From 994906d1def2d79d26ebe44d01cf42826dc6a44c Mon Sep 17 00:00:00 2001
From: Mike Engel <Mike.Engel@digi.com>
Date: Fri, 8 Oct 2021 12:36:54 +0200
Subject: [PATCH] linux: add kernel fragment to enable File system encryption
 support

https://onedigi.atlassian.net/browse/DEL-8944

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
---
 meta-digi-arm/recipes-kernel/linux/linux-dey.inc         | 3 ++-
 meta-digi-arm/recipes-kernel/linux/linux-dey/fscrypt.cfg | 5 +++++
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 meta-digi-arm/recipes-kernel/linux/linux-dey/fscrypt.cfg

diff --git a/meta-digi-arm/recipes-kernel/linux/linux-dey.inc b/meta-digi-arm/recipes-kernel/linux/linux-dey.inc
index 87f6ec74c..3aa8c98d7 100644
--- a/meta-digi-arm/recipes-kernel/linux/linux-dey.inc
+++ b/meta-digi-arm/recipes-kernel/linux/linux-dey.inc
@@ -1,4 +1,4 @@
-# Copyright (C) 2018-2023 Digi International
+# Copyright (C) 2018-2024 Digi International
 SUMMARY = "Linux kernel for Digi boards"
 LICENSE = "GPL-2.0-only"
 LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
@@ -18,6 +18,7 @@ SRC_URI = " \
     ${LINUX_GIT_URI};branch=${SRCBRANCH} \
     ${@oe.utils.conditional('KERNEL_DEFCONFIG', '', 'file://defconfig', '', d)} \
     ${@bb.utils.contains('DISTRO_FEATURES', 'virtualization', 'file://docker_conf.cfg', '', d)} \
+    ${@oe.utils.vartrue('TRUSTFENCE_FILE_BASED_ENCRYPT', 'file://fscrypt.cfg', '', d)} \
 "
 S = "${WORKDIR}/git"
 
diff --git a/meta-digi-arm/recipes-kernel/linux/linux-dey/fscrypt.cfg b/meta-digi-arm/recipes-kernel/linux/linux-dey/fscrypt.cfg
new file mode 100644
index 000000000..371d3c25f
--- /dev/null
+++ b/meta-digi-arm/recipes-kernel/linux/linux-dey/fscrypt.cfg
@@ -0,0 +1,5 @@
+CONFIG_BLK_INLINE_ENCRYPTION=y
+CONFIG_FS_ENCRYPTION=y
+CONFIG_FS_ENCRYPTION_INLINE_CRYPT=y
+CONFIG_MMC_CRYPTO=y
+CONFIG_CRYPTO_ESSIV=y