[ptxdist] [PATCH 5/5] host-cryptsetup: new package

[Bastian Krause <bst@pengutronix.de>]

This is useful for offline hash data creation for dm-verity based
filesystems with veritysetup. Everything else is disabled for now.

openssl is used as crypto backend because host-openssl is enabled in
most cases anyway.

Signed-off-by: Bastian Krause <bst@pengutronix.de>
---
 rules/host-cryptsetup.in   | 17 +++++++++++++
 rules/host-cryptsetup.make | 49 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 66 insertions(+)
 create mode 100644 rules/host-cryptsetup.in
 create mode 100644 rules/host-cryptsetup.make

diff --git a/rules/host-cryptsetup.in b/rules/host-cryptsetup.in
new file mode 100644
index 000000000..c0a2aef90
--- /dev/null
+++ b/rules/host-cryptsetup.in
@@ -0,0 +1,17 @@
+## SECTION=hosttools_noprompt
+
+config HOST_CRYPTSETUP
+	tristate
+	default y if ALLYES
+	select HOST_JSON_C
+	select HOST_LVM2
+	select HOST_LIBUUID
+	select HOST_LIBPOPT
+	select HOST_LIBBLKID
+	select HOST_OPENSSL
+	help
+	  Cryptsetup is a utility used to conveniently setup disk encryption
+	  based on the dm-crypt kernel module.
+	  It also includes veritysetup, used to setup dm-verity block integrity
+	  checking of read-only targets, as well as integritysetup to setup
+	  dm-integrity block integrity checking of read-write targets.
diff --git a/rules/host-cryptsetup.make b/rules/host-cryptsetup.make
new file mode 100644
index 000000000..d3a791230
--- /dev/null
+++ b/rules/host-cryptsetup.make
@@ -0,0 +1,49 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2019 by Bastian Krause <bst@pengutronix.de>
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+HOST_PACKAGES-$(PTXCONF_HOST_CRYPTSETUP) += host-cryptsetup
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#
+# autoconf
+#
+HOST_CRYPTSETUP_CONF_TOOL	:= autoconf
+HOST_CRYPTSETUP_CONF_OPT	:= \
+	$(HOST_AUTOCONF) \
+	--disable-keyring \
+	$(GLOBAL_LARGE_FILE_OPTION) \
+	--disable-nls \
+	--disable-rpath \
+	--disable-fips \
+	--disable-pwquality \
+	--disable-static-cryptsetup \
+	--disable-cryptsetup \
+	--enable-veritysetup \
+	--disable-cryptsetup-reencrypt \
+	--disable-integritysetup \
+	--disable-selinux \
+	--disable-udev \
+	--disable-kernel_crypto \
+	--disable-gcrypt-pbkdf2 \
+	--enable-internal-argon2 \
+	--disable-libargon2 \
+	--disable-internal-sse-argon2 \
+	--enable-blkid \
+	--enable-dev-random \
+	--disable-python \
+	--with-crypto_backend=openssl
+
+# vim: syntax=make
-- 
2.20.1


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de