summaryrefslogtreecommitdiff
path: root/app-forensics/volatility3
diff options
context:
space:
mode:
Diffstat (limited to 'app-forensics/volatility3')
-rw-r--r--app-forensics/volatility3/Manifest6
-rw-r--r--app-forensics/volatility3/files/volatility3-2.4.1-dont-install-tests.patch13
-rw-r--r--app-forensics/volatility3/files/volatility3-2.4.1-install.patch81
-rw-r--r--app-forensics/volatility3/volatility3-2.4.1-r2.ebuild (renamed from app-forensics/volatility3/volatility3-2.4.1-r1.ebuild)4
-rw-r--r--app-forensics/volatility3/volatility3-2.5.2.ebuild60
5 files changed, 147 insertions, 17 deletions
diff --git a/app-forensics/volatility3/Manifest b/app-forensics/volatility3/Manifest
index e9dd2e5a4d90..46ce307701b7 100644
--- a/app-forensics/volatility3/Manifest
+++ b/app-forensics/volatility3/Manifest
@@ -1,6 +1,8 @@
-AUX volatility3-2.4.1-dont-install-tests.patch 468 BLAKE2B 33afeedc66569b5e1ec26751e6b036ca8e985df74c98f9b4674bb9911e7852b69b20e8b5ee68392d0cc8ae163dfc3d6ec5807e77b7d7e658ade97033cfe5192b SHA512 1369ee81b481eccbf65e520528c46b63b8c7850d476362fe8398cfb2ade6ceb6494695790b1b31a587de5b80f3b53ea9f73822cec712ef1ff21b58f312a64195
+AUX volatility3-2.4.1-install.patch 3245 BLAKE2B 5587270eb260452ca298f6218068a8892d9379ca2d19d333119e07e80fcebca34fa9aaefe714a65eb90d782a15ac7dcb273d2c6423677565a450de30bf26e630 SHA512 d23f75b1ae05e68bd90f9e45e65e9453b0f1e17992d8a46bf60463a795a674be56a65a3fee0d8e2f248ba6f72d8c5f16ab0c7c35ecc712670b53c56740a47fc4
DIST volatility3-2.4.1.gh.tar.gz 486648 BLAKE2B 7f00ec6b57eb9ef6420f4c1aa735203fbd51fca39aa13200eb821d13842f879c8743f63da7c5bbcf7d84a2850709a15c0aadc2b0311edbdf34dfa026f2a3dcd6 SHA512 5f785a778654b76fc85b7b82b2e9ba9e6315a99169d4d956a9af84ae91086e7a38cac343b7df0f00d6830361c77d377408bf8eab3679c161c8a02212c696389c
+DIST volatility3-2.5.2.gh.tar.gz 506557 BLAKE2B d6ea1b4a1fad3bcda8fbb38372a492d59659061e2cb9e7915a4f5d46af2fcdba0402b83575e5b5017f00f32975e98281c2885d7c9cfa576a3ee4a41f75f126a7 SHA512 02cfd06928f1667ec481e776c45e954d4a40fa6da6ffbdd30e0980bd5d09ce70d0e31de6e352a833c36045e67c2120ea6a10e2d3ec1327e9e4e4e1c2af494fcf
DIST volatility3-linux-sample-1.bin.gz 143967523 BLAKE2B 3321e991a50b6e4ccf19e0ee48d779664f43f4cdbdb950ca31a5d08c8ee9de0018e2d4f69f42206f7e8f1c6ea735c47f8aa42806ed0f85e9a837b611f07b3289 SHA512 82a34aa1d4e7d7deb9ea12e892f14ba0a28908b2da2e31ca76efd1e9e59d87769064a1ffffe8979a58b992cea7005fa20954df50984dbe1dd186513ad95168d7
DIST volatility3-win-xp-laptop-2005-06-25.img.gz 180343409 BLAKE2B 9fc10ddb9208d7023854e9619f6cf5ce140f2a2aa5772ccd8bcd852dd50c6f77e36298dbf7df1512334e7976b6ab35dd77f4c49505e531c3a289dd0f26cfc01e SHA512 a1f758cc1b4febcf11f64bc01b872c7528d19c686d81f8e03d742424fa0600254914e656cdf35c3752b406354f769a8aa256622b2f2afe2d691c4bb6d3be3f52
-EBUILD volatility3-2.4.1-r1.ebuild 2088 BLAKE2B c90cca9db24874829cb076321dcecec9bf27c41a055a0c40fb87214ff090f3dde22aa322f97635142f7d870bf806611d1a70d01f3afe82b5bcab47f95cd87875 SHA512 d4794ff4f6dfac41d7833fd3f54c5ce472db574fb67b67d3f477e436447900ae0ebe19e072691787e88c8df613e34b69165923aaa170b002171bbae07d76ece9
+EBUILD volatility3-2.4.1-r2.ebuild 2077 BLAKE2B 59125564c41121ee67f54e9486d8966e5540c0516ffc4abdd031d101c869ed2d86f57cfd0b9dd73cb5961702eeddd77b9877ec6738441a8f4d934151c3ff6c9c SHA512 292515ae69015e8255cf6edbfaec960767d8c39e77199f71e21b6f4500ff4ad19482a31f1654a9e797c6773caf12d231aff0b573f3b31bc6452056da17772be0
+EBUILD volatility3-2.5.2.ebuild 2033 BLAKE2B 9ec14fa4442864a4ce922ad0e41c0c3b8b6c9527eeaca2e94136cbfa65c690ca2b3b171ea44a4b25c41ce4db9b1d8fe581f791633b249c104c57dd1605109949 SHA512 a402933694bdfa2ab4eee79fdea4eea042028d4512b04f4364e2094a4c8409d8361875ad47dd08611068418e29546615620c42befa815d53a50947b6d9f53543
MISC metadata.xml 1353 BLAKE2B 6646bfc20fcabe361b50e05b55aa5f16d2b551706bb16d34477409611d10bd3ca398f487435bcc95e2f6c7eb2b2cf6b4104bae6bb6e5e603bc17c366631895d0 SHA512 b52a0032a4b6d5b9ba46dccf4cc7c4dc0f25afb9cb9051815366eda62de29fc67b78aea16b2835994ee5885f206868bf7311b7a1cf1646108441cee90c01bf3e
diff --git a/app-forensics/volatility3/files/volatility3-2.4.1-dont-install-tests.patch b/app-forensics/volatility3/files/volatility3-2.4.1-dont-install-tests.patch
deleted file mode 100644
index 0d85c664ba35..000000000000
--- a/app-forensics/volatility3/files/volatility3-2.4.1-dont-install-tests.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-Don't install test files
-https://bugs.gentoo.org/886031
---- a/setup.py
-+++ b/setup.py
-@@ -40,7 +40,7 @@ setuptools.setup(
- include_package_data=True,
- exclude_package_data={"": ["development", "development.*"], "development": ["*"]},
- packages=setuptools.find_namespace_packages(
-- exclude=["development", "development.*"]
-+ exclude=["development", "development.*", "test", "test.*"]
- ),
- entry_points={
- "console_scripts": [
diff --git a/app-forensics/volatility3/files/volatility3-2.4.1-install.patch b/app-forensics/volatility3/files/volatility3-2.4.1-install.patch
new file mode 100644
index 000000000000..aee83bdf885a
--- /dev/null
+++ b/app-forensics/volatility3/files/volatility3-2.4.1-install.patch
@@ -0,0 +1,81 @@
+From b4c6b661f01fc3dde54362a4f55be4d89e4cc6e5 Mon Sep 17 00:00:00 2001
+From: Mike Auty <mike.auty@gmail.com>
+Date: Sun, 3 Sep 2023 21:11:36 +0100
+Subject: [PATCH] Core: Include only volatility3 in distributions packages
+Upstream: https://github.com/volatilityfoundation/volatility3/commit/b4c6b661f01fc3dde54362a4f55be4d89e4cc6e5
+
+Fixes #951
+--- a/setup.py
++++ b/setup.py
+@@ -40,7 +40,7 @@ def get_install_requires():
+ include_package_data=True,
+ exclude_package_data={"": ["development", "development.*"], "development": ["*"]},
+ packages=setuptools.find_namespace_packages(
+- exclude=["development", "development.*"]
++ include=["volatility3"]
+ ),
+ entry_points={
+ "console_scripts": [
+From 05df365936a5965171632c7b0b0dbd1bee6c08a9 Mon Sep 17 00:00:00 2001
+From: Mike Auty <mike.auty@gmail.com>
+Date: Tue, 5 Sep 2023 18:23:48 +0100
+Subject: [PATCH] Core: Fix missing packages in setup.py
+Upstream: https://github.com/volatilityfoundation/volatility3/commit/05df365936a5965171632c7b0b0dbd1bee6c08a9
+
+Fixes #1002.
+--- a/setup.py
++++ b/setup.py
+@@ -12,7 +12,7 @@
+
+ def get_install_requires():
+ requirements = []
+- with open("requirements-minimal.txt", "r", encoding = "utf-8") as fh:
++ with open("requirements-minimal.txt", "r", encoding="utf-8") as fh:
+ for line in fh.readlines():
+ stripped_line = line.strip()
+ if stripped_line == "" or stripped_line.startswith("#"):
+@@ -20,6 +20,7 @@ def get_install_requires():
+ requirements.append(stripped_line)
+ return requirements
+
++
+ setuptools.setup(
+ name="volatility3",
+ description="Memory forensics framework",
+@@ -39,9 +40,8 @@ def get_install_requires():
+ python_requires=">=3.7.0",
+ include_package_data=True,
+ exclude_package_data={"": ["development", "development.*"], "development": ["*"]},
+- packages=setuptools.find_namespace_packages(
+- include=["volatility3"]
+- ),
++ packages=setuptools.find_namespace_packages(where="volatility3"),
++ package_dir={"": "volatility3"},
+ entry_points={
+ "console_scripts": [
+ "vol = volatility3.cli:main",
+From 803c56e3c4c6495b2725b77cc7d045e39c98a9bd Mon Sep 17 00:00:00 2001
+From: Mike Auty <mike.auty@gmail.com>
+Date: Tue, 5 Sep 2023 23:51:17 +0100
+Subject: [PATCH] Core: include the volatility3 package and all volatility3
+ subpackages
+Upstream: https://github.com/volatilityfoundation/volatility3/commit/803c56e3c4c6495b2725b77cc7d045e39c98a9bd
+
+--- a/setup.py
++++ b/setup.py
+@@ -37,11 +37,12 @@ def get_install_requires():
+ "Documentation": "https://volatility3.readthedocs.io/",
+ "Source Code": "https://github.com/volatilityfoundation/volatility3",
+ },
++ packages=setuptools.find_namespace_packages(
++ include=["volatility3", "volatility3.*"]
++ ),
++ package_dir={"volatility3": "volatility3"},
+ python_requires=">=3.7.0",
+ include_package_data=True,
+- exclude_package_data={"": ["development", "development.*"], "development": ["*"]},
+- packages=setuptools.find_namespace_packages(where="volatility3"),
+- package_dir={"": "volatility3"},
+ entry_points={
+ "console_scripts": [
+ "vol = volatility3.cli:main",
diff --git a/app-forensics/volatility3/volatility3-2.4.1-r1.ebuild b/app-forensics/volatility3/volatility3-2.4.1-r2.ebuild
index 92aab0726506..dd3306085d41 100644
--- a/app-forensics/volatility3/volatility3-2.4.1-r1.ebuild
+++ b/app-forensics/volatility3/volatility3-2.4.1-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2023 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
@@ -45,7 +45,7 @@ RDEPEND="
DEPEND="${RDEPEND}"
PATCHES=(
- "${FILESDIR}/${P}-dont-install-tests.patch"
+ "${FILESDIR}/${P}-install.patch"
)
# Tests require optional features
diff --git a/app-forensics/volatility3/volatility3-2.5.2.ebuild b/app-forensics/volatility3/volatility3-2.5.2.ebuild
new file mode 100644
index 000000000000..8e721362449e
--- /dev/null
+++ b/app-forensics/volatility3/volatility3-2.5.2.ebuild
@@ -0,0 +1,60 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DISTUTILS_USE_PEP517=setuptools
+PYTHON_COMPAT=( python3_{10..12} )
+inherit distutils-r1
+
+MY_PV=${PV//_beta/-beta.}
+
+DESCRIPTION="Framework for analyzing volatile memory"
+HOMEPAGE="https://github.com/volatilityfoundation/volatility3/ https://www.volatilityfoundation.org/"
+SRC_URI="
+ https://github.com/volatilityfoundation/volatility3/archive/v${MY_PV}.tar.gz -> ${P}.gh.tar.gz
+ test?
+ (
+ https://downloads.volatilityfoundation.org/volatility3/images/win-xp-laptop-2005-06-25.img.gz -> ${PN}-win-xp-laptop-2005-06-25.img.gz
+ https://downloads.volatilityfoundation.org/volatility3/images/linux-sample-1.bin.gz -> ${PN}-linux-sample-1.bin.gz
+ )
+"
+S="${WORKDIR}"/${PN}-${MY_PV}
+
+LICENSE="GPL-2+"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="crypt disasm jsonschema leechcore snappy test yara"
+
+# We need to select *all* subslots of app-arch/snappy which select
+# SONAME=libsnappy.so.1. See (https://github.com/gentoo/gentoo/pull/30585#discussion_r1167753625)
+RDEPEND="
+ >=dev-python/pefile-2023.2.7[${PYTHON_USEDEP}]
+ crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] )
+ disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] )
+ jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] )
+ leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] )
+ snappy? (
+ || (
+ app-arch/snappy:0/1
+ app-arch/snappy:0/1.1
+ )
+ )
+ yara? ( >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}] )
+"
+DEPEND="${RDEPEND}"
+
+# Tests require optional features
+REQUIRED_USE="test? ( yara )"
+
+RESTRICT="!test? ( test )"
+
+python_test() {
+ # see .github/workflows/test.yaml
+ "${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
+ --image "${WORKDIR}/${PN}-win-xp-laptop-2005-06-25.img" -k test_windows -v || \
+ die "Tests fail with ${EPYTHON}"
+ "${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
+ --image "${WORKDIR}/${PN}-linux-sample-1.bin" -k test_linux -v || \
+ die "Tests fail with ${EPYTHON}"
+}