Commit Graph

958 Commits

Author SHA256 Message Date
Dominique Leuenberger
40645c9118 Accepting request 1073913 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1073913
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=290
2023-03-25 17:54:05 +00:00
Michael Chang
7c6bf4c867 Accepting request 1073911 from home:michael-chang:branches:Base:System
- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch

OBS-URL: https://build.opensuse.org/request/show/1073911
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=447
2023-03-23 08:27:07 +00:00
Dominique Leuenberger
1664ac0e15 Accepting request 1073668 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1073668
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=289
2023-03-22 21:29:15 +00:00
Michael Chang
448b5a32b0 Accepting request 1073013 from home:michael-chang:branches:Base:System
- Restrict cryptsetup key file permission for better security (bsc#1207499)
  * 0001-loader-linux-Ensure-the-newc-pathname-is-NULL-termin.patch
  * 0002-Restrict-cryptsetup-key-file-permission-for-better-s.patch

OBS-URL: https://build.opensuse.org/request/show/1073013
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=446
2023-03-22 02:43:43 +00:00
Michael Chang
3c4b4c1ff8 Accepting request 1072324 from home:frispete:Tumbleweed
- Meanwhile, memtest86+ gained EFI support, but using the grub
  command line to run it manually is quite tedious...
  Adapt 20_memtest86+ to provide a proper menu entry. Executing
  memtest requires to turn security off in BIOS: (Boot Mode: Other OS).

OBS-URL: https://build.opensuse.org/request/show/1072324
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=445
2023-03-20 02:50:55 +00:00
Dominique Leuenberger
0e0c5f1350 Accepting request 1072059 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1072059
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=288
2023-03-17 16:02:16 +00:00
Michael Chang
7c44841cbf Accepting request 1071405 from home:rwill:branches:Base:System
Add support for UsrMerged kernels. (bsc#1184804)

OBS-URL: https://build.opensuse.org/request/show/1071405
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=444
2023-03-15 09:43:19 +00:00
Dominique Leuenberger
b3d23b1896 Accepting request 1071093 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1071093
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=287
2023-03-14 17:15:41 +00:00
Michael Chang
d9083613d3 Accepting request 1071066 from home:michael-chang:branches:Base:System
- Discard cached key from grub shell and editor mode
  * 0001-clean-up-crypttab-and-linux-modules-dependency.patch
  * 0002-discard-cached-key-before-entering-grub-shell-and-ed.patch

- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch

OBS-URL: https://build.opensuse.org/request/show/1071066
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=443
2023-03-13 10:05:13 +00:00
Dominique Leuenberger
33ab4037b7 Accepting request 1069522 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1069522
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=286
2023-03-07 15:48:29 +00:00
Michael Chang
f6a335c91f Accepting request 1068350 from home:michael-chang:branches:Base:System
- Fix riscv64 error for relocation 0x13 is not implemented yet
  * 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch

OBS-URL: https://build.opensuse.org/request/show/1068350
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=442
2023-03-06 06:07:30 +00:00
Dominique Leuenberger
9c861fce52 Accepting request 1067492 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1067492
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=285
2023-02-25 18:54:57 +00:00
Michael Chang
23aa9ce4c5 Accepting request 1067109 from home:michael-chang:branches:Base:System
- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch
- Rediff
  * safe_tpm_pcr_snapshot.patch
- Patch supersceded
  * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch

OBS-URL: https://build.opensuse.org/request/show/1067109
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=441
2023-02-24 05:42:16 +00:00
Dominique Leuenberger
54677e2130 Accepting request 1065947 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1065947
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=284
2023-02-16 15:55:21 +00:00
03d713cc87 Accepting request 1065868 from home:gary_lin:branches:Base:System
- Refresh 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch to
  handle the TPM2 responseCode correctly.

OBS-URL: https://build.opensuse.org/request/show/1065868
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=440
2023-02-15 12:29:57 +00:00
Dominique Leuenberger
37713c4d4c Accepting request 1065672 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1065672
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=283
2023-02-14 15:44:21 +00:00
Michael Chang
e99fcd8544 Accepting request 1065383 from home:vlefebvre:unified
Patch to add some efi varibales needed for efi partition as for Unified Kernel Image

OBS-URL: https://build.opensuse.org/request/show/1065383
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=439
2023-02-14 07:57:34 +00:00
Dominique Leuenberger
f845a0df80 Accepting request 1063963 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1063963
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=282
2023-02-10 13:33:37 +00:00
Gary Ching-Pang Lin
7ad3520153 Accepting request 1063960 from home:gary_lin:tpm2-unseal
- Amend the TPM2 stack and add authorized policy mode to tpm2_key_protector

OBS-URL: https://build.opensuse.org/request/show/1063960
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=438
2023-02-09 08:57:28 +00:00
Dominique Leuenberger
232ecb8042 Accepting request 1063714 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1063714
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=281
2023-02-08 16:19:53 +00:00
Michael Chang
f461fa520e Accepting request 1063713 from home:michael-chang:branches:Base:System
- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch

OBS-URL: https://build.opensuse.org/request/show/1063713
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=437
2023-02-08 05:32:33 +00:00
Michael Chang
a7b06b9f1a Accepting request 1063542 from home:michael-chang:branches:Base:System
- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch

- Fix GCC 13 build failure (bsc#1201089)
  * 0002-AUDIT-0-http-boot-tracker-bug.patch

OBS-URL: https://build.opensuse.org/request/show/1063542
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=436
2023-02-07 07:20:35 +00:00
Dominique Leuenberger
49fa1cabbd Accepting request 1056307 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1056307
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=280
2023-01-07 16:16:02 +00:00
Michael Chang
cb476353d0 Accepting request 1046402 from home:gary_lin:branches:Base:System
- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)

OBS-URL: https://build.opensuse.org/request/show/1046402
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=435
2023-01-06 02:48:00 +00:00
Dominique Leuenberger
9c72d63619 Accepting request 1046400 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1046400
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=279
2023-01-04 16:51:04 +00:00
Michael Chang
ef0ef13ff0 Accepting request 1045798 from home:michael-chang:branches:Base:System
- Fix inappropriately including commented lines in crypttab (bsc#1206279)
  * 0010-templates-import-etc-crypttab-to-grub.cfg.patch

- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch

OBS-URL: https://build.opensuse.org/request/show/1045798
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=434
2023-01-03 02:35:16 +00:00
Dominique Leuenberger
9d4e900f2a Accepting request 1043936 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1043936
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=278
2022-12-20 19:19:59 +00:00
7db9c91d3c Accepting request 1043840 from home:michael-chang:branches:Base:System
- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch

OBS-URL: https://build.opensuse.org/request/show/1043840
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=433
2022-12-20 15:32:08 +00:00
Michael Chang
4f37c09e47 Accepting request 1043245 from home:gary_lin:bsc1206333
- Increase the path buffer in the crypttab command for the long
  volume name (bsc#1206333)
  * grub2-increase-crypttab-path-buffer.patch

OBS-URL: https://build.opensuse.org/request/show/1043245
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=432
2022-12-19 03:45:35 +00:00
Gary Ching-Pang Lin
56f10d0ce0 Accepting request 1042243 from Base:System
Revert the zfs change for now

OBS-URL: https://build.opensuse.org/request/show/1042243
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=431
2022-12-12 05:41:30 +00:00
Gary Ching-Pang Lin
7a7c298814 Accepting request 1041797 from home:gary_lin:branches:Base:System
Move unsupported zfs modules into 'extras' packages (bsc#1205554)

OBS-URL: https://build.opensuse.org/request/show/1041797
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=430
2022-12-09 08:55:31 +00:00
Dominique Leuenberger
adbe04c1f9 Accepting request 1040523 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1040523
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=277
2022-12-07 16:34:16 +00:00
Michael Chang
b8a9f2473e Accepting request 1040499 from home:michael-chang:branches:Base:System
- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912) 
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch

OBS-URL: https://build.opensuse.org/request/show/1040499
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=429
2022-12-06 07:49:23 +00:00
Dominique Leuenberger
581a89b70f Accepting request 1037800 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1037800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=276
2022-11-25 12:11:15 +00:00
Michael Chang
46c0e0c8b7 Accepting request 1037548 from home:michael-chang:branches:Base:System
- Make full utilization of btrfs bootloader area (bsc#1161823)
  * 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch
  * 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch
- Patch removed
  * 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch

OBS-URL: https://build.opensuse.org/request/show/1037548
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=428
2022-11-24 03:05:20 +00:00
Dominique Leuenberger
19999414fe Accepting request 1037229 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1037229
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=275
2022-11-23 08:47:35 +00:00
Michael Chang
2edffea20f Accepting request 1037003 from home:michael-chang:branches:Base:System
- Fix regression of reverting back to asking password twice when a keyfile is
  already used (bsc#1205309)
  * 0010-templates-import-etc-crypttab-to-grub.cfg.patch

OBS-URL: https://build.opensuse.org/request/show/1037003
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=427
2022-11-22 07:46:19 +00:00
Dominique Leuenberger
a6e8702b74 Accepting request 1035937 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1035937
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=274
2022-11-16 14:42:37 +00:00
Michael Chang
fd4fd3a935 Accepting request 1035936 from home:michael-chang:branches:Base:System
- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3

OBS-URL: https://build.opensuse.org/request/show/1035936
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=426
2022-11-16 03:21:13 +00:00
Dominique Leuenberger
0d63ddc5af Accepting request 1035611 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1035611
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=273
2022-11-14 13:28:44 +00:00
Michael Chang
d3aabbf763 Accepting request 1035607 from home:michael-chang:branches:Base:System
- Removed 0001-linux-fix-efi_relocate_kernel-failure.patch as reported
  regression in some hardware being stuck in initrd loading (bsc#1205380)

- Fix password asked twice if third field in crypttab not present (bsc#1205312)
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch

OBS-URL: https://build.opensuse.org/request/show/1035607
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=425
2022-11-14 10:33:06 +00:00
Dominique Leuenberger
f981d91789 Accepting request 1032598 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1032598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=272
2022-11-09 11:56:40 +00:00
Michael Chang
61a62ea989 Accepting request 1032365 from home:michael-chang:15sp5
- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990) 
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch
- Fix efi pcr snapshot related funtion is defined but not used on powerpc
  platform.
  * safe_tpm_pcr_snapshot.patch

OBS-URL: https://build.opensuse.org/request/show/1032365
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=424
2022-11-01 04:59:50 +00:00
eb7c39ad64 Accepting request 1030619 from home:michael-chang:ped:2150
- Include loopback into signed grub2 image (jsc#PED-2150)

OBS-URL: https://build.opensuse.org/request/show/1030619
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=423
2022-10-24 11:44:15 +00:00
Michael Chang
3c95b54039 Accepting request 1008353 from home:michael-chang:bsc:1204037
- Fix firmware oops after disk decrypting failure (bsc#1204037) 
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch

OBS-URL: https://build.opensuse.org/request/show/1008353
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=422
2022-10-06 08:48:42 +00:00
Michael Chang
90fcdec2e4 Accepting request 1007215 from home:michael-chang:tmp
Added minor fix to safe_tpm_pcr_snapshot.patch

OBS-URL: https://build.opensuse.org/request/show/1007215
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=421
2022-10-04 06:01:45 +00:00
Michael Chang
5912838326 Accepting request 1006353 from home:michael-chang:branches:Base:System
- Add patch to fix kernel relocation error in low memory
  * 0001-linux-fix-efi_relocate_kernel-failure.patch

OBS-URL: https://build.opensuse.org/request/show/1006353
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=420
2022-09-28 02:40:56 +00:00
Michael Chang
3e026f665c Accepting request 1004537 from home:gary_lin:branches:Base:System
- Add safety measure to pcr snapshot by checking platform and tpm status
  * safe_tpm_pcr_snapshot.patch

- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch

- Add patches to dynamically allocate additional memory regions for
  EFI systems (bsc#1202438)
  * 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch
  * 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch
  * 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch
  * 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch
  * 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch
- Enlarge the default heap size and defer the disk cache
  invalidation (bsc#1202438)
  * 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch
  * 0002-mm-Defer-the-disk-cache-invalidation.patch

- Add patches for ALP FDE support
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch
  * 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch
  * 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch
  * 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch
  * 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch
  * 0008-linuxefi-Use-common-grub_initrd_load.patch
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
  * 0010-templates-import-etc-crypttab-to-grub.cfg.patch

OBS-URL: https://build.opensuse.org/request/show/1004537
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=419
2022-09-19 06:10:23 +00:00
Richard Brown
1ac59cb02a Revert to revision 268, boo#1202438
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=271
2022-08-26 09:20:20 +00:00
Dominique Leuenberger
ee92804613 Accepting request 997711 from Base:System
OBS-URL: https://build.opensuse.org/request/show/997711
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=270
2022-08-19 15:53:16 +00:00