[bug#77202] gnu: linux-libre: Enable CONFIG_FS_ENCRYPTION.

Message ID 4a6e1c443ee07929cd582395bdcc5865610569f2.1742723412.git.45mg.writes@gmail.com
State New
Headers
Series [bug#77202] gnu: linux-libre: Enable CONFIG_FS_ENCRYPTION. |

Commit Message

45mg March 23, 2025, 9:50 a.m. UTC
  This enables support for filesystem-level encryption via the fscrypt
library. Many distributions such as Debian [1] and Arch Linux [2] have
it enabled (so it should be safe).

[1] https://salsa.debian.org/kernel-team/linux/-/blob/988ee7494a62a63a8b92b2e18bf730072e54413c/debian/config/config?page=6#L5843
[2] https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/blob/a7e2a17f9c0e55937ea3e18c4d5b905a8e4f8047/config?page=11#L10752

* gnu/packages/linux.scm (default-extra-linux-options): Add CONFIG_FS_ENCRYPTION.

Change-Id: Ibee34871a25e880e7c16eaa51ddebee85ee172f5
---
 gnu/packages/linux.scm | 2 ++
 1 file changed, 2 insertions(+)


base-commit: fbfd2b93831978aadbb96f32cafdab997b04c6c6
  

Comments

45mg March 23, 2025, 10:31 a.m. UTC | #1
Closing in favor of #77203.
  

Patch

diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm
index b0dc6cbcfd..e5d97111a8 100644
--- a/gnu/packages/linux.scm
+++ b/gnu/packages/linux.scm
@@ -901,6 +901,8 @@  (define (default-extra-linux-options version)
     ("CONFIG_PROC_PID_CPUSET" . #t)
     ;; Allow disk encryption by default
     ("CONFIG_DM_CRYPT" . m)
+    ;; Allow fscrypt filesystem encryption by default
+    ("CONFIG_FS_ENCRYPTION" . #t)
     ;; Support zram on all kernel configs
     ("CONFIG_ZSWAP" . #t)
     ("CONFIG_ZSMALLOC" . #t)