- Oct 29, 2018
-
-
Colin Watson authored
-
Colin Watson authored
Closes: #886178
-
If / is on the root dataset in a ZFS pool, then ${bootfs} will be set to "/" (whereas if it is on a non-root dataset, there will be no trailing slash). Passing "root=ZFS=${rpool}/" will fail to boot, but "root=ZFS=${rpool}" works fine, so strip the trailing slash. Fixes: https://savannah.gnu.org/bugs/?52746 Tested-by: Fejes József <jozsef.fejes@gmail.com> Signed-off-by: Colin Watson <cjwatson@ubuntu.com> Bug: https://savannah.gnu.org/bugs/?52746 Bug-Debian: https://bugs.debian.org/886178 Last-Update: 2018-10-29 Patch-Name: zfs-root-dataset.patch
-
Colin Watson authored
Closes: #911147 LP: #1652822
-
Colin Watson authored
Otherwise we incorrectly merge settings from there into /etc/default/grub. Closes: #872637 LP: #1797894
-
Colin Watson authored
LP: #1785033
-
The EFI Graphics Output Protocol can return a 64-bit linear frame buffer address in some firmware/BIOS implementations. We currently only store the lower 32-bits in the lfb_base. This will eventually be passed to Linux kernel and the efifb driver will incorrectly interpret the framebuffer address as 32-bit address. The Linux kernel has already added support to handle 64-bit linear framebuffer address in the efifb driver since quite some time now. This patch adds the support for 64-bit linear frame buffer address in GRUB to address the above mentioned scenario. Signed-off-by: Arindam Nath <arindam.nath@amd.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com> Origin: upstream, https://git.savannah.gnu.org/cgit/grub.git/commit/?id=886edba8770ccbc3def0af2a7d6b346d00d0af2f Bug-Ubuntu: https://bugs.launchpad.net/bugs/1785033 Last-Update: 2018-10-29 Patch-Name: add_ext_lfb_base_support.patch
-
Colin Watson authored
Build-depend on dosfstools and mtools on non-Linux variants of i386/amd64/arm64 as well, to match debian/rules.
-
- Oct 28, 2018
-
-
Colin Watson authored
Add Conflicts/Replaces from grub-common, and take over /etc/default/grub.d/init-select.cfg with a no-op stub. Thanks to Guillem Jover for the suggestion. Closes: #863801
-
Colin Watson authored
Closes: #906470
-
Colin Watson authored
Bug-Debian: https://bugs.debian.org/906470 Last-Update: 2018-10-28 Patch-Name: skip-grub_cmd_set_date.patch
-
Colin Watson authored
-
Colin Watson authored
Revise grub-<platform>-bin and grub-<platform> package descriptions to try to explain better how they fit together and which one should be used. Based loosely on work by Justin B Rye, for which thanks. Closes: #630224
-
- Oct 27, 2018
-
-
Colin Watson authored
-
Colin Watson authored
This has been the default since dpkg 1.17.0.
-
Colin Watson authored
Closes: #908162 LP: #1565950
-
- Oct 26, 2018
-
-
Colin Watson authored
Thanks, Bastian Blank. Closes: #910959
-
- Aug 28, 2018
-
-
Colin Watson authored
-
Colin Watson authored
-
Colin Watson authored
Binary package names are not allowed here. Closes: #907483
-
Colin Watson authored
Otherwise we end up with clashing source packages. Closes: #906596
-
- Jul 30, 2018
-
-
Colin Watson authored
-
Colin Watson authored
-
Starting from binutils commit bd7ab16b4537788ad53521c45469a1bdae84ad4a: https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=bd7ab16b4537788ad53521c45469a1bdae84ad4a x86-64 assembler generates R_X86_64_PLT32, instead of R_X86_64_PC32, for 32-bit PC-relative branches. Grub2 should treat R_X86_64_PLT32 as R_X86_64_PC32. Signed-off-by: H.J. Lu <hjl.tools@gmail.com> Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com> Origin: upstream, https://git.savannah.gnu.org/cgit/grub.git/commit/?id=842c390469e2c2e10b5aa36700324cd3bde25875 Last-Update: 2018-07-30 Patch-Name: R_X86_64_PLT32.patch
-
Colin Watson authored
Disable sercon in SeaBIOS. Fix qemu options for UHCI test.
-
qemu 2.12 removed the -usbdevice option. Use a more modern spelling instead, in line with other USB-related tests. Signed-off-by: Colin Watson <cjwatson@ubuntu.com> Forwarded: https://lists.gnu.org/archive/html/grub-devel/2018-07/msg00114.html Last-Update: 2018-07-30 Patch-Name: tests-fix-uhci-qemu-options.patch
-
SeaBIOS 1.11.0 added support for VGA emulation over a serial port, which interferes with grub-shell. Turn it off. Signed-off-by: Colin Watson <cjwatson@ubuntu.com> Forwarded: https://lists.gnu.org/archive/html/grub-devel/2018-07/msg00113.html Last-Update: 2018-07-30 Patch-Name: tests-disable-sercon-in-seabios.patch
-
Colin Watson authored
-
Colin Watson authored
-
- Jul 29, 2018
-
-
Steve McIntyre authored
Add signing template, patches to fix Lockdown mode, EFI vendor metadata See merge request !2
-
- Jun 28, 2018
-
-
Downstream distributions that do not rebuild grub but want to support Secure Boot need to know the path used when building the monolothic EFI images, as that's necessary to create the layout and the grub.cfg files in the live media. Export the path, which is the distribution vendor, in a control file metadata variable so that it can be programmatically accessed.
-
- Jun 27, 2018
-
-
Lintian parses the shebang in the rules files of the templates packages and complains that there is no dependency on make. But they are special packages, so override it.
-
Lintian throws an un-overridable error because the binary packages that contain the templates do not have a copyright and changelog. Instead of skipping them in the dh_installdocs step, install just the copyright and changelog.
-
Philipp Hahn authored
Do not use hard-coded "ubuntu". closes: #769172
-
Philipp Hahn authored
to be picked up by shim by default.
-
Philipp Hahn authored
-
Philipp Hahn authored
-
Philipp Hahn authored
[ Philipp Hahn ] Disallow unsigned kernels if UEFI Secure Boot is enabled (patch by Linn Crosetto <linn@hpe.com>) Add patch to fix lockdown mode (patch by Luca Boccassi <bluca@debian.org>)
-
Description: do not overwrite sentinel byte in boot_params, breaks lockdown grub currently copies the entire boot_params, which includes setting sentinel byte to 0xff, which triggers sanitize_boot_params in the kernel which in turn clears various boot_params variables, including the indication that the booloader chain is verified and thus the kernel disables lockdown mode. According to the information on the Fedora bug tracker, only the information from byte 0x1f1 is necessary, so start copying from there instead. Author: Luca Boccassi <bluca@debian.org> Bug-Fedora: https://bugzilla.redhat.com/show_bug.cgi?id=1418360 Forwarded: no Patch-Name: fix_lockdown.patch
-
If UEFI Secure Boot is enabled and kernel signature verification fails, do not boot the kernel. Before this change, if kernel signature verification failed then GRUB would fall back to calling ExitBootServices() and continuing the boot. Patch-Name: linuxefi_disable_sb_fallback.patch Signed-off-by: Linn Crosetto <linn@hpe.com>
-