mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-22 13:41:26 +00:00
56 lines
2.3 KiB
Nix
56 lines
2.3 KiB
Nix
{ stdenv, fetchurl, pkgconfig, perl, utillinux, keyutils, nss, nspr, python, pam
|
|
, intltool, makeWrapper, coreutils, bash, gettext, cryptsetup, lvm2, rsync, which }:
|
|
|
|
stdenv.mkDerivation {
|
|
name = "ecryptfs-104";
|
|
|
|
src = fetchurl {
|
|
url = http://launchpad.net/ecryptfs/trunk/104/+download/ecryptfs-utils_104.orig.tar.gz;
|
|
sha256 = "0f3lzpjw97vcdqzzgii03j3knd6pgwn1y0lpaaf46iidaiv0282a";
|
|
};
|
|
|
|
#TODO: replace wrapperDir below with from <nixos> config.security.wrapperDir;
|
|
preConfigure = ''
|
|
FILES="$(grep -r '/bin/sh' src/utils -l; find src -name \*.c)"
|
|
for file in $FILES; do
|
|
substituteInPlace "$file" \
|
|
--replace /sbin/mount.ecryptfs_private /var/setuid-wrappers/mount.ecryptfs_private \
|
|
--replace /sbin/umount.ecryptfs_private /var/setuid-wrappers/umount.ecryptfs_private \
|
|
--replace /sbin/mount.ecryptfs $out/sbin/mount.ecryptfs \
|
|
--replace /sbin/umount.ecryptfs $out/sbin/umount.ecryptfs \
|
|
--replace /usr/bin/ecryptfs-rewrite-file $out/bin/ecryptfs-rewrite-file \
|
|
--replace /usr/bin/ecryptfs-mount-private $out/bin/ecryptfs-mount-private \
|
|
--replace /usr/bin/ecryptfs-setup-private $out/bin/ecryptfs-setup-private \
|
|
--replace /sbin/cryptsetup ${cryptsetup}/sbin/cryptsetup \
|
|
--replace /sbin/dmsetup ${lvm2}/sbin/dmsetup \
|
|
--replace /bin/mount ${utillinux}/bin/mount \
|
|
--replace /bin/umount ${utillinux}/bin/umount \
|
|
--replace /sbin/unix_chkpwd /var/setuid-wrappers/unix_chkpwd \
|
|
--replace /bin/bash ${bash}/bin/bash
|
|
done
|
|
'';
|
|
|
|
buildInputs = [ pkgconfig perl nss nspr python pam intltool makeWrapper ];
|
|
propagatedBuildInputs = [ coreutils gettext cryptsetup lvm2 rsync keyutils which ];
|
|
|
|
postInstall = ''
|
|
FILES="$(grep -r '/bin/sh' $out/bin -l)"
|
|
for file in $FILES; do
|
|
wrapProgram $file \
|
|
--prefix PATH ":" "${coreutils}/bin" \
|
|
--prefix PATH ":" "${gettext}/bin" \
|
|
--prefix PATH ":" "${rsync}/bin" \
|
|
--prefix PATH ":" "${keyutils}/bin" \
|
|
--prefix PATH ":" "${which}/bin" \
|
|
--prefix PATH ":" "$out/bin"
|
|
done
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "Enterprise-class stacked cryptographic filesystem";
|
|
license = licenses.gpl2Plus;
|
|
maintainers = [ maintainers.obadz ];
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|