nixpkgs/pkgs/tools/security/ecryptfs/default.nix

68 lines
2.7 KiB
Nix
Raw Normal View History

2021-01-17 03:51:22 +00:00
{ lib, stdenv, fetchurl, pkg-config, perl, util-linux, keyutils, nss, nspr, python2, pam, enablePython ? false
, intltool, makeWrapper, coreutils, bash, gettext, cryptsetup, lvm2, rsync, which, lsof }:
2014-05-10 05:31:34 +00:00
2015-04-01 23:01:17 +00:00
stdenv.mkDerivation rec {
pname = "ecryptfs";
2016-05-20 10:15:20 +00:00
version = "111";
src = fetchurl {
2018-11-24 22:47:52 +00:00
url = "https://launchpad.net/ecryptfs/trunk/${version}/+download/ecryptfs-utils_${version}.orig.tar.gz";
2016-05-20 10:15:20 +00:00
sha256 = "0zwq19siiwf09h7lwa7n7mgmrr8cxifp45lmwgcfr8c1gviv6b0i";
};
2016-03-24 12:10:13 +00:00
# TODO: replace wrapperDir below with from <nixos> config.security.wrapperDir;
wrapperDir = "/run/wrappers/bin";
2016-03-24 12:10:13 +00:00
2015-04-01 23:01:17 +00:00
postPatch = ''
FILES="$(grep -r '/bin/sh' src/utils -l; find src -name \*.c)"
for file in $FILES; do
substituteInPlace "$file" \
2020-11-24 15:29:28 +00:00
--replace /bin/mount ${util-linux}/bin/mount \
--replace /bin/umount ${util-linux}/bin/umount \
2016-03-24 12:10:13 +00:00
--replace /sbin/mount.ecryptfs_private ${wrapperDir}/mount.ecryptfs_private \
--replace /sbin/umount.ecryptfs_private ${wrapperDir}/umount.ecryptfs_private \
--replace /sbin/mount.ecryptfs $out/sbin/mount.ecryptfs \
--replace /sbin/umount.ecryptfs $out/sbin/umount.ecryptfs \
--replace /usr/bin/ecryptfs-rewrite-file $out/bin/ecryptfs-rewrite-file \
--replace /usr/bin/ecryptfs-mount-private $out/bin/ecryptfs-mount-private \
--replace /usr/bin/ecryptfs-setup-private $out/bin/ecryptfs-setup-private \
--replace /sbin/cryptsetup ${cryptsetup}/sbin/cryptsetup \
--replace /sbin/dmsetup ${lvm2}/sbin/dmsetup \
2016-03-24 12:10:13 +00:00
--replace /sbin/unix_chkpwd ${wrapperDir}/unix_chkpwd \
--replace /bin/bash ${bash}/bin/bash
done
'';
2021-01-15 09:19:50 +00:00
configureFlags = lib.optionals (!enablePython) [ "--disable-pywrap" ];
nativeBuildInputs = [ pkg-config makeWrapper ]
# if python2 support is requested, it is needed at builtime as well as runtime.
2021-01-15 09:19:50 +00:00
++ lib.optionals (enablePython) [ python2 ]
;
buildInputs = [ perl nss nspr pam intltool ]
2021-01-15 09:19:50 +00:00
++ lib.optionals (enablePython) [ python2 ]
;
2014-05-10 05:31:34 +00:00
propagatedBuildInputs = [ coreutils gettext cryptsetup lvm2 rsync keyutils which ];
2014-05-10 05:31:34 +00:00
postInstall = ''
FILES="$(grep -r '/bin/sh' $out/bin -l)"
2014-05-10 05:31:34 +00:00
for file in $FILES; do
wrapProgram $file \
--prefix PATH ":" "${coreutils}/bin" \
--prefix PATH ":" "${gettext}/bin" \
--prefix PATH ":" "${rsync}/bin" \
--prefix PATH ":" "${keyutils}/bin" \
--prefix PATH ":" "${which}/bin" \
--prefix PATH ":" "${lsof}/bin" \
2014-05-10 05:31:34 +00:00
--prefix PATH ":" "$out/bin"
done
'';
meta = with lib; {
description = "Enterprise-class stacked cryptographic filesystem";
2016-03-24 12:10:13 +00:00
license = licenses.gpl2Plus;
2016-07-22 23:21:31 +00:00
maintainers = with maintainers; [ obadz ];
2016-03-24 12:10:13 +00:00
platforms = platforms.linux;
};
}