This is useful for offline hash data creation for dm-verity based filesystems with veritysetup. Everything else is disabled for now.
openssl is used as crypto backend because host-openssl is enabled in most cases anyway. Signed-off-by: Bastian Krause <[email protected]> --- rules/host-cryptsetup.in | 17 +++++++++++++ rules/host-cryptsetup.make | 49 ++++++++++++++++++++++++++++++++++++++ 2 files changed, 66 insertions(+) create mode 100644 rules/host-cryptsetup.in create mode 100644 rules/host-cryptsetup.make diff --git a/rules/host-cryptsetup.in b/rules/host-cryptsetup.in new file mode 100644 index 000000000..c0a2aef90 --- /dev/null +++ b/rules/host-cryptsetup.in @@ -0,0 +1,17 @@ +## SECTION=hosttools_noprompt + +config HOST_CRYPTSETUP + tristate + default y if ALLYES + select HOST_JSON_C + select HOST_LVM2 + select HOST_LIBUUID + select HOST_LIBPOPT + select HOST_LIBBLKID + select HOST_OPENSSL + help + Cryptsetup is a utility used to conveniently setup disk encryption + based on the dm-crypt kernel module. + It also includes veritysetup, used to setup dm-verity block integrity + checking of read-only targets, as well as integritysetup to setup + dm-integrity block integrity checking of read-write targets. diff --git a/rules/host-cryptsetup.make b/rules/host-cryptsetup.make new file mode 100644 index 000000000..d3a791230 --- /dev/null +++ b/rules/host-cryptsetup.make @@ -0,0 +1,49 @@ +# -*-makefile-*- +# +# Copyright (C) 2019 by Bastian Krause <[email protected]> +# +# See CREDITS for details about who has contributed to this project. +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +HOST_PACKAGES-$(PTXCONF_HOST_CRYPTSETUP) += host-cryptsetup + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +# +# autoconf +# +HOST_CRYPTSETUP_CONF_TOOL := autoconf +HOST_CRYPTSETUP_CONF_OPT := \ + $(HOST_AUTOCONF) \ + --disable-keyring \ + $(GLOBAL_LARGE_FILE_OPTION) \ + --disable-nls \ + --disable-rpath \ + --disable-fips \ + --disable-pwquality \ + --disable-static-cryptsetup \ + --disable-cryptsetup \ + --enable-veritysetup \ + --disable-cryptsetup-reencrypt \ + --disable-integritysetup \ + --disable-selinux \ + --disable-udev \ + --disable-kernel_crypto \ + --disable-gcrypt-pbkdf2 \ + --enable-internal-argon2 \ + --disable-libargon2 \ + --disable-internal-sse-argon2 \ + --enable-blkid \ + --enable-dev-random \ + --disable-python \ + --with-crypto_backend=openssl + +# vim: syntax=make -- 2.20.1 _______________________________________________ ptxdist mailing list [email protected]
