File grub2.spec of Package grub2.32138

Overview Repositories Revisions Requests Users Attributes Meta

File grub2.spec of Package grub2.32138

#
# spec file for package grub2
#
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
# needssslcertforbuild

Name:           grub2
%ifarch x86_64 ppc64
BuildRequires:  gcc9-32bit
BuildRequires:  glibc-32bit
BuildRequires:  glibc-devel-32bit
BuildRequires:  libubsan1-32bit
%else
BuildRequires:  gcc9
BuildRequires:  glibc-devel
%endif
BuildRequires:  automake
BuildRequires:  bison
BuildRequires:  dejavu-fonts
BuildRequires:  device-mapper-devel
BuildRequires:  fdupes
BuildRequires:  flex
BuildRequires:  freetype2-devel
BuildRequires:  fuse-devel
%if 0%{?suse_version} >= 1140
BuildRequires:  gnu-unifont
%endif
BuildRequires:  help2man
BuildRequires:  xz
%if 0%{?suse_version} >= 1210
BuildRequires:  makeinfo
%else
BuildRequires:  texinfo
%endif
BuildRequires:  python
BuildRequires:  xz-devel
%ifarch x86_64
%if 0%{?suse_version} >= 1230 || 0%{?suse_version} == 1110
BuildRequires:  openssl >= 0.9.8
BuildRequires:  pesign-obs-integration
%endif
%endif
%if 0%{?suse_version} >= 1210
BuildRequires:  systemd
%define has_systemd 1
%endif

# Modules code is dynamically loaded and collected from a _fixed_ path.
%define _libdir %{_exec_prefix}/lib

# Build grub2-emu everywhere (it may be "required" by 'grub2-once')
%define emu 1

%ifarch ppc ppc64 ppc64le
%define grubcpu powerpc
%define platform ieee1275
# emu does not build here yet... :-(
%define emu 0
%endif

%ifarch %{ix86} x86_64
%define grubcpu i386
%define platform pc
%endif

%ifarch s390x
%define grubcpu s390x
%define platform emu
%endif

%ifarch aarch64
%define grubcpu arm64
%define platform efi
%define only_efi 1
%endif

%ifarch %{arm}
%define grubcpu arm
%define platform efi
%define only_efi 1
%endif

%define grubarch %{grubcpu}-%{platform}

# build efi bootloader on some platforms only:
%if ! 0%{?efi:1}
%global efi %{ix86} x86_64 ia64 aarch64 %{arm}
%endif

%ifarch %{efi}
%ifarch %{ix86}
%define grubefiarch i386-efi
%else
%ifarch aarch64
%define grubefiarch arm64-efi
%else
%ifarch %{arm}
%define grubefiarch arm-efi
%else
%define grubefiarch %{_target_cpu}-efi
%endif
%endif
%endif
%endif

%if "%{platform}" == "emu"
# force %{emu} to 1, e.g. for s390
%define emu 1
%endif

%if 0%{?suse_version} == 1110
%define only_efi %{nil}
%define only_x86_64 %{nil}
%endif

Version:        2.02
Release:        0
Summary:        Bootloader with support for Linux, Multiboot and more
License:        GPL-3.0-or-later
Group:          System/Boot
URL:            http://www.gnu.org/software/grub/
%define rev 20120622
Source0:        grub-%{version}.tar.xz
Source1:        90_persistent
Source2:        grub.default
Source4:        grub2.rpmlintrc
# rsync -Lrtvz  translationproject.org::tp/latest/grub/ po
Source5:        translations-20170427.tar.xz
Source6:        grub2-once
Source7:        20_memtest86+
Source8:        README.ibm3215
Source10:       openSUSE-UEFI-CA-Certificate.crt
Source11:       SLES-UEFI-CA-Certificate.crt
Source12:       grub2-snapper-plugin.sh
Source14:       80_suse_btrfs_snapshot
Source15:       grub2-once.service
Source16:       grub2-xen-pv-firmware.cfg
# required hook for systemd-sleep (bsc#941758)
Source17:       grub2-systemd-sleep.sh
Source18:       grub2-check-default.sh
Source1000:     PATCH_POLICY
Patch1:         rename-grub-info-file-to-grub2.patch
Patch2:         grub2-linux.patch
Patch3:         use-grub2-as-a-package-name.patch
Patch4:         info-dir-entry.patch
Patch6:         grub2-iterate-and-hook-for-extended-partition.patch
Patch8:         grub2-ppc-terminfo.patch
Patch9:         grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch
Patch10:        grub2-fix-error-terminal-gfxterm-isn-t-found.patch
Patch11:        grub2-fix-build-with-flex-2.6.4.patch
Patch12:        grub2-fix-menu-in-xen-host-server.patch
Patch15:        not-display-menu-when-boot-once.patch
Patch17:        grub2-pass-corret-root-for-nfsroot.patch
Patch18:        grub2-fix-locale-en.mo.gz-not-found-error-message.patch
Patch19:        grub2-efi-HP-workaround.patch
Patch21:        grub2-secureboot-add-linuxefi.patch
Patch23:        grub2-secureboot-no-insmod-on-sb.patch
Patch25:        grub2-secureboot-chainloader.patch
Patch27:        grub2-linuxefi-fix-boot-params.patch
Patch35:        grub2-linguas.sh-no-rsync.patch
Patch37:        grub2-use-Unifont-for-starfield-theme-terminal.patch
Patch38:        grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
Patch39:        grub2-s390x-02-kexec-module-added-to-emu.patch
Patch40:        grub2-s390x-03-output-7-bit-ascii.patch
Patch41:        grub2-s390x-04-grub2-install.patch
Patch42:        grub2-s390x-05-grub2-mkconfig.patch
Patch43:        grub2-s390x-06-loadparm.patch
Patch44:        grub2-s390x-07-add-image-param-for-zipl-setup.patch
Patch45:        grub2-s390x-08-workaround-part-to-disk.patch
Patch46:        grub2-use-rpmsort-for-version-sorting.patch
Patch49:        grub2-commands-introduce-read_file-subcommand.patch
Patch50:        grub2-mkconfig-aarch64.patch
Patch53:        grub2-getroot-treat-mdadm-ddf-as-simple-device.patch
Patch56:        grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
Patch58:        grub2-xen-linux16.patch
Patch59:        grub2-efi-disable-video-cirrus-and-bochus.patch
Patch60:        grub2-editenv-add-warning-message.patch
Patch61:        grub2-efi-chainload-harder.patch
Patch62:        grub2-vbe-blacklist-preferred-1440x900x32.patch
Patch64:        grub2-grubenv-in-btrfs-header.patch
Patch66:        grub2-menu-unrestricted.patch
Patch67:        grub2-default-distributor.patch
Patch73:        grub2-accept-empty-module.patch
Patch74:        grub2-use-stat-instead-of-udevadm-for-partition-lookup.patch
Patch75:        fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
Patch76:        0002-Add-Virtual-LAN-support.patch
Patch77:        grub2-efi_gop-avoid-low-resolution.patch
Patch78:        grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
Patch79:        grub2-diskfilter-support-pv-without-metadatacopies.patch
Patch80:        grub2-efi-uga-64bit-fb.patch
Patch81:        grub2-getroot-scan-disk-pv.patch
Patch82:        0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
Patch83:        unix-exec-avoid-atexit-handlers-when-child-exits.patch
Patch84:        grub2-s390x-09-improve-zipl-setup.patch
Patch86:        0001-Fix-packed-not-aligned-error-on-GCC-8.patch
Patch89:        0001-xfs-Accept-filesystem-with-sparse-inodes.patch
Patch90:        grub2-binutils2.31.patch
Patch91:        grub2-msdos-fix-overflow.patch
Patch92:        grub2-util-30_os-prober-multiple-initrd.patch
Patch93:        grub2-getroot-support-nvdimm.patch
Patch94:        0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
Patch95:        grub2-install-fix-not-a-directory-error.patch
# Btrfs snapshot booting related patches
Patch101:       grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
Patch102:       grub2-btrfs-02-export-subvolume-envvars.patch
Patch103:       grub2-btrfs-03-follow_default.patch
Patch104:       grub2-btrfs-04-grub2-install.patch
Patch105:       grub2-btrfs-05-grub2-mkconfig.patch
Patch106:       grub2-btrfs-06-subvol-mount.patch
Patch107:       grub2-btrfs-07-subvol-fallback.patch
Patch108:       grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch
Patch109:       grub2-btrfs-09-get-default-subvolume.patch
Patch110:       grub2-btrfs-10-config-directory.patch
# Support EFI xen loader (efistub)
Patch120:       grub2-efi-xen-chainload.patch
Patch121:       grub2-efi-chainloader-root.patch
Patch122:       grub2-efi-xen-cmdline.patch
Patch123:       grub2-efi-xen-cfg-unquote.patch
Patch124:       grub2-efi-xen-removable.patch
# Linux Root device related fixes
Patch134:       grub2-zipl-setup-fix-btrfs-multipledev.patch
Patch135:       grub2-suse-remove-linux-root-param.patch
# POWER patches
Patch205:       grub2-ppc64le-disable-video.patch
Patch206:       grub2-ppc64le-memory-map.patch
Patch207:       grub2-ppc64-cas-reboot-support.patch
Patch208:       grub2-install-remove-useless-check-PReP-partition-is-empty.patch
Patch210:       grub2-Fix-incorrect-netmask-on-ppc64.patch
Patch211:       grub2-ppc64-cas-new-scope.patch
Patch213:       grub2-ppc64-cas-fix-double-free.patch
# Support for "t" hotkey to switch to text mode (bsc#976836)
Patch245:       grub2-Add-hidden-menu-entries.patch
Patch246:       grub2-SUSE-Add-the-t-hotkey.patch
# UEFI IPv6 PXE booting support
Patch250:       0001-misc-fix-invalid-character-recongition-in-strto-l.patch
Patch251:       0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
Patch252:       0003-bootp-New-net_bootp6-command.patch
Patch253:       0004-efinet-UEFI-IPv6-PXE-support.patch
Patch254:       0005-grub.texi-Add-net_bootp6-doument.patch
Patch255:       0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
Patch256:       0007-efinet-Setting-network-from-UEFI-device-path.patch
Patch257:       0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
# EFI free memory on exit fix (bsc#980739)
Patch282:       grub2-efi-Move-grub_reboot-into-kernel.patch
Patch283:       grub2-efi-Free-malloc-regions-on-exit.patch
Patch284:       grub2-emu-4-all.patch
# PATCH-FIX-OPENSUSE grub2-mkconfig-arm.patch bnc#1008568
Patch311:       grub2-mkconfig-arm.patch
# Fix GOP BLT support (FATE#322332)
Patch312:       grub2-efi-gop-add-blt.patch
# TPM Support (FATE#315831)
Patch400:       0001-tpm-Core-TPM-support.patch
Patch401:       0002-tpm-Measure-kernel-initrd.patch
Patch402:       0003-tpm-Add-BIOS-boot-measurement.patch
Patch403:       0004-tpm-Rework-linux-command.patch
Patch404:       0005-tpm-Rework-linux16-command.patch
Patch405:       0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
Patch406:       0007-tpm-Measure-the-kernel-commandline.patch
Patch407:       0008-tpm-Measure-commands.patch
Patch408:       0009-tpm-Measure-multiboot-images-and-modules.patch
Patch409:       0010-tpm-Fix-boot-when-there-s-no-TPM.patch
Patch410:       0011-tpm-Fix-build-error.patch
Patch411:       0012-tpm-Build-tpm-as-module.patch
Patch412:       0013-tpm-i386-pc-diskboot-img.patch
# UEFI HTTP and related network protocol support (FATE#320130)
Patch420:       0001-add-support-for-UEFI-network-protocols.patch
Patch421:       0002-AUDIT-0-http-boot-tracker-bug.patch
# check if default entry need to be corrected for updated distributor version
# and/or use fallback entry if default kernel entry removed (bsc#1065349)
Patch430:       grub2-mkconfig-default-entry-correction.patch
Patch431:       grub2-s390x-10-keep-network-at-kexec.patch
# Use pkg-config to find Freetype2
Patch500:       grub2-freetype-pkgconfig.patch
Patch501:       grub2-btrfs-help-on-snapper-rollback.patch
# bsc#1166409 - Grub netbooting does not search for grub.cfg files with mac
# address or ip address in filename
Patch600:       0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
Patch601:       0002-kern-Add-X-option-to-printf-functions.patch
Patch602:       0003-normal-main-Search-for-specific-config-files-for-net.patch
Patch603:       0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch
# backport gcc9 build fix
Patch604:       0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
Patch605:       0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
Patch606:       0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
Patch607:       0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
Patch608:       0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
Patch609:       0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
Patch610:       0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
Patch611:       0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch
# bsc#1168994 VUL-0: EMBARGOED: CVE-2020-10713: grub2: parsing overflows can bypass secure boot restrictions
Patch612:       0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
# bsc#1173812 VUL-0: EMBARGOED: CVE-2020-14308, CVE-2020-14309, CVE-2020-14310,
# CVE-2020-14311: grub2: avoid integer overflows
Patch613:       0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
Patch614:       0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
Patch615:       0004-calloc-Use-calloc-at-most-places.patch
Patch616:       0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
Patch617:       0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
Patch618:       0007-font-Do-not-load-more-than-one-NAME-section.patch
# bsc#1174463 VUL-0: EMBARGOED: CVE-2020-15706: grub2: script: Avoid a
# use-after-free when redefining a function during execution
Patch619:       0008-script-Remove-unused-fields-from-grub_script_functio.patch
Patch620:       0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
# bsc#1174570 VUL-0: EMBARGOED: CVE-2020-15707: grub2: linux: Fix integer
# overflows in initrd size handling
Patch621:       0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
Patch622:       0001-kern-mm.c-Make-grub_calloc-inline.patch
# bsc#1174421 VUL-0: CVE-2020-15705: grub2: linuxefi: fail kernel validation
# without shim protocol
Patch623:       0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
# bsc#1172745 L3: SLES 12 SP4 - Slow boot of system after updated kernel -
# takes 45 minutes after grub to start loading kernel
Patch624:       0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
Patch625:       0002-ieee1275-powerpc-enables-device-mapper-discovery.patch
# Improve the error handling when grub2-install fails with short mbr gap
# (bsc#1176062)
Patch626:       0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
Patch627:       0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch
# Boothole2
Patch630:       0001-mkimage-Clarify-file-alignment-in-efi-case.patch
Patch631:       0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
Patch632:       0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
Patch633:       0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
Patch634:       0005-efi-Add-secure-boot-detection.patch
Patch635:       0006-kern-Add-lockdown-support.patch
Patch636:       0007-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
Patch637:       0008-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
Patch638:       0009-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
Patch639:       0010-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
Patch640:       0011-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
Patch641:       0012-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
Patch642:       0013-commands-setpci-Restrict-setpci-command-when-locked-.patch
Patch643:       0014-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
Patch644:       0015-gdb-Restrict-GDB-access-when-locked-down.patch
Patch645:       0016-loader-xnu-Don-t-allow-loading-extension-and-package.patch
Patch646:       0017-dl-Only-allow-unloading-modules-that-are-not-depende.patch
Patch647:       0018-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
Patch648:       0019-lib-arg-Block-repeated-short-options-that-require-an.patch
Patch649:       0020-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
Patch650:       0021-kern-parser-Fix-resource-leak-if-argc-0.patch
Patch651:       0022-kern-parser-Fix-a-memory-leak.patch
Patch652:       0023-kern-parser-Introduce-process_char-helper.patch
Patch653:       0024-kern-parser-Introduce-terminate_arg-helper.patch
Patch654:       0025-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
Patch655:       0026-kern-buffer-Add-variable-sized-heap-buffer.patch
Patch656:       0027-kern-parser-Fix-a-stack-buffer-overflow.patch
Patch657:       0028-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
Patch658:       0029-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
Patch659:       0030-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
Patch660:       0031-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
Patch661:       0032-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
Patch662:       0033-util-mkimage-Improve-data_size-value-calculation.patch
Patch663:       0034-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
Patch664:       0035-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
Patch665:       0036-grub-install-common-Add-sbat-option.patch
Patch666:       0037-squash-Add-secureboot-support-on-efi-chainloader.patch
Patch667:       0038-squash-grub2-efi-chainload-harder.patch
Patch668:       0039-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
Patch669:       0040-squash-linuxefi-fail-kernel-validation-without-shim-.patch
Patch670:       0041-squash-kern-Add-lockdown-support.patch
Patch671:       0001-emu-fix-executable-stack-marking.patch
Patch672:       grub-install-force-journal-draining-to-ensure-data-i.patch
Patch673:       0001-ieee1275-Avoiding-many-unecessary-open-close.patch
Patch674:       0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
Patch675:       0001-templates-Filter-out-POSIX-locale-for-translation.patch
Patch676:       grub2-simplefb.patch
Patch677:       0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch
Patch678:       0001-video-Remove-trailing-whitespaces.patch
Patch679:       0002-video-readers-jpeg-Test-for-an-invalid-next-marker-r.patch
Patch680:       0003-video-readers-jpeg-Catch-files-with-unsupported-quan.patch
Patch681:       0004-video-readers-jpeg-Catch-OOB-reads-writes-in-grub_jp.patch
Patch682:       0005-video-readers-jpeg-Don-t-decode-data-before-start-of.patch
Patch683:       0006-misc-Format-string-for-grub_error-should-be-a-litera.patch
Patch684:       0007-loader-efi-chainloader-Simplify-the-loader-state.patch
Patch685:       0008-commands-boot-Add-API-to-pass-context-to-loader.patch
Patch686:       0009-loader-efi-chainloader-Use-grub_loader_set_ex.patch
Patch687:       0010-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
Patch688:       0011-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
Patch689:       0012-video-readers-png-Refuse-to-handle-multiple-image-he.patch
Patch690:       0013-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
Patch691:       0014-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
Patch692:       0015-video-readers-png-Sanity-check-some-huffman-codes.patch
Patch693:       0016-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
Patch694:       0017-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
Patch695:       0018-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
Patch696:       0019-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
Patch697:       0020-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
Patch698:       0021-net-ip-Do-IP-fragment-maths-safely.patch
Patch699:       0022-net-netbuff-Block-overly-large-netbuff-allocs.patch
Patch700:       0023-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
Patch701:       0024-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
Patch702:       0025-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
Patch703:       0026-net-tftp-Avoid-a-trivial-UAF.patch
Patch704:       0027-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
Patch705:       0028-net-http-Fix-OOB-write-for-split-http-headers.patch
Patch706:       0029-net-http-Error-out-on-headers-with-LF-without-CR.patch
Patch707:       0030-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
Patch708:       0031-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
Patch709:       0032-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
Patch710:       0033-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
# fs/xfs: add bigtime incompat feature support (bsc#1203387)
Patch711:       grub2-fs-xfs-Add-bigtime-incompat-feature-support.patch
Patch712:       0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
Patch713:       0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
Patch714:       0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
Patch715:       0004-font-Remove-grub_font_dup_glyph.patch
Patch716:       0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
Patch717:       0006-font-Fix-integer-overflow-in-BMP-index.patch
Patch718:       0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
Patch719:       0008-fbutil-Fix-integer-overflow.patch
Patch720:       0009-font-Fix-an-integer-underflow-in-blit_comb.patch
Patch721:       0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
Patch722:       0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
Patch723:       0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
# fs/zfs: remove the zfs modules (bsc#1205554)
Patch724:       grub-remove-zfs-modules.patch
Patch725:       0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch
# make linuxefi default command as linux (bsc#1176134) (bsc#1202838)
Patch726:       0001-Fix-symbols-appearing-in-several-modules-in-linux.patch
Patch727:       0002-linux-fixup.patch
Patch728:       0003-cmdline-Provide-cmdline-functions-as-module.patch
Patch729:       0004-efi-linux-provide-linux-command.patch
Patch730:       0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
Patch731:       0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch
Patch732:       0001-Workaround-volatile-efi-boot-variable.patch
Patch733:       0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
Patch734:       0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
Patch735:       0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
Patch736:       0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
Patch737:       0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
Patch738:       0006-fs-ntfs-Make-code-more-readable.patch
Patch739:       0001-Unify-the-check-to-enable-btrfs-relative-path.patch

Requires:       gettext-runtime
%if 0%{?suse_version} >= 1140
%ifnarch s390x
Recommends:     os-prober
%endif
# xorriso not available using grub2-mkrescue (bnc#812681)
# downgrade to suggest as minimal system can't afford pulling in tcl/tk and half of the x11 stack (bsc#1102515)
Suggests:       libburnia-tools
Recommends:     mtools
%endif
Requires(post): /sbin/install-info
Requires(preun):/sbin/install-info
%if ! 0%{?only_efi:1}
Requires:       grub2-%{grubarch} = %{version}-%{release}
%endif

BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%if 0%{?only_x86_64:1}
ExclusiveArch:  x86_64
%else
ExclusiveArch:  %{ix86} x86_64 ppc ppc64 ppc64le s390x aarch64 %{arm}
%endif

%description
This is the second version of the GRUB (Grand Unified Bootloader), a
highly configurable and customizable bootloader with modular
architecture.  It support rich scale of kernel formats, file systems,
computer architectures and hardware devices.

This package includes user space utlities to manage GRUB on your system.

Authors:
--------
    Gordon Matzigkeit
    Yoshinori K. Okuji
    Colin Watson
    Colin D. Bennett
    Vesa Jääskeläinen
    Robert Millan
    Carles Pina

%package branding-upstream

Summary:        Upstream branding for GRUB2's graphical console
Group:          System/Fhs
Requires:       %{name} = %{version}-%{release}

%description branding-upstream
Upstream branding for GRUB2's graphical console

%if ! 0%{?only_efi:1}
%package %{grubarch}

Summary:        Bootloader with support for Linux, Multiboot and more
Group:          System/Boot
Requires:       %{name} = %{version}-%{release}
Requires(post): %{name} = %{version}-%{release}
Requires:       perl-Bootloader
Requires(post): perl-Bootloader
%ifarch s390x
# required utilities by grub2-s390x-04-grub2-install.patch
# use 'showconsole' to determine console device. (bnc#876743)
Requires:       /sbin/showconsole
Requires:       kexec-tools
# for /sbin/zipl used by grub2-zipl-setup
Requires:       s390-tools
%endif
%ifarch ppc64 ppc64le
Requires:       powerpc-utils
%endif

%description %{grubarch}
The GRand Unified Bootloader (GRUB) is a highly configurable and customizable
bootloader with modular architecture.  It supports rich variety of kernel formats,
file systems, computer architectures and hardware devices.  This subpackage
provides support for %{platform} systems.

%endif

%ifarch %{efi}

%package %{grubefiarch}

Summary:        Bootloader with support for Linux, Multiboot and more
Group:          System/Boot
%ifarch aarch64 ia64 x86_64
#Package is available on ia64 and x86_64 only and not necessarily needed
Requires:       efibootmgr
Requires(post): efibootmgr
%endif
%ifarch ppc ppc64 ppc64le
Requires:       powerpc-utils
%endif
Requires:       %{name} = %{version}-%{release}
Requires(post): %{name} = %{version}-%{release}
Requires:       perl-Bootloader >= 0.706
Requires(post): perl-Bootloader >= 0.706
Provides:       %{name}-efi = %{version}-%{release}
Obsoletes:      %{name}-efi < %{version}-%{release}

%description %{grubefiarch}
The GRand Unified Bootloader (GRUB) is a highly configurable and customizable
bootloader with modular architecture.  It supports rich variety of kernel formats,
file systems, computer architectures and hardware devices.  This subpackage
provides support for EFI systems.

%endif

%ifarch x86_64

%package %{_target_cpu}-xen

Summary:        Bootloader with support for Linux, Multiboot and more
Group:          System/Boot
Provides:       %{name}-xen = %{version}-%{release}
Obsoletes:      %{name}-xen < %{version}-%{release}
BuildArch:      noarch

%description %{_target_cpu}-xen
The GRand Unified Bootloader (GRUB) is a highly configurable and customizable
bootloader with modular architecture.  It supports rich variety of kernel formats,
file systems, computer architectures and hardware devices.  This subpackage
provides support for XEN systems.

%endif

%package snapper-plugin

Summary:        Grub2's snapper plugin
Group:          System/Fhs
Requires:       %{name} = %{version}-%{release}
Requires:       libxml2-tools
Supplements:    packageand(snapper:grub2)
BuildArch:      noarch

%description snapper-plugin
Grub2's snapper plugin for advanced btrfs snapshot boot menu management

%if 0%{?has_systemd:1}
%package systemd-sleep-plugin

Summary:        Grub2's systemd-sleep plugin
Group:          System/Fhs
Requires:       grub2
Requires:       util-linux
Supplements:    packageand(systemd:grub2)
BuildArch:      noarch

%description systemd-sleep-plugin
Grub2's systemd-sleep plugin for directly booting hibernated kernel image in
swap partition while in resuming
%endif

%prep
# We create (if we build for efi) two copies of the sources in the Builddir
%setup -q -n grub-%{version} -a 5
(cd po && ls *.po | cut -d. -f1 | xargs) >po/LINGUAS
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch6 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch15 -p1
%patch17 -p1
%patch18 -p1
%patch19 -p1
%patch21 -p1
%patch23 -p1
%patch25 -p1
%patch27 -p1
%patch35 -p1
%patch37 -p1
%patch38 -p1
%patch39 -p1
%patch40 -p1
%patch41 -p1
%patch42 -p1
%patch43 -p1
%patch44 -p1
%patch45 -p1
%patch46 -p1
# The follow patch is needed for bnc#891946/892852 exclusively on s390x
# It doesn't help to add this to common code just now.
%ifarch s390x
%patch49 -p1
%endif
%patch50 -p1
%patch53 -p1
%patch56 -p1
%patch58 -p1
%patch59 -p1
%patch60 -p1
%patch61 -p1
%patch62 -p1
%patch64 -p1
%patch66 -p1
%patch67 -p1
%patch73 -p1
%patch74 -p1
%patch75 -p1
%patch76 -p1
%patch77 -p1
%patch78 -p1
%patch79 -p1
%patch80 -p1
%patch81 -p1
%patch82 -p1
%patch83 -p1
%patch84 -p1
%patch86 -p1
%patch89 -p1
%patch90 -p1
%patch91 -p1
%patch92 -p1
%patch93 -p1
%patch94 -p1
%patch95 -p1
%patch101 -p1
%patch102 -p1
%patch103 -p1
%patch104 -p1
%patch105 -p1
%patch106 -p1
%patch107 -p1
%patch108 -p1
%patch109 -p1
%patch110 -p1
%patch120 -p1
%patch121 -p1
%patch122 -p1
%patch123 -p1
%patch124 -p1
%patch134 -p1
%patch135 -p1
#POWER
%patch205 -p1
%patch206 -p1
%patch207 -p1
%patch208 -p1
%patch210 -p1
%patch211 -p1
%patch213 -p1
%patch245 -p1
%patch246 -p1
%patch250 -p1
%patch251 -p1
%patch252 -p1
%patch253 -p1
%patch254 -p1
%patch255 -p1
%patch256 -p1
%patch257 -p1
%patch282 -p1
%patch283 -p1
%patch284 -p1
%patch311 -p1
%patch312 -p1
%patch400 -p1
%patch401 -p1
%patch402 -p1
%patch403 -p1
%patch404 -p1
%patch405 -p1
%patch406 -p1
%patch407 -p1
%patch408 -p1
%patch409 -p1
%patch410 -p1
%patch411 -p1
%patch412 -p1
%patch420 -p1
%patch421 -p1
%patch430 -p1
%patch431 -p1
%patch500 -p1
%patch501 -p1
%patch600 -p1
%patch601 -p1
%patch602 -p1
%patch603 -p1
%patch604 -p1
%patch605 -p1
%patch606 -p1
%patch607 -p1
%patch608 -p1
%patch609 -p1
%patch610 -p1
%patch611 -p1
%patch612 -p1
%patch613 -p1
%patch614 -p1
%patch615 -p1
%patch616 -p1
%patch617 -p1
%patch618 -p1
%patch619 -p1
%patch620 -p1
%patch621 -p1
%patch622 -p1
%patch623 -p1
%patch624 -p1
%patch625 -p1
%patch626 -p1
%patch627 -p1
%patch630 -p1
%patch631 -p1
%patch632 -p1
%patch633 -p1
%patch634 -p1
%patch635 -p1
%patch636 -p1
%patch637 -p1
%patch638 -p1
%patch639 -p1
%patch640 -p1
%patch641 -p1
%patch642 -p1
%patch643 -p1
%patch644 -p1
%patch645 -p1
%patch646 -p1
%patch647 -p1
%patch648 -p1
%patch649 -p1
%patch650 -p1
%patch651 -p1
%patch652 -p1
%patch653 -p1
%patch654 -p1
%patch655 -p1
%patch656 -p1
%patch657 -p1
%patch658 -p1
%patch659 -p1
%patch660 -p1
%patch661 -p1
%patch662 -p1
%patch663 -p1
%patch664 -p1
%patch665 -p1
%patch666 -p1
%patch667 -p1
%patch668 -p1
%patch669 -p1
%patch670 -p1
%patch671 -p1
%patch672 -p1
%patch673 -p1
%patch674 -p1
%patch675 -p1
%patch676 -p1
%patch677 -p1
%patch678 -p1
%patch679 -p1
%patch680 -p1
%patch681 -p1
%patch682 -p1
%patch683 -p1
%patch684 -p1
%patch685 -p1
%patch686 -p1
%patch687 -p1
%patch688 -p1
%patch689 -p1
%patch690 -p1
%patch691 -p1
%patch692 -p1
%patch693 -p1
%patch694 -p1
%patch695 -p1
%patch696 -p1
%patch697 -p1
%patch698 -p1
%patch699 -p1
%patch700 -p1
%patch701 -p1
%patch702 -p1
%patch703 -p1
%patch704 -p1
%patch705 -p1
%patch706 -p1
%patch707 -p1
%patch708 -p1
%patch709 -p1
%patch710 -p1
%patch711 -p1
%patch712 -p1
%patch713 -p1
%patch714 -p1
%patch715 -p1
%patch716 -p1
%patch717 -p1
%patch718 -p1
%patch719 -p1
%patch720 -p1
%patch721 -p1
%patch722 -p1
%patch723 -p1
%patch724 -p1
%patch725 -p1
%patch726 -p1
%patch727 -p1
%patch728 -p1
%patch729 -p1
%patch730 -p1
%patch731 -p1
%patch732 -p1
%patch733 -p1
%patch734 -p1
%patch735 -p1
%patch736 -p1
%patch737 -p1
%patch738 -p1
%patch739 -p1

# This simplifies patch handling without need to use git to create patch
# that renames file
mv docs/grub.texi docs/grub2.texi
# This avoids attempt to rebuild potfiles which fails because necessary
# sources are not included in tarball
mv po/grub.pot po/%{name}.pot

# Generate po/LINGUAS for message catalogs ...
./linguas.sh
# ... and make sure new catalogs are actually created
rm -f po/stamp-po

cp --preserve=timestamps %{SOURCE8} .
mkdir build
%ifarch %{efi}
mkdir build-efi
%endif
%ifarch x86_64
mkdir build-xen
%endif
%if %{emu}
mkdir build-emu
%endif

%build
# autogen calls autoreconf -vi
./autogen.sh
# Not yet:
%define common_conf_options TARGET_LDFLAGS=-static --program-transform-name=s,grub,%{name},
# This does NOT work on SLE11:
%define _configure ../configure

CC=gcc-9
TARGET_CC=gcc-9
# We don't want to let rpm override *FLAGS with default a.k.a bogus values.
CFLAGS="-fno-strict-aliasing -fno-inline-functions-called-once "
CXXFLAGS=" "
FFLAGS=" "
export CC TARGET_CC CFLAGS CXXFLAGS FFLAGS

%if %{emu}
cd build-emu
%define arch_specific --enable-device-mapper --disable-grub-mount
TFLAGS="-fPIC"

# -static is needed so that autoconf script is able to link
# test that looks for _start symbol on 64 bit platforms
../configure TARGET_LDFLAGS=$TFLAGS     \
	--prefix=%{_prefix}		\
	--sysconfdir=%{_sysconfdir}	\
        --target=%{_target_platform}    \
        --with-platform=emu     \
	%{arch_specific}                \
        --program-transform-name=s,grub,%{name},
make %{?_smp_mflags}
cd ..
if [ "%{platform}" = "emu" ]; then
  rmdir build
  mv build-emu build
fi
%endif

%ifarch x86_64
cd build-xen
../configure                           \
        TARGET_LDFLAGS=-static         \
        --prefix=%{_prefix}            \
        --sysconfdir=%{_sysconfdir}    \
        --target=%{_target_platform}   \
        --libdir=%{_libdir}            \
        --with-platform=xen            \
        --program-transform-name=s,grub,%{name},
make %{?_smp_mflags}

./grub-mkstandalone --grub-mkimage=./grub-mkimage -o grub.xen -O %{_target_cpu}-xen -d grub-core/ "/boot/grub/grub.cfg=%{SOURCE16}"

cd ..
%endif

%ifarch %{efi}
cd build-efi
../configure   				                \
        TARGET_LDFLAGS=-static                          \
	--prefix=%{_prefix}				\
	--sysconfdir=%{_sysconfdir}			\
        --target=%{_target_platform}                    \
        --libdir=%{_libdir}                          \
        --with-platform=efi                             \
        --program-transform-name=s,grub,%{name},
make %{?_smp_mflags}

#TODO: add efifwsetup module

FS_MODULES="ext2 btrfs ext2 xfs jfs reiserfs"
CD_MODULES=" all_video boot cat chain configfile echo true \
		efinet font gfxmenu gfxterm gzio halt iso9660 \
		jpeg minicmd normal part_apple part_msdos part_gpt \
		password_pbkdf2 png reboot search search_fs_uuid \
		search_fs_file search_label sleep test video fat loadenv"
PXE_MODULES="efinet tftp http"
CRYPTO_MODULES="luks gcry_rijndael gcry_sha1 gcry_sha256"

%ifarch x86_64
CD_MODULES="${CD_MODULES} linuxefi"
%else
CD_MODULES="${CD_MODULES} linux"
%endif

# SBAT metadata
%if 0%{?is_opensuse} == 1
distro_id="opensuse"
distro_name="The openSUSE Project"
%else
distro_id="sle"
distro_name="SUSE Linux Enterprise"
%endif
upstream_sbat=4
distro_sbat=1
echo "sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md" > sbat.csv
echo "grub,${upstream_sbat},Free Software Foundation,grub,%{version},https://www.gnu.org/software/grub/" >> sbat.csv
echo "grub.${distro_id},${distro_sbat},${distro_name},%{name},%{version},mailto:security@suse.de" >> sbat.csv

GRUB_MODULES="${CD_MODULES} ${FS_MODULES} ${PXE_MODULES} ${CRYPTO_MODULES} mdraid09 mdraid1x lvm serial"
./grub-mkimage -O %{grubefiarch} -o grub.efi --prefix= --sbat sbat.csv \
		-d grub-core ${GRUB_MODULES}
./grub-mkimage -O %{grubefiarch} -o grub-tpm.efi --prefix= --sbat sbat.csv \
		-d grub-core ${GRUB_MODULES} tpm
#./grub-mkimage -O #{grubefiarch} -o grub.efi -d grub-core part_gpt hfsplus fat \
#        ext2 btrfs normal chain boot configfile linux appleldr minicmd \
#        loadbios reboot halt search font gfxterm

%ifarch x86_64
%if 0%{?suse_version} >= 1230 || 0%{?suse_version} == 1110
if test -e %{_sourcedir}/_projectcert.crt ; then
    prjsubject=$(openssl x509 -in %{_sourcedir}/_projectcert.crt -noout -subject_hash)
    prjissuer=$(openssl x509 -in %{_sourcedir}/_projectcert.crt -noout -issuer_hash)
    opensusesubject=$(openssl x509 -in %{SOURCE10} -noout -subject_hash)
    slessubject=$(openssl x509 -in %{SOURCE11} -noout -subject_hash)
    if test "$prjissuer" = "$opensusesubject" ; then
        cert=%{SOURCE10}
    fi
    if test "$prjissuer" = "$slessubject" ; then
        cert=%{SOURCE11}
    fi
    if test "$prjsubject" = "$prjissuer" ; then
        cert=%{_sourcedir}/_projectcert.crt
    fi
fi
if test -z "$cert" ; then
    echo "cannot identify project, assuming openSUSE signing"
    cert=%{SOURCE10}
fi

openssl x509 -in $cert -outform DER -out grub.der
%endif
%endif

cd ..
%endif

%if ! 0%{?only_efi:1}
cd build

# 64-bit x86-64 machines use 32-bit boot loader
# (We cannot just redefine _target_cpu, as we'd get i386.rpm packages then)
%ifarch x86_64
%define _target_platform i386-%{_vendor}-%{_target_os}%{?_gnu}
%endif

%if "%{platform}" != "emu"
%define arch_specific --enable-device-mapper
TFLAGS="-static"

# -static is needed so that autoconf script is able to link
# test that looks for _start symbol on 64 bit platforms
../configure TARGET_LDFLAGS=$TFLAGS     \
	--prefix=%{_prefix}		\
	--sysconfdir=%{_sysconfdir}	\
        --target=%{_target_platform}    \
        --with-platform=%{platform}     \
	%{arch_specific}                \
        --program-transform-name=s,grub,%{name},
make %{?_smp_mflags}
%endif
cd ..
%endif

%install

%ifarch x86_64
cd build-xen
make DESTDIR=$RPM_BUILD_ROOT install
install -m 644 grub.xen $RPM_BUILD_ROOT%{_libdir}/%{name}/%{_target_cpu}-xen/.
cd ..
%endif

%ifarch %{efi}
cd build-efi
make DESTDIR=$RPM_BUILD_ROOT install

install -m 644 grub.efi grub-tpm.efi $RPM_BUILD_ROOT%{_libdir}/%{name}/%{grubefiarch}/.

# Create grub.efi link to system efi directory
# This is for tools like kiwi not fiddling with the path
%if "%{grubefiarch}" == "x86_64-efi"
%define sysefidir %{_exec_prefix}/lib64/efi
%else
%define sysefidir %{_libdir}/efi
%endif
install -d $RPM_BUILD_ROOT%{sysefidir}
ln -sf ../../../%{_libdir}/%{name}/%{grubefiarch}/grub.efi $RPM_BUILD_ROOT%{sysefidir}/grub.efi

%ifarch x86_64
%if 0%{?suse_version} >= 1230 || 0%{?suse_version} == 1110
export BRP_PESIGN_FILES="%{_libdir}/%{name}/%{grubefiarch}/grub.efi %{_libdir}/%{name}/%{grubefiarch}/grub-tpm.efi"
install -m 444 grub.der $RPM_BUILD_ROOT%{sysefidir}/
%endif
%endif

cd ..
%endif

%if ! 0%{?only_efi:1}
cd build
make DESTDIR=$RPM_BUILD_ROOT install
cd ..
%endif

if [ -d build-emu/grub-core ]; then
  cd build-emu/grub-core
  install -m 755 grub-emu $RPM_BUILD_ROOT%{_bindir}/%{name}-emu
  install -m 755 grub-emu-lite $RPM_BUILD_ROOT%{_bindir}/%{name}-emu-lite
  install -m 644 grub-emu.1 $RPM_BUILD_ROOT%{_mandir}/man1/%{name}-emu.1
  cd ../..
fi

# *.module files are installed with executable bits due to the way grub2 build
# system works. Clear executable bits to not confuse find-debuginfo.sh
find $RPM_BUILD_ROOT%{_libdir}/%{name} \
       $ -name '*.module' -o -name '*.image' -o -name '*.exec' $ -print0 | \
       xargs --no-run-if-empty -0 chmod a-x

# Script that makes part of grub.cfg persist across updates
install -m 755 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/grub.d/

# Script to generate memtest86+ menu entry
install -m 755 %{SOURCE7} $RPM_BUILD_ROOT%{_sysconfdir}/grub.d/

# Ghost config file
install -d $RPM_BUILD_ROOT/boot/%{name}
touch $RPM_BUILD_ROOT/boot/%{name}/grub.cfg

# Remove devel files
rm $RPM_BUILD_ROOT/%{_libdir}/%{name}/*/*.h
%if 0%{?suse_version} >= 1140
rm $RPM_BUILD_ROOT%{_datadir}/%{name}/*.h
%endif

# Defaults
install -m 644 -D %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/default/grub
install -m 755 -D %{SOURCE6} $RPM_BUILD_ROOT%{_sbindir}/grub2-once
install -m 755 -D %{SOURCE12} $RPM_BUILD_ROOT%{_libdir}/snapper/plugins/grub
install -m 755 -D %{SOURCE14} $RPM_BUILD_ROOT%{_sysconfdir}/grub.d/80_suse_btrfs_snapshot
%if 0%{?has_systemd:1}
install -m 644 -D %{SOURCE15} $RPM_BUILD_ROOT%{_unitdir}/grub2-once.service
install -m 755 -D %{SOURCE17} $RPM_BUILD_ROOT%{_libdir}/systemd/system-sleep/grub2.sleep
%endif
install -m 755 -D %{SOURCE18} $RPM_BUILD_ROOT%{_sbindir}/grub2-check-default

R=$RPM_BUILD_ROOT
%ifarch %{ix86} x86_64
%else
rm -f $R%{_sysconfdir}/grub.d/20_memtest86+
%endif

%ifarch ppc ppc64 ppc64le
%else
rm -f $R%{_sysconfdir}/grub.d/20_ppc_terminfo
%endif

%ifarch s390x
mv $R%{_sysconfdir}/{grub.d,default}/zipl2grub.conf.in
chmod 600 $R%{_sysconfdir}/default/zipl2grub.conf.in

%define dracutlibdir %{_prefix}/lib/dracut
%define dracutgrubmoddir %{dracutlibdir}/modules.d/99grub2
install -m 755 -d $R%{dracutgrubmoddir}
for f in module-setup.sh grub2.sh; do
  mv $R%{_libdir}/%{name}/%{grubarch}/dracut-$f $R%{dracutgrubmoddir}/$f
done
mv $R%{_libdir}/%{name}/%{grubarch}/dracut-zipl-refresh \
   $R%{_libdir}/%{name}/zipl-refresh
rm -f $R%{_sysconfdir}/grub.d/30_os-prober

perl -ni -e '
  sub END() {
    print "\n# on s390x always:\nGRUB_DISABLE_OS_PROBER=true\n";
  }
  if ( s{^#?(GRUB_TERMINAL)=(console|gfxterm)}{$1=console} ) {
    $_ .= "GRUB_GFXPAYLOAD_LINUX=text\n";
  }
  if (	m{^# The resolution used on graphical} ||
	m{^# # note that you can use only modes} ||
	m{^# you can see them in real GRUB} ||
	m{^#?GRUB_GFXMODE=} ) {
    next;
  }
  s{openSUSE}{SUSE Linux Enterprise Server} if (m{^GRUB_DISTRIBUTOR});
  print;
'  $RPM_BUILD_ROOT%{_sysconfdir}/default/grub
%else
%endif

%find_lang %{name}
%fdupes %buildroot%{_bindir}
%fdupes %buildroot%{_libdir}

%post
/sbin/install-info %{_infodir}/grub-dev.info %{_infodir}/dir || :
/sbin/install-info %{_infodir}/%{name}.info %{_infodir}/dir || :

%if ! 0%{?only_efi:1}

%post %{grubarch}
# To check by current loader settings
if [ -f %{_sysconfdir}/sysconfig/bootloader ]; then
  . %{_sysconfdir}/sysconfig/bootloader
fi

# If the grub is the current loader, we'll handle the grub2 testing entry
if [ "x${LOADER_TYPE}" = "xgrub" ]; then

exec >/dev/null 2>&1

# check if entry for grub2's core.img exists in the config
  # if yes, we will correct obsoleted path and update grub2 stuff and config to make it work
  # if no, do nothing
  if [ -f /boot/grub/menu.lst ]; then

# If grub config contains obsolete core.img path, remove and use the new one
    if /usr/bin/grep -l "^\s*kernel\s*.*/boot/%{name}/core.img" /boot/grub/menu.lst; then
      /sbin/update-bootloader --remove --image /boot/%{name}/core.img || true
      /sbin/update-bootloader --add --image /boot/%{name}/i386-pc/core.img --name "GNU GRUB 2" || true
    fi

# Install grub2 stuff and config to make the grub2 testing entry to work with updated version
    if /usr/bin/grep -l "^\s*kernel\s*.*/boot/%{name}/i386-pc/core.img" /boot/grub/menu.lst; then
      # Determine the partition with /boot
      BOOT_PARTITION=$(df -h /boot |(read; awk '{print $1; exit}'))
      # Generate core.img, but don't let it be installed in boot sector
      %{name}-install --no-bootsector $BOOT_PARTITION || true
      # Create a working grub2 config, otherwise that entry is un-bootable
      /usr/sbin/grub2-mkconfig -o /boot/%{name}/grub.cfg
    fi
  fi

elif [ "x${LOADER_TYPE}" = "xgrub2" ]; then

# It's enought to call update-bootloader to install grub2 and update it's config
  # Use new --reinit, if not available use --refresh
  # --reinit: install and update bootloader config
  # --refresh: update bootloader config
  /sbin/update-bootloader --reinit 2>&1 | grep -q 'Unknown option: reinit' &&
  /sbin/update-bootloader --refresh || true
fi
%endif

%ifarch %{efi}

%post %{grubefiarch}

# To check by current loader settings
if [ -f %{_sysconfdir}/sysconfig/bootloader ]; then
  . %{_sysconfdir}/sysconfig/bootloader
fi

if [ "x${LOADER_TYPE}" = "xgrub2-efi" ]; then

if [ -d /boot/%{name}-efi ]; then
    # Migrate settings to standard prefix /boot/grub2
    for i in custom.cfg grubenv; do
      [ -f /boot/%{name}-efi/$i ] && cp -a /boot/%{name}-efi/$i /boot/%{name} || :
    done

# It's enough to call update-bootloader to install grub2 and update it's config
  # Use new --reinit, if not available use --refresh
  # --reinit: install and update bootloader config
  # --refresh: update bootloader config
  /sbin/update-bootloader --reinit 2>&1 | grep -q 'Unknown option: reinit' &&
  /sbin/update-bootloader --refresh || true
fi

if [ -d /boot/%{name}-efi ]; then
  mv /boot/%{name}-efi /boot/%{name}-efi.rpmsave
fi

exit 0
%endif

%preun
if [ $1 = 0 ]; then
  /sbin/install-info --delete %{_infodir}/grub-dev.info %{_infodir}/dir || :
  /sbin/install-info --delete %{_infodir}/%{name}.info %{_infodir}/dir || :

%if ! 0%{?only_efi:1}
  # To check by current loader settings
  if [ -f %{_sysconfdir}/sysconfig/bootloader ]; then
    . %{_sysconfdir}/sysconfig/bootloader
  fi

if [ "x${LOADER_TYPE}" = "xgrub" ]; then

exec >/dev/null 2>&1

if [ -f /boot/grub/menu.lst ]; then

# Remove grub2 testing entry in menu.lst if has any
      for i in /boot/%{name}/core.img /boot/%{name}/i386-pc/core.img; do
        if /usr/bin/grep -l "^\s*kernel\s*.*$i" /boot/grub/menu.lst; then
          /sbin/update-bootloader --remove --image "$i" || true
        fi
      done
    fi

# Cleanup config, to not confuse some tools determining bootloader in use
    rm -f /boot/%{name}/grub.cfg

# Cleanup installed files
    # Unless grub2 provides grub2-uninstall, we don't remove any file because
    # we have no idea what's been installed. (And a blind remove is dangerous
    # to remove user's or other package's file accidently ..)
  fi
%endif
fi

%files -f %{name}.lang
%defattr(-,root,root,-)
%doc COPYING NEWS README
%doc THANKS TODO ChangeLog
%doc docs/autoiso.cfg docs/osdetect.cfg
%ifarch s390x
%doc README.ibm3215
%endif
%dir /boot/%{name}
%ghost /boot/%{name}/grub.cfg
%{_sysconfdir}/bash_completion.d/grub
%config(noreplace) %{_sysconfdir}/default/grub
%dir %{_sysconfdir}/grub.d
%{_sysconfdir}/grub.d/README
%config(noreplace) %{_sysconfdir}/grub.d/00_header
%config(noreplace) %{_sysconfdir}/grub.d/10_linux
%config(noreplace) %{_sysconfdir}/grub.d/20_linux_xen
%config(noreplace) %{_sysconfdir}/grub.d/40_custom
%config(noreplace) %{_sysconfdir}/grub.d/41_custom
%config(noreplace) %{_sysconfdir}/grub.d/90_persistent
%config(noreplace) %{_sysconfdir}/grub.d/95_textmode
%{_sbindir}/%{name}-install
%{_sbindir}/%{name}-mkconfig
%{_sbindir}/%{name}-once
%{_sbindir}/%{name}-probe
%{_sbindir}/%{name}-reboot
%{_sbindir}/%{name}-set-default
%{_sbindir}/%{name}-check-default
%{_bindir}/%{name}-editenv
%{_bindir}/%{name}-file
%{_bindir}/%{name}-fstest
%{_bindir}/%{name}-kbdcomp
%{_bindir}/%{name}-menulst2cfg
%{_bindir}/%{name}-mkfont
%{_bindir}/%{name}-mkimage
%{_bindir}/%{name}-mklayout
%{_bindir}/%{name}-mknetdir
%{_bindir}/%{name}-mkpasswd-pbkdf2
%{_bindir}/%{name}-mkrelpath
%{_bindir}/%{name}-mkrescue
%{_bindir}/%{name}-mkstandalone
%{_bindir}/%{name}-render-label
%{_bindir}/%{name}-script-check
%{_bindir}/%{name}-syslinux2cfg
%if 0%{?has_systemd:1}
%{_unitdir}/grub2-once.service
%endif
%dir %{_libdir}/%{name}
%dir %{_datadir}/%{name}
%dir %{_datadir}/%{name}/themes
%if 0%{?suse_version} >= 1140
%{_datadir}/%{name}/*.pf2
%endif
%{_datadir}/%{name}/grub-mkconfig_lib
%{_infodir}/grub-dev.info*
%{_infodir}/%{name}.info*
%{_mandir}/man1/%{name}-editenv.1.*
%{_mandir}/man1/%{name}-file.1.*
%{_mandir}/man1/%{name}-fstest.1.*
%{_mandir}/man1/%{name}-kbdcomp.1.*
%{_mandir}/man1/%{name}-menulst2cfg.1.*
%{_mandir}/man1/%{name}-mkfont.1.*
%{_mandir}/man1/%{name}-mkimage.1.*
%{_mandir}/man1/%{name}-mklayout.1.*
%{_mandir}/man1/%{name}-mknetdir.1.*
%{_mandir}/man1/%{name}-mkpasswd-pbkdf2.1.*
%{_mandir}/man1/%{name}-mkrelpath.1.*
%{_mandir}/man1/%{name}-mkrescue.1.*
%{_mandir}/man1/%{name}-mkstandalone.1.*
%{_mandir}/man1/%{name}-render-label.1.*
%{_mandir}/man1/%{name}-script-check.1.*
%{_mandir}/man1/%{name}-syslinux2cfg.1.*
%{_mandir}/man8/%{name}-install.8.*
%{_mandir}/man8/%{name}-mkconfig.8.*
%{_mandir}/man8/%{name}-probe.8.*
%{_mandir}/man8/%{name}-reboot.8.*
%{_mandir}/man8/%{name}-set-default.8.*
%if %{emu}
%{_bindir}/%{name}-emu*
%{_mandir}/man1/%{name}-emu.1.*
%endif
%ifnarch s390x
%config(noreplace) %{_sysconfdir}/grub.d/30_os-prober
%{_bindir}/%{name}-glue-efi
%{_bindir}/%{name}-mount
%{_sbindir}/%{name}-bios-setup
%{_sbindir}/%{name}-macbless
%{_sbindir}/%{name}-ofpathname
%{_sbindir}/%{name}-sparc64-setup
%{_mandir}/man1/%{name}-glue-efi.1.*
%{_mandir}/man1/%{name}-mount.1.*
%{_mandir}/man8/%{name}-bios-setup.8.*
%{_mandir}/man8/%{name}-macbless.8.*
%{_mandir}/man8/%{name}-ofpathname.8.*
%{_mandir}/man8/%{name}-sparc64-setup.8.*
%endif

%files branding-upstream
%defattr(-,root,root,-)
%{_datadir}/%{name}/themes/starfield

%if ! 0%{?only_efi:1}

%files %{grubarch}
%defattr(-,root,root,-)
%ifarch %{ix86} x86_64
%config(noreplace) %{_sysconfdir}/grub.d/20_memtest86+
%endif
%dir %{_libdir}/%{name}/%{grubarch}
%ifarch ppc ppc64 ppc64le
%config(noreplace) %{_sysconfdir}/grub.d/20_ppc_terminfo
# This is intentionally "grub.chrp" and not "%{name}.chrp"
%{_libdir}/%{name}/%{grubarch}/grub.chrp
%{_libdir}/%{name}/%{grubarch}/bootinfo.txt
%endif
%ifnarch ppc ppc64 ppc64le s390x
%{_libdir}/%{name}/%{grubarch}/*.image
%endif
%{_libdir}/%{name}/%{grubarch}/*.img
%{_libdir}/%{name}/%{grubarch}/*.lst
%{_libdir}/%{name}/%{grubarch}/*.mod
%{_libdir}/%{name}/%{grubarch}/*.module
%ifarch x86_64
%{_libdir}/%{name}/%{grubarch}/efiemu*.o
%endif
%{_libdir}/%{name}/%{grubarch}/gdb_grub
%{_libdir}/%{name}/%{grubarch}/gmodule.pl
%{_libdir}/%{name}/%{grubarch}/kernel.exec
%{_libdir}/%{name}/%{grubarch}/modinfo.sh
%endif
%ifarch s390x
%{_sbindir}/%{name}-zipl-setup
%{_libdir}/%{name}/zipl-refresh
%config(noreplace) %{_sysconfdir}/default/zipl2grub.conf.in
%{dracutlibdir}
%endif

%ifarch %{efi}

%files %{grubefiarch}
%defattr(-,root,root,-)
%dir %{_libdir}/%{name}/%{grubefiarch}
%{_libdir}/%{name}/%{grubefiarch}/grub.efi
%{_libdir}/%{name}/%{grubefiarch}/grub-tpm.efi
%{_libdir}/%{name}/%{grubefiarch}/*.img
%{_libdir}/%{name}/%{grubefiarch}/*.lst
%{_libdir}/%{name}/%{grubefiarch}/*.mod
%{_libdir}/%{name}/%{grubefiarch}/*.module
%{_libdir}/%{name}/%{grubefiarch}/gdb_grub
%{_libdir}/%{name}/%{grubefiarch}/gmodule.pl
%{_libdir}/%{name}/%{grubefiarch}/kernel.exec
%{_libdir}/%{name}/%{grubefiarch}/modinfo.sh
%dir %{sysefidir}
%{sysefidir}/grub.efi

%ifarch x86_64
%if 0%{?suse_version} >= 1230 || 0%{?suse_version} == 1110
%{sysefidir}/grub.der
%endif
%endif
%endif

%files snapper-plugin
%defattr(-,root,root,-)
%dir %{_libdir}/snapper
%dir %{_libdir}/snapper/plugins
%config(noreplace) %{_sysconfdir}/grub.d/80_suse_btrfs_snapshot
%{_libdir}/snapper/plugins/grub

%ifarch x86_64
%files %{_target_cpu}-xen
%dir %{_libdir}/%{name}/%{_target_cpu}-xen
%{_libdir}/%{name}/%{_target_cpu}-xen/*
%endif

%if 0%{?has_systemd:1}
%files systemd-sleep-plugin
%defattr(-,root,root,-)
%dir %{_libdir}/systemd/system-sleep
%{_libdir}/systemd/system-sleep/grub2.sleep
%endif

%changelog

Places

File grub2.spec of Package grub2.32138

Places