| Andrew Geissler | eff2747 | 2021-10-29 15:35:00 -0500 | [diff] [blame^] | 1 | SUMMARY = "Manage plain dm-crypt and LUKS encrypted volumes" |
| 2 | DESCRIPTION = "Cryptsetup is used to conveniently setup dm-crypt managed \ |
| 3 | device-mapper mappings. These include plain dm-crypt volumes and \ |
| 4 | LUKS volumes. The difference is that LUKS uses a metadata header \ |
| 5 | and can hence offer more features than plain dm-crypt. On the other \ |
| 6 | hand, the header is visible and vulnerable to damage." |
| 7 | HOMEPAGE = "https://gitlab.com/cryptsetup/cryptsetup" |
| 8 | SECTION = "console" |
| 9 | LICENSE = "GPL-2.0-with-OpenSSL-exception" |
| 10 | LIC_FILES_CHKSUM = "file://COPYING;md5=32107dd283b1dfeb66c9b3e6be312326" |
| 11 | |
| 12 | DEPENDS = " \ |
| 13 | json-c \ |
| 14 | libdevmapper \ |
| 15 | popt \ |
| 16 | util-linux-libuuid \ |
| 17 | libssh \ |
| 18 | " |
| 19 | |
| 20 | DEPENDS:append:libc-musl = " argp-standalone" |
| 21 | LDFLAGS:append:libc-musl = " -largp" |
| 22 | |
| 23 | SRC_URI = "${KERNELORG_MIRROR}/linux/utils/${BPN}/v${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}/${BP}.tar.xz" |
| 24 | SRC_URI[sha256sum] = "a356a727a83a464ade566e95239622a22dbe4e0f482b198fdb04ab0d3a5a9c5f" |
| 25 | |
| 26 | inherit autotools gettext pkgconfig |
| 27 | |
| 28 | # Use openssl because libgcrypt drops root privileges |
| 29 | # if libgcrypt is linked with libcap support |
| 30 | PACKAGECONFIG ??= " \ |
| 31 | keyring \ |
| 32 | cryptsetup \ |
| 33 | veritysetup \ |
| 34 | cryptsetup-reencrypt \ |
| 35 | integritysetup \ |
| 36 | ${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)} \ |
| 37 | kernel_crypto \ |
| 38 | internal-argon2 \ |
| 39 | blkid \ |
| 40 | luks-adjust-xts-keysize \ |
| 41 | openssl \ |
| 42 | " |
| 43 | PACKAGECONFIG:append:class-target = " \ |
| 44 | udev \ |
| 45 | " |
| 46 | |
| 47 | PACKAGECONFIG[keyring] = "--enable-keyring,--disable-keyring" |
| 48 | PACKAGECONFIG[fips] = "--enable-fips,--disable-fips" |
| 49 | PACKAGECONFIG[pwquality] = "--enable-pwquality,--disable-pwquality,libpwquality" |
| 50 | PACKAGECONFIG[passwdqc] = "--enable-passwdqc,--disable-passwdqc,passwdqc" |
| 51 | PACKAGECONFIG[cryptsetup] = "--enable-cryptsetup,--disable-cryptsetup" |
| 52 | PACKAGECONFIG[veritysetup] = "--enable-veritysetup,--disable-veritysetup" |
| 53 | PACKAGECONFIG[cryptsetup-reencrypt] = "--enable-cryptsetup-reencrypt,--disable-cryptsetup-reencrypt" |
| 54 | PACKAGECONFIG[integritysetup] = "--enable-integritysetup,--disable-integritysetup" |
| 55 | PACKAGECONFIG[selinux] = "--enable-selinux,--disable-selinux" |
| 56 | PACKAGECONFIG[udev] = "--enable-udev,--disable-udev,,udev lvm2-udevrules" |
| 57 | PACKAGECONFIG[kernel_crypto] = "--enable-kernel_crypto,--disable-kernel_crypto" |
| 58 | # gcrypt-pkbdf2 requries --with-crypto_backend=gcrypt or the flag isn't |
| 59 | # recognized. |
| 60 | PACKAGECONFIG[gcrypt-pbkdf2] = "--enable-gcrypt-pbkdf2" |
| 61 | PACKAGECONFIG[internal-argon2] = "--enable-internal-argon2,--disable-internal-argon2" |
| 62 | PACKAGECONFIG[internal-sse-argon2] = "--enable-internal-sse-argon2,--disable-internal-sse-argon2" |
| 63 | PACKAGECONFIG[blkid] = "--enable-blkid,--disable-blkid,util-linux" |
| 64 | PACKAGECONFIG[dev-random] = "--enable-dev-random,--disable-dev-random" |
| 65 | PACKAGECONFIG[luks-adjust-xts-keysize] = "--enable-luks-adjust-xts-keysize,--disable-luks-adjust-xts-keysize" |
| 66 | PACKAGECONFIG[openssl] = "--with-crypto_backend=openssl,,openssl" |
| 67 | PACKAGECONFIG[gcrypt] = "--with-crypto_backend=gcrypt,,libgcrypt" |
| 68 | PACKAGECONFIG[nss] = "--with-crypto_backend=nss,,nss" |
| 69 | PACKAGECONFIG[kernel] = "--with-crypto_backend=kernel" |
| 70 | PACKAGECONFIG[nettle] = "--with-crypto_backend=nettle,,nettle" |
| 71 | PACKAGECONFIG[luks2] = "--with-default-luks-format=LUKS2,--with-default-luks-format=LUKS1" |
| 72 | |
| 73 | EXTRA_OECONF = "--enable-static" |
| 74 | # Building without largefile is not supported by upstream |
| 75 | EXTRA_OECONF += "--enable-largefile" |
| 76 | # Requires a static popt library |
| 77 | EXTRA_OECONF += "--disable-static-cryptsetup" |
| 78 | # There's no recipe for libargon2 yet |
| 79 | EXTRA_OECONF += "--disable-libargon2" |
| 80 | |
| 81 | FILES:${PN} += "${@bb.utils.contains('DISTRO_FEATURES','systemd','${exec_prefix}/lib/tmpfiles.d/cryptsetup.conf', '', d)}" |
| 82 | |
| 83 | RDEPENDS:${PN} = " \ |
| 84 | libdevmapper \ |
| 85 | " |
| 86 | |
| 87 | RRECOMMENDS:${PN}:class-target = " \ |
| 88 | kernel-module-aes-generic \ |
| 89 | kernel-module-dm-crypt \ |
| 90 | kernel-module-md5 \ |
| 91 | kernel-module-cbc \ |
| 92 | kernel-module-sha256-generic \ |
| 93 | kernel-module-xts \ |
| 94 | " |
| 95 | |
| 96 | BBCLASSEXTEND = "native nativesdk" |