diff options
Diffstat (limited to 'meta-oe/recipes-crypto/cryptsetup/cryptsetup_2.4.2.bb')
-rw-r--r-- | meta-oe/recipes-crypto/cryptsetup/cryptsetup_2.4.2.bb | 96 |
1 files changed, 96 insertions, 0 deletions
diff --git a/meta-oe/recipes-crypto/cryptsetup/cryptsetup_2.4.2.bb b/meta-oe/recipes-crypto/cryptsetup/cryptsetup_2.4.2.bb new file mode 100644 index 000000000..621ac0f2f --- /dev/null +++ b/meta-oe/recipes-crypto/cryptsetup/cryptsetup_2.4.2.bb | |||
@@ -0,0 +1,96 @@ | |||
1 | SUMMARY = "Manage plain dm-crypt and LUKS encrypted volumes" | ||
2 | DESCRIPTION = "Cryptsetup is used to conveniently setup dm-crypt managed \ | ||
3 | device-mapper mappings. These include plain dm-crypt volumes and \ | ||
4 | LUKS volumes. The difference is that LUKS uses a metadata header \ | ||
5 | and can hence offer more features than plain dm-crypt. On the other \ | ||
6 | hand, the header is visible and vulnerable to damage." | ||
7 | HOMEPAGE = "https://gitlab.com/cryptsetup/cryptsetup" | ||
8 | SECTION = "console" | ||
9 | LICENSE = "GPL-2.0-with-OpenSSL-exception" | ||
10 | LIC_FILES_CHKSUM = "file://COPYING;md5=32107dd283b1dfeb66c9b3e6be312326" | ||
11 | |||
12 | DEPENDS = " \ | ||
13 | json-c \ | ||
14 | libdevmapper \ | ||
15 | popt \ | ||
16 | util-linux-libuuid \ | ||
17 | libssh \ | ||
18 | " | ||
19 | |||
20 | DEPENDS:append:libc-musl = " argp-standalone" | ||
21 | LDFLAGS:append:libc-musl = " -largp" | ||
22 | |||
23 | SRC_URI = "${KERNELORG_MIRROR}/linux/utils/${BPN}/v${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}/${BP}.tar.xz" | ||
24 | SRC_URI[sha256sum] = "170cc2326a9daeeeb578579176bd10d4a60ee5c4fc5bc69018ce67dafc540b9c" | ||
25 | |||
26 | inherit autotools gettext pkgconfig | ||
27 | |||
28 | # Use openssl because libgcrypt drops root privileges | ||
29 | # if libgcrypt is linked with libcap support | ||
30 | PACKAGECONFIG ??= " \ | ||
31 | keyring \ | ||
32 | cryptsetup \ | ||
33 | veritysetup \ | ||
34 | cryptsetup-reencrypt \ | ||
35 | integritysetup \ | ||
36 | ${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)} \ | ||
37 | kernel_crypto \ | ||
38 | internal-argon2 \ | ||
39 | blkid \ | ||
40 | luks-adjust-xts-keysize \ | ||
41 | openssl \ | ||
42 | " | ||
43 | PACKAGECONFIG:append:class-target = " \ | ||
44 | udev \ | ||
45 | " | ||
46 | |||
47 | PACKAGECONFIG[keyring] = "--enable-keyring,--disable-keyring" | ||
48 | PACKAGECONFIG[fips] = "--enable-fips,--disable-fips" | ||
49 | PACKAGECONFIG[pwquality] = "--enable-pwquality,--disable-pwquality,libpwquality" | ||
50 | PACKAGECONFIG[passwdqc] = "--enable-passwdqc,--disable-passwdqc,passwdqc" | ||
51 | PACKAGECONFIG[cryptsetup] = "--enable-cryptsetup,--disable-cryptsetup" | ||
52 | PACKAGECONFIG[veritysetup] = "--enable-veritysetup,--disable-veritysetup" | ||
53 | PACKAGECONFIG[cryptsetup-reencrypt] = "--enable-cryptsetup-reencrypt,--disable-cryptsetup-reencrypt" | ||
54 | PACKAGECONFIG[integritysetup] = "--enable-integritysetup,--disable-integritysetup" | ||
55 | PACKAGECONFIG[selinux] = "--enable-selinux,--disable-selinux" | ||
56 | PACKAGECONFIG[udev] = "--enable-udev,--disable-udev,,udev lvm2-udevrules" | ||
57 | PACKAGECONFIG[kernel_crypto] = "--enable-kernel_crypto,--disable-kernel_crypto" | ||
58 | # gcrypt-pkbdf2 requries --with-crypto_backend=gcrypt or the flag isn't | ||
59 | # recognized. | ||
60 | PACKAGECONFIG[gcrypt-pbkdf2] = "--enable-gcrypt-pbkdf2" | ||
61 | PACKAGECONFIG[internal-argon2] = "--enable-internal-argon2,--disable-internal-argon2" | ||
62 | PACKAGECONFIG[internal-sse-argon2] = "--enable-internal-sse-argon2,--disable-internal-sse-argon2" | ||
63 | PACKAGECONFIG[blkid] = "--enable-blkid,--disable-blkid,util-linux" | ||
64 | PACKAGECONFIG[dev-random] = "--enable-dev-random,--disable-dev-random" | ||
65 | PACKAGECONFIG[luks-adjust-xts-keysize] = "--enable-luks-adjust-xts-keysize,--disable-luks-adjust-xts-keysize" | ||
66 | PACKAGECONFIG[openssl] = "--with-crypto_backend=openssl,,openssl" | ||
67 | PACKAGECONFIG[gcrypt] = "--with-crypto_backend=gcrypt,,libgcrypt" | ||
68 | PACKAGECONFIG[nss] = "--with-crypto_backend=nss,,nss" | ||
69 | PACKAGECONFIG[kernel] = "--with-crypto_backend=kernel" | ||
70 | PACKAGECONFIG[nettle] = "--with-crypto_backend=nettle,,nettle" | ||
71 | PACKAGECONFIG[luks2] = "--with-default-luks-format=LUKS2,--with-default-luks-format=LUKS1" | ||
72 | |||
73 | EXTRA_OECONF = "--enable-static" | ||
74 | # Building without largefile is not supported by upstream | ||
75 | EXTRA_OECONF += "--enable-largefile" | ||
76 | # Requires a static popt library | ||
77 | EXTRA_OECONF += "--disable-static-cryptsetup" | ||
78 | # There's no recipe for libargon2 yet | ||
79 | EXTRA_OECONF += "--disable-libargon2" | ||
80 | |||
81 | FILES:${PN} += "${@bb.utils.contains('DISTRO_FEATURES','systemd','${exec_prefix}/lib/tmpfiles.d/cryptsetup.conf', '', d)}" | ||
82 | |||
83 | RDEPENDS:${PN} = " \ | ||
84 | libdevmapper \ | ||
85 | " | ||
86 | |||
87 | RRECOMMENDS:${PN}:class-target = " \ | ||
88 | kernel-module-aes-generic \ | ||
89 | kernel-module-dm-crypt \ | ||
90 | kernel-module-md5 \ | ||
91 | kernel-module-cbc \ | ||
92 | kernel-module-sha256-generic \ | ||
93 | kernel-module-xts \ | ||
94 | " | ||
95 | |||
96 | BBCLASSEXTEND = "native nativesdk" | ||