kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/sysutils/pefs-kmod/Makefile

33 lines
642 B
Makefile
Raw Normal View History

SSP support has been added to ports with WITH_SSP for i386 and amd64 on FreeBSD 10, and amd64 on earlier versions. SSP_UNSAFE is added to disable in a port if it fails to build, but this should only be used in rare circumstances such as kernel modules. Otherwise, the port may just be failing due to lack of respecting LDFLAGS. On FreeBSD 10, this uses an ldscript in /usr/lib/libc.so to pull in libssp_nonshared.a to address issues linking on i386 [1]. On earlier FreeBSD versions the WITH_SSP knob will add -lssp_nonshared to LDFLAGS on i386. This is not needed on amd64. However, several hundred ports do not currently respect LDFLAGS, so this support is disabled currently as it causes build failures if a dependency is looking for the stack_chk symbols. Many thanks to jlh@ for this as he had many years of patience in getting all of the necessary pieces [1][2] in. [1] http://svnweb.freebsd.org/base/head/lib/libc/libc.ldscript?revision=251668&view=markup PR: ports/138228 [2] Submitted by: jlh (bsd.ssp.mk based on) Reviewed by: bapt With hat: portmgr exp-runs done: 37 over a month on 91i386,91amd64,10i386,10amd64
2013-09-20 14:54:54 +02:00
# Created by: Gleb Kurtsou <gleb@FreeBSD.org>
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
# $FreeBSD$
PORTNAME= pefs
- Update to 2014.03.31 Submitted by: gleb@freebsd.org
2014-05-05 20:31:54 +02:00
DISTVERSION= 2014-03-31
Convert to USES=kmod, which removes duplicated code and ensures that all required steps are followed. There are no user-visible changes. The exception is multimedia/ptx-kmod, which now installs the kernel module into /boot/modules instead of ${PREFIX}/libexec/${PORTNAME}, this was something USES=kmod cannot handle. PR: ports/183625 Submitted by: myself Approved by: portmgr (bdrewery) Exp-run by: bdrewery
2013-11-09 20:13:27 +01:00
CATEGORIES= sysutils
- Update to 2014.03.31 Submitted by: gleb@freebsd.org
2014-05-05 20:31:54 +02:00
MASTER_SITES= LOCAL/gleb
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
PKGNAMESUFFIX= -kmod
- Update to 2011-12-25 Submitted by: gleb (maintainer)
2011-12-26 18:13:39 +01:00
MAINTAINER= gleb@FreeBSD.org
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
COMMENT= PEFS kernel level stacked cryptographic filesystem
- Support stage - Remove check for FreeBSD < 8 and include bsd.port.mk only once - Properly specify license (BSD2CLAUSE) Approved by: portmgr (infrastructure blanket)
2014-01-27 13:30:10 +01:00
LICENSE= BSD2CLAUSE
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
MAKE_ENV= BINDIR="${PREFIX}/sbin" MANDIR="${MANPREFIX}/man/man" \
Convert to USES=kmod, which removes duplicated code and ensures that all required steps are followed. There are no user-visible changes. The exception is multimedia/ptx-kmod, which now installs the kernel module into /boot/modules instead of ${PREFIX}/libexec/${PORTNAME}, this was something USES=kmod cannot handle. PR: ports/183625 Submitted by: myself Approved by: portmgr (bdrewery) Exp-run by: bdrewery
2013-11-09 20:13:27 +01:00
NO_MANCOMPRESS=
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
ONLY_FOR_ARCHS= i386 amd64 # not tested on other archs
- Support stage - Remove check for FreeBSD < 8 and include bsd.port.mk only once - Properly specify license (BSD2CLAUSE) Approved by: portmgr (infrastructure blanket)
2014-01-27 13:30:10 +01:00
USES= kmod uidfix
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
- Update to 2014.03.31 Submitted by: gleb@freebsd.org
2014-05-05 20:31:54 +02:00
OPTIONS_DEFINE= AESNI
OPTIONS_DEFAULT=
AESNI_DESC= Enable AES-NI hardware acceleration
.include <bsd.port.options.mk>
.if ${PORT_OPTIONS:MAESNI}
MAKE_ENV+= PEFS_AESNI=yes
.endif
- Support stage - Remove check for FreeBSD < 8 and include bsd.port.mk only once - Properly specify license (BSD2CLAUSE) Approved by: portmgr (infrastructure blanket)
2014-01-27 13:30:10 +01:00
.include <bsd.port.mk>
Reference in a new issue Copy permalink