1 files changed, 73 insertions, 0 deletions
diff --git a/packages/sys-fs/cryptsetup/cryptsetup-1.7.5.exheres-0 b/packages/sys-fs/cryptsetup/cryptsetup-1.7.5.exheres-0
new file mode 100644
index 0000000..65f6cec
--- /dev/null
+++ b/packages/sys-fs/cryptsetup/cryptsetup-1.7.5.exheres-0
@@ -0,0 +1,73 @@
+# Copyright 2008 Stephen Bennett
+# Copyright 2009 Mike Kelly
+# Copyright 2011-2012 Wulf C. Krueger <philantrop@exherbo.org>
+# Distributed under the terms of the GNU General Public License v2
+
+SUMMARY="Userland utilities for dm-crypt"
+HOMEPAGE="https://gitlab.com/${PN}/${PN}"
+DOWNLOADS="mirror://kernel/linux/utils/${PN}/v$(ever range 1-2)/${PNV}.tar.xz"
+
+LICENCES="GPL-2"
+SLOT="0"
+PLATFORMS="~amd64 ~x86"
+MYOPTIONS="
+    python
+    (
+        gcrypt [[ description = [ Use libgcrypt library as crypto backend ] ]]
+        kernel [[ description = [ Use kernel as crypto backend, needs at least the kernel userspace
+                                  crypto interface ] ]]
+        nettle [[ description = [ Use nettle library as crypto backend ] ]]
+        openssl [[ description = [ Use openssl library as crypto backend ] ]]
+    ) [[ number-selected = exactly-one ]]
+    openssl? ( ( providers: libressl openssl ) [[ number-selected = exactly-one ]] )
+"
+
+# nss backend needs static lib
+DEPENDENCIES="
+    build:
+        sys-devel/gettext[>=0.15]
+        virtual/pkg-config
+    build+run:
+        dev-libs/popt[>=1.7]
+        sys-apps/util-linux [[ note = [ cryptsetup needs libuuid ] ]]
+        sys-fs/lvm2 [[ note = [ cryptsetup needs device-mapper from the LVM2 package ] ]]
+        gcrypt? (
+            dev-libs/libgcrypt[>=1.6.1][-caps(-)]
+            dev-libs/libgpg-error
+        )
+        nettle? ( dev-libs/nettle[>=2.6] )
+        openssl? (
+            providers:libressl? ( dev-libs/libressl:= )
+            providers:openssl? ( dev-libs/openssl )
+        )
+        python? ( dev-lang/python:=[>=2.6] )
+"
+
+# static cryptsetup must be disabled because lvm2 can't be linked statically anymore.
+# FIPS (requires dev-libs/libgcrypt[>=1.4.5]) is probably not interesting for us, so hard disable it
+src_configure() {
+    econf \
+        --enable-cryptsetup-reencrypt \
+        --enable-dev-random \
+        --enable-nls \
+        --enable-udev \
+        --disable-fips \
+        --disable-passwdqc \
+        --disable-pwquality \
+        --disable-selinux \
+        --disable-static-cryptsetup \
+        $(option_enable gcrypt gcrypt-pbkdf2) \
+        $(option_enable python) \
+        $(option_with gcrypt libgcrypt-prefix /usr/$(exhost --target)) \
+        --with-crypto_backend=$(
+        if option gcrypt; then
+            echo 'gcrypt'
+        elif option kernel; then
+            echo 'kernel'
+        elif option nettle; then
+            echo 'nettle'
+        elif option openssl; then
+            echo 'openssl'
+        fi)
+}
+