mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: Clemens Gruber <clemens.gruber@pqgruber.com>
To: ptxdist@pengutronix.de
Subject: Re: [ptxdist] [PATCH] cryptsetup: new package
Date: Mon, 25 Sep 2017 17:11:14 +0200	[thread overview]
Message-ID: <20170925151114.GA11161@archie.localdomain> (raw)
In-Reply-To: <20170925130505.rb2os2hbbmjnekot@pengutronix.de>

On Mon, Sep 25, 2017 at 03:05:05PM +0200, Michael Olbrich wrote:
> On Tue, Sep 19, 2017 at 04:00:44PM +0200, Sascha Hauer wrote:
> > This adds support for the cryptsetup tools to ptxdist.
> > 
> > Cryptsetup is a utility used to conveniently setup disk encryption based
> > on DMCrypt kernel module.
> > 
> > Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
> > ---
> >  rules/cryptsetup.in   | 22 ++++++++++++
> >  rules/cryptsetup.make | 96 +++++++++++++++++++++++++++++++++++++++++++++++++++
> >  2 files changed, 118 insertions(+)
> >  create mode 100644 rules/cryptsetup.in
> >  create mode 100644 rules/cryptsetup.make
> > 
> > diff --git a/rules/cryptsetup.in b/rules/cryptsetup.in
> > new file mode 100644
> > index 000000000..04d123615
> > --- /dev/null
> > +++ b/rules/cryptsetup.in
> > @@ -0,0 +1,22 @@
> > +## SECTION=disk_and_file
> > +
> > +menuconfig CRYPTSETUP
> > +	select LVM2
> > +	select LIBUUID
> > +	tristate
> > +	prompt "cryptsetup                    "
> > +	help
> > +	  Cryptsetup is a utility used to conveniently setup disk encryption
> > +	  based on DMCrypt kernel module.
> > +
> > +if CRYPTSETUP
> > +
> > +config CRYPTSETUP_CRYPTSETUP
> > +	bool
> > +	prompt "install cryptsetup"
> > +
> > +config CRYPTSETUP_VERITYSETUP
> > +	bool
> > +	prompt "install veritysetup"
> > +
> > +endif
> > diff --git a/rules/cryptsetup.make b/rules/cryptsetup.make
> > new file mode 100644
> > index 000000000..303da5484
> > --- /dev/null
> > +++ b/rules/cryptsetup.make
> > @@ -0,0 +1,96 @@
> > +# -*-makefile-*-
> > +#
> > +# Copyright (C) 2017 by Sascha Hauer <s.hauer@pengutronix.de>
> > +#
> > +# See CREDITS for details about who has contributed to this project.
> > +#
> > +# For further information about the PTXdist project and license conditions
> > +# see the README file.
> > +#
> > +
> > +#
> > +# We provide this package
> > +#
> > +PACKAGES-$(PTXCONF_CRYPTSETUP) += cryptsetup
> > +
> > +#
> > +# Paths and names
> > +#
> > +CRYPTSETUP_VERSION	:= 1.7.5
> > +CRYPTSETUP_MD5		:= dde798a883b06a2903379dcd593480e1
> > +CRYPTSETUP		:= cryptsetup-$(CRYPTSETUP_VERSION)
> > +CRYPTSETUP_SUFFIX	:= tar.gz
> > +CRYPTSETUP_URL		:= https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7//$(CRYPTSETUP).$(CRYPTSETUP_SUFFIX)
> > +CRYPTSETUP_SOURCE	:= $(SRCDIR)/$(CRYPTSETUP).$(CRYPTSETUP_SUFFIX)
> > +CRYPTSETUP_DIR		:= $(BUILDDIR)/$(CRYPTSETUP)
> > +CRYPTSETUP_LICENSE	:= GPL-2.0+
> > +
> > +# ----------------------------------------------------------------------------
> > +# Prepare
> > +# ----------------------------------------------------------------------------
> > +
> > +#
> > +# autoconf
> > +#
> > +CRYPTSETUP_CONF_TOOL	:= autoconf
> > +CRYPTSETUP_CONF_OPT	:= \
> > +	$(CROSS_AUTOCONF_USR) \
> > +	$(GLOBAL_LARGE_FILE_OPTION) \
> > +	--disable-nls \
> > +	--disable-rpath \
> > +	--disable-pwquality \
> > +	--disable-static-cryptsetup \
> > +	--enable-veritysetup \
> > +	--enable-cryptsetup-reencrypt \
> > +	--disable-selinux \
> > +	--enable-udev \
> > +	--enable-kernel_crypto \
> > +	--enable-gcrypt-pbkdf2 \
> > +	--enable-dev-random \
> > +	--disable-python \
> > +	--with-crypto_backend=gcrypt \
> 
> This requires a 'select LIBGCRYPT' and LIBPOPT is used as well.

I think the backend should be configurable. I am using
--with-crypto_backend=kernel but nettle and openssl are also supported.

Clemens

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

      reply	other threads:[~2017-09-25 15:11 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-09-19 14:00 Sascha Hauer
2017-09-25 13:05 ` Michael Olbrich
2017-09-25 15:11   ` Clemens Gruber [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20170925151114.GA11161@archie.localdomain \
    --to=clemens.gruber@pqgruber.com \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox