Ludwig Nussel
59aec6d066
- Add virtual provides for 'integritysetup' and 'veritysetup' to match package names provided by Fedora/RHEL, to allow the same set of dependencies to be used across all RPM distributions. OBS-URL: https://build.opensuse.org/request/show/1003354 OBS-URL: https://build.opensuse.org/package/show/security/cryptsetup?expand=0&rev=180
245 lines
7.9 KiB
RPMSpec
245 lines
7.9 KiB
RPMSpec
#
|
|
# spec file for package cryptsetup
|
|
#
|
|
# Copyright (c) 2022 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define tar_version 2.5.0
|
|
%define so_ver 12
|
|
Name: cryptsetup
|
|
Version: 2.5.0
|
|
Release: 0
|
|
Summary: Setup program for dm-crypt Based Encrypted Block Devices
|
|
License: LGPL-2.0-or-later AND SUSE-GPL-2.0-with-openssl-exception
|
|
Group: System/Base
|
|
URL: https://gitlab.com/cryptsetup/cryptsetup/
|
|
Source0: https://www.kernel.org/pub/linux/utils/cryptsetup/v2.5/cryptsetup-%{tar_version}.tar.xz
|
|
# GPG signature of the uncompressed tarball.
|
|
Source1: https://www.kernel.org/pub/linux/utils/cryptsetup/v2.5/cryptsetup-%{tar_version}.tar.sign
|
|
Source2: baselibs.conf
|
|
Source3: cryptsetup.keyring
|
|
Source4: %{name}-rpmlintrc
|
|
BuildRequires: device-mapper-devel
|
|
BuildRequires: fipscheck
|
|
BuildRequires: fipscheck-devel
|
|
BuildRequires: libjson-c-devel
|
|
BuildRequires: libpwquality-devel
|
|
BuildRequires: libselinux-devel
|
|
BuildRequires: libuuid-devel
|
|
# 2.6.38 has the required if_alg.h
|
|
BuildRequires: linux-glibc-devel >= 2.6.38
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: popt-devel
|
|
BuildRequires: suse-module-tools
|
|
BuildRequires: pkgconfig(blkid)
|
|
BuildRequires: pkgconfig(libargon2)
|
|
BuildRequires: pkgconfig(libssh)
|
|
BuildRequires: pkgconfig(openssl)
|
|
BuildRequires: rubygem(asciidoctor)
|
|
Requires(post): coreutils
|
|
Requires(postun):coreutils
|
|
Provides: integritysetup = %{version}-%{release}
|
|
Provides: veritysetup = %{version}-%{release}
|
|
%if %{?suse_version} >= 1550
|
|
# LUKS2 used as default format, which GRUB < 2.06 can't read
|
|
Conflicts: grub2 < 2.06
|
|
%endif
|
|
|
|
%lang_package(cryptsetup)
|
|
|
|
%description
|
|
cryptsetup is used to conveniently set up dm-crypt based device-mapper
|
|
targets. It allows to set up targets to read cryptoloop compatible
|
|
volumes as well as LUKS formatted ones. The package additionally
|
|
includes support for automatically setting up encrypted volumes at boot
|
|
time via the config file %{_sysconfdir}/crypttab.
|
|
|
|
%package ssh
|
|
Summary: Cryptsetup LUKS2 SSH token
|
|
Group: System/Base
|
|
|
|
%description ssh
|
|
Experimental cryptsetup plugin for unlocking LUKS2 devices with
|
|
token connected to an SSH server.
|
|
|
|
%package doc
|
|
Summary: Cryptsetup Documentation
|
|
Group: Documentation/Man
|
|
Supplements: (cryptsetup and man)
|
|
Supplements: (cryptsetup and patterns-base-documentation)
|
|
|
|
%description doc
|
|
Documentation and man pages for cryptsetup
|
|
|
|
%package -n libcryptsetup%{so_ver}
|
|
Summary: Library for setting up dm-crypt Based Encrypted Block Devices
|
|
Group: System/Libraries
|
|
Suggests: libcryptsetup%{so_ver}-hmac = %{version}-%{release}
|
|
|
|
%description -n libcryptsetup%{so_ver}
|
|
cryptsetup is used to conveniently set up dm-crypt based device-mapper
|
|
targets. It allows to set up targets to read cryptoloop compatible
|
|
volumes as well as LUKS formatted ones. The package additionally
|
|
includes support for automatically setting up encrypted volumes at boot
|
|
time via the config file %{_sysconfdir}/crypttab.
|
|
|
|
%package -n libcryptsetup%{so_ver}-hmac
|
|
Summary: Checksums for libcryptsetup%{so_ver}
|
|
Group: System/Base
|
|
Requires: libcryptsetup%{so_ver} = %{version}-%{release}
|
|
|
|
%description -n libcryptsetup%{so_ver}-hmac
|
|
This package contains HMAC checksums for integrity checking of libcryptsetup4,
|
|
used for FIPS.
|
|
|
|
%package -n lib%{name}-devel
|
|
Summary: Header files for libcryptsetup
|
|
Group: Development/Libraries/C and C++
|
|
Requires: glibc-devel
|
|
Requires: libcryptsetup%{so_ver} = %{version}
|
|
# cryptsetup-devel last used 11.1
|
|
Provides: cryptsetup-devel = %{version}
|
|
Obsoletes: cryptsetup-devel < %{version}
|
|
|
|
%description -n lib%{name}-devel
|
|
cryptsetup is used to conveniently set up dm-crypt based device-mapper
|
|
targets. It allows to set up targets to read cryptoloop compatible
|
|
volumes as well as LUKS formatted ones. The package additionally
|
|
includes support for automatically setting up encrypted volumes at boot
|
|
time via the config file %{_sysconfdir}/crypttab.
|
|
|
|
%prep
|
|
%autosetup -n cryptsetup-%{tar_version}
|
|
|
|
%build
|
|
%configure \
|
|
--enable-selinux \
|
|
--enable-fips \
|
|
--enable-pwquality \
|
|
--enable-gcrypt-pbkdf2 \
|
|
--enable-libargon2 \
|
|
%if %{?suse_version} < 1550
|
|
--with-default-luks-format=LUKS1 \
|
|
%endif
|
|
--with-luks2-lock-path=/run/cryptsetup \
|
|
--with-tmpfilesdir='%{_tmpfilesdir}'
|
|
%make_build
|
|
|
|
%install
|
|
# Generate HMAC checksums (FIPS)
|
|
%define __spec_install_post \
|
|
%{?__debug_package:%{__debug_install_post}} \
|
|
%{__arch_install_post} \
|
|
%__os_install_post \
|
|
fipshmac %{buildroot}/%{_libdir}/libcryptsetup.so.* \
|
|
%{nil}
|
|
|
|
%make_install
|
|
%if !0%{?usrmerged}
|
|
install -dm 0755 %{buildroot}/sbin
|
|
ln -s ..%{_sbindir}/cryptsetup %{buildroot}/sbin
|
|
%endif
|
|
# don't want this file in /lib (FHS compat check), and can't move it to /usr/lib
|
|
find %{buildroot} -type f -name "*.la" -delete -print
|
|
#
|
|
%find_lang %{name} --all-name
|
|
|
|
%post
|
|
%{?regenerate_initrd_post}
|
|
%tmpfiles_create %{_tmpfilesdir}/cryptsetup.conf
|
|
|
|
%postun
|
|
%{?regenerate_initrd_post}
|
|
|
|
%posttrans
|
|
%{?regenerate_initrd_posttrans}
|
|
|
|
%post -n libcryptsetup%{so_ver} -p /sbin/ldconfig
|
|
|
|
%postun -n libcryptsetup%{so_ver} -p /sbin/ldconfig
|
|
|
|
%files
|
|
%license COPYING*
|
|
%if !0%{?usrmerged}
|
|
/sbin/cryptsetup
|
|
%endif
|
|
%{_sbindir}/cryptsetup
|
|
%{_sbindir}/veritysetup
|
|
%{_sbindir}/integritysetup
|
|
%{_tmpfilesdir}/cryptsetup.conf
|
|
|
|
%files lang -f %{name}.lang
|
|
|
|
%files -n libcryptsetup%{so_ver}
|
|
%{_libdir}/libcryptsetup.so.%{so_ver}*
|
|
|
|
%files -n libcryptsetup%{so_ver}-hmac
|
|
%{_libdir}/.libcryptsetup.so.%{so_ver}*hmac
|
|
|
|
%files -n lib%{name}-devel
|
|
%doc docs/examples/
|
|
%{_includedir}/libcryptsetup.h
|
|
%{_libdir}/libcryptsetup.so
|
|
%{_libdir}/pkgconfig/*
|
|
|
|
%files ssh
|
|
%license COPYING COPYING.LGPL
|
|
%dir %{_libdir}/%{name}
|
|
%{_libdir}/%{name}/libcryptsetup-token-ssh.so
|
|
%{_mandir}/man8/cryptsetup-ssh.8.gz
|
|
%{_sbindir}/cryptsetup-ssh
|
|
|
|
%files doc
|
|
%doc AUTHORS FAQ.md README.md docs/*ReleaseNotes
|
|
%{_mandir}/man8/cryptsetup.8.gz
|
|
%{_mandir}/man8/cryptsetup-benchmark.8.gz
|
|
%{_mandir}/man8/cryptsetup-bitlkDump.8.gz
|
|
%{_mandir}/man8/cryptsetup-bitlkOpen.8.gz
|
|
%{_mandir}/man8/cryptsetup-close.8.gz
|
|
%{_mandir}/man8/cryptsetup-config.8.gz
|
|
%{_mandir}/man8/cryptsetup-convert.8.gz
|
|
%{_mandir}/man8/cryptsetup-create.8.gz
|
|
%{_mandir}/man8/cryptsetup-erase.8.gz
|
|
%{_mandir}/man8/cryptsetup-isLuks.8.gz
|
|
%{_mandir}/man8/cryptsetup-loopaesOpen.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksAddKey.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksChangeKey.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksConvertKey.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksDump.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksErase.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksFormat.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksHeaderBackup.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksHeaderRestore.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksKillSlot.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksOpen.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksRemoveKey.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksResume.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksSuspend.8.gz
|
|
%{_mandir}/man8/cryptsetup-luksUUID.8.gz
|
|
%{_mandir}/man8/cryptsetup-open.8.gz
|
|
%{_mandir}/man8/cryptsetup-plainOpen.8.gz
|
|
%{_mandir}/man8/cryptsetup-reencrypt.8.gz
|
|
%{_mandir}/man8/cryptsetup-refresh.8.gz
|
|
%{_mandir}/man8/cryptsetup-repair.8.gz
|
|
%{_mandir}/man8/cryptsetup-resize.8.gz
|
|
%{_mandir}/man8/cryptsetup-status.8.gz
|
|
%{_mandir}/man8/cryptsetup-tcryptDump.8.gz
|
|
%{_mandir}/man8/cryptsetup-tcryptOpen.8.gz
|
|
%{_mandir}/man8/cryptsetup-token.8.gz
|
|
%{_mandir}/man8/integritysetup.8.gz
|
|
%{_mandir}/man8/veritysetup.8.gz
|
|
|
|
%changelog
|