="https://gitlab.com/cryptsetup/cryptsetup"
|
||||
SRC_URI="https://www.kernel.org/pub/linux/utils/${PN}/v$(ver_cut 1-2)/${P/_/-}.tar.xz"
|
||||
|
||||
LICENSE="GPL-2+"
|
||||
SLOT="0/12" # libcryptsetup.so version
|
||||
[[ ${PV} != *_rc* ]] && \
|
||||
KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~mips ppc ppc64 ~riscv ~s390 sparc x86"
|
||||
CRYPTO_BACKENDS="gcrypt kernel nettle +openssl"
|
||||
# we don't support nss since it doesn't allow cryptsetup to be built statically
|
||||
# and it's missing ripemd160 support so it can't provide full backward compatibility
|
||||
IUSE="${CRYPTO_BACKENDS} +argon2 fips nls pwquality reencrypt ssh static static-libs test +udev urandom"
|
||||
RESTRICT="!test? ( test )"
|
||||
REQUIRED_USE="^^ ( ${CRYPTO_BACKENDS//+/} )
|
||||
static? ( !gcrypt !ssh !udev !fips )
|
||||
fips? ( !kernel !nettle )
|
||||
" # 496612, 832711, 843863
|
||||
|
||||
LIB_DEPEND="
|
||||
dev-libs/json-c:=[static-libs(+)]
|
||||
dev-libs/popt[static-libs(+)]
|
||||
>=sys-apps/util-linux-2.31-r1[static-libs(+)]
|
||||
argon2? ( app-crypt/argon2:=[static-libs(+)] )
|
||||
gcrypt? (
|
||||
dev-libs/libgcrypt:0=[static-libs(+)]
|
||||
dev-libs/libgpg-error[static-libs(+)]
|
||||
)
|
||||
nettle? ( >=dev-libs/nettle-2.4[static-libs(+)] )
|
||||
openssl? ( dev-libs/openssl:0=[static-libs(+)] )
|
||||
pwquality? ( dev-libs/libpwquality[static-libs(+)] )
|
||||
ssh? ( net-libs/libssh[static-libs(+)] )
|
||||
sys-fs/lvm2[static-libs(+)]"
|
||||
# We have to always depend on ${LIB_DEPEND} rather than put behind
|
||||
# !static? () because we provide a shared library which links against
|
||||
# these other packages. #414665
|
||||
RDEPEND="static-libs? ( ${LIB_DEPEND} )
|
||||
${LIB_DEPEND//\[static-libs\([+-]\)\]}
|
||||
udev? ( virtual/libudev:= )"
|
||||
# vim-core needed for xxd in tests
|
||||
DEPEND="${RDEPEND}
|
||||
static? ( ${LIB_DEPEND} )
|
||||
test? ( app-editors/vim-core )"
|
||||
BDEPEND="
|
||||
virtual/pkgconfig
|
||||
"
|
||||
|
||||
S="${WORKDIR}/${P/_/-}"
|
||||
|
||||
pkg_setup() {
|
||||
local CONFIG_CHECK="~DM_CRYPT ~CRYPTO ~CRYPTO_CBC ~CRYPTO_SHA256"
|
||||
local WARNING_DM_CRYPT="CONFIG_DM_CRYPT:\tis not set (required for cryptsetup)\n"
|
||||
local WARNING_CRYPTO_SHA256="CONFIG_CRYPTO_SHA256:\tis not set (required for cryptsetup)\n"
|
||||
local WARNING_CRYPTO_CBC="CONFIG_CRYPTO_CBC:\tis not set (required for kernel 2.6.19)\n"
|
||||
local WARNING_CRYPTO="CONFIG_CRYPTO:\tis not set (required for cryptsetup)\n"
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
sed -i '/^LOOPDEV=/s:$: || exit 0:' tests/{compat,mode}-test || die
|
||||
default
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
if use kernel ; then
|
||||
ewarn "Note that kernel backend is very slow for this type of operation"
|
||||
ewarn "and is provided mainly for embedded systems wanting to avoid"
|
||||
ewarn "userspace crypto libraries."
|
||||
fi
|
||||
|
||||
local myeconfargs=(
|
||||
--disable-internal-argon2
|
||||
--enable-shared
|
||||
--sbindir="${EPREFIX}"/sbin
|
||||
# for later use
|
||||
--with-default-luks-format=LUKS2
|
||||
--with-tmpfilesdir="${EPREFIX}/usr/lib/tmpfiles.d"
|
||||
--with-crypto_backend=$(for x in ${CRYPTO_BACKENDS//+/} ; do usev ${x} ; done)
|
||||
$(use_enable argon2 libargon2)
|
||||
$(use_enable nls)
|
||||
$(use_enable pwquality)
|
||||
$(use_enable reencrypt cryptsetup-reencrypt)
|
||||
$(use_enable !static external-tokens)
|
||||
$(use_enable static static-cryptsetup)
|
||||
$(use_enable static-libs static)
|
||||
$(use_enable udev)
|
||||
$(use_enable !urandom dev-random)
|
||||
$(use_enable ssh ssh-token)
|
||||
$(usex argon2 '' '--with-luks2-pbkdf=pbkdf2')
|
||||
$(use_enable fips)
|
||||
)
|
||||
econf "${myeconfargs[@]}"
|
||||
}
|
||||
|
||||
src_test() {
|
||||
if [[ ! -e /dev/mapper/control ]] ; then
|
||||
ewarn "No /dev/mapper/control found -- skipping tests"
|
||||
return 0
|
||||
fi
|
||||
|
||||
local p
|
||||
for p in /dev/mapper /dev/loop* ; do
|
||||
addwrite ${p}
|
||||
done
|
||||
|
||||
default
|
||||
}
|
||||
|
||||
src_install() {
|
||||
default
|
||||
|
||||
if use static ; then
|
||||
mv "${ED}"/sbin/cryptsetup{.static,} || die
|
||||
mv "${ED}"/sbin/veritysetup{.static,} || die
|
||||
mv "${ED}"/sbin/integritysetup{.static,} || die
|
||||
if use ssh ; then
|
||||
mv "${ED}"/sbin/cryptsetup-ssh{.static,} || die
|
||||
fi
|
||||
if use reencrypt ; then
|
||||
mv "${ED}"/sbin/cryptsetup-reencrypt{.static,} || die
|
||||
fi
|
||||
fi
|
||||
find "${ED}" -type f -name "*.la" -delete || die
|
||||
|
||||
dodoc docs/v*ReleaseNotes
|
||||
|
||||
newconfd "${FILESDIR}"/2.4.3-dmcrypt.confd dmcrypt
|
||||
newinitd "${FILESDIR}"/2.4.3-dmcrypt.rc dmcrypt
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
tmpfiles_process cryptsetup.conf
|
||||
}
|
||||
@ -13,7 +13,6 @@
|
||||
<flag name="nettle">Use <pkg>dev-libs/nettle</pkg> crypto backend</flag>
|
||||
<flag name="openssl">Use <pkg>dev-libs/openssl</pkg> crypto backend</flag>
|
||||
<flag name="pwquality">Use <pkg>dev-libs/libpwquality</pkg> for password quality checking</flag>
|
||||
<flag name="reencrypt">Build cryptsetup-reencrypt</flag>
|
||||
<flag name="ssh">Build cryptsetup-ssh for experimental support of token via SSH-server</flag>
|
||||
<flag name="urandom">Use /dev/urandom instead of /dev/random</flag>
|
||||
</use>
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user