chore(deps): move e2fsprogs dependency to onekey maintained fork.

Author: qkaiser

docs/installation.md

@@ -140,3 +140,13 @@ There is a handy `install-deps.sh` script included in the repository and PyPI pa
        curl -L -o sasquatch_1.0_arm64.deb https://github.com/onekey-sec/sasquatch/releases/download/sasquatch-v4.5.1-4/sasquatch_1.0_arm64.deb
        sudo dpkg -i sasquatch_1.0_arm64.deb
        rm sasquatch_1.0_arm64.deb
+
+4. We maintain a fork of e2fsprogs based on Debian upstream, with some security fixes. You can install it this way:
+
+        curl -L -o libext2fs2_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/libext2fs2_1.47.0-3.ok1_amd64.deb
+        dpkg -i libext2fs2_1.47.0-3.ok1_amd64.deb
+        rm -f libext2fs2_1.47.0-3.ok1_amd64.deb
+
+        curl -L -o e2fsprogs_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/e2fsprogs_1.47.0-3.ok1_amd64.deb
+        dpkg -i e2fsprogs_1.47.0-3.ok1_amd64.deb
+        rm -f e2fsprogs_1.47.0-3.ok1_amd64.deb

overlay.nix

@@ -9,6 +9,12 @@ inputs: final: prev:
     (super: {
       pname = "e2fsprogs-nofortify";
       hardeningDisable = (super.hardeningDisable or [ ]) ++ [ "fortify3" ];
+
+      version = "1.47.0-3.ok1";
+      src = prev.fetchurl {
+        url = "https://github.com/onekey-sec/e2fsprogs/archive/refs/tags/v1.47.0-3.ok1.tar.gz";
+        hash = "sha256-fsLUySjAdgnRp5m405a4Egso+LXNLxR9Y7WHt8qAvFM=";
+      };
     });
 
   # Own package updated independently of nixpkgs

unblob/install-deps.sh

@@ -18,3 +18,11 @@ apt-get install --no-install-recommends -y \
 curl -L -o sasquatch_1.0_amd64.deb https://github.com/onekey-sec/sasquatch/releases/download/sasquatch-v4.5.1-4/sasquatch_1.0_amd64.deb
 dpkg -i sasquatch_1.0_amd64.deb
 rm -f sasquatch_1.0_amd64.deb
+
+curl -L -o libext2fs2_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/libext2fs2_1.47.0-3.ok1_amd64.deb
+dpkg -i libext2fs2_1.47.0-3.ok1_amd64.deb
+rm -f libext2fs2_1.47.0-3.ok1_amd64.deb
+
+curl -L -o e2fsprogs_1.47.0-3.ok1_amd64.deb https://github.com/onekey-sec/e2fsprogs/releases/download/v1.47.0-3.ok1/e2fsprogs_1.47.0-3.ok1_amd64.deb
+dpkg -i e2fsprogs_1.47.0-3.ok1_amd64.deb
+rm -f e2fsprogs_1.47.0-3.ok1_amd64.deb