Files
John Audia 97e17c70fc fscrypt: update to 0.3.7
Changelog:
- Upgraded various dependencies, including golang.org/x/crypto to resolve the usual
  CVEs in it (but as usual, not actually affecting fscrypt's use of it).
- When selecting password hashing parameters, fscrypt now takes cgroup limitations
  into consideration.
- fscrypt encrypt no longer follows trailing symlinks when writing the recovery
  instructions.
- fscrypt unlock no longer enters an infinite loop when an incorrect key file is
  specified using --key=FILE, --quiet isn't specified, and standard input is a terminal.
- fscrypt unlock no longer enters an infinite loop when an incorrect password is specified,
  --quiet isn't specified, and standard input isn't a terminal.
- The error message when multiple protectors are available now mentions --unlock-with in
  addition to --protector.
- Documented the udev dependency for /dev/disk/by-uuid/ links.

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-08-27 14:50:51 +03:00

58 lines
1.7 KiB
Makefile

include $(TOPDIR)/rules.mk
PKG_NAME:=fscrypt
PKG_VERSION:=0.3.7
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/google/fscrypt/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=9cd8913293572709e122a7c7fa1463fb0e0cf9b38f1d3bf633939564d8cc6245
PKG_LICENSE:=Apache-2.0
PKG_LICENSE_FILES:=LICENSE
PKG_CPE_ID:=cpe:/a:google:fscrypt
PKG_MAINTAINER:=John Audia <therealgraysky@proton.me>
PKG_BUILD_DEPENDS:=golang/host
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16
GO_PKG:=github.com/google/fscrypt
GO_PKG_LDFLAGS_X:=main.version=v$(PKG_VERSION)
include $(INCLUDE_DIR)/package.mk
include ../../lang/golang/golang-package.mk
define Package/fscrypt
SECTION:=utils
CATEGORY:=Utilities
SUBMENU:=Encryption
TITLE:=A tool for managing Linux filesystem encryption
URL:=https://github.com/google/fscrypt
DEPENDS:=$(GO_ARCH_DEPENDS) +libpam +@KERNEL_FS_ENCRYPTION
KCONFIG:=CONFIG_FS_ENCRYPTION=y
endef
define Package/fscrypt/description
Fscrypt is a high-level tool for the management of Linux native filesystem
encryption. Fscrypt manages metadata, key generation, key wrapping, PAM integration,
and provides a uniform interface for creating and modifying encrypted directories.
endef
define Package/fscrypt/install
$(call GoPackage/Package/Install/Bin,$(1))
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_DIR) $(1)/usr/lib/security
$(INSTALL_DIR) $(1)/etc/pam.d
$(INSTALL_BIN) $(GO_PKG_BUILD_BIN_DIR)/fscrypt $(1)/usr/bin/fscrypt
$(INSTALL_BIN) $(GO_PKG_BUILD_BIN_DIR)/pam_fscrypt $(1)/usr/lib/security/pam_fscrypt.so
$(INSTALL_DATA) ./files/pam_config $(1)/etc/pam.d/fscrypt
endef
define Package/fscrypt/conffiles
/etc/fscrypt.conf
endef
$(eval $(call GoBinPackage,fscrypt))
$(eval $(call BuildPackage,fscrypt))