- ship a Secure Boot UEFI compatible bootloader (fate#314485)
- added secureboot patches which introduces new linuxefi module
that is able to perform verifying signed images via exported
protocol from shim. The insmod command will not function if
secure boot enabled (as all modules should built in grub.efi
and signed).
- grub2-secureboot-add-linuxefi.patch
- grub2-secureboot-use-linuxefi-on-uefi.patch
- grub2-secureboot-no-insmod-on-sb.patch
- grub2-secureboot-provide-linuxefi-config.patch
- Makefile.core.am : support building linuxefi module
- Make grub.efi image that is with all relevant modules incorporated
and signed, it will be the second stage to the shim loader which
will verified it when secureboot enabled.
- Make grub.efi's path to align with shim loader's default loader
lookup path.
- The changes has been verified not affecting any factory instalation,
but will allow us to run & test secure boot setup manually with shim. (forwarded request 143007 from michael-chang)
OBS-URL: https://build.opensuse.org/request/show/143018
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=52
- Merge changes from SLE12
- Do not pass root= when root is on nfs (bnc#894374)
* modified grub2-pass-corret-root-for-nfsroot.patch
* modified grub2-secureboot-provide-linuxefi-config.patch
* modified grub2-secureboot-use-linuxefi-on-uefi.patch
- Fix xen pvops kernel not appear on menu (bnc#895286)
* modified grub2-fix-menu-in-xen-host-server.patch
- Workaround grub2-once (bnc#892358)
* added grub2-btrfs-workaround-grub2-once.patch
* added grub2-once.service
* modified grub2-once
- Fix busy-loop and hang while network booting (bnc#870613)
* added grub2-netboot-hang.patch
- Add warning in grubenv file about editing it directly (bnc#887008)
* added grub2-editenv-add-warning-message.patch
- Fix broken graphics with efifb on QEMU/KVM and nomodeset (bnc#884558)
* added grub2-efi-disable-video-cirrus-and-bochus.patch
- Disable video support on Power (bnc#877142)
* added grub2-ppc64le-disable-video.patch
- Track occupied memory so it can be released on exit (bnc#885026)
* added grub2-ppc64le-memory-map.patch
- Fix grub.xen config searching path on boot partition (bnc#884828)
- Add linux16 and initrd16 to grub.xen (bnc#884830)
* added grub2-xen-linux16.patch
- VLAN tag support (fate#315753)
* added 0001-Add-bootargs-parser-for-open-firmware.patch
* added 0002-Add-Virtual-LAN-support.patch
- Use chainloader to boot xen.efi under UEFI (bnc#871857)
* added grub2-efi-xen-chainload.patch
- Use device part of chainloader target, if present (bnc#871857)
OBS-URL: https://build.opensuse.org/request/show/295632
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=148
- ship a Secure Boot UEFI compatible bootloader (fate#314485)
- added secureboot patches which introduces new linuxefi module
that is able to perform verifying signed images via exported
protocol from shim. The insmod command will not function if
secure boot enabled (as all modules should built in grub.efi
and signed).
- grub2-secureboot-add-linuxefi.patch
- grub2-secureboot-use-linuxefi-on-uefi.patch
- grub2-secureboot-no-insmod-on-sb.patch
- grub2-secureboot-provide-linuxefi-config.patch
- Makefile.core.am : support building linuxefi module
- Make grub.efi image that is with all relevant modules incorporated
and signed, it will be the second stage to the shim loader which
will verified it when secureboot enabled.
- Make grub.efi's path to align with shim loader's default loader
lookup path.
- The changes has been verified not affecting any factory instalation,
but will allow us to run & test secure boot setup manually with shim. (forwarded request 143007 from michael-chang)
OBS-URL: https://build.opensuse.org/request/show/143018
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=52
