rpms/edk2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
270 Commits 10 Branches 66 Tags 2.1 MiB
c17e4f232c
Commit Graph

231 Commits

Author SHA1 Message Date
Cole Robinson
167eadb8ba Give all json file categories a unique matchable prefix 
So we can easily use wildcards to catch them for subpackage file lists

...and a bunch of other small cleanups to get things fully working
 2019-07-12 15:20:23 -04:00
Cole Robinson
429a2758cc Copy VARS from plain ovmf/ to ovmf-ia32/ 
Apparently that works fine, but let's use explicit dirs
 2019-07-12 14:08:23 -04:00
Kashyap Chamarthy
674b3c8a27 Ship the JSON firmware "descriptor files" 
From version 4.1 (due in August 2019) onwards, QEMU ships the so-called
firmware "descriptor files".  These are small JSON files that describe
details about UEFI firmware binaries — such as the fimware binary path,
its architecture, supported machine type, NVRAM template and so forth.

You can see examples of these files from the QEMU upstream Git:
https://git.qemu.org/?p=qemu.git;a=tree;f=pc-bios/descriptors

    $> tree descriptors/
    descriptors/
    ├── 50-edk2-i386-secure.json
    ├── 50-edk2-x86_64-secure.json
    ├── 60-edk2-aarch64.json
    ├── 60-edk2-arm.json
    ├── 60-edk2-i386.json
    └── 60-edk2-x86_64.json

QEMU 4.1 itself will ship the above files.  However, Fedora needs to
ship these file as part of its EDK2 package.

Why?
----

(1) Quoting (with minor formatting edits) Laszlo Ersek:

      Distributions providing their own EDK2 packages would not include
      the descriptors from upstream QEMU, even if they otherwise package
      QEMU.  That's beause the descriptor files in QEMU match the
      firmware bundled with QEMU -- but the firmware images in the
      distros' own EDK2 packages are different.  So, if a distro
      provides an EDK2 package, then the same EDK2 package should offer
      matching descriptors.  QEMU offers descriptors (soon) because QEMU
      technically distributes edk2 firmware binaries (soon).  [Where
      "soon" == QEMU 4.1]

(2) And as Dan Berrangé reminded on IRC:

      In Fedora, we need to ship them [the "descriptor files"] as part
      of the EDK2 package, because Fedora throws away all the firmware
      files that QEMU bundles, because we're [Fedora] required to
      rebuild everything from pristine source.

                    - - -

In this patch:

(*) Use the firmware descriptor files provided by Laszlo (thanks!) in
    this comment here:
    https://bugzilla.redhat.com/show_bug.cgi?id=1728652#c2 ("RFE: Ship
    the JSON firmware "descriptor files" as part of EDK2").

    On the double-digit priority prefixes, refer to the rationale here:
    https://src.fedoraproject.org/rpms/edk2/pull-request/3#comment-27523

(*) Install the JSON files for the relevant architectures in
    `/usr/share/qemu/firmware`, as required by specification[+].  And
    make each EDK2 own this directory; multiple RPMs owning the same
    directory is no problem.

[+] https://git.qemu.org/?p=qemu.git;a=blob;f=docs/interop/firmware.json

Resolves: rhbz#1728652

Signed-off-by: Kashyap Chamarthy <kchamart@redhat.com>
 2019-07-12 13:40:09 -04:00
Cole Robinson
1b8f6277e4 spec: Ship VARS file for ovmf-ia32 (bug 1688596) 2019-07-12 13:39:28 -04:00
Cole Robinson
43c2e03bab spec: Add comment about skip_enroll 2019-07-12 12:52:11 -04:00
Cole Robinson
7407978c03 Update to edkstable201905 
* Temporarily disable secureboot enrollment, it's hanging
* Update to openssl 1.1.1b
* Add bundled softfloat
 2019-07-12 12:39:20 -04:00
Cole Robinson
e9ffba62f9 Fix changelog 2019-03-18 11:03:41 -04:00
Cole Robinson
cb95e514ad Use version 20190308stable, to fix package upgrade path 2019-03-18 11:01:35 -04:00
Cole Robinson
b846ca0e27 Update to stable-201903 
Update to openssl-1.1.0j
Move to python3 deps
 2019-03-15 15:50:22 -04:00
Fedora Release Engineering
bffed9bfae - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-01-31 18:22:54 +00:00
Igor Gnatenko
2f11edb7c8 Remove obsolete Group tag 
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
 2019-01-28 20:24:00 +01:00
Cole Robinson
625a40b277 Merge #2 Add -qosb dependency on python3 2018-11-15 18:26:39 +00:00
Cole Robinson
7e5715af86 Only use py_byte_compile on f29+ 
Fixes virt-preview copr builds
 2018-11-15 08:39:59 -05:00
Patrick Uiterwijk
a2a5397767 Add -qosb dependency on python3 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-14 17:10:37 +01:00
Paolo Bonzini
84f43e5ff6 fix buildrequires for py-byte-compile 2018-11-09 22:05:41 +01:00
Paolo Bonzini
ec71addf69 Fix network boot via grub (bz 1648476) 2018-11-09 21:13:58 +01:00
Paolo Bonzini
3aa0957f99 Explicitly compile the scripts using py_byte_compile 2018-09-12 15:50:36 +02:00
Cole Robinson
f2ed1ffdc0 Bump release 2018-08-31 13:22:10 -04:00
Cole Robinson
285b943a5f Fix passing through RPM build flags (bz 1540244) 2018-08-31 13:10:10 -04:00
Cole Robinson
3c653134d5 Fix 0099 patch 
And enable TPM2
 2018-08-22 19:04:30 -04:00
Cole Robinson
9fc821a3d0 Update to edk2 git cb5f4f45ce 
- Remove upstreamed patches
- Update to qemu qemu-ovmf-secureboot-1.1.3
 2018-08-22 16:37:23 -04:00
Paolo Bonzini
83f3ca8d0b Fixes for AMD SEV on OVMF_CODE.fd; add Provides for bundled OpenSSL 2018-07-23 12:55:18 +02:00
Paolo Bonzini
720bc3e5a3 Enable IPv6 2018-07-18 17:35:24 +02:00
Fedora Release Engineering
20639a2a72 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-12 23:41:16 +00:00
Paolo Bonzini
9fbea3b0dd Backport two bug fixes from RHEL 
Connect again virtio-rng devices, and connect consoles unconditionally
in OVMF (ARM firmware already did it).
 2018-06-20 10:35:44 +02:00
Paolo Bonzini
7ae6f1596c update to upstream commit ee3198e672e2 2018-05-30 00:31:55 +02:00
Cole Robinson
b7103cb49a Bump release for new build 2018-05-01 13:58:41 -04:00
Cole Robinson
48f745a9ce Add qemu-ovmf-secureboot sources, tweak qemu dep 2018-04-30 11:45:47 -04:00
Patrick Uiterwijk
0792202285 Add qosb to generate pre-enrolled Secure Boot VARS files 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
 2018-04-30 11:03:39 -04:00
Peter Robinson
d173a3b48a add gcc/gcc-c++ build deps 2018-03-30 14:04:15 +01:00
Paolo Bonzini
8af31ea2ba bump release 2018-03-08 13:44:13 +01:00
Paolo Bonzini
6ea72cd31f Fix GCC 8 compilation, replace obsolete tools as build-time dependencies 2018-03-08 13:42:34 +01:00
Fedora Release Engineering
d3e5a8dc6e - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-02-07 08:12:29 +00:00
Paolo Bonzini
91c79aab4c add openssl patches from Fedora, enable TLS mode 
Since edk2 does not compile the apps/ subdirectory, the only other patches
that might apply are openssl-1.1.0-no-md5-verify.patch (but edk2 does not have
secure_getenv) and of course FIPS 140-2 mode.
 2018-01-19 10:16:19 +01:00
Paolo Bonzini
2e34e081c6 Add patches 19-24 and fedora conditionals 2017-11-17 10:15:09 +01:00
Paolo Bonzini
3485002d46 Import source and patches from RHEL version, update OpenSSL to 1.1.0e 2017-11-14 17:51:34 +01:00
Paolo Bonzini
498742e649 add OVMF_VARS.fd 2017-11-14 17:50:25 +01:00
Paolo Bonzini
568a37b4b7 Allow non-cross builds, install /usr/share/OVMF and /usr/share/AAVMF 
Libvirt's default uses /usr/share/OVMF and /usr/share/AAVMF instead
of /usr/share/edk2/ovmf and /usr/share/edk2/aarch64.  Install symbolic
links that match.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
 2017-11-14 11:54:33 +01:00
Fedora Release Engineering
c356e99b22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 19:57:57 +00:00
Fedora Release Engineering
3f09d522ea - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 07:12:50 +00:00
Cole Robinson
410bf18174 Force 2MB rom size 
Suggested by Laszlo, upstream will be changing the default to 4MB, so
this is a preventative measure to ensure the rom size doesn't change
on the next rebase. Right now it's a no-op though
 2017-05-09 13:04:52 -04:00
Cole Robinson
ad70d15d1c Ship ovmf-ia32 package (bz 1424722) 2017-03-15 18:36:24 -04:00
Cole Robinson
ed852eca75 Update EnrollDefaultKeys patch (bz #1398743) 2017-02-16 14:15:14 -05:00
Paolo Bonzini
d7ad69217c Update to git master 20170209git296153c5 
New patch 0010 fixes failure to build from source.
 2017-02-13 13:52:16 +01:00
Fedora Release Engineering
5b845e66fb - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 09:03:46 +00:00
Cole Robinson
b178193189 Update to git master 20161105git3b25ca8 2016-11-06 16:29:14 -05:00
Tom Callaway
da615e40fa use hobbled openssl tarball, use patch that doesnt try to touch removed srp files, resolves bz1374691 2016-09-09 11:13:22 -04:00
Gerd Hoffmann
d31a567216 Also build for armv7. 2016-07-21 23:47:43 +02:00
Gerd Hoffmann
18632eb4fb Update EnrollDefaultKeys patch 2016-07-19 08:36:46 +02:00
Paolo Bonzini
4980150272 Distribute edk2-ovmf on aarch64 2016-07-08 13:59:38 +02:00
Cole Robinson
1db20ef467 Distribute edk2-aarch64 on x86 (bz #1338027) 2016-05-21 10:39:41 -04:00
Cole Robinson
6ac749e232 spec: document patches, reorder them a bit 2016-05-21 09:45:56 -04:00
Thierry Vignaud
8553aaf619 typo fix 2016-05-20 07:59:13 +02:00
Gerd Hoffmann
798d0f4afc turn off -Werror 2016-04-18 15:53:38 +02:00
Gerd Hoffmann
b0c3affe64 - Update to latest git. 
- Add firmware builds (FatPkg is free now).
 2016-04-18 14:16:51 +02:00
Cole Robinson
50ee765775 Actually bump release 2016-02-15 12:54:17 -05:00
Cole Robinson
7e23287eb4 Fix FTBFS gcc warning (bz 1307439) 2016-02-15 12:44:53 -05:00
Dennis Gilmore
f62d4244d2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-03 19:40:27 +00:00
Cole Robinson
49ef3160ba Replace %define with %global, drop hard tabs 2015-12-29 12:03:01 -05:00
Paolo Bonzini
ac38c1f2c2 Rebase to 20151127svn18975-1 
- Linker script renamed to GccBase.lds
 2015-11-27 14:02:42 +01:00
Dennis Gilmore
2478ec3e73 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 05:16:07 +00:00
Paolo Bonzini
98fad17afb Rebase to 20150519svn17469-1 2015-05-19 13:02:30 +02:00
Kalev Lember
e9a76503c5 Rebuilt for GCC 5 C++11 ABI change 2015-05-02 13:27:18 +02:00
Peter Robinson
c83d141f6d - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 10:25:01 +00:00
Paolo Bonzini
d2839d50b7 Rebase to 20140724svn2670-1 2014-07-24 14:28:00 +02:00
Paolo Bonzini
7fb40196aa Use standalone .tar.xz from buildtools repo 2014-06-24 10:43:55 +02:00
Paolo Bonzini
0655ef8d83 Install BuildTools/BaseEnv 2014-06-24 10:02:07 +02:00
Paolo Bonzini
d282ae2ec5 Rebase and package EDK_TOOLS_PATH as /usr/share/edk2 2014-06-23 18:15:47 +02:00
Dennis Gilmore
4d07804145 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 04:55:49 -05:00
Paolo Bonzini
60a9a27ad7 Readd parts of patch 1 that are not upstream. 2013-11-14 16:30:12 +01:00
Paolo Bonzini
87734555de Remove patch 1. 2013-11-14 16:11:23 +01:00
Paolo Bonzini
f8ed429080 Upgrade to r14844. 2013-11-14 15:50:55 +01:00
Paolo Bonzini
79e16051f4 bump release 2013-11-08 14:34:26 +01:00
Paolo Bonzini
aedc701bfe make it compile on ARM 2013-11-08 14:31:42 +01:00
Paolo Bonzini
5171129f1c Revert previous change 
Firmware packages should be noarch, and building
BaseTools twice is simply wrong.
 2013-08-30 09:53:50 +02:00
Kay Sievers
bf879e277d support IA32 builds, do not build on ARM for now 2013-08-27 14:56:23 -04:00
Kay Sievers
a1a88ecd73 build and sub-package EFI shell 2013-08-20 14:30:06 -04:00
Dennis Gilmore
e144da5de0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-03 04:22:44 -05:00
Dan Horák
1516367bfa set ExclusiveArch 2013-05-23 08:16:31 +02:00
Richard W.M. Jones
2ffbb0bbfc Unset MAKEFLAGS before make because parallel builds are broken. 2013-05-21 20:15:34 +01:00
Paolo Bonzini
9f191dd8c3 import 2013-05-17 16:00:31 +02:00