blob: a48a538532d826ab3c78e545217bc8ece04a995a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
# Copyright 1999-2023 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
DISTUTILS_USE_PEP517=setuptools
PYTHON_COMPAT=( python3_{9..11} )
inherit distutils-r1
MY_PV=${PV//_beta/-beta.}
DESCRIPTION="Framework for analyzing volatile memory"
HOMEPAGE="https://github.com/volatilityfoundation/volatility3/ https://www.volatilityfoundation.org/"
SRC_URI="
https://github.com/volatilityfoundation/volatility3/archive/v${MY_PV}.tar.gz -> ${P}.gh.tar.gz
test?
(
https://downloads.volatilityfoundation.org/volatility3/images/win-xp-laptop-2005-06-25.img.gz -> ${PN}-win-xp-laptop-2005-06-25.img.gz
https://downloads.volatilityfoundation.org/volatility3/images/linux-sample-1.bin.gz -> ${PN}-linux-sample-1.bin.gz
)
"
S="${WORKDIR}"/${PN}-${MY_PV}
LICENSE="GPL-2+"
SLOT="0"
KEYWORDS="~amd64 ~x86"
IUSE="crypt disasm jsonschema leechcore snappy test yara"
RDEPEND="
>=dev-python/pefile-2017.8.1[${PYTHON_USEDEP}]
crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] )
disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] )
jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] )
leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] )
snappy? ( app-arch/snappy:0/1 )
yara? ( >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}] )
"
DEPEND="${RDEPEND}"
PATCHES=(
"${FILESDIR}/${P}-dont-install-tests.patch"
)
# Tests require optional features
REQUIRED_USE="test? ( yara )"
RESTRICT="!test? ( test )"
python_test() {
# see .github/workflows/test.yaml
"${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
--image "${WORKDIR}/${PN}-win-xp-laptop-2005-06-25.img" -k test_windows -v || \
die "Tests fail with ${EPYTHON}"
"${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
--image "${WORKDIR}/${PN}-linux-sample-1.bin" -k test_linux -v || \
die "Tests fail with ${EPYTHON}"
}
|
GitWeb
