Wednesday, February 18, 2026

Re: UPDATE sysutils/sleuthkit and take MAINTAINER

Index: Makefile
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/Makefile,v
diff -u -r1.33 Makefile
--- Makefile 8 Feb 2026 12:22:41 -0000 1.33
+++ Makefile 18 Feb 2026 20:19:43 -0000
@@ -1,38 +1,46 @@
COMMENT= forensic toolkit based on TCT

-DISTNAME= sleuthkit-4.10.1
+VERSION= 4.14.0
+DISTNAME= sleuthkit-${VERSION}
+
CATEGORIES= sysutils security
-REVISION= 0

-SHARED_LIBS += tsk 3.0 # 20.3
+SHARED_LIBS += tsk 4.0

-HOMEPAGE= https://www.sleuthkit.org/
+HOMEPAGE = https://www.sleuthkit.org/
+MAINTAINER = Sebastian Reitenbach <sebastia@openbsd.org>

# CPLv1 & IBM & GPLv2 & Apache2 & BSD & MIT
PERMIT_PACKAGE= Yes

-SITES = https://github.com/sleuthkit/sleuthkit/releases/download/${DISTNAME}/
+WANTLIB += bfio c m pthread ${COMPILER_LIBCXX} sqlite3 vhdi vmdk z
+WANTLIB += afflib aio_compat crypto curl expat nghttp2 nghttp3
+WANTLIB += ngtcp2 ngtcp2_crypto_libressl readline ssl ewf vslvm

-WANTLIB += bfio c m pthread ${COMPILER_LIBCXX} sqlite3 vhdi vmdk z
+SITES = https://github.com/sleuthkit/sleuthkit/releases/download/${DISTNAME}/

COMPILER = base-clang ports-gcc

AUTOCONF_VERSION = 2.69
AUTOMAKE_VERSION = 1.15
CONFIGURE_STYLE = autoreconf
+USE_GMAKE = Yes

-CONFIGURE_ARGS += --mandir='${PREFIX}/man' \
- --disable-java \
- --without-afflib \
- --without-libewf
-
-CONFIGURE_ENV = ac_cv_path_CPPUNIT_CONFIG=no \
- ac_cv_header_postgresql_libpq_fe_h=no
-RUN_DEPENDS = converters/p5-DateManip
LIB_DEPENDS = databases/sqlite3 \
devel/libbfio \
+ sysutils/afflib3 \
sysutils/libvhdi \
- sysutils/libvmdk
+ sysutils/libvmdk \
+ sysutils/libvslvm \
+ security/libewf
+RUN_DEPENDS = converters/p5-DateManip
+
+CONFIGURE_ARGS += --mandir='${PREFIX}/man' \
+ --enable-offline \
+ --disable-java
+
+CONFIGURE_ENV = ac_cv_path_CPPUNIT_CONFIG=no \
+ ac_cv_header_postgresql_libpq_fe_h=no

NO_TEST = Yes

Index: distinfo
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/distinfo,v
diff -u -r1.15 distinfo
--- distinfo 10 Mar 2021 16:00:51 -0000 1.15
+++ distinfo 18 Feb 2026 20:19:43 -0000
@@ -1,2 +1,2 @@
-SHA256 (sleuthkit-4.10.1.tar.gz) = ZcP3AfBG8BL+unhFKlDxMHlIoQOEdOr44pb2UDFgSgo=
-SIZE (sleuthkit-4.10.1.tar.gz) = 3524246
+SHA256 (sleuthkit-4.14.0.tar.gz) = +26hgBvPxMfTooPXWSxr1lrdZVQRdJUTtcQpuGVB6ak=
+SIZE (sleuthkit-4.14.0.tar.gz) = 3831626
Index: patches/patch-configure_ac
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/patches/patch-configure_ac,v
diff -u -r1.3 patch-configure_ac
--- patches/patch-configure_ac 11 Mar 2022 19:58:02 -0000 1.3
+++ patches/patch-configure_ac 18 Feb 2026 20:19:43 -0000
@@ -1,7 +1,7 @@
Index: configure.ac
--- configure.ac.orig
+++ configure.ac
-@@ -113,7 +113,7 @@ dnl Checks for libraries.
+@@ -115,7 +115,7 @@ dnl Checks for libraries.


dnl Some platforms will complain about missing included functions if libstdc++ is not included.
Index: patches/patch-man_sorter_1
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/patches/patch-man_sorter_1,v
diff -u -r1.4 patch-man_sorter_1
--- patches/patch-man_sorter_1 11 Mar 2022 19:58:02 -0000 1.4
+++ patches/patch-man_sorter_1 18 Feb 2026 20:19:43 -0000
@@ -1,5 +1,6 @@
---- man/sorter.1.orig Wed Sep 16 19:07:12 2015
-+++ man/sorter.1 Sat Sep 19 20:35:52 2015
+Index: man/sorter.1
+--- man/sorter.1.orig
++++ man/sorter.1
@@ -78,7 +78,7 @@ have priority over the standard files.
.IP "-C config"
Specify the location of the ONLY configuration file. The standard config
Index: patches/patch-tsk_Makefile_am
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/patches/patch-tsk_Makefile_am,v
diff -u -r1.2 patch-tsk_Makefile_am
--- patches/patch-tsk_Makefile_am 11 Mar 2022 19:58:02 -0000 1.2
+++ patches/patch-tsk_Makefile_am 18 Feb 2026 20:19:43 -0000
@@ -3,7 +3,7 @@
Index: tsk/Makefile.am
--- tsk/Makefile.am.orig
+++ tsk/Makefile.am
-@@ -4,6 +4,9 @@ SUBDIRS = base img vs fs hashdb auto pool util
+@@ -4,6 +4,9 @@ SUBDIRS = base img vs fs hashdb auto pool util util/Bi
# Merge the libraries into one
lib_LTLIBRARIES = libtsk.la
libtsk_la_SOURCES =
@@ -12,4 +12,4 @@
+nodist_EXTRA_libtsk_la_SOURCES = dummy.cpp
libtsk_la_LIBADD = base/libtskbase.la img/libtskimg.la \
vs/libtskvs.la fs/libtskfs.la hashdb/libtskhashdb.la \
- auto/libtskauto.la pool/libtskpool.la util/libtskutil.la
+ auto/libtskauto.la pool/libtskpool.la util/libtskutil.la util/Bitlocker/libtskbitlocker.la
Index: patches/patch-tsk_pool_tsk_lvm_hpp
===================================================================
RCS file: patches/patch-tsk_pool_tsk_lvm_hpp
diff -N patches/patch-tsk_pool_tsk_lvm_hpp
--- /dev/null 1 Jan 1970 00:00:00 -0000
+++ patches/patch-tsk_pool_tsk_lvm_hpp 18 Feb 2026 20:19:43 -0000
@@ -0,0 +1,57 @@
+This file is missing in the release tarball.
+https://github.com/sleuthkit/sleuthkit/issues/2881
+Index: tsk/pool/tsk_lvm.hpp
+--- tsk/pool/tsk_lvm.hpp.orig
++++ tsk/pool/tsk_lvm.hpp
+@@ -0,0 +1,51 @@
++/*
++ * The Sleuth Kit - Add on for Linux LVM support
++ *
++ * Copyright (c) 2022 Joachim Metz <joachim.metz@gmail.com>
++ *
++ * This software is distributed under the Common Public License 1.0
++ */
++
++#pragma once
++
++#include "tsk/base/tsk_base_i.h"
++
++#if HAVE_LIBVSLVM
++
++#include "tsk_pool.hpp"
++
++#include <libbfio.h>
++#include <libvslvm.h>
++
++class LVMPool;
++
++class LVMPool : public TSKPool {
++ protected:
++ TSK_IMG_INFO *_img;
++ // Start of the pool data within the image
++ TSK_OFF_T _offset;
++ libbfio_pool_t *_file_io_pool = NULL;
++ libvslvm_handle_t *_lvm_handle = NULL;
++ libvslvm_volume_group_t *_lvm_volume_group = NULL;
++
++ public:
++ LVMPool(std::vector<img_t> &&imgs);
++
++ // Moveable
++ LVMPool(LVMPool &&) = default;
++ LVMPool &operator=(LVMPool &&) = default;
++
++ // Not copyable because of TSK_IMG_INFO pointer
++ LVMPool(const LVMPool &) = delete;
++ LVMPool &operator=(const LVMPool &) = delete;
++
++ ~LVMPool();
++
++ std::string identifier;
++
++ ssize_t read(uint64_t address, char *buf, size_t buf_size) const
++ noexcept final;
++};
++
++#endif /* HAVE_LIBVSLVM */
++
Index: pkg/DESCR
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/pkg/DESCR,v
diff -u -r1.2 DESCR
--- pkg/DESCR 8 Dec 2003 04:45:53 -0000 1.2
+++ pkg/DESCR 18 Feb 2026 20:19:43 -0000
@@ -1,10 +1,10 @@
-The Sleuth Kit (previously known as TASK) is the only open
+The Sleuth Kit (previously known as TASK) is the only open
source forensic toolkit for a complete analysis of Microsoft
and UNIX file systems.
-It enables investigators to identify and recover evidence from
+It enables investigators to identify and recover evidence from
images acquired during incident response or from live systems.

-Some of its features :
+Some of its features:

* Analyzes images generated by the open source 'dd' utility,
found on all UNIX systems and available for Windows systems.
Index: pkg/PLIST
===================================================================
RCS file: /cvs/ports/sysutils/sleuthkit/pkg/PLIST,v
diff -u -r1.11 PLIST
--- pkg/PLIST 11 Mar 2022 19:58:02 -0000 1.11
+++ pkg/PLIST 18 Feb 2026 20:19:43 -0000
@@ -31,6 +31,7 @@
@bin bin/srch_strings
@bin bin/tsk_comparedir
@bin bin/tsk_gettimes
+@bin bin/tsk_imageinfo
@bin bin/tsk_loaddb
@bin bin/tsk_recover
@bin bin/usnjls
@@ -47,6 +48,7 @@
include/tsk/fs/apfs_fs.h
include/tsk/fs/apfs_fs.hpp
include/tsk/fs/decmpfs.h
+include/tsk/fs/encryptionHelper.h
include/tsk/fs/tsk_apfs.h
include/tsk/fs/tsk_apfs.hpp
include/tsk/fs/tsk_exfatfs.h
@@ -57,16 +59,19 @@
include/tsk/fs/tsk_fs.h
include/tsk/fs/tsk_hfs.h
include/tsk/fs/tsk_iso9660.h
+include/tsk/fs/tsk_logical_fs.h
include/tsk/fs/tsk_ntfs.h
include/tsk/fs/tsk_yaffs.h
include/tsk/hashdb/
include/tsk/hashdb/tsk_hashdb.h
include/tsk/img/
+include/tsk/img/logical_img.h
include/tsk/img/pool.hpp
include/tsk/img/tsk_img.h
include/tsk/libtsk.h
include/tsk/pool/
include/tsk/pool/apfs_pool_compat.hpp
+include/tsk/pool/lvm_pool_compat.hpp
include/tsk/pool/pool_compat.hpp
include/tsk/pool/tsk_apfs.h
include/tsk/pool/tsk_apfs.hpp
@@ -74,7 +79,22 @@
include/tsk/pool/tsk_pool.hpp
include/tsk/tsk_incs.h
include/tsk/util/
+include/tsk/util/Bitlocker/
+include/tsk/util/Bitlocker/BitlockerParser.h
+include/tsk/util/Bitlocker/BitlockerUtils.h
+include/tsk/util/Bitlocker/DataTypes.h
+include/tsk/util/Bitlocker/MetadataEntry.h
+include/tsk/util/Bitlocker/MetadataUtils.h
+include/tsk/util/Bitlocker/MetadataValue.h
+include/tsk/util/Bitlocker/MetadataValueAesCcmEncryptedKey.h
+include/tsk/util/Bitlocker/MetadataValueKey.h
+include/tsk/util/Bitlocker/MetadataValueOffsetAndSize.h
+include/tsk/util/Bitlocker/MetadataValueStretchKey.h
+include/tsk/util/Bitlocker/MetadataValueUnicode.h
+include/tsk/util/Bitlocker/MetadataValueVolumeMasterKey.h
include/tsk/util/crypto.hpp
+include/tsk/util/detect_encryption.h
+include/tsk/util/file_system_utils.h
include/tsk/util/lw_shared_ptr.hpp
include/tsk/util/span.hpp
include/tsk/vs/
@@ -87,6 +107,7 @@
@static-lib lib/libtsk.a
lib/libtsk.la
@lib lib/libtsk.so.${LIBtsk_VERSION}
+lib/pkgconfig/tsk.pc
@man man/man1/blkcalc.1
@man man/man1/blkcat.1
@man man/man1/blkls.1
Hi,



On Wed, Feb 18, 2026 at 3:23 PM Stuart Henderson <stu@spacehopper.org> wrote:
: +VERSION=             4.14.0
: +GH_ACCOUNT=          sleuthkit
: +GH_PROJECT=          sleuthkit
: +GH_TAGNAME=          sleuthkit-${VERSION}
: +DISTNAME=            sleuthkit-${VERSION}
...
: -SITES =      https://github.com/sleuthkit/sleuthkit/releases/download/${DISTNAME}/

They are still providing proper uploaded tarballs at
https://github.com/sleuthkit/sleuthkit/releases/download/, please don't
switch to the autogenerated git-archive files with GH_*


I switched to the tarball as advised. 
It seems, at least since 4.13.0 the tsk_lvm.hpp file is not included :/
I took it from the source, to let it build again.

updated version attached, hope that's OK now?

thank you,
Sebastian

No comments:

Post a Comment