Commit Graph

918 Commits

Author SHA256 Message Date
Dominique Leuenberger
1a268dba3e https://bugzilla.opensuse.org/show_bug.cgi?id=1219074
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=315
2024-01-23 08:12:54 +00:00
Ana Guerrero
3fa3269c62 Accepting request 1140513 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1140513
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=314
2024-01-22 19:30:57 +00:00
Michael Chang
8d02eb8f36 Accepting request 1140339 from home:gcomes.obs
- allow to boot memtest86 if stored in /usr/lib/memtest86+
  * SR#1071109 can then work

OBS-URL: https://build.opensuse.org/request/show/1140339
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=482
2024-01-22 09:57:14 +00:00
Ana Guerrero
46d54d475c Accepting request 1139339 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1139339
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=313
2024-01-17 21:15:41 +00:00
Michael Chang
9a3fd383c6 Accepting request 1139336 from home:michael-chang:branches:Base:System
- Resolved XFS regression leading to the "not a correct XFS inode" error by
  temporarily reverting the problematic commit (bsc#1218864)
  * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch

OBS-URL: https://build.opensuse.org/request/show/1139336
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=481
2024-01-17 04:02:03 +00:00
Ana Guerrero
acc5d24282 Accepting request 1138057 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1138057
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=312
2024-01-11 20:04:46 +00:00
Michael Chang
7e75e7f881 Accepting request 1138021 from home:michael-chang:grub:2.12
- Version bump to 2.12 (PED-5589)
  * Added:
    - grub-2.12.tar.xz
    - fix_no_extra_deps_in_release_tarball.patch
  * Removed:
    - grub-2.12~rc1.tar.xz
  * Patch dropped as it merged into new version:
    - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch
    - 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch
    - 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
    - 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
    - 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
    - 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
    - 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
    - 0006-fs-ntfs-Make-code-more-readable.patch
    - 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch
    - 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
    - 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
    - 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch
    - 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
    - 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch
  * Patch adjusted for the updated base version:
    - use-grub2-as-a-package-name.patch
    - grub2-s390x-04-grub2-install.patch
    - grub2-btrfs-04-grub2-install.patch
    - grub2-ppc64le-disable-video.patch
    - 0002-AUDIT-0-http-boot-tracker-bug.patch
    - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch
    - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
    - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch

OBS-URL: https://build.opensuse.org/request/show/1138021
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=480
2024-01-11 07:48:22 +00:00
Dominique Leuenberger
ba9e18ae56 Accepting request 1136997 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1136997
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=311
2024-01-05 20:41:09 +00:00
Michael Chang
49ae5965c1 Accepting request 1136964 from home:michael-chang:branches:Base:System
- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot
  installation when secure boot is enabled (bsc#1217761)
- Improved check for disk device when looking for PReP partition
  * 0004-Introduce-prep_load_env-command.patch

OBS-URL: https://build.opensuse.org/request/show/1136964
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=479
2024-01-05 08:33:00 +00:00
Ana Guerrero
fcc2073f93 Accepting request 1131238 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1131238
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=310
2023-12-07 18:08:57 +00:00
Michael Chang
8f037866b6 Accepting request 1131237 from home:michael-chang:branches:Base:System
- Fix reproducible build for grub.xen (bsc#1217619)
  * 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
  * 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch

OBS-URL: https://build.opensuse.org/request/show/1131237
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=478
2023-12-06 04:22:57 +00:00
Ana Guerrero
345152fa25 Accepting request 1128995 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1128995
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=309
2023-11-28 21:17:52 +00:00
Michael Chang
8c3cd1e56a Accepting request 1128487 from home:michael-chang:branches:Base:System
- Fix unattended boot with TPM2 allows downgrading kernel and rootfs, also
  enhancing the overall security posture (bsc#1216680)
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch

OBS-URL: https://build.opensuse.org/request/show/1128487
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=477
2023-11-27 00:14:50 +00:00
Ana Guerrero
65653fe159 Accepting request 1127831 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1127831
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=308
2023-11-22 17:54:05 +00:00
Michael Chang
9cc9bce139 Accepting request 1127836 from home:michael-chang:branches:Base:System
- grub2.spec: Fix openQA test failure in SLE-15-SP6 due to missing
  font in memdisk

OBS-URL: https://build.opensuse.org/request/show/1127836
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=476
2023-11-21 08:07:34 +00:00
Michael Chang
82ab887bba Accepting request 1127240 from home:gary_lin:branches:Base:System
- Update the TPM2 patches to skip the persistent SRK handle if not
  specified and improve the error messages
  + 0003-protectors-Add-TPM2-Key-Protector.patch
  + 0005-util-grub-protect-Add-new-tool.patch
  + 0004-tpm2-Support-authorized-policy.patch

OBS-URL: https://build.opensuse.org/request/show/1127240
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=475
2023-11-21 06:44:02 +00:00
Ana Guerrero
f5c74d55d0 Accepting request 1127241 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1127241
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=307
2023-11-17 19:48:43 +00:00
Michael Chang
d2d2c88ea6 Accepting request 1126507 from home:michael-chang:branches:Base:System
- Fix XFS regression in 2.12~rc1 and support large extent counters
  * 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
  * 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
  * 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch

OBS-URL: https://build.opensuse.org/request/show/1126507
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=474
2023-11-17 06:37:28 +00:00
Dominique Leuenberger
cd66223ac9 Accepting request 1121401 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1121401
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=306
2023-11-01 21:09:30 +00:00
67224eefc6 Accepting request 1121379 from home:michael-chang:branches:Base:System
- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) 
  * 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch

OBS-URL: https://build.opensuse.org/request/show/1121379
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=473
2023-10-31 09:35:53 +00:00
Ana Guerrero
1594cf11ad Accepting request 1120471 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1120471
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=305
2023-10-27 20:27:14 +00:00
247022017f Accepting request 1120450 from home:gary_lin:branches:Base:System
- Fix a potential error when appending multiple keys into the
  synthesized initrd
  * Fix-the-size-calculation-for-the-synthesized-initrd.patch

OBS-URL: https://build.opensuse.org/request/show/1120450
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=472
2023-10-26 06:43:26 +00:00
8c7387ac32 Accepting request 1120141 from home:michael-chang:branches:Base:System
- Fix Xen chainloding error of no matching file path found (bsc#1216081) 
  * grub2-efi-chainload-harder.patch

- Use grub-tpm2 token to unlock keyslots to make the unsealing process more
  efficient and secure.
  * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch

OBS-URL: https://build.opensuse.org/request/show/1120141
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=471
2023-10-25 07:31:37 +00:00
Michael Chang
e40e4a0d23 Accepting request 1118820 from home:michael-chang:branches:Base:System
add missing ref in changelog

OBS-URL: https://build.opensuse.org/request/show/1118820
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=470
2023-10-19 06:55:40 +00:00
Ana Guerrero
88c2366210 Accepting request 1118449 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1118449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=304
2023-10-18 19:25:13 +00:00
Michael Chang
891ae6ee6e Accepting request 1118237 from home:michael-chang:branches:Base:System
- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075) 
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks

- Version bump to 2.12~rc1 (PED-5589)

OBS-URL: https://build.opensuse.org/request/show/1118237
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=469
2023-10-18 05:19:26 +00:00
Ana Guerrero
254f9e6fd9 Accepting request 1117564 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1117564
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=303
2023-10-13 21:13:52 +00:00
Michael Chang
9222984490 Accepting request 1116881 from home:michael-chang:branches:Base:System
- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4

OBS-URL: https://build.opensuse.org/request/show/1116881
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=468
2023-10-13 05:42:31 +00:00
Ana Guerrero
476a65dabe Accepting request 1115941 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1115941
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=302
2023-10-06 19:12:40 +00:00
Michael Chang
a64c498922 Accepting request 1115856 from home:favogt:businessasusual
- Add patch to fix reading files from btrfs with "implicit" holes:
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch

OBS-URL: https://build.opensuse.org/request/show/1115856
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=467
2023-10-06 02:58:09 +00:00
Michael Chang
c4e530ea83 Accepting request 1115436 from home:gary_lin:branches:Base:System
- Update the TPM 2.0 patches to support more RSA and ECC algorithms
  * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0003-protectors-Add-TPM2-Key-Protector.patch
  * 0005-util-grub-protect-Add-new-tool.patch

- Remove build require for gcc-32bit, target platform didn't rely on libgcc
  function shipped with compiler but rather using functions supplied in grub
  directly.

OBS-URL: https://build.opensuse.org/request/show/1115436
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=466
2023-10-05 05:07:17 +00:00
Michael Chang
d81a5aab96 Accepting request 1114285 from home:favogt:branches:Base:System
- Add BuildIgnore to break cycle with the branding package

OBS-URL: https://build.opensuse.org/request/show/1114285
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=465
2023-10-05 00:55:59 +00:00
Ana Guerrero
181b9e3b63 Accepting request 1113952 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1113952
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=301
2023-10-02 18:04:15 +00:00
Michael Chang
cd35f7c278 Accepting request 1113901 from home:gary_lin:branches:Base:System
- Only build with fde-tpm-helper-rpm-macros for the architectures
  supporting the newer UEFI and TPM 2.0.
  * Also correct the location of %fde_tpm_update_requires

OBS-URL: https://build.opensuse.org/request/show/1113901
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=464
2023-09-28 03:04:29 +00:00
Michael Chang
ed10ffe1d5 Accepting request 1112517 from home:michael-chang:branches:Base:System
* arm64-Use-proper-memory-type-for-kernel-allocation.patch

OBS-URL: https://build.opensuse.org/request/show/1112517
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=463
2023-09-20 09:52:42 +00:00
Michael Chang
e51d4315a7 Accepting request 1112505 from home:michael-chang:branches:Base:System
- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch

OBS-URL: https://build.opensuse.org/request/show/1112505
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=462
2023-09-20 09:38:55 +00:00
Michael Chang
0a700a1789 Accepting request 1112154 from home:gary_lin:branches:Base:System
- Add the new BuildRequires for EFI builds for the better FDE
  support: fde-tpm-helper-rpm-macros
  + Also add the the macros to %post and %posttrans

OBS-URL: https://build.opensuse.org/request/show/1112154
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=461
2023-09-20 07:35:35 +00:00
Michael Chang
71fc1bf8e1 Accepting request 1110320 from home:clin:branches:X13S
- Correct the type of allocated EFI pages for ARM64 kernel from EFI_LOADER_DATA to EFI_LOADER_CODE since some Qualcomm CPUs do not allow kernel code execution on EFI_LOADER_DATA pages. (bsc#1215151)

OBS-URL: https://build.opensuse.org/request/show/1110320
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=460
2023-09-12 02:11:11 +00:00
Ana Guerrero
9114447724 Accepting request 1108747 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1108747
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=300
2023-09-06 16:55:28 +00:00
Michael Chang
71f10698a2 Accepting request 1108332 from openSUSE:Factory:RISCV
- grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig

OBS-URL: https://build.opensuse.org/request/show/1108332
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=459
2023-09-04 04:46:02 +00:00
Ana Guerrero
dcc046a506 Accepting request 1105522 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1105522
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=299
2023-08-31 11:42:18 +00:00
Michael Chang
8ee92f5194 Accepting request 1105405 from home:michael-chang:grub:2.12rc1
- Implement NV index mode for TPM 2.0 key protector
  0001-protectors-Implement-NV-index.patch
- Fall back to passphrase mode when the key protector fails to
  unlock the disk
  0002-cryptodisk-Fallback-to-passphrase.patch
- Wipe out the cached key cleanly
  0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch
- Make diskfiler to look up cryptodisk devices first
  0004-diskfilter-look-up-cryptodisk-devices-first.patch

- Version bump to 2.12~rc1
  * Added:
    - grub-2.12~rc1.tar.xz
  * Removed:
    - grub-2.06.tar.xz
  * Patch dropped merged by new version:
    - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
    - grub2-s390x-02-kexec-module-added-to-emu.patch
    - grub2-efi-chainloader-root.patch
    - grub2-Fix-incorrect-netmask-on-ppc64.patch
    - 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch
    - 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch
    - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
    - grub2-s390x-10-keep-network-at-kexec.patch
    - 0001-Fix-build-error-in-binutils-2.36.patch
    - 0001-emu-fix-executable-stack-marking.patch
    - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
    - 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch
    - 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
    - 0001-Filter-out-POSIX-locale-for-translation.patch

OBS-URL: https://build.opensuse.org/request/show/1105405
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=458
2023-08-24 03:25:56 +00:00
Dominique Leuenberger
1835807638 Accepting request 1102093 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1102093
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=298
2023-08-04 13:02:51 +00:00
Gary Ching-Pang Lin
c0d19752a8 Accepting request 1102092 from home:gary_lin:branches:Base:System
- Change the bash-completion directory (bsc#1213855)
  * grub2-change-bash-completion-dir.patch

OBS-URL: https://build.opensuse.org/request/show/1102092
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=457
2023-08-03 05:55:03 +00:00
Ana Guerrero
e2ef5105c1 Accepting request 1100800 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1100800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=297
2023-07-27 14:50:01 +00:00
Michael Chang
02325a17e7 Accepting request 1100709 from home:michael-chang:branches:Base:System
- Fix error message "unknown command tpm_record_pcrs" with encrypted boot and
  no tpm device present (bsc#1213547)
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch

OBS-URL: https://build.opensuse.org/request/show/1100709
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=456
2023-07-26 09:47:13 +00:00
Dominique Leuenberger
ec77bcbbec Accepting request 1089792 from Base:System
- add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch,
  0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
  * support more featureful extX filesystems (backport from
  upstream git)

OBS-URL: https://build.opensuse.org/request/show/1089792
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=296
2023-05-30 20:02:05 +00:00
d7b8a8f31b - add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch,
0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
  * support more featureful extX filesystems (backport from
  upstream git)

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=455
2023-05-30 11:04:54 +00:00
Dominique Leuenberger
ff1a200e8e Accepting request 1086148 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1086148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=295
2023-05-12 18:32:17 +00:00
Michael Chang
0b52761bc4 Accepting request 1085607 from home:michael-chang:branches:Base:System
- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)

OBS-URL: https://build.opensuse.org/request/show/1085607
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=454
2023-05-11 05:03:33 +00:00