697 changed files with 48 additions and 95 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1,6 +1,9 @@
 SOURCES/grub-2.02.tar.xz
+SOURCES/redhatsecureboot301.cer
+SOURCES/redhatsecureboot502.cer
+SOURCES/redhatsecureboot601.cer
+SOURCES/redhatsecureboot701.cer
+SOURCES/redhatsecurebootca3.cer
+SOURCES/redhatsecurebootca5.cer
 SOURCES/theme.tar.bz2
 SOURCES/unifont-5.1.20080820.pcf.gz
-/grub-2.02.tar.xz
-/theme.tar.bz2
-/unifont-5.1.20080820.pcf.gz
--- a/.grub2.metadata
+++ b/.grub2.metadata
@ -0,0 +1,9 @@
+3d7eb6eaab28b88cb969ba9ab24af959f4d1b178 SOURCES/grub-2.02.tar.xz
+4a07b56e28741884b86da6ac91f8f9929541a1e4 SOURCES/redhatsecureboot301.cer
+3f94c47f1d08bacc7cb29bdd912e286b8d2f6fcf SOURCES/redhatsecureboot502.cer
+039357ef97aab3e484d1119edd4528156f5859e6 SOURCES/redhatsecureboot601.cer
+e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot701.cer
+cf9230e69000076727e5b784ec871d22716dc5da SOURCES/redhatsecurebootca3.cer
+e6f506462069aa17d2e8610503635c20f3a995c3 SOURCES/redhatsecurebootca5.cer
+cf0b7763c528902da7e8b05cfa248f20c8825ce5 SOURCES/theme.tar.bz2
+87f8600ba24e521b5d20bdf6c4b71af8ae861e3a SOURCES/unifont-5.1.20080820.pcf.gz
--- a/99-grub-mkconfig.install
+++ b/99-grub-mkconfig.install
@ -1,41 +0,0 @@
-#!/bin/bash
-
-if ! [[ $KERNEL_INSTALL_MACHINE_ID ]]; then
-    exit 0
-fi
-
-ARCH=$(uname -m)
-
-[[ -f /etc/default/grub ]] && . /etc/default/grub
-
-# Assume GRUB_ENABLE_BLSCFG is true if
-# GRUB_ENABLE_BLSCFG is not set, e.g. /etc/default/grub does not exist
-# GRUB_ENABLE_BLSCFG is set to true
-if [[ x$GRUB_ENABLE_BLSCFG != xfalse ]]; then
-    # Can't assume a BLS capable bootloader on ppc64
-    if [[  $ARCH = "ppc64" || $ARCH = "ppc64le" ]]; then
-	RUN_MKCONFIG="true"
-    fi
-fi
-
-# A traditional grub configuration file needs to be generated only in the case when
-# the bootloaders are not capable of populating a menu entry from the BLS fragments.
-if [[ $RUN_MKCONFIG != "true" ]]; then
-    exit 0
-fi
-
-COMMAND="$1"
-
-grub_cfg=/boot/grub2/grub.cfg
-if mountpoint -q /boot/efi; then
-    os_name=$(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/' -e 's/\"//g')
-    grub_cfg=/boot/efi/EFI/$os_name/grub.cfg
-fi
-
-case "$COMMAND" in
-    add|remove)
-        grub2-mkconfig --no-grubenv-update -o $grub_cfg >& /dev/null
-        ;;
-    *)
-        ;;
-esac
--- a/SOURCES/0001-Add-support-for-Linux-EFI-stub-loading.patch
+++ b/SOURCES/0001-Add-support-for-Linux-EFI-stub-loading.patch
--- a/SOURCES/0002-Rework-linux-command.patch
+++ b/SOURCES/0002-Rework-linux-command.patch
--- a/SOURCES/0003-Rework-linux16-command.patch
+++ b/SOURCES/0003-Rework-linux16-command.patch
--- a/SOURCES/0004-Add-secureboot-support-on-efi-chainloader.patch
+++ b/SOURCES/0004-Add-secureboot-support-on-efi-chainloader.patch
--- a/SOURCES/0005-Make-any-of-the-loaders-that-link-in-efi-mode-honor-.patch
+++ b/SOURCES/0005-Make-any-of-the-loaders-that-link-in-efi-mode-honor-.patch
--- a/SOURCES/0006-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
+++ b/SOURCES/0006-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
--- a/SOURCES/0007-re-write-.gitignore.patch
+++ b/SOURCES/0007-re-write-.gitignore.patch
--- a/SOURCES/0008-IBM-client-architecture-CAS-reboot-support.patch
+++ b/SOURCES/0008-IBM-client-architecture-CAS-reboot-support.patch
--- a/SOURCES/0009-for-ppc-reset-console-display-attr-when-clear-screen.patch
+++ b/SOURCES/0009-for-ppc-reset-console-display-attr-when-clear-screen.patch
--- a/SOURCES/0010-Disable-GRUB-video-support-for-IBM-power-machines.patch
+++ b/SOURCES/0010-Disable-GRUB-video-support-for-IBM-power-machines.patch
--- a/SOURCES/0011-Honor-a-symlink-when-generating-configuration-by-gru.patch
+++ b/SOURCES/0011-Honor-a-symlink-when-generating-configuration-by-gru.patch
--- a/SOURCES/0012-Move-bash-completion-script-922997.patch
+++ b/SOURCES/0012-Move-bash-completion-script-922997.patch
--- a/SOURCES/0013-Update-to-minilzo-2.08.patch
+++ b/SOURCES/0013-Update-to-minilzo-2.08.patch
--- a/SOURCES/0014-Allow-fallback-to-include-entries-by-title-not-just-.patch
+++ b/SOURCES/0014-Allow-fallback-to-include-entries-by-title-not-just-.patch
--- a/SOURCES/0015-Add-GRUB_DISABLE_UUID.patch
+++ b/SOURCES/0015-Add-GRUB_DISABLE_UUID.patch
--- a/SOURCES/0016-Make-exit-take-a-return-code.patch
+++ b/SOURCES/0016-Make-exit-take-a-return-code.patch
--- a/SOURCES/0017-Mark-po-exclude.pot-as-binary-so-git-won-t-try-to-di.patch
+++ b/SOURCES/0017-Mark-po-exclude.pot-as-binary-so-git-won-t-try-to-di.patch
--- a/SOURCES/0018-Make-efi-machines-load-an-env-block-from-a-variable.patch
+++ b/SOURCES/0018-Make-efi-machines-load-an-env-block-from-a-variable.patch
--- a/SOURCES/0019-DHCP-client-ID-and-UUID-options-added.patch
+++ b/SOURCES/0019-DHCP-client-ID-and-UUID-options-added.patch
--- a/SOURCES/0020-trim-arp-packets-with-abnormal-size.patch
+++ b/SOURCES/0020-trim-arp-packets-with-abnormal-size.patch
--- a/SOURCES/0021-Fix-bad-test-on-GRUB_DISABLE_SUBMENU.patch
+++ b/SOURCES/0021-Fix-bad-test-on-GRUB_DISABLE_SUBMENU.patch
--- a/SOURCES/0022-Add-support-for-UEFI-operating-systems-returned-by-o.patch
+++ b/SOURCES/0022-Add-support-for-UEFI-operating-systems-returned-by-o.patch
--- a/SOURCES/0023-Migrate-PPC-from-Yaboot-to-Grub2.patch
+++ b/SOURCES/0023-Migrate-PPC-from-Yaboot-to-Grub2.patch
--- a/SOURCES/0024-Add-fw_path-variable-revised.patch
+++ b/SOURCES/0024-Add-fw_path-variable-revised.patch
--- a/SOURCES/0025-Pass-x-hex-hex-straight-through-unmolested.patch
+++ b/SOURCES/0025-Pass-x-hex-hex-straight-through-unmolested.patch
--- a/SOURCES/0026-Add-X-option-to-printf-functions.patch
+++ b/SOURCES/0026-Add-X-option-to-printf-functions.patch
--- a/SOURCES/0027-Search-for-specific-config-file-for-netboot.patch
+++ b/SOURCES/0027-Search-for-specific-config-file-for-netboot.patch
--- a/SOURCES/0028-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch
+++ b/SOURCES/0028-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch
--- a/SOURCES/0029-Add-devicetree-loading.patch
+++ b/SOURCES/0029-Add-devicetree-loading.patch
--- a/SOURCES/0030-Don-t-write-messages-to-the-screen.patch
+++ b/SOURCES/0030-Don-t-write-messages-to-the-screen.patch
--- a/SOURCES/0031-Don-t-print-GNU-GRUB-header.patch
+++ b/SOURCES/0031-Don-t-print-GNU-GRUB-header.patch
--- a/SOURCES/0032-Don-t-add-to-highlighted-row.patch
+++ b/SOURCES/0032-Don-t-add-to-highlighted-row.patch
--- a/SOURCES/0033-Message-string-cleanups.patch
+++ b/SOURCES/0033-Message-string-cleanups.patch
--- a/SOURCES/0034-Fix-border-spacing-now-that-we-aren-t-displaying-it.patch
+++ b/SOURCES/0034-Fix-border-spacing-now-that-we-aren-t-displaying-it.patch
--- a/SOURCES/0035-Use-the-correct-indentation-for-the-term-help-text.patch
+++ b/SOURCES/0035-Use-the-correct-indentation-for-the-term-help-text.patch
--- a/SOURCES/0036-Indent-menu-entries.patch
+++ b/SOURCES/0036-Indent-menu-entries.patch
--- a/SOURCES/0037-Fix-margins.patch
+++ b/SOURCES/0037-Fix-margins.patch
--- a/SOURCES/0038-Use-2-instead-of-1-for-our-right-hand-margin-so-line.patch
+++ b/SOURCES/0038-Use-2-instead-of-1-for-our-right-hand-margin-so-line.patch
--- a/SOURCES/0039-Enable-pager-by-default.-985860.patch
+++ b/SOURCES/0039-Enable-pager-by-default.-985860.patch
--- a/SOURCES/0040-F10-doesn-t-work-on-serial-so-don-t-tell-the-user-to.patch
+++ b/SOURCES/0040-F10-doesn-t-work-on-serial-so-don-t-tell-the-user-to.patch
--- a/SOURCES/0041-Don-t-say-GNU-Linux-in-generated-menus.patch
+++ b/SOURCES/0041-Don-t-say-GNU-Linux-in-generated-menus.patch
--- a/SOURCES/0042-Don-t-draw-a-border-around-the-menu.patch
+++ b/SOURCES/0042-Don-t-draw-a-border-around-the-menu.patch
--- a/SOURCES/0043-Use-the-standard-margin-for-the-timeout-string.patch
+++ b/SOURCES/0043-Use-the-standard-margin-for-the-timeout-string.patch
--- a/SOURCES/0044-Add-.eh_frame-to-list-of-relocations-stripped.patch
+++ b/SOURCES/0044-Add-.eh_frame-to-list-of-relocations-stripped.patch
--- a/SOURCES/0045-Don-t-munge-raw-spaces-when-we-re-doing-our-cmdline-.patch
+++ b/SOURCES/0045-Don-t-munge-raw-spaces-when-we-re-doing-our-cmdline-.patch
--- a/SOURCES/0046-Don-t-require-a-password-to-boot-entries-generated-b.patch
+++ b/SOURCES/0046-Don-t-require-a-password-to-boot-entries-generated-b.patch
--- a/SOURCES/0047-Don-t-emit-Booting-.-message.patch
+++ b/SOURCES/0047-Don-t-emit-Booting-.-message.patch
--- a/SOURCES/0048-Replace-a-lot-of-man-pages-with-slightly-nicer-ones.patch
+++ b/SOURCES/0048-Replace-a-lot-of-man-pages-with-slightly-nicer-ones.patch
--- a/SOURCES/0049-use-fw_path-prefix-when-fallback-searching-for-grub-.patch
+++ b/SOURCES/0049-use-fw_path-prefix-when-fallback-searching-for-grub-.patch
--- a/SOURCES/0050-Try-mac-guid-etc-before-grub.cfg-on-tftp-config-file.patch
+++ b/SOURCES/0050-Try-mac-guid-etc-before-grub.cfg-on-tftp-config-file.patch
--- a/SOURCES/0051-Fix-convert-function-to-support-NVMe-devices.patch
+++ b/SOURCES/0051-Fix-convert-function-to-support-NVMe-devices.patch
--- a/SOURCES/0052-reopen-SNP-protocol-for-exclusive-use-by-grub.patch
+++ b/SOURCES/0052-reopen-SNP-protocol-for-exclusive-use-by-grub.patch
--- a/SOURCES/0053-Revert-reopen-SNP-protocol-for-exclusive-use-by-grub.patch
+++ b/SOURCES/0053-Revert-reopen-SNP-protocol-for-exclusive-use-by-grub.patch
--- a/SOURCES/0054-Add-grub_util_readlink.patch
+++ b/SOURCES/0054-Add-grub_util_readlink.patch
--- a/SOURCES/0055-Make-editenv-chase-symlinks-including-those-across-d.patch
+++ b/SOURCES/0055-Make-editenv-chase-symlinks-including-those-across-d.patch
--- a/SOURCES/0056-Generate-OS-and-CLASS-in-10_linux-from-etc-os-releas.patch
+++ b/SOURCES/0056-Generate-OS-and-CLASS-in-10_linux-from-etc-os-releas.patch
--- a/SOURCES/0057-Minimize-the-sort-ordering-for-.debug-and-rescue-ker.patch
+++ b/SOURCES/0057-Minimize-the-sort-ordering-for-.debug-and-rescue-ker.patch
--- a/SOURCES/0058-Try-prefix-if-fw_path-doesn-t-work.patch
+++ b/SOURCES/0058-Try-prefix-if-fw_path-doesn-t-work.patch
--- a/SOURCES/0059-Update-info-with-grub.cfg-netboot-selection-order-11.patch
+++ b/SOURCES/0059-Update-info-with-grub.cfg-netboot-selection-order-11.patch
--- a/SOURCES/0060-Use-Distribution-Package-Sort-for-grub2-mkconfig-112.patch
+++ b/SOURCES/0060-Use-Distribution-Package-Sort-for-grub2-mkconfig-112.patch
--- a/SOURCES/0061-Handle-rssd-storage-devices.patch
+++ b/SOURCES/0061-Handle-rssd-storage-devices.patch
--- a/SOURCES/0062-Make-grub2-mkconfig-construct-titles-that-look-like-.patch
+++ b/SOURCES/0062-Make-grub2-mkconfig-construct-titles-that-look-like-.patch
--- a/SOURCES/0063-Add-friendly-grub2-password-config-tool-985962.patch
+++ b/SOURCES/0063-Add-friendly-grub2-password-config-tool-985962.patch
--- a/SOURCES/0064-Try-to-make-sure-configure.ac-and-grub-rpm-sort-play.patch
+++ b/SOURCES/0064-Try-to-make-sure-configure.ac-and-grub-rpm-sort-play.patch
--- a/SOURCES/0065-tcp-add-window-scaling-support.patch
+++ b/SOURCES/0065-tcp-add-window-scaling-support.patch
--- a/SOURCES/0066-efinet-add-filter-for-the-first-exclusive-reopen-of-.patch
+++ b/SOURCES/0066-efinet-add-filter-for-the-first-exclusive-reopen-of-.patch
--- a/SOURCES/0067-Fix-security-issue-when-reading-username-and-passwor.patch
+++ b/SOURCES/0067-Fix-security-issue-when-reading-username-and-passwor.patch
--- a/SOURCES/0068-Warn-if-grub-password-will-not-be-read-1290803.patch
+++ b/SOURCES/0068-Warn-if-grub-password-will-not-be-read-1290803.patch
--- a/SOURCES/0069-Clean-up-grub-setpassword-documentation-1290799.patch
+++ b/SOURCES/0069-Clean-up-grub-setpassword-documentation-1290799.patch
--- a/SOURCES/0070-Fix-locale-issue-in-grub-setpassword-1294243.patch
+++ b/SOURCES/0070-Fix-locale-issue-in-grub-setpassword-1294243.patch
--- a/SOURCES/0071-efiemu-Handle-persistent-RAM-and-unknown-possible-fu.patch
+++ b/SOURCES/0071-efiemu-Handle-persistent-RAM-and-unknown-possible-fu.patch
--- a/SOURCES/0072-efiemu-Fix-compilation-failure.patch
+++ b/SOURCES/0072-efiemu-Fix-compilation-failure.patch
--- a/SOURCES/0073-Revert-reopen-SNP-protocol-for-exclusive-use-by-grub.patch
+++ b/SOURCES/0073-Revert-reopen-SNP-protocol-for-exclusive-use-by-grub.patch
--- a/SOURCES/0074-Add-a-url-parser.patch
+++ b/SOURCES/0074-Add-a-url-parser.patch
--- a/SOURCES/0075-efinet-and-bootp-add-support-for-dhcpv6.patch
+++ b/SOURCES/0075-efinet-and-bootp-add-support-for-dhcpv6.patch
--- a/SOURCES/0076-Add-grub-get-kernel-settings-and-use-it-in-10_linux.patch
+++ b/SOURCES/0076-Add-grub-get-kernel-settings-and-use-it-in-10_linux.patch
--- a/SOURCES/0077-Normalize-slashes-in-tftp-paths.patch
+++ b/SOURCES/0077-Normalize-slashes-in-tftp-paths.patch
--- a/SOURCES/0078-Fix-malformed-tftp-packets.patch
+++ b/SOURCES/0078-Fix-malformed-tftp-packets.patch
--- a/SOURCES/0079-bz1374141-fix-incorrect-mask-for-ppc64.patch
+++ b/SOURCES/0079-bz1374141-fix-incorrect-mask-for-ppc64.patch
--- a/SOURCES/0080-Make-grub_fatal-also-backtrace.patch
+++ b/SOURCES/0080-Make-grub_fatal-also-backtrace.patch
--- a/SOURCES/0081-Make-grub-editenv-build-again.patch
+++ b/SOURCES/0081-Make-grub-editenv-build-again.patch
--- a/SOURCES/0082-Fix-up-some-man-pages-rpmdiff-noticed.patch
+++ b/SOURCES/0082-Fix-up-some-man-pages-rpmdiff-noticed.patch
--- a/SOURCES/0083-Make-exit-take-a-return-code.patch
+++ b/SOURCES/0083-Make-exit-take-a-return-code.patch
--- a/SOURCES/0084-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch
+++ b/SOURCES/0084-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch
--- a/SOURCES/0085-Make-our-info-pages-say-grub2-where-appropriate.patch
+++ b/SOURCES/0085-Make-our-info-pages-say-grub2-where-appropriate.patch
--- a/SOURCES/0086-print-more-debug-info-in-our-module-loader.patch
+++ b/SOURCES/0086-print-more-debug-info-in-our-module-loader.patch
--- a/SOURCES/0087-macos-just-build-chainloader-entries-don-t-try-any-x.patch
+++ b/SOURCES/0087-macos-just-build-chainloader-entries-don-t-try-any-x.patch
--- a/SOURCES/0088-grub2-btrfs-Add-ability-to-boot-from-subvolumes.patch
+++ b/SOURCES/0088-grub2-btrfs-Add-ability-to-boot-from-subvolumes.patch
--- a/SOURCES/0089-export-btrfs_subvol-and-btrfs_subvolid.patch
+++ b/SOURCES/0089-export-btrfs_subvol-and-btrfs_subvolid.patch
--- a/SOURCES/0090-grub2-btrfs-03-follow_default.patch
+++ b/SOURCES/0090-grub2-btrfs-03-follow_default.patch
--- a/SOURCES/0091-grub2-btrfs-04-grub2-install.patch
+++ b/SOURCES/0091-grub2-btrfs-04-grub2-install.patch
--- a/SOURCES/0092-grub2-btrfs-05-grub2-mkconfig.patch
+++ b/SOURCES/0092-grub2-btrfs-05-grub2-mkconfig.patch
--- a/SOURCES/0093-grub2-btrfs-06-subvol-mount.patch
+++ b/SOURCES/0093-grub2-btrfs-06-subvol-mount.patch
--- a/SOURCES/0094-No-more-Bootable-Snapshot-submenu-in-grub.cfg.patch
+++ b/SOURCES/0094-No-more-Bootable-Snapshot-submenu-in-grub.cfg.patch
--- a/SOURCES/0095-Fallback-to-old-subvol-name-scheme-to-support-old-sn.patch
+++ b/SOURCES/0095-Fallback-to-old-subvol-name-scheme-to-support-old-sn.patch
--- a/SOURCES/0096-Grub-not-working-correctly-with-btrfs-snapshots-bsc-.patch
+++ b/SOURCES/0096-Grub-not-working-correctly-with-btrfs-snapshots-bsc-.patch
--- a/SOURCES/0097-Add-grub_efi_allocate_pool-and-grub_efi_free_pool-wr.patch
+++ b/SOURCES/0097-Add-grub_efi_allocate_pool-and-grub_efi_free_pool-wr.patch
--- a/Show More
+++ b/Show More