chore(deps): move e2fsprogs dependency to onekey maintained fork.

onekey-sec · Nov 13, 2023 · 2b67cd7 · 2b67cd7
1 parent 14db866
commit 2b67cd7
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/docs/installation.md b/docs/installation.md
@@ -140,3 +140,13 @@ There is a handy `install-deps.sh` script included in the repository and PyPI pa
        curl -L -o sasquatch_1.0_arm64.deb https://github.com/onekey-sec/sasquatch/releases/download/sasquatch-v4.5.1-4/sasquatch_1.0_arm64.deb
        sudo dpkg -i sasquatch_1.0_arm64.deb
        rm sasquatch_1.0_arm64.deb
+
+4. We maintain a fork of e2fsprogs based on Debian upstream, with some security fixes. You can install it this way:
+
+        curl -L -o libext2fs2_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/libext2fs2_1.47.0-3.ok1_amd64.deb
+        dpkg -i libext2fs2_1.47.0-3.ok1_amd64.deb
+        rm -f libext2fs2_1.47.0-3.ok1_amd64.deb
+
+        curl -L -o e2fsprogs_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/e2fsprogs_1.47.0-3.ok1_amd64.deb
+        dpkg -i e2fsprogs_1.47.0-3.ok1_amd64.deb
+        rm -f e2fsprogs_1.47.0-3.ok1_amd64.deb
diff --git a/overlay.nix b/overlay.nix
@@ -9,6 +9,12 @@ inputs: final: prev:
     (super: {
       pname = "e2fsprogs-nofortify";
       hardeningDisable = (super.hardeningDisable or [ ]) ++ [ "fortify3" ];
+
+      version = "1.47.0-3.ok1";
+      src = prev.fetchurl {
+        url = "https://github.com/onekey-sec/e2fsprogs/archive/refs/tags/v1.47.0-3.ok1.tar.gz";
+        hash = "sha256-fsLUySjAdgnRp5m405a4Egso+LXNLxR9Y7WHt8qAvFM=";
+      };
     });
 
   # Own package updated independently of nixpkgs

diff --git a/unblob/install-deps.sh b/unblob/install-deps.sh
@@ -18,3 +18,11 @@ apt-get install --no-install-recommends -y \
 curl -L -o sasquatch_1.0_amd64.deb https://github.com/onekey-sec/sasquatch/releases/download/sasquatch-v4.5.1-4/sasquatch_1.0_amd64.deb
 dpkg -i sasquatch_1.0_amd64.deb
 rm -f sasquatch_1.0_amd64.deb
+
+curl -L -o libext2fs2_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/libext2fs2_1.47.0-3.ok1_amd64.deb
+dpkg -i libext2fs2_1.47.0-3.ok1_amd64.deb
+rm -f libext2fs2_1.47.0-3.ok1_amd64.deb
+
+curl -L -o e2fsprogs_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/e2fsprogs_1.47.0-3.ok1_amd64.deb
+dpkg -i e2fsprogs_1.47.0-3.ok1_amd64.deb
+rm -f e2fsprogs_1.47.0-3.ok1_amd64.deb