rpms/grub2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
903 Commits 22 Branches 231 Tags 23 MiB
a10s
Commit Graph

903 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Eduard Abdullin
b1b2543d8f Debrand for AlmaLinux 
Build btrfs module
 2026-04-02 01:41:29 +00:00
Leo Sandoval
8152db0a79 New package grub2-efi-x64-cc for confidential computing workloads 
Resolves: #RHEL-127909

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2026-04-01 12:47:17 +02:00
Eduard Abdullin
8cbb555c28 Debrand for AlmaLinux 
Build btrfs module
 2026-03-11 01:46:29 +00:00
Marta Lewandowska
8823254f32 Merge branch 'c10s' of https://gitlab.com/redhat/centos-stream/rpms/grub2 into more_fmf_shenanagins 2026-03-10 17:43:35 +01:00
Eduard Abdullin
42dacd9a18 Debrand for AlmaLinux 
Build btrfs module
 2026-03-10 01:47:49 +00:00
Josue Hernandez
49610f868a kern/efi/mm: Change to keep track of map allocation size 
Resolves: #RHEL-148309

Signed-off-by: Josue Hernandez <josherna@redhat.com>
 2026-03-09 13:30:51 -06:00
Nicolas Frayer
fdc5089353 spec: Bump release 
Related: #RHEL-146590
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2026-03-09 18:44:58 +01:00
Eduard Abdullin
ca063843b0 Debrand for AlmaLinux 
Build btrfs module
 2026-03-07 01:44:21 +00:00
Nicolas Frayer
935dc8ff43 ppc64le/sbat: Add an sbat CSV file for ppc64le 
Resolves: #RHEL-146590
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2026-03-05 15:09:41 +01:00
Eduard Abdullin
3f1554f76f Debrand for AlmaLinux 
Build btrfs module
 2026-03-04 15:02:48 +00:00
Nicolas Frayer
fa2962d6fb ppc64le: Pointing to the right cert after redhad-release change 
Related: #RHEL-24510
Signed-off-by: Marta Lewandowska <mlewando@redhat.com>
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2026-02-13 16:05:07 +01:00
Nicolas Frayer
41169fff59 ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat 
Related: #RHEL-24510
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2026-02-13 12:21:11 +01:00
Marta Lewandowska
a1d511be27 Try to get rhel-10 gating to finally work 2026-02-13 09:36:18 +01:00
Leo Sandoval
42e451646d commands/search.c: check possible NULL pointer before dereference 
Resolves: #RHEL-146317

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2026-02-11 15:19:24 -06:00
Nicolas Frayer
76413fedc9 Fix several security issues about module unloading and file handling 
Resolves: #RHEL-141581
Resolves: #CVE-2025-54770 #CVE-2025-54771 #CVE-2025-61661
Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2026-02-05 10:39:34 +01:00
Leo Sandoval
9674908a86 Include upstream blsuki related patches 
Resolves: #RHEL-119685
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2026-01-26 14:06:34 -06:00
Eduard Abdullin
b2cbfaabf8 Debrand for AlmaLinux 
Build btrfs module
 2025-12-10 01:47:18 +00:00
Leo Sandoval
dc871ed4cd rpminspect: disable abidiff inspections 
GRUB does not care about ABI changes between versions, e.g modules are
not intended to be loaded in different GRUB versions, thus abidiff
inspections are irrelevant.

Resolves: #RHEL-134026
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-12-08 11:41:11 -06:00
Eduard Abdullin
da2a9dd4c0 Debrand for AlmaLinux 
Build btrfs module
 2025-12-04 01:47:41 +00:00
Nicolas Frayer
d5ce85e0f9 mkimage/appendedsig: Fix grub-mkimage with an unaligned appended signature size 
Related: #RHEL-24510
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2025-12-03 11:18:30 +01:00
Eduard Abdullin
530509810d Debrand for AlmaLinux 
Build btrfs module
 2025-11-28 01:47:19 +00:00
Nicolas Frayer
17ffd9b3e0 powerpc: Add appended signature feature 
Resolves: #RHEL-24510
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2025-11-27 14:40:11 +01:00
Eduard Abdullin
907c56364e Debrand for AlmaLinux 
Build btrfs module
 2025-11-07 01:50:17 +00:00
Leo Sandoval
f4f7a97672 Include license into grub-set-password util 
Resolves: #RHEL-120704
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-11-06 11:32:17 -06:00
Eduard Abdullin
795f19b2aa Debrand for AlmaLinux 
Build btrfs module
 2025-10-30 01:50:20 +00:00
Leo Sandoval
763d340eb1 Disable annobin stack protection check 
Disable annobin stack check since grub's initialization code doesn't
support it.

Resolves: RHEL-89464
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-10-28 14:01:19 -06:00
Eduard Abdullin
66c279e274 Debrand for AlmaLinux 
Build btrfs module
 2025-10-08 10:22:06 +03:00
Nicolas Frayer
b19bdcb0c2 spec: Update signing key to redhatsecureboot802 
Resolves: #RHEL-116730
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2025-10-07 16:16:21 +02:00
Eduard Abdullin
25328e0ea7 Debrand for AlmaLinux 
Build btrfs module
 2025-09-13 01:47:24 +00:00
Nicolas Frayer
dd8b030398 gating.yaml: Update gating tests 
Update gating tests as there was a change in where
test composes are kept

Resolves: #RHEL-114488
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2025-09-12 14:19:39 +02:00
Eduard Abdullin
1f5ed10de5 Debrand for AlmaLinux 
Build btrfs module
 2025-09-10 01:48:42 +00:00
Leo Sandoval
2ba9cee552 Fix the fallback mechanism when menu entries fail to boot 
Resolves: RHEL-113024
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-09-08 14:10:24 -06:00
Eduard Abdullin
7a9f6613ad Debrand for AlmaLinux 
Build btrfs module
 2025-08-22 01:45:34 +00:00
Leo Sandoval
76e12e1b3d Remove strong stack protector on target CFLAGS 
Related: #RHEL-89464
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-08-21 09:52:12 -06:00
Eduard Abdullin
a040e8db04 Debrand for AlmaLinux 
Build btrfs module
 2025-08-21 01:47:07 +00:00
Leo Sandoval
6b3c891675 Revert annobin's regex removal into cflags_sed 
Besides re-introducing the annobin sed replacements, it fixes
duplicate '-fstack-protector-strong' flags and remove the sed
replacement '-fno-stack-protector' as it has no effect.

Resolves: #RHEL-89464

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-08-20 10:36:53 -06:00
Eduard Abdullin
4171eab13f Debrand for AlmaLinux 
Build btrfs module
 2025-08-08 01:39:22 +00:00
Leo Sandoval
e041fb0c9b Enable strong stack protector and annobin section 
Besides enabling the strong stack protector flag, it also removes the
sed empty replacements for annobin, so now most binaries include the
annobin section, required by the CI annocheck tool.

Resolves: #RHEL-89464

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-08-07 12:15:35 -06:00
Eduard Abdullin
10b1328626 Debrand for AlmaLinux 
Build btrfs module
 2025-08-02 01:37:41 +00:00
Leo Sandoval
b96380fa98 20-grub.install: Skip BLS removal when entry type is type2 
UKI(package is kernel-uki-virt) is a single, bootable file that
bundles everything needed to start a Linux system. It contains its own
bootable stub and bypasses GRUB2 completely. The kernel-core and
kernel-uki-virt can coexist in one machine. And both of them call
kernel-install remove <kversion> upon package removal and this leads
to the complete removal of both the traditional kernel & its
artifacts(initramfs, BLS entry file,...). For example, if the customer
remove kernel-uki-virt, currently it also removes BLS entry which
causes the regular kernel fails to boot up. In
https://github.com/systemd/systemd/pull/37897 it added
--entry-type=type1|type2 option to kernel-install. type1 stands for
normal kernel, type2 stands for uki. When kernel-install is invoked
with --entry-type=type2 which is for UKI, we should not remove the BLS
entry.

Resolves: #RHEL-104167

Signed-off-by: Yuxin Sun <yuxisun@redhat.com>
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-07-31 11:47:07 -06:00
Eduard Abdullin
8d32ea8ef9 Debrand for AlmaLinux 
Build btrfs module
 2025-07-29 20:09:39 +00:00
Eduard Abdullin
d0138ba04f Debrand for AlmaLinux 
Build btrfs module
 2025-07-29 17:19:31 +00:00
Nicolas Frayer
9d0f911af6 spec/posttrans: move grub config stub creation out of spec 
Resolves: #RHEL-69943
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
 2025-07-29 18:52:08 +02:00
Leo Sandoval
33ce16660b Set correctly the memory attributes for the kernel PE sections 
Resolves: #RHEL-97086

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-07-28 13:16:55 -06:00
Eduard Abdullin
937af33ec1 Debrand for AlmaLinux 
Build btrfs module
 2025-07-17 01:41:20 +00:00
Leo Sandoval
78ed8c744d mm: do not update mem attrs even if EFI protocol is present 
A temporal workaround while a real fix is being elaborated.

Resolves: #RHEL-97086

Signed-off-by: Gerd Hoffman <ghoffman@redhat.com>
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-07-15 14:43:49 -06:00
Andrew Lukoshko
f51fe75d56 Build btrfs module 2025-06-10 13:51:35 +00:00
Leo Sandoval
079a0bd238 Bump version (see CS-2896) 
Resolves: #RHEL-94342
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-06-06 09:26:53 -06:00
Eduard Abdullin
e41d0dfbc1 Debrand for AlmaLinux 2025-06-04 01:38:57 +00:00
Leo Sandoval
2be0734e9b Handle special kernel parameter characters properly 
Resolves: #RHEL-94342
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
 2025-06-02 16:20:19 -06:00