ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-19 04:57:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
392599b90b
heads/modules/cryptsetup

36 lines
1021 B
Plaintext
Raw Normal View History

Build time configuration for startup scripts and modules. This addresses multiple issues: * Issue #63: initrd is build fresh each time, so tracked files do not matter. * Issue #144: build time configuration * Issue #123: allows us to customize the startup experience * Issue #122: manual start-xen will go away * Issue #25: tpmtotp PCRs are updated after reading the secret * Issue #16: insmod now meaures modules
2017-03-31 15:18:46 +00:00
modules-$(CONFIG_CRYPTSETUP) += cryptsetup
cryptsetup for dm-verity support
2016-08-19 15:20:41 +00:00
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
cryptsetup_depends := libuuid popt lvm2 $(musl_dep)
Download and build almost all dependencies. As part of issue #1, we should build all libraries and programs that we deploy into the Heads initrd. This modifies the module configurations for all of them to install into heads/install so that we can build against them. Add dmsetup, cryptsetup and veritysetup (issue #46). Build gpgv 1.4 as a standalone tool (issue #23). Modify populate-lib to use the install directory by setting LD_LIBRARY_PATH (issue #35).
2016-12-28 17:45:12 +00:00
Update cryptsetup module and strip it down Signed-off-by: Philipp Deppenwiese <zaolin@das-labor.org>
2016-11-29 19:24:01 +00:00
cryptsetup_version := 1.7.3
cryptsetup for dm-verity support
2016-08-19 15:20:41 +00:00
cryptsetup_dir := cryptsetup-$(cryptsetup_version)
cryptsetup_tar := cryptsetup-$(cryptsetup_version).tar.xz
Update cryptsetup module and strip it down Signed-off-by: Philipp Deppenwiese <zaolin@das-labor.org>
2016-11-29 19:24:01 +00:00
cryptsetup_url := https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-$(cryptsetup_version).tar.xz
cryptsetup_hash := af2b04e8475cf40b8d9ffd97a1acfa73aa787c890430afd89804fb544d6adc02
cryptsetup for dm-verity support
2016-08-19 15:20:41 +00:00
Make modules not depend on build path (issue #1). Use --prefix="" to ensure that no destination paths are in libraries. Use -fdebug-prefix-map to rewrite build path so that it does not appear in the executables. Use -gno-record-gcc-switches to ensure that the -fdebug-prefix-map does not appear in the executables.
2017-01-28 18:14:56 +00:00
# Use an empty prefix so that the executables will not include the
# build path.
Update cryptsetup module and strip it down Signed-off-by: Philipp Deppenwiese <zaolin@das-labor.org>
2016-11-29 19:24:01 +00:00
cryptsetup_configure := ./configure \
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
CC="$(heads_cc)" \
Working build with musl-libc cross compiler (issue #77). Pass in the --host argument to all of the various programs that need to treat the configure scripts as cross compilation targets. This removes all dependencies on the host libc (issue #7) and adds some tools to the initrd (cryptsetup #46).
2017-01-04 21:39:10 +00:00
--host i386-elf-linux \
Make modules not depend on build path (issue #1). Use --prefix="" to ensure that no destination paths are in libraries. Use -fdebug-prefix-map to rewrite build path so that it does not appear in the executables. Use -gno-record-gcc-switches to ensure that the -fdebug-prefix-map does not appear in the executables.
2017-01-28 18:14:56 +00:00
--prefix "" \
Build cryptsetup and install it into the initrd
2016-12-01 19:03:55 +00:00
--disable-gcrypt-pbkdf2 \
--with-crypto_backend=kernel \
Make modules not depend on build path (issue #1). Use --prefix="" to ensure that no destination paths are in libraries. Use -fdebug-prefix-map to rewrite build path so that it does not appear in the executables. Use -gno-record-gcc-switches to ensure that the -fdebug-prefix-map does not appear in the executables.
2017-01-28 18:14:56 +00:00
# but after building, replace prefix so that they will be installed
# in the correct directory.
Working build with musl-libc cross compiler (issue #77). Pass in the --host argument to all of the various programs that need to treat the configure scripts as cross compilation targets. This removes all dependencies on the host libc (issue #7) and adds some tools to the initrd (cryptsetup #46).
2017-01-04 21:39:10 +00:00
cryptsetup_target := \
limit parallel make load (issue #131)
2017-03-21 18:29:07 +00:00
$(MAKE_JOBS) \
Make modules not depend on build path (issue #1). Use --prefix="" to ensure that no destination paths are in libraries. Use -fdebug-prefix-map to rewrite build path so that it does not appear in the executables. Use -gno-record-gcc-switches to ensure that the -fdebug-prefix-map does not appear in the executables.
2017-01-28 18:14:56 +00:00
&& $(MAKE) \
-C $(build)/$(cryptsetup_dir) \
prefix="$(INSTALL)" \
install
Download and build almost all dependencies. As part of issue #1, we should build all libraries and programs that we deploy into the Heads initrd. This modifies the module configurations for all of them to install into heads/install so that we can build against them. Add dmsetup, cryptsetup and veritysetup (issue #46). Build gpgv 1.4 as a standalone tool (issue #23). Modify populate-lib to use the install directory by setting LD_LIBRARY_PATH (issue #35).
2016-12-28 17:45:12 +00:00
Build cryptsetup and install it into the initrd
2016-12-01 19:03:55 +00:00
cryptsetup_output := \
src/.libs/cryptsetup \
src/.libs/veritysetup \
Remove populate-lib, rework libraries and kernel module installation. The populate-lib program was buggy on some systems and could accidentally introduce unwanted libraries into the initrd. The Makefile now uses the modules' $(module_libraries) variable to select which libraries should be installed into the initrd. Kernel modules are now stripped and installed using a similar system.
2017-03-29 19:15:03 +00:00
cryptsetup_libraries := \
lib/.libs/libcryptsetup.so.4 \
Download and build almost all dependencies. As part of issue #1, we should build all libraries and programs that we deploy into the Heads initrd. This modifies the module configurations for all of them to install into heads/install so that we can build against them. Add dmsetup, cryptsetup and veritysetup (issue #46). Build gpgv 1.4 as a standalone tool (issue #23). Modify populate-lib to use the install directory by setting LD_LIBRARY_PATH (issue #35).
2016-12-28 17:45:12 +00:00
Reference in New Issue Copy Permalink