systemd: build cryptsetup

Author: vigh-m

Cargo.lock

@@ -21,7 +21,10 @@ kmod = { path = "../kmod" }
 libacl = { path = "../libacl" }
 libattr = { path = "../libattr" }
 libcap = { path = "../libcap" }
+libcrypto = { path = "../libcrypto" }
+libcryptsetup = { path = "../libcryptsetup" }
 libseccomp = { path = "../libseccomp" }
 libselinux = { path = "../libselinux" }
+libtss2 = { path = "../libtss2" }
 libxcrypt = { path = "../libxcrypt" }
 util-linux = { path = "../util-linux" }

packages/systemd-257/Cargo.toml

@@ -3,6 +3,9 @@
 
 %global package_priority_epoch 0
 
+# Disable OpenSSL UI since aws-lc does not support it.
+%global _cross_cflags %{_cross_cflags} -DOPENSSL_NO_UI_CONSOLE=1
+
 Name: %{_cross_os}systemd-257
 Version: 257.9
 Release: 1%{?dist}
@@ -84,10 +87,13 @@ BuildRequires: %{_cross_os}libacl-devel
 BuildRequires: %{_cross_os}libattr-devel
 BuildRequires: %{_cross_os}libblkid-devel
 BuildRequires: %{_cross_os}libcap-devel
+BuildRequires: %{_cross_os}libcrypto-devel
+BuildRequires: %{_cross_os}libcryptsetup-devel
 BuildRequires: %{_cross_os}libfdisk-devel
 BuildRequires: %{_cross_os}libmount-devel
 BuildRequires: %{_cross_os}libseccomp-devel
 BuildRequires: %{_cross_os}libselinux-devel
+BuildRequires: %{_cross_os}libtss2-devel
 BuildRequires: %{_cross_os}libuuid-devel
 BuildRequires: %{_cross_os}libxcrypt-devel
 
@@ -96,10 +102,13 @@ Requires: %{_cross_os}libacl
 Requires: %{_cross_os}libattr
 Requires: %{_cross_os}libblkid
 Requires: %{_cross_os}libcap
+Requires: %{_cross_os}libcrypto
+Requires: %{_cross_os}libcryptsetup
 Requires: %{_cross_os}libfdisk
 Requires: %{_cross_os}libmount
 Requires: %{_cross_os}libseccomp
 Requires: %{_cross_os}libselinux
+Requires: %{_cross_os}libtss2
 Requires: %{_cross_os}libuuid
 Requires: %{_cross_os}libxcrypt
 
@@ -302,11 +311,12 @@ CONFIGURE_OPTS=(
  -Dstoragetm=false
  -Dukify=disabled
 
- -Dlibcryptsetup=disabled
- -Dlibcryptsetup-plugins=disabled
- -Dopenssl=disabled
- -Dtpm2=disabled
- -Dtpm=false
+ -Dlibcryptsetup=enabled
+ -Dlibcryptsetup-plugins=enabled
+ -Dopenssl=enabled
+ -Dtpm2=enabled
+ -Dtpm=true
+ -Dsbsign=false
 )
 
 %cross_meson "${CONFIGURE_OPTS[@]}"
@@ -803,3 +813,45 @@ install -p -m 0644 %{S:2} %{buildroot}%{_cross_bootconfigdir}/21-cgroup-enable-l
 %{_cross_datadir}/dbus-1/system.d/org.freedesktop.resolve1.conf
 %exclude %{_cross_bindir}/systemd-resolve
 %exclude %{_cross_sbindir}/resolvconf
+
+%files cryptsetup
+%{_cross_bindir}/systemd-cryptenroll
+%{_cross_bindir}/systemd-cryptsetup
+%{_cross_libdir}/cryptsetup/libcryptsetup-token-systemd-tpm2.so
+%{_cross_libdir}/pcrlock.d/350-action-efi-application.pcrlock
+%{_cross_libdir}/pcrlock.d/400-secureboot-separator.pcrlock.d/300-0x00000000.pcrlock
+%{_cross_libdir}/pcrlock.d/400-secureboot-separator.pcrlock.d/600-0xffffffff.pcrlock
+%{_cross_libdir}/pcrlock.d/500-separator.pcrlock.d/300-0x00000000.pcrlock
+%{_cross_libdir}/pcrlock.d/500-separator.pcrlock.d/600-0xffffffff.pcrlock
+%{_cross_libdir}/pcrlock.d/700-action-efi-exit-boot-services.pcrlock.d/300-present.pcrlock
+%{_cross_libdir}/pcrlock.d/700-action-efi-exit-boot-services.pcrlock.d/600-absent.pcrlock
+%{_cross_libdir}/pcrlock.d/750-enter-initrd.pcrlock
+%{_cross_libdir}/pcrlock.d/800-leave-initrd.pcrlock
+%{_cross_libdir}/pcrlock.d/850-sysinit.pcrlock
+%{_cross_libdir}/pcrlock.d/900-ready.pcrlock
+%{_cross_libdir}/pcrlock.d/950-shutdown.pcrlock
+%{_cross_libdir}/pcrlock.d/990-final.pcrlock
+%{_cross_libdir}/systemd/system-generators/systemd-cryptsetup-generator
+%{_cross_libdir}/systemd/system-generators/systemd-integritysetup-generator
+%{_cross_libdir}/systemd/system-generators/systemd-veritysetup-generator
+%{_cross_libdir}/systemd/system/cryptsetup-pre.target
+%{_cross_libdir}/systemd/system/cryptsetup.target
+%{_cross_libdir}/systemd/system/initrd-root-device.target.wants/remote-cryptsetup.target
+%{_cross_libdir}/systemd/system/initrd-root-device.target.wants/remote-veritysetup.target
+%{_cross_libdir}/systemd/system/integritysetup-pre.target
+%{_cross_libdir}/systemd/system/integritysetup.target
+%{_cross_libdir}/systemd/system/remote-cryptsetup.target
+%{_cross_libdir}/systemd/system/remote-veritysetup.target
+%{_cross_libdir}/systemd/system/sysinit.target.wants/cryptsetup.target
+%{_cross_libdir}/systemd/system/sysinit.target.wants/integritysetup.target
+%{_cross_libdir}/systemd/system/sysinit.target.wants/veritysetup.target
+%{_cross_libdir}/systemd/system/system-systemd\x2dcryptsetup.slice
+%{_cross_libdir}/systemd/system/system-systemd\x2dveritysetup.slice
+%{_cross_libdir}/systemd/system/veritysetup-pre.target
+%{_cross_libdir}/systemd/system/veritysetup.target
+%{_cross_libdir}/systemd/systemd-cryptsetup
+%{_cross_libdir}/systemd/systemd-integritysetup
+%{_cross_libdir}/systemd/systemd-keyutil
+%{_cross_libdir}/systemd/systemd-measure
+%{_cross_libdir}/systemd/systemd-pcrlock
+%{_cross_libdir}/systemd/systemd-veritysetup