Commit Graph

958 Commits

Author SHA256 Message Date
Michael Chang
8f037866b6 Accepting request 1131237 from home:michael-chang:branches:Base:System
- Fix reproducible build for grub.xen (bsc#1217619)
  * 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
  * 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch

OBS-URL: https://build.opensuse.org/request/show/1131237
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=478
2023-12-06 04:22:57 +00:00
Ana Guerrero
345152fa25 Accepting request 1128995 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1128995
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=309
2023-11-28 21:17:52 +00:00
Michael Chang
8c3cd1e56a Accepting request 1128487 from home:michael-chang:branches:Base:System
- Fix unattended boot with TPM2 allows downgrading kernel and rootfs, also
  enhancing the overall security posture (bsc#1216680)
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch

OBS-URL: https://build.opensuse.org/request/show/1128487
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=477
2023-11-27 00:14:50 +00:00
Ana Guerrero
65653fe159 Accepting request 1127831 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1127831
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=308
2023-11-22 17:54:05 +00:00
Michael Chang
9cc9bce139 Accepting request 1127836 from home:michael-chang:branches:Base:System
- grub2.spec: Fix openQA test failure in SLE-15-SP6 due to missing
  font in memdisk

OBS-URL: https://build.opensuse.org/request/show/1127836
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=476
2023-11-21 08:07:34 +00:00
Michael Chang
82ab887bba Accepting request 1127240 from home:gary_lin:branches:Base:System
- Update the TPM2 patches to skip the persistent SRK handle if not
  specified and improve the error messages
  + 0003-protectors-Add-TPM2-Key-Protector.patch
  + 0005-util-grub-protect-Add-new-tool.patch
  + 0004-tpm2-Support-authorized-policy.patch

OBS-URL: https://build.opensuse.org/request/show/1127240
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=475
2023-11-21 06:44:02 +00:00
Ana Guerrero
f5c74d55d0 Accepting request 1127241 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1127241
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=307
2023-11-17 19:48:43 +00:00
Michael Chang
d2d2c88ea6 Accepting request 1126507 from home:michael-chang:branches:Base:System
- Fix XFS regression in 2.12~rc1 and support large extent counters
  * 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
  * 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
  * 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch

OBS-URL: https://build.opensuse.org/request/show/1126507
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=474
2023-11-17 06:37:28 +00:00
Dominique Leuenberger
cd66223ac9 Accepting request 1121401 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1121401
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=306
2023-11-01 21:09:30 +00:00
67224eefc6 Accepting request 1121379 from home:michael-chang:branches:Base:System
- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) 
  * 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch

OBS-URL: https://build.opensuse.org/request/show/1121379
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=473
2023-10-31 09:35:53 +00:00
Ana Guerrero
1594cf11ad Accepting request 1120471 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1120471
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=305
2023-10-27 20:27:14 +00:00
247022017f Accepting request 1120450 from home:gary_lin:branches:Base:System
- Fix a potential error when appending multiple keys into the
  synthesized initrd
  * Fix-the-size-calculation-for-the-synthesized-initrd.patch

OBS-URL: https://build.opensuse.org/request/show/1120450
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=472
2023-10-26 06:43:26 +00:00
8c7387ac32 Accepting request 1120141 from home:michael-chang:branches:Base:System
- Fix Xen chainloding error of no matching file path found (bsc#1216081) 
  * grub2-efi-chainload-harder.patch

- Use grub-tpm2 token to unlock keyslots to make the unsealing process more
  efficient and secure.
  * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch

OBS-URL: https://build.opensuse.org/request/show/1120141
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=471
2023-10-25 07:31:37 +00:00
Michael Chang
e40e4a0d23 Accepting request 1118820 from home:michael-chang:branches:Base:System
add missing ref in changelog

OBS-URL: https://build.opensuse.org/request/show/1118820
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=470
2023-10-19 06:55:40 +00:00
Ana Guerrero
88c2366210 Accepting request 1118449 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1118449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=304
2023-10-18 19:25:13 +00:00
Michael Chang
891ae6ee6e Accepting request 1118237 from home:michael-chang:branches:Base:System
- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075) 
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks

- Version bump to 2.12~rc1 (PED-5589)

OBS-URL: https://build.opensuse.org/request/show/1118237
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=469
2023-10-18 05:19:26 +00:00
Ana Guerrero
254f9e6fd9 Accepting request 1117564 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1117564
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=303
2023-10-13 21:13:52 +00:00
Michael Chang
9222984490 Accepting request 1116881 from home:michael-chang:branches:Base:System
- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4

OBS-URL: https://build.opensuse.org/request/show/1116881
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=468
2023-10-13 05:42:31 +00:00
Ana Guerrero
476a65dabe Accepting request 1115941 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1115941
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=302
2023-10-06 19:12:40 +00:00
Michael Chang
a64c498922 Accepting request 1115856 from home:favogt:businessasusual
- Add patch to fix reading files from btrfs with "implicit" holes:
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch

OBS-URL: https://build.opensuse.org/request/show/1115856
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=467
2023-10-06 02:58:09 +00:00
Michael Chang
c4e530ea83 Accepting request 1115436 from home:gary_lin:branches:Base:System
- Update the TPM 2.0 patches to support more RSA and ECC algorithms
  * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0003-protectors-Add-TPM2-Key-Protector.patch
  * 0005-util-grub-protect-Add-new-tool.patch

- Remove build require for gcc-32bit, target platform didn't rely on libgcc
  function shipped with compiler but rather using functions supplied in grub
  directly.

OBS-URL: https://build.opensuse.org/request/show/1115436
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=466
2023-10-05 05:07:17 +00:00
Michael Chang
d81a5aab96 Accepting request 1114285 from home:favogt:branches:Base:System
- Add BuildIgnore to break cycle with the branding package

OBS-URL: https://build.opensuse.org/request/show/1114285
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=465
2023-10-05 00:55:59 +00:00
Ana Guerrero
181b9e3b63 Accepting request 1113952 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1113952
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=301
2023-10-02 18:04:15 +00:00
Michael Chang
cd35f7c278 Accepting request 1113901 from home:gary_lin:branches:Base:System
- Only build with fde-tpm-helper-rpm-macros for the architectures
  supporting the newer UEFI and TPM 2.0.
  * Also correct the location of %fde_tpm_update_requires

OBS-URL: https://build.opensuse.org/request/show/1113901
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=464
2023-09-28 03:04:29 +00:00
Michael Chang
ed10ffe1d5 Accepting request 1112517 from home:michael-chang:branches:Base:System
* arm64-Use-proper-memory-type-for-kernel-allocation.patch

OBS-URL: https://build.opensuse.org/request/show/1112517
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=463
2023-09-20 09:52:42 +00:00
Michael Chang
e51d4315a7 Accepting request 1112505 from home:michael-chang:branches:Base:System
- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch

OBS-URL: https://build.opensuse.org/request/show/1112505
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=462
2023-09-20 09:38:55 +00:00
Michael Chang
0a700a1789 Accepting request 1112154 from home:gary_lin:branches:Base:System
- Add the new BuildRequires for EFI builds for the better FDE
  support: fde-tpm-helper-rpm-macros
  + Also add the the macros to %post and %posttrans

OBS-URL: https://build.opensuse.org/request/show/1112154
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=461
2023-09-20 07:35:35 +00:00
Michael Chang
71fc1bf8e1 Accepting request 1110320 from home:clin:branches:X13S
- Correct the type of allocated EFI pages for ARM64 kernel from EFI_LOADER_DATA to EFI_LOADER_CODE since some Qualcomm CPUs do not allow kernel code execution on EFI_LOADER_DATA pages. (bsc#1215151)

OBS-URL: https://build.opensuse.org/request/show/1110320
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=460
2023-09-12 02:11:11 +00:00
Ana Guerrero
9114447724 Accepting request 1108747 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1108747
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=300
2023-09-06 16:55:28 +00:00
Michael Chang
71f10698a2 Accepting request 1108332 from openSUSE:Factory:RISCV
- grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig

OBS-URL: https://build.opensuse.org/request/show/1108332
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=459
2023-09-04 04:46:02 +00:00
Ana Guerrero
dcc046a506 Accepting request 1105522 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1105522
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=299
2023-08-31 11:42:18 +00:00
Michael Chang
8ee92f5194 Accepting request 1105405 from home:michael-chang:grub:2.12rc1
- Implement NV index mode for TPM 2.0 key protector
  0001-protectors-Implement-NV-index.patch
- Fall back to passphrase mode when the key protector fails to
  unlock the disk
  0002-cryptodisk-Fallback-to-passphrase.patch
- Wipe out the cached key cleanly
  0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch
- Make diskfiler to look up cryptodisk devices first
  0004-diskfilter-look-up-cryptodisk-devices-first.patch

- Version bump to 2.12~rc1
  * Added:
    - grub-2.12~rc1.tar.xz
  * Removed:
    - grub-2.06.tar.xz
  * Patch dropped merged by new version:
    - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
    - grub2-s390x-02-kexec-module-added-to-emu.patch
    - grub2-efi-chainloader-root.patch
    - grub2-Fix-incorrect-netmask-on-ppc64.patch
    - 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch
    - 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch
    - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
    - grub2-s390x-10-keep-network-at-kexec.patch
    - 0001-Fix-build-error-in-binutils-2.36.patch
    - 0001-emu-fix-executable-stack-marking.patch
    - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
    - 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch
    - 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
    - 0001-Filter-out-POSIX-locale-for-translation.patch

OBS-URL: https://build.opensuse.org/request/show/1105405
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=458
2023-08-24 03:25:56 +00:00
Dominique Leuenberger
1835807638 Accepting request 1102093 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1102093
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=298
2023-08-04 13:02:51 +00:00
Gary Ching-Pang Lin
c0d19752a8 Accepting request 1102092 from home:gary_lin:branches:Base:System
- Change the bash-completion directory (bsc#1213855)
  * grub2-change-bash-completion-dir.patch

OBS-URL: https://build.opensuse.org/request/show/1102092
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=457
2023-08-03 05:55:03 +00:00
Ana Guerrero
e2ef5105c1 Accepting request 1100800 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1100800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=297
2023-07-27 14:50:01 +00:00
Michael Chang
02325a17e7 Accepting request 1100709 from home:michael-chang:branches:Base:System
- Fix error message "unknown command tpm_record_pcrs" with encrypted boot and
  no tpm device present (bsc#1213547)
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch

OBS-URL: https://build.opensuse.org/request/show/1100709
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=456
2023-07-26 09:47:13 +00:00
Dominique Leuenberger
ec77bcbbec Accepting request 1089792 from Base:System
- add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch,
  0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
  * support more featureful extX filesystems (backport from
  upstream git)

OBS-URL: https://build.opensuse.org/request/show/1089792
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=296
2023-05-30 20:02:05 +00:00
d7b8a8f31b - add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch,
0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
  * support more featureful extX filesystems (backport from
  upstream git)

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=455
2023-05-30 11:04:54 +00:00
Dominique Leuenberger
ff1a200e8e Accepting request 1086148 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1086148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=295
2023-05-12 18:32:17 +00:00
Michael Chang
0b52761bc4 Accepting request 1085607 from home:michael-chang:branches:Base:System
- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)

OBS-URL: https://build.opensuse.org/request/show/1085607
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=454
2023-05-11 05:03:33 +00:00
Dominique Leuenberger
f0fb90b67e Accepting request 1082902 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1082902
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=294
2023-04-30 14:07:39 +00:00
Gary Ching-Pang Lin
05861f0e0c Accepting request 1082901 from home:gary_lin:branches:Base:System
- Exclude the deprecated EFI location, /usr/lib64/efi/, from Tumbleweed and ALP

OBS-URL: https://build.opensuse.org/request/show/1082901
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=453
2023-04-26 07:47:52 +00:00
Gary Ching-Pang Lin
03ce3384fd Accepting request 1082613 from home:gary_lin:branches:Base:System
- Update TPM 2.0 key unsealing patches

OBS-URL: https://build.opensuse.org/request/show/1082613
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=452
2023-04-26 03:19:58 +00:00
Dominique Leuenberger
293f4167b1 Accepting request 1081121 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1081121
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=293
2023-04-22 19:57:07 +00:00
Michael Chang
5420dbe227 Accepting request 1081117 from home:michael-chang:branches:Base:System
- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch

OBS-URL: https://build.opensuse.org/request/show/1081117
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=451
2023-04-21 08:21:27 +00:00
Dominique Leuenberger
99756a291a Accepting request 1080039 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1080039
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=292
2023-04-20 13:13:28 +00:00
Michael Chang
b08e66a989 Accepting request 1080038 from home:michael-chang:branches:Base:System
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch

OBS-URL: https://build.opensuse.org/request/show/1080038
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=450
2023-04-18 04:58:25 +00:00
Michael Chang
ea9c8438f9 Accepting request 1080034 from home:michael-chang:branches:Base:System
- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Rediff
  * 0005-export-environment-at-start-up.patch
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch

OBS-URL: https://build.opensuse.org/request/show/1080034
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=449
2023-04-18 04:15:12 +00:00
Dominique Leuenberger
9c1fbf1a92 Accepting request 1078547 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1078547
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=291
2023-04-13 12:09:50 +00:00
Michael Chang
d8eda11f25 Accepting request 1078546 from home:michael-chang:branches:Base:System
- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch

OBS-URL: https://build.opensuse.org/request/show/1078546
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=448
2023-04-12 02:46:16 +00:00