···

       
32
       
 
       
      documentation for filesystem encryption before using fscryptctl.

     

       
33
       
 
       
    '';

     

       
34
       
 
       
    inherit (src.meta) homepage;

     

       
35
       
-
       
    changelog = "https://github.com/google/fscryptctl/releases/tag/v{version}";

     

       
36
       
 
       
    license = licenses.asl20;

     

       
37
       
 
       
    platforms = platforms.linux;

     

       
38
       
 
       
    maintainers = with maintainers; [ primeos ];

     

···

       
32
       
 
       
      documentation for filesystem encryption before using fscryptctl.

     

       
33
       
 
       
    '';

     

       
34
       
 
       
    inherit (src.meta) homepage;

     

       
35
       
+
       
    changelog = "https://github.com/google/fscryptctl/releases/tag/v${version}";

     

       
36
       
 
       
    license = licenses.asl20;

     

       
37
       
 
       
    platforms = platforms.linux;

     

       
38
       
 
       
    maintainers = with maintainers; [ primeos ];

     

···

       
1
       
-
       
{ lib, stdenv, fetchFromGitHub }:

     

       
2
       
-
       


     

       
3
       
-
       
# Don't use this for anything important!

     

       
4
       
-
       
# TODO: Drop fscryptctl-experimental after the NixOS 21.03/21.05 release.

     

       
5
       
-
       


     

       
6
       
-
       
stdenv.mkDerivation rec {

     

       
7
       
-
       
  pname = "fscryptctl";

     

       
8
       
-
       
  version = "0.1.0";

     

       
9
       
-
       


     

       
10
       
-
       
  goPackagePath = "github.com/google/fscrypt";

     

       
11
       
-
       


     

       
12
       
-
       
  src = fetchFromGitHub {

     

       
13
       
-
       
    owner = "google";

     

       
14
       
-
       
    repo = "fscryptctl";

     

       
15
       
-
       
    rev = "v${version}";

     

       
16
       
-
       
    sha256 = "1853hlpklisbqnkb7a921dsf0vp2nr2im26zpmrs592cnpsvk3hb";

     

       
17
       
-
       
  };

     

       
18
       
-
       


     

       
19
       
-
       
  makeFlags = [ "DESTDIR=$(out)/bin" ];

     

       
20
       
-
       


     

       
21
       
-
       
  meta = with lib; {

     

       
22
       
-
       
    description = "Small C tool for Linux filesystem encryption";

     

       
23
       
-
       
    longDescription = ''

     

       
24
       
-
       
      fscryptctl is a low-level tool written in C that handles raw keys and

     

       
25
       
-
       
      manages policies for Linux filesystem encryption, specifically the

     

       
26
       
-
       
      "fscrypt" kernel interface which is supported by the ext4, f2fs, and

     

       
27
       
-
       
      UBIFS filesystems.

     

       
28
       
-
       
      fscryptctl is mainly intended for embedded systems which can't use the

     

       
29
       
-
       
      full-featured fscrypt tool, or for testing or experimenting with the

     

       
30
       
-
       
      kernel interface to Linux filesystem encryption. fscryptctl does not

     

       
31
       
-
       
      handle key generation, key stretching, key wrapping, or PAM integration.

     

       
32
       
-
       
      Most users should use the fscrypt tool instead, which supports these

     

       
33
       
-
       
      features and generally is much easier to use.

     

       
34
       
-
       
      As fscryptctl is intended for advanced users, you should read the kernel

     

       
35
       
-
       
      documentation for filesystem encryption before using fscryptctl.

     

       
36
       
-
       
    '';

     

       
37
       
-
       
    inherit (src.meta) homepage;

     

       
38
       
-
       
    license = licenses.asl20;

     

       
39
       
-
       
    platforms = platforms.linux;

     

       
40
       
-
       
    maintainers = with maintainers; [ primeos ];

     

       
41
       
-
       
    knownVulnerabilities = [ ''

     

       
42
       
-
       
      fscryptctl version 1.0.0 was released and now uses v2 encryption

     

       
43
       
-
       
      policies. fscryptctl-experimental will remain at version 0.1.0 which

     

       
44
       
-
       
      still supports the v1 encryption policies. Please try to switch from the

     

       
45
       
-
       
      "fscryptctl-experimental" package to "fscryptctl". The v1 encryption

     

       
46
       
-
       
      policies can be insecure, are hard to use correctly, and have different

     

       
47
       
-
       
      semantics from v2 policies (which is why they are no longer supported in

     

       
48
       
-
       
      fscryptctl 1.0.0+).

     

       
49
       
-
       
    '' ];

     

       
50
       
-
       
  };

     

       
51
       
-
       
}

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
267
       
 
       
    and has only been used for old fontconfig caches.

     

       
268
       
 
       
  '';

     

       
269
       
 
       
  foomatic_filters = foomatic-filters;  # 2016-08

     

       
0
       
 
       

     

       
270
       
 
       
  fsharp41 = throw "fsharp41 has been removed, please use dotnet-sdk_5 or later";

     

       
271
       
 
       
  fuse_exfat = exfat;                   # 2015-09-11

     

       
272
       
 
       
  fuseki = apache-jena-fuseki; # added 2018-04-25

     

···

       
267
       
 
       
    and has only been used for old fontconfig caches.

     

       
268
       
 
       
  '';

     

       
269
       
 
       
  foomatic_filters = foomatic-filters;  # 2016-08

     

       
270
       
+
       
  fscryptctl-experimental = throw "The package fscryptctl-experimental has been removed. Please switch to fscryptctl."; # 2021-11-07

     

       
271
       
 
       
  fsharp41 = throw "fsharp41 has been removed, please use dotnet-sdk_5 or later";

     

       
272
       
 
       
  fuse_exfat = exfat;                   # 2015-09-11

     

       
273
       
 
       
  fuseki = apache-jena-fuseki; # added 2018-04-25

     

···

       
21743
       
 
       
  fscryptctl = callPackage ../os-specific/linux/fscryptctl { };

     

       
21744
       
 
       
  # unstable until the first 1.x release

     

       
21745
       
 
       
  fscrypt-experimental = callPackage ../os-specific/linux/fscrypt { };

     

       
21746
       
-
       
  fscryptctl-experimental = callPackage ../os-specific/linux/fscryptctl/legacy.nix { };

     

       
21747
       
 
       


     

       
21748
       
 
       
  fwanalyzer = callPackage ../tools/filesystems/fwanalyzer { };

     

       
21749
       
 
       


     

···

       
21743
       
 
       
  fscryptctl = callPackage ../os-specific/linux/fscryptctl { };

     

       
21744
       
 
       
  # unstable until the first 1.x release

     

       
21745
       
 
       
  fscrypt-experimental = callPackage ../os-specific/linux/fscrypt { };

     

       
0
       
 
       

     

       
21746
       
 
       


     

       
21747
       
 
       
  fwanalyzer = callPackage ../tools/filesystems/fwanalyzer { };

     

       
21748