You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
138 lines
4.3 KiB
138 lines
4.3 KiB
# Copyright 1999-2019 Gentoo Authors
|
|
# Distributed under the terms of the GNU General Public License v2
|
|
|
|
EAPI=6
|
|
|
|
inherit autotools linux-info libtool eapi7-ver
|
|
|
|
DESCRIPTION="Tool to setup encrypted devices with dm-crypt"
|
|
HOMEPAGE="https://gitlab.com/cryptsetup/cryptsetup/blob/master/README.md"
|
|
SRC_URI="mirror://kernel/linux/utils/${PN}/v$(ver_cut 1-2)/${P/_/-}.tar.xz"
|
|
|
|
LICENSE="GPL-2+"
|
|
SLOT="0/12" # libcryptsetup.so version
|
|
[[ ${PV} != *_rc* ]] && \
|
|
KEYWORDS="~alpha amd64 arm arm64 ~hppa ~ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86"
|
|
# cryptsetup does _not_ have a libressl backend. We only have this for REQUIRED_USE
|
|
# and change "libressl" to "openssl" in our econf call.
|
|
CRYPTO_BACKENDS="gcrypt kernel libressl nettle +openssl"
|
|
# we don't support nss since it doesn't allow cryptsetup to be built statically
|
|
# and it's missing ripemd160 support so it can't provide full backward compatibility
|
|
IUSE="${CRYPTO_BACKENDS} +argon2 libressl +luks1_default nls pwquality reencrypt static static-libs +udev urandom"
|
|
REQUIRED_USE="^^ ( ${CRYPTO_BACKENDS//+/} )
|
|
static? ( !gcrypt )" #496612
|
|
|
|
LIB_DEPEND="
|
|
dev-libs/json-c:=[static-libs(+)]
|
|
dev-libs/libgpg-error[static-libs(+)]
|
|
dev-libs/popt[static-libs(+)]
|
|
>=sys-apps/util-linux-2.31-r1[static-libs(+)]
|
|
argon2? ( app-crypt/argon2:=[static-libs(+)] )
|
|
gcrypt? ( dev-libs/libgcrypt:0=[static-libs(+)] )
|
|
nettle? ( >=dev-libs/nettle-2.4[static-libs(+)] )
|
|
openssl? (
|
|
!libressl? ( dev-libs/openssl:0=[static-libs(+)] )
|
|
libressl? ( dev-libs/libressl:=[static-libs(+)] )
|
|
)
|
|
pwquality? ( dev-libs/libpwquality[static-libs(+)] )
|
|
sys-fs/lvm2[static-libs(+)]
|
|
udev? ( virtual/libudev[static-libs(+)] )"
|
|
# We have to always depend on ${LIB_DEPEND} rather than put behind
|
|
# !static? () because we provide a shared library which links against
|
|
# these other packages. #414665
|
|
RDEPEND="static-libs? ( ${LIB_DEPEND} )
|
|
${LIB_DEPEND//\[static-libs\(+\)\]}"
|
|
DEPEND="${RDEPEND}
|
|
virtual/pkgconfig
|
|
static? ( ${LIB_DEPEND} )"
|
|
|
|
S="${WORKDIR}/${P/_/-}"
|
|
|
|
PATCHES=( "${FILESDIR}"/${PN}-2.0.4-fix-static-pwquality-build.patch )
|
|
|
|
pkg_pretend() {
|
|
if ! use luks1_default ; then
|
|
ewarn "WARNING! WARNING! WARNING!"
|
|
ewarn "You have chosen LUKS2 as your default format."
|
|
ewarn "This can break LUKS1 backwards compatibility."
|
|
ewarn "Enable \"luks1_default\" USE flag if you need backwards compatibility."
|
|
fi
|
|
}
|
|
|
|
pkg_setup() {
|
|
local CONFIG_CHECK="~DM_CRYPT ~CRYPTO ~CRYPTO_CBC ~CRYPTO_SHA256"
|
|
local WARNING_DM_CRYPT="CONFIG_DM_CRYPT:\tis not set (required for cryptsetup)\n"
|
|
local WARNING_CRYPTO_SHA256="CONFIG_CRYPTO_SHA256:\tis not set (required for cryptsetup)\n"
|
|
local WARNING_CRYPTO_CBC="CONFIG_CRYPTO_CBC:\tis not set (required for kernel 2.6.19)\n"
|
|
local WARNING_CRYPTO="CONFIG_CRYPTO:\tis not set (required for cryptsetup)\n"
|
|
check_extra_config
|
|
}
|
|
|
|
src_prepare() {
|
|
sed -i '/^LOOPDEV=/s:$: || exit 0:' tests/{compat,mode}-test || die
|
|
default
|
|
eautoreconf
|
|
}
|
|
|
|
src_configure() {
|
|
if use kernel ; then
|
|
ewarn "Note that kernel backend is very slow for this type of operation"
|
|
ewarn "and is provided mainly for embedded systems wanting to avoid"
|
|
ewarn "userspace crypto libraries."
|
|
fi
|
|
|
|
local x cryptobackend
|
|
for x in ${CRYPTO_BACKENDS//+/} ; do
|
|
use ${x} && cryptobackend="${x/libressl/openssl}"
|
|
done
|
|
|
|
local myeconfargs=(
|
|
--disable-internal-argon2
|
|
--enable-shared
|
|
--sbindir=/sbin
|
|
# for later use
|
|
--with-default-luks-format=LUKS$(usex luks1_default 1 2)
|
|
--with-tmpfilesdir="${EPREFIX%/}/usr/lib/tmpfiles.d"
|
|
--with-crypto_backend=${cryptobackend}
|
|
$(use_enable argon2 libargon2)
|
|
$(use_enable nls)
|
|
$(use_enable pwquality)
|
|
$(use_enable reencrypt cryptsetup-reencrypt)
|
|
$(use_enable static static-cryptsetup)
|
|
$(use_enable static-libs static)
|
|
$(use_enable udev)
|
|
$(use_enable !urandom dev-random)
|
|
)
|
|
econf "${myeconfargs[@]}"
|
|
}
|
|
|
|
src_test() {
|
|
if [[ ! -e /dev/mapper/control ]] ; then
|
|
ewarn "No /dev/mapper/control found -- skipping tests"
|
|
return 0
|
|
fi
|
|
|
|
local p
|
|
for p in /dev/mapper /dev/loop* ; do
|
|
addwrite ${p}
|
|
done
|
|
|
|
default
|
|
}
|
|
|
|
src_install() {
|
|
default
|
|
|
|
if use static ; then
|
|
mv "${ED%}"/sbin/cryptsetup{.static,} || die
|
|
mv "${ED%}"/sbin/veritysetup{.static,} || die
|
|
use reencrypt && { mv "${ED%}"/sbin/cryptsetup-reencrypt{.static,} || die ; }
|
|
fi
|
|
find "${ED}" -name "*.la" -delete || die
|
|
|
|
dodoc docs/v*ReleaseNotes
|
|
|
|
newconfd "${FILESDIR}"/1.6.7-dmcrypt.confd dmcrypt
|
|
newinitd "${FILESDIR}"/1.6.7-dmcrypt.rc dmcrypt
|
|
}
|