Commit graph

15946 commits

Author SHA1 Message Date
Julian Andres Klode
60bd5b52b6
releasing package grub2 version 2.14~git20250718.0e36779-2 2025-11-02 12:17:34 +01:00
Mate Kukri
b2e4da1ba9 d/control: Re-add grub-common as dummy transitional package (LP: #2122124) 2025-11-02 12:07:14 +01:00
Mate Kukri
bf7489c2db Bash-completions no longer live in one file, remove symlinks 2025-11-02 12:07:05 +01:00
Mate Kukri
d3a632f38f Fix upstream typo in bash-completion Makefile 2025-11-02 12:06:42 +01:00
Mate Kukri
5bb763fa1d releasing package grub2 version 2.14~git20250718.0e36779-1 2025-08-12 15:15:41 +01:00
Mate Kukri
818186c049 Update Debian specific SBAT line to grub.debian14 for forky 2025-08-12 15:14:48 +01:00
Mate Kukri
664c480120 Add Provides grub-common to merged grub2-common
We need this otherwise this breaks os-prober.
2025-08-11 14:16:07 +01:00
Mate Kukri
7e806d1fe9 d/postinst.in: cleanup grub legacy related awfulness 2025-08-05 11:00:21 +01:00
Mate Kukri
37656e548c remove old maintscripts 2025-08-05 11:00:21 +01:00
Mate Kukri
537d1a8dc7 remove IA64 support
it is finally dead.
2025-08-05 11:00:21 +01:00
Mate Kukri
5e74cae7c3 d/control: Cleanup more package relations 2025-08-05 11:00:13 +01:00
Mate Kukri
47a96ea60d Add "noescape" argument to cmdline creation (LP: #2112179) 2025-07-29 10:14:34 +01:00
Mate Kukri
4201974e5e debian/patches: Drop a number of obsolete patches 2025-07-25 10:40:11 +01:00
Mate Kukri
ae58e82185 Remove support for WUBI (Windows Based Ubuntu Installer)
This software is no longer maintained or used for anything.
2025-07-24 17:49:22 +01:00
Mate Kukri
0f8c9b2e6f debian: Remove support for the yeeloong target
This device is obsolote.
2025-07-24 17:49:22 +01:00
Mate Kukri
4e2f88d10d debian: Get rid of update-grub script for grub-legacy
grub-legacy is going away so let's delete this.
2025-07-24 17:49:22 +01:00
Mate Kukri
0d41945d17 debian: Merge grub-common into grub2-common 2025-07-24 17:49:22 +01:00
Mate Kukri
cfd9534b3f debian: Get rid of non-systemd init scripts 2025-07-24 17:49:22 +01:00
Mate Kukri
cea4f9b30b debian: Tanglu is a dead distro, drop references to it 2025-07-24 17:49:22 +01:00
Mate Kukri
1b6512e370 d/control: Clean up package relations
Many of the ones we had referred to old packages and accomplished
nothing besides cluttering the control file.
2025-07-24 17:49:22 +01:00
Mate Kukri
8e51284ee5 d/control: Sync dependencies of grub-efi-{riscv64,loong64} with grub-efi-*
The versions listed are relexations from Ubuntu and likely left-over
copypasta.
2025-07-24 17:49:22 +01:00
Mate Kukri
95864e1e4c debian: Remove references to dead ports kfreebsd-* and kopensolaris-* 2025-07-24 17:49:22 +01:00
Mate Kukri
bfd59c2fe4 d/build-efi-images: Remove filesystems no longer allowed under lockdown
ntfs and jfs are no longer allowed under lockdown due to persistent
security problems, and recurring incomplete patches.

Let's remove them from signed images.
2025-07-24 17:49:22 +01:00
Mate Kukri
4da2d61ffa Check out missing distfiles from upstream git branch 2025-07-24 17:21:58 +01:00
Mate Kukri
d0c13db4ac resolve zfs root identification (Closes: #848945) 2025-07-24 17:21:58 +01:00
Pascal Hambourg
8c08bc03d5 debian/grub.d/05_debian_theme: quote background image pathname in output
This is required if the pathname contains spaces or grub shell
metacharacters.
2025-07-24 17:21:58 +01:00
Graham Inggs
25d9561f93 debian/control: mark qemu-system build-dependency <!nocheck> 2025-07-24 17:21:58 +01:00
Luca Boccassi
b635c31c59 efi images: enable 'bli' module
The bli (Boot Loader Interface) module makes grub2 export the
LoaderDevicePartUUID volatile variable, which identifies the ESP
from where the bootloader was loaded. This is used by systemd
tools for disk autodiscovery.

https://systemd.io/BOOT_LOADER_INTERFACE/
2025-07-24 17:21:58 +01:00
Mate Kukri
2df99b5f7a Fix ipconfig2 route table parsing (LP: #2088181) 2025-07-24 17:21:58 +01:00
Mate Kukri
e4134eb51a peimage: add NX support, fix some bugs (LP: #2104316)
- add NX support, improved from Ubuntu to fix (LP #2104316)
- fix debug prints
- unload partially loaded image on failure
2025-07-24 17:21:58 +01:00
Mate Kukri
eb99118f46 d/rules: add erofs_test to XFAIL test
Similarly to other filesystem tests this won't work in the build
environment.
2025-07-24 16:11:38 +01:00
Mate Kukri
981d3c90e5 d/patches: rebase patches for 2.14 git snapshot 2025-07-24 16:11:38 +01:00
Mate Kukri
93053de2b4 Update upstream source from tag 'upstream/2.14_git20250718.0e36779'
Update to upstream version '2.14_git20250718.0e36779'
with Debian dir 4dafebe97d
2025-07-21 13:47:01 +01:00
Mate Kukri
71350dbc54 New upstream version 2.14~git20250718.0e36779 2025-07-18 15:39:22 +01:00
Vladimir Serbinenko
0e367796c0 docs: Write how to import new libgcrypt
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
b930bfa377 libgcrypt: Fix a memory leak
Fixes: CID 468917

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
d48c277c49 libgcrypt: Don't use 64-bit division on platforms where it's slow
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
de49514c9e util/import_gcry: Fix pylint warnings
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
334353a977 util/import_gcry: Make compatible with Python 3.4
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
2a6de42093 libgcrypt: Import blake family of hashes
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
e541879123 libgcrypt: Ignore sign-compare warnings
libgcrypt itself is compiled with -Wno-sign-compare. Do the same for consistency.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
e3b78e49cd libgcrypt: Remove now unneeded compilation flag
HAVE_STRTOUL is now defined in stdlib.h. Include it in g10lib.h rather
than defining on command line.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
e23704ad48 libgcrypt: Fix Coverity warnings
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
d65810b01c keccak: Disable acceleration with SSE asm
Libgcrypt code assumes that on x64 all SSE registers are fair game.
While it's true that CPUs in question support it, we disable it in
our compilation options. Disable the offending optimization.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:51 +02:00
Vladimir Serbinenko
f808ef0d28 tests: Add DSA and RSA SEXP tests
This allows us to test purely the integration of the implementation of
DSA and RSA from libgcrypt without concerning with additional code.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:50 +02:00
Vladimir Serbinenko
0739d24cd1 libgcrypt: Adjust import script, definitions and API users for libgcrypt 1.11
This patches modifies the GRUB-libgcrypt API to match new libgcrypt 1.11.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:50 +02:00
Vladimir Serbinenko
3e1c2890b8 b64dec: Add harness for compilation in GRUB environment
Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:50 +02:00
Vladimir Serbinenko
5ca0d5e412 b64dec: Import b64dec from gpg-error
Imported from libgpg-error 1.51.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:50 +02:00
Vladimir Serbinenko
3312af6e07 libgcrypt: Import libgcrypt 1.11
We currently use an old version of libgcrypt which results in us having
fewer ciphers and missing on many other improvements.

Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:12:50 +02:00
Mate Kukri
a0d4c94ef6 loader/efi/linux: Use shim loader image handle where available
Not reusing these handles will result in image measurements showing up
twice in the event log.

On the occasion add missing grub_free() call.

Signed-off-by: Mate Kukri <mate.kukri@canonical.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-07-11 23:11:35 +02:00