Commit Graph

368 Commits

Author SHA256 Message Date
Michael Chang
f6435d4e6e Accepting request 1179114 from home:michael-chang:branches:Base:System
- Add blscfg support
  * 0001-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0004-blscfg-Don-t-root-device-in-emu-builds.patch
  * 0005-blscfg-check-for-mounted-boot-in-emu.patch
  * 0006-Follow-the-device-where-blscfg-is-discovered.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch

OBS-URL: https://build.opensuse.org/request/show/1179114
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=506
2024-06-07 05:34:08 +00:00
Michael Chang
e3bfb46960 Accepting request 1175311 from home:gary_lin:branches:Base:System
- Only enable grub-protect for EFI systems
  * 0001-util-enable-grub-protect-only-for-EFI-systems.patch

OBS-URL: https://build.opensuse.org/request/show/1175311
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=505
2024-05-21 05:06:43 +00:00
Michael Chang
53da76e569 Accepting request 1174325 from home:gary_lin:branches:Base:System
- Update to the latest upstreaming TPM2 patches
  * 0001-key_protector-Add-key-protectors-framework.patch
    - Replace 0001-protectors-Add-key-protectors-framework.patch
  * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch
    - Merge other TSS patches
      * 0001-tpm2-Add-TPM2-types-structures-and-command-constants.patch
      * 0002-tpm2-Add-more-marshal-unmarshal-functions.patch
      * 0003-tpm2-Implement-more-TPM2-commands.patch
  * 0003-key_protector-Add-TPM2-Key-Protector.patch
    - Replace 0003-protectors-Add-TPM2-Key-Protector.patch
  * 0004-cryptodisk-Support-key-protectors.patch
  * 0005-util-grub-protect-Add-new-tool.patch
  * 0001-tpm2-Support-authorized-policy.patch
    - Replace 0004-tpm2-Support-authorized-policy.patch
  * 0001-tpm2-Add-extra-RSA-SRK-types.patch
  * 0001-tpm2-Implement-NV-index.patch
    - Replace 0001-protectors-Implement-NV-index.patch
  * 0002-cryptodisk-Fallback-to-passphrase.patch
  * 0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch
  * 0004-diskfilter-look-up-cryptodisk-devices-first.patch
- Refresh affected patches
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * grub2-bsc1220338-key_protector-implement-the-blocklist.patch
- New manpage for grub2-protect

OBS-URL: https://build.opensuse.org/request/show/1174325
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=504
2024-05-16 07:26:55 +00:00
Michael Chang
3b9b62e001 Accepting request 1169284 from home:gcomes.obs:grub2
- remove deprecated file 20_memtest86+
  * a similar file is provided by the package memtest86+

OBS-URL: https://build.opensuse.org/request/show/1169284
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=501
2024-04-22 06:21:45 +00:00
Michael Chang
96ea57df71 Accepting request 1167901 from home:michael-chang:branches:Base:System
OBS-URL: https://build.opensuse.org/request/show/1167901
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=500
2024-04-16 04:30:34 +00:00
Michael Chang
c66ed2686f Accepting request 1166747 from home:gary_lin:branches:Base:System
- Fix the compatibility issue with bash-completion 2.12
  (bsc#1221849)
  * 0001-util-bash-completion-Fix-for-bash-completion-2.12.patch

OBS-URL: https://build.opensuse.org/request/show/1166747
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=499
2024-04-15 05:33:14 +00:00
Michael Chang
277f8a4bdf Accepting request 1163417 from home:michael-chang:branches:Base:System
- Fix os name is used for root file system mount (bsc#1220949)
  * 0001-10_linux-Ensure-persistence-of-root-file-system-moun.patch

OBS-URL: https://build.opensuse.org/request/show/1163417
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=498
2024-03-29 02:44:36 +00:00
Michael Chang
9b3b8eb01d Accepting request 1162579 from home:michael-chang:branches:Base:System
- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch

OBS-URL: https://build.opensuse.org/request/show/1162579
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=497
2024-03-27 09:25:47 +00:00
Michael Chang
11e8d5171e Accepting request 1160526 from home:michael-chang:branches:Base:System
- Fix memdisk becomes the default boot entry, resolving no graphic display
  device error in guest vnc console (bsc#1221779)
  * grub2-xen-pv-firmware.cfg 

- Cleanup spec file to adhere to update-bootloader-rpm-macros definition
  entirely (bsc#1218241)

OBS-URL: https://build.opensuse.org/request/show/1160526
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=495
2024-03-22 06:26:29 +00:00
Michael Chang
8aecaf14b6 Accepting request 1159260 from home:gary_lin:branches:Base:System
- Add grub2-bsc1220338-key_protector-implement-the-blocklist.patch
  to implement a blocklist in the key protector and check the
  unwanted UEFI variables (bsc#1220338)

OBS-URL: https://build.opensuse.org/request/show/1159260
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=494
2024-03-20 06:15:31 +00:00
Michael Chang
7615045004 Accepting request 1158170 from home:michael-chang:efi:grub:blscfg
- Add blscfg support
  * 0001-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0004-blscfg-Don-t-root-device-in-emu-builds.patch
  * 0005-blscfg-check-for-mounted-boot-in-emu.patch
  * 0006-Follow-the-device-where-blscfg-is-discovered.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch

OBS-URL: https://build.opensuse.org/request/show/1158170
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=493
2024-03-18 06:07:27 +00:00
Michael Chang
cd4c92fe1d Accepting request 1154596 from home:gary_lin:branches:Base:System
- Update grub2-change-bash-completion-dir.patch to support bash
  completion correctly (bsc#1218875)
- Drop grub2-bash-completion-2.12.patch since the have() function
  is not used in those scripts anymore

OBS-URL: https://build.opensuse.org/request/show/1154596
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=492
2024-03-05 05:36:14 +00:00
Michael Chang
9317e49c7a Accepting request 1154031 from home:gcomes.obs:grub2
- disable the file 20_memtest86+
  * added a deprecation note in the header

OBS-URL: https://build.opensuse.org/request/show/1154031
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=491
2024-03-04 08:34:38 +00:00
Dr. Werner Fink
132cb41b80 Prepare for bash-completion-2.12
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=490
2024-02-29 10:15:44 +00:00
Michael Chang
7dfdb912ce Accepting request 1148961 from home:michael-chang:branches:Base:System
- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg
  (bsc#1219248) (bsc#1181762) 
  * grub2-xen-pv-firmware.cfg
  * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch

OBS-URL: https://build.opensuse.org/request/show/1148961
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=489
2024-02-22 05:04:34 +00:00
Michael Chang
e7bd68e639 Accepting request 1147684 from home:michael-chang:branches:Base:System
- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to
  SLE-15-SP2 (bsc#1217102)
  * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * add 0002-ofdisk-add-early_log-support.patch

OBS-URL: https://build.opensuse.org/request/show/1147684
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=488
2024-02-20 03:53:56 +00:00
Michael Chang
e149769ddf Accepting request 1147016 from home:michael-chang:branches:Base:System
correct previous commit, tar might not work witj -sort=, use  --sort=

OBS-URL: https://build.opensuse.org/request/show/1147016
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=487
2024-02-16 07:14:59 +00:00
Michael Chang
ae6742b64d Accepting request 1144993 from home:bmwiedemann:branches:Base:System
Sort tar file order for reproducible builds

OBS-URL: https://build.opensuse.org/request/show/1144993
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=486
2024-02-16 07:02:37 +00:00
Michael Chang
85be654ad4 Accepting request 1144466 from home:michael-chang:bsc:1218949
- Fix build error on gcc-14 (bsc#1218949)
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch

OBS-URL: https://build.opensuse.org/request/show/1144466
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=485
2024-02-06 07:26:37 +00:00
Michael Chang
f01516939b Accepting request 1142177 from home:michael-chang:bsc:1218783
- Remove magic number header field check on arm64 (bsc#1218783)
  * 0001-loader-arm64-efi-linux-Remove-magic-number-header-fi.patch

OBS-URL: https://build.opensuse.org/request/show/1142177
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=484
2024-01-29 07:58:26 +00:00
Michael Chang
d203d36f81 Accepting request 1141134 from home:michael-chang:bsc:1218864
- Reinstate the verification for a non-zero total entry count to skip unmapped
  data blocks (bsc#1218864)
  * 0001-fs-xfs-always-verify-the-total-number-of-entries-is-.patch
- Removed temporary fix as reverting it will cause a different XFS parser bug
  * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch

OBS-URL: https://build.opensuse.org/request/show/1141134
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=483
2024-01-24 08:25:10 +00:00
Michael Chang
9a3fd383c6 Accepting request 1139336 from home:michael-chang:branches:Base:System
- Resolved XFS regression leading to the "not a correct XFS inode" error by
  temporarily reverting the problematic commit (bsc#1218864)
  * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch

OBS-URL: https://build.opensuse.org/request/show/1139336
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=481
2024-01-17 04:02:03 +00:00
Michael Chang
7e75e7f881 Accepting request 1138021 from home:michael-chang:grub:2.12
- Version bump to 2.12 (PED-5589)
  * Added:
    - grub-2.12.tar.xz
    - fix_no_extra_deps_in_release_tarball.patch
  * Removed:
    - grub-2.12~rc1.tar.xz
  * Patch dropped as it merged into new version:
    - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch
    - 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch
    - 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
    - 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
    - 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
    - 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
    - 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
    - 0006-fs-ntfs-Make-code-more-readable.patch
    - 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch
    - 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
    - 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
    - 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch
    - 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
    - 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch
  * Patch adjusted for the updated base version:
    - use-grub2-as-a-package-name.patch
    - grub2-s390x-04-grub2-install.patch
    - grub2-btrfs-04-grub2-install.patch
    - grub2-ppc64le-disable-video.patch
    - 0002-AUDIT-0-http-boot-tracker-bug.patch
    - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch
    - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
    - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch

OBS-URL: https://build.opensuse.org/request/show/1138021
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=480
2024-01-11 07:48:22 +00:00
Michael Chang
49ae5965c1 Accepting request 1136964 from home:michael-chang:branches:Base:System
- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch

OBS-URL: https://build.opensuse.org/request/show/1136964
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=479
2024-01-05 08:33:00 +00:00
Michael Chang
8f037866b6 Accepting request 1131237 from home:michael-chang:branches:Base:System
- Fix reproducible build for grub.xen (bsc#1217619)
  * 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
  * 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch

OBS-URL: https://build.opensuse.org/request/show/1131237
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=478
2023-12-06 04:22:57 +00:00
Michael Chang
8c3cd1e56a Accepting request 1128487 from home:michael-chang:branches:Base:System
- Fix unattended boot with TPM2 allows downgrading kernel and rootfs, also
  enhancing the overall security posture (bsc#1216680)
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch

OBS-URL: https://build.opensuse.org/request/show/1128487
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=477
2023-11-27 00:14:50 +00:00
Michael Chang
9cc9bce139 Accepting request 1127836 from home:michael-chang:branches:Base:System
- grub2.spec: Fix openQA test failure in SLE-15-SP6 due to missing
  font in memdisk

OBS-URL: https://build.opensuse.org/request/show/1127836
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=476
2023-11-21 08:07:34 +00:00
Michael Chang
d2d2c88ea6 Accepting request 1126507 from home:michael-chang:branches:Base:System
- Fix XFS regression in 2.12~rc1 and support large extent counters
  * 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
  * 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
  * 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch

OBS-URL: https://build.opensuse.org/request/show/1126507
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=474
2023-11-17 06:37:28 +00:00
67224eefc6 Accepting request 1121379 from home:michael-chang:branches:Base:System
- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) 
  * 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch

OBS-URL: https://build.opensuse.org/request/show/1121379
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=473
2023-10-31 09:35:53 +00:00
247022017f Accepting request 1120450 from home:gary_lin:branches:Base:System
- Fix a potential error when appending multiple keys into the
  synthesized initrd
  * Fix-the-size-calculation-for-the-synthesized-initrd.patch

OBS-URL: https://build.opensuse.org/request/show/1120450
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=472
2023-10-26 06:43:26 +00:00
8c7387ac32 Accepting request 1120141 from home:michael-chang:branches:Base:System
- Fix Xen chainloding error of no matching file path found (bsc#1216081) 
  * grub2-efi-chainload-harder.patch

- Use grub-tpm2 token to unlock keyslots to make the unsealing process more
  efficient and secure.
  * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch

OBS-URL: https://build.opensuse.org/request/show/1120141
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=471
2023-10-25 07:31:37 +00:00
Michael Chang
891ae6ee6e Accepting request 1118237 from home:michael-chang:branches:Base:System
- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075) 
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks

- Version bump to 2.12~rc1 (PED-5589)

OBS-URL: https://build.opensuse.org/request/show/1118237
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=469
2023-10-18 05:19:26 +00:00
Michael Chang
9222984490 Accepting request 1116881 from home:michael-chang:branches:Base:System
- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4

OBS-URL: https://build.opensuse.org/request/show/1116881
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=468
2023-10-13 05:42:31 +00:00
Michael Chang
a64c498922 Accepting request 1115856 from home:favogt:businessasusual
- Add patch to fix reading files from btrfs with "implicit" holes:
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch

OBS-URL: https://build.opensuse.org/request/show/1115856
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=467
2023-10-06 02:58:09 +00:00
Michael Chang
c4e530ea83 Accepting request 1115436 from home:gary_lin:branches:Base:System
- Update the TPM 2.0 patches to support more RSA and ECC algorithms
  * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0003-protectors-Add-TPM2-Key-Protector.patch
  * 0005-util-grub-protect-Add-new-tool.patch

- Remove build require for gcc-32bit, target platform didn't rely on libgcc
  function shipped with compiler but rather using functions supplied in grub
  directly.

OBS-URL: https://build.opensuse.org/request/show/1115436
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=466
2023-10-05 05:07:17 +00:00
Michael Chang
d81a5aab96 Accepting request 1114285 from home:favogt:branches:Base:System
- Add BuildIgnore to break cycle with the branding package

OBS-URL: https://build.opensuse.org/request/show/1114285
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=465
2023-10-05 00:55:59 +00:00
Michael Chang
cd35f7c278 Accepting request 1113901 from home:gary_lin:branches:Base:System
- Only build with fde-tpm-helper-rpm-macros for the architectures
  supporting the newer UEFI and TPM 2.0.
  * Also correct the location of %fde_tpm_update_requires

OBS-URL: https://build.opensuse.org/request/show/1113901
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=464
2023-09-28 03:04:29 +00:00
Michael Chang
0a700a1789 Accepting request 1112154 from home:gary_lin:branches:Base:System
- Add the new BuildRequires for EFI builds for the better FDE
  support: fde-tpm-helper-rpm-macros
  + Also add the the macros to %post and %posttrans

OBS-URL: https://build.opensuse.org/request/show/1112154
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=461
2023-09-20 07:35:35 +00:00
Michael Chang
71fc1bf8e1 Accepting request 1110320 from home:clin:branches:X13S
- Correct the type of allocated EFI pages for ARM64 kernel from EFI_LOADER_DATA to EFI_LOADER_CODE since some Qualcomm CPUs do not allow kernel code execution on EFI_LOADER_DATA pages. (bsc#1215151)

OBS-URL: https://build.opensuse.org/request/show/1110320
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=460
2023-09-12 02:11:11 +00:00
Michael Chang
71f10698a2 Accepting request 1108332 from openSUSE:Factory:RISCV
- grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig

OBS-URL: https://build.opensuse.org/request/show/1108332
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=459
2023-09-04 04:46:02 +00:00
Michael Chang
8ee92f5194 Accepting request 1105405 from home:michael-chang:grub:2.12rc1
- Implement NV index mode for TPM 2.0 key protector
  0001-protectors-Implement-NV-index.patch
- Fall back to passphrase mode when the key protector fails to
  unlock the disk
  0002-cryptodisk-Fallback-to-passphrase.patch
- Wipe out the cached key cleanly
  0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch
- Make diskfiler to look up cryptodisk devices first
  0004-diskfilter-look-up-cryptodisk-devices-first.patch

- Version bump to 2.12~rc1
  * Added:
    - grub-2.12~rc1.tar.xz
  * Removed:
    - grub-2.06.tar.xz
  * Patch dropped merged by new version:
    - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
    - grub2-s390x-02-kexec-module-added-to-emu.patch
    - grub2-efi-chainloader-root.patch
    - grub2-Fix-incorrect-netmask-on-ppc64.patch
    - 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch
    - 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch
    - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
    - grub2-s390x-10-keep-network-at-kexec.patch
    - 0001-Fix-build-error-in-binutils-2.36.patch
    - 0001-emu-fix-executable-stack-marking.patch
    - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
    - 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch
    - 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
    - 0001-Filter-out-POSIX-locale-for-translation.patch

OBS-URL: https://build.opensuse.org/request/show/1105405
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=458
2023-08-24 03:25:56 +00:00
Gary Ching-Pang Lin
c0d19752a8 Accepting request 1102092 from home:gary_lin:branches:Base:System
- Change the bash-completion directory (bsc#1213855)
  * grub2-change-bash-completion-dir.patch

OBS-URL: https://build.opensuse.org/request/show/1102092
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=457
2023-08-03 05:55:03 +00:00
d7b8a8f31b - add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch,
0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
  * support more featureful extX filesystems (backport from
  upstream git)

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=455
2023-05-30 11:04:54 +00:00
Gary Ching-Pang Lin
05861f0e0c Accepting request 1082901 from home:gary_lin:branches:Base:System
- Exclude the deprecated EFI location, /usr/lib64/efi/, from Tumbleweed and ALP

OBS-URL: https://build.opensuse.org/request/show/1082901
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=453
2023-04-26 07:47:52 +00:00
Gary Ching-Pang Lin
03ce3384fd Accepting request 1082613 from home:gary_lin:branches:Base:System
- Update TPM 2.0 key unsealing patches

OBS-URL: https://build.opensuse.org/request/show/1082613
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=452
2023-04-26 03:19:58 +00:00
Michael Chang
5420dbe227 Accepting request 1081117 from home:michael-chang:branches:Base:System
- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch

OBS-URL: https://build.opensuse.org/request/show/1081117
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=451
2023-04-21 08:21:27 +00:00
Michael Chang
d8eda11f25 Accepting request 1078546 from home:michael-chang:branches:Base:System
- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch

OBS-URL: https://build.opensuse.org/request/show/1078546
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=448
2023-04-12 02:46:16 +00:00
Michael Chang
448b5a32b0 Accepting request 1073013 from home:michael-chang:branches:Base:System
- Restrict cryptsetup key file permission for better security (bsc#1207499)
  * 0001-loader-linux-Ensure-the-newc-pathname-is-NULL-termin.patch
  * 0002-Restrict-cryptsetup-key-file-permission-for-better-s.patch

OBS-URL: https://build.opensuse.org/request/show/1073013
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=446
2023-03-22 02:43:43 +00:00
Michael Chang
3c4b4c1ff8 Accepting request 1072324 from home:frispete:Tumbleweed
- Meanwhile, memtest86+ gained EFI support, but using the grub
  command line to run it manually is quite tedious...
  Adapt 20_memtest86+ to provide a proper menu entry. Executing
  memtest requires to turn security off in BIOS: (Boot Mode: Other OS).

OBS-URL: https://build.opensuse.org/request/show/1072324
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=445
2023-03-20 02:50:55 +00:00
Michael Chang
7c44841cbf Accepting request 1071405 from home:rwill:branches:Base:System
Add support for UsrMerged kernels. (bsc#1184804)

OBS-URL: https://build.opensuse.org/request/show/1071405
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=444
2023-03-15 09:43:19 +00:00