PEFS is a kernel level stacked cryptographic filesystem for FreeBSD.
Key features:
* Transparently runs on top of existing file systems
* Random per file tweak value for encryption
* Stores metadata only in encrypted file name
* Arbitrary number of keys per file system, mixing keys in same
directory and key chains
* Modern cryptographic algorithms: AES and Camellia in XTS mode,
PKCS#5v2 and HKDF for key generation.
See also: https://github.com/freebsd-pefs/pefs
sysutils/pefs-kmod: update to g20260829
- Fix executables being corrupted when on PEFS (bug #296641)
- Add OSX 'junk' files and ccls directory to git ignore.
PR: 298025, 296641
Reported by: Bill Blake <billblake2018@protonmail.com>
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
sysutils/pefs-kmod: Update to work on FreeBSD 13.1-RC1
This updates to a version with fixes for various KABI changes in FreeBSD 13+.
PR: 263058
Reported by: darius@dons.net.au (maintainer)
Style: improve ONLY_FOR_ARCHS_REASON (grammar, markup, etc.)
ONLY_FOR_ARCHS_REASON is used as part of the sentence and thus should
start with lower-case letter and not end with a period which is added
by the framework, similar to other knobs like BROKEN, IGNORE, et al.
While here, remove needless quoting, add missing Oxford comma, expand
contractions and jargonisms, use correct spelling for proper names.
Additional builds with with src r354909 applied.
The referenced change made NO_INSTALLLIB, NO_MAN, and NO_PROFILE into
errors causing these ports that declare them and use the FreeBSD make
infrastructure as part of their build to fail.
When the offending variables occur in a BSD Makefile, NO_MAN becomes
MAN= and NO_INSTALLLIB and NO_PROFILE become MK_INSTALLLIB=no and
MK_PROFILE=no respectively. When declared in the environment they
become WITHOUT_<FOO>.
Also GC NO_MANCOMPRESSED which doesn't do anything.
In the case of devel/libpasori, this change accomplished the same thing
as the change in r518434, but more directly (fix the Makefiles rather
than patching them after they are installed).
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724
Mark some ports failing on armv6: implicit declaration of function
'cp15_pmccntr_get' is invalid in C99.
While here, pet portlint.
Approved by: portmgr (tier-2 blanket)
- Support stage
- Remove check for FreeBSD < 8 and include bsd.port.mk only once
- Properly specify license (BSD2CLAUSE)
Approved by: portmgr (infrastructure blanket)
Convert to USES=kmod, which removes duplicated code and ensures that all
required steps are followed.
There are no user-visible changes. The exception is multimedia/ptx-kmod,
which now installs the kernel module into /boot/modules instead of
${PREFIX}/libexec/${PORTNAME}, this was something USES=kmod cannot handle.
PR: ports/183625
Submitted by: myself
Approved by: portmgr (bdrewery)
Exp-run by: bdrewery
SSP support has been added to ports with WITH_SSP for i386 and amd64
on FreeBSD 10, and amd64 on earlier versions.
SSP_UNSAFE is added to disable in a port if it fails to build, but
this should only be used in rare circumstances such as kernel modules.
Otherwise, the port may just be failing due to lack of respecting
LDFLAGS.
On FreeBSD 10, this uses an ldscript in /usr/lib/libc.so to pull in
libssp_nonshared.a to address issues linking on i386 [1].
On earlier FreeBSD versions the WITH_SSP knob will add -lssp_nonshared
to LDFLAGS on i386. This is not needed on amd64. However, several hundred
ports do not currently respect LDFLAGS, so this support is disabled currently
as it causes build failures if a dependency is looking for the stack_chk
(Only the first 15 lines of the commit message are shown above )
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD.
Key features:
* Transparently runs on top of existing file systems
* Random per file tweak value for encryption
* Stores metadata only in encrypted file name
* Arbitrary number of keys per file system, mixing keys in same
directory and key chains
* Modern cryptographic algorithms: AES and Camellia in XTS mode,
PKCS#5v2 and HKDF for key generation.
WWW: http://github.com/glk/pefs
WWW: http://wiki.freebsd.org/PEFS
PR: ports/156002
Submitted by: Gleb Kurtsou <gk@freebsd.org>
Approved by: jadawin@ (mentor)
