- add tboot.rpmlintrc: suppress warning about missing %check section. There's

no testsuite for tboot.
- mark grub.d snippets as %config (noreplace) to satisfy rpmlint warning
  (the grub2 package itself marks its snippets this way, so it seems to be
  common standard to do so).
- update to v1.11.4:
  * v1.11.4
    Increase the TBOOT log size from 32 KB to 64 KB. For some Intel server
    platforms, it was noticed that TBOOT_SERIAL_LOG memory section was too
    small to hold all of the print logs, produced by TBOOT. Due to this
    reason TBOOT log section memory size had to be increase to 64KB.
  * v1.11.3
    Fix the hanging TBOOT issue, which appeared during the RLPs wakeup process
    on the Intel's multisocket platform. This problem appeared during the AP
    stacks allocations for these RLPs. TBOOT allocated memory for them depending
    on the woken-up CPUs X2 APIC values. When some of them exceeded the NR_CPUS (1024),
    then the RLP wakeup process execution halted. For the current moment,
    the maximal X2 APID value was increased from 1024 to 8192. This kind of
    solution fixed the given problem.
  * v1.11.2
    Fix the RAM memory allocation algorithm for the initrd.

OBS-URL: https://build.opensuse.org/package/show/security/tboot?expand=0&rev=115

tboot-1.11.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:559c79b621159bdb8ca3986084408c0cad7e9af6dfc6f0f508a4f66f9e8a70f5
+size 910230

tboot-grub2-fix-xen-submenu-name.patch

@@ -4,13 +4,13 @@ Subject: fix xen submenu name to show tboot version
 References: bnc#865815
 Patch-Mainline: no
 
-Index: tboot-1.11.1/tboot/20_linux_xen_tboot
+Index: tboot-1.11.4/tboot/20_linux_xen_tboot
 ===================================================================
---- tboot-1.11.1.orig/tboot/20_linux_xen_tboot
+--- tboot-1.11.4.orig/tboot/20_linux_xen_tboot
-+++ tboot-1.11.1/tboot/20_linux_xen_tboot
++++ tboot-1.11.4/tboot/20_linux_xen_tboot
 @@ -246,7 +246,7 @@ while [ "x${xen_list}" != "x" ] ; do
          rel_tboot_dirname=`make_system_path_relative_to_its_root $tboot_dirname`
-         tboot_version="1.11.1"
+         tboot_version="1.11.4"
          list="${linux_list}"
 -        echo "submenu \"Xen ${xen_version}\" \"Tboot ${tboot_version}\"{"
 +        echo "submenu \"Xen ${xen_version} with Tboot ${tboot_version}\"{"

tboot.changes

@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Mon Jun 17 13:09:34 UTC 2024 - Matthias Gerstner <matthias.gerstner@suse.com>
+
+- add tboot.rpmlintrc: suppress warning about missing %check section. There's
+  no testsuite for tboot.
+- mark grub.d snippets as %config (noreplace) to satisfy rpmlint warning
+  (the grub2 package itself marks its snippets this way, so it seems to be
+  common standard to do so).
+- update to v1.11.4:
+  * v1.11.4
+    Increase the TBOOT log size from 32 KB to 64 KB. For some Intel server
+    platforms, it was noticed that TBOOT_SERIAL_LOG memory section was too
+    small to hold all of the print logs, produced by TBOOT. Due to this
+    reason TBOOT log section memory size had to be increase to 64KB.
+  * v1.11.3
+    Fix the hanging TBOOT issue, which appeared during the RLPs wakeup process
+    on the Intel's multisocket platform. This problem appeared during the AP
+    stacks allocations for these RLPs. TBOOT allocated memory for them depending
+    on the woken-up CPUs X2 APIC values. When some of them exceeded the NR_CPUS (1024),
+    then the RLP wakeup process execution halted. For the current moment,
+    the maximal X2 APID value was increased from 1024 to 8192. This kind of
+    solution fixed the given problem.
+  * v1.11.2
+    Fix the RAM memory allocation algorithm for the initrd.
+
 -------------------------------------------------------------------
 Mon Feb  6 10:52:29 UTC 2023 - Matthias Gerstner <matthias.gerstner@suse.com>
 

tboot.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package tboot
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           tboot
-%define ver 1.11.1
+%define ver 1.11.4
 Version:        20210614_%{ver}
 Release:        0
 Summary:        Program for performing a verified launch using Intel TXT
@@ -79,8 +79,8 @@ make debug=y install DISTDIR="%{buildroot}" MANPATH="%{buildroot}/%{_mandir}"
 /boot/tboot-syms
 %{_mandir}/man8/*
 %dir %{_sysconfdir}/grub.d/
-%{_sysconfdir}/grub.d/20_linux_tboot
+%config(noreplace) %{_sysconfdir}/grub.d/20_linux_tboot
-%{_sysconfdir}/grub.d/20_linux_xen_tboot
+%config(noreplace) %{_sysconfdir}/grub.d/20_linux_xen_tboot
 
 %post
 %if 0%{?update_bootloader_check_type_reinit_post:1}