[PATCH] core205: Ship grub

public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed

* [PATCH] core205: Ship grub
@ 2026-10-07 13:49 Adolf Belka
  2026-10-07 13:49 ` [PATCH] grub: Update to version 2.16 Adolf Belka
  0 siblings, 1 reply; 2+ messages in thread
From: Adolf Belka @ 2026-10-07 13:49 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/205/filelists/aarch64/grub     | 1 +
 config/rootfiles/core/205/filelists/loongarch64/grub | 1 +
 config/rootfiles/core/205/filelists/riscv64/grub     | 1 +
 config/rootfiles/core/205/filelists/x86_64/grub      | 1 +
 4 files changed, 4 insertions(+)
 create mode 120000 config/rootfiles/core/205/filelists/aarch64/grub
 create mode 120000 config/rootfiles/core/205/filelists/loongarch64/grub
 create mode 120000 config/rootfiles/core/205/filelists/riscv64/grub
 create mode 120000 config/rootfiles/core/205/filelists/x86_64/grub

diff --git a/config/rootfiles/core/205/filelists/aarch64/grub b/config/rootfiles/core/205/filelists/aarch64/grub
new file mode 120000
index 000000000..40ae85fb6
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/aarch64/grub
@@ -0,0 +1 @@
+../../../../common/aarch64/grub
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/loongarch64/grub b/config/rootfiles/core/205/filelists/loongarch64/grub
new file mode 120000
index 000000000..1b51a4615
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/loongarch64/grub
@@ -0,0 +1 @@
+../../../../common/loongarch64/grub
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/riscv64/grub b/config/rootfiles/core/205/filelists/riscv64/grub
new file mode 120000
index 000000000..7013c0be5
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/riscv64/grub
@@ -0,0 +1 @@
+../../../../common/riscv64/grub
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/x86_64/grub b/config/rootfiles/core/205/filelists/x86_64/grub
new file mode 120000
index 000000000..78d3bd784
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/x86_64/grub
@@ -0,0 +1 @@
+../../../../common/x86_64/grub
\ No newline at end of file
-- 
2.55.0



^ permalink raw reply	[flat|nested] 2+ messages in thread

* [PATCH] grub: Update to version 2.16
  2026-10-07 13:49 [PATCH] core205: Ship grub Adolf Belka
@ 2026-10-07 13:49 ` Adolf Belka
  0 siblings, 0 replies; 2+ messages in thread
From: Adolf Belka @ 2026-10-07 13:49 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 2.14 to 2.16
- Update of all 4 rootfiles
- Tested out grub-2.16 on a non-efi vm build and it worked with no issues
- Modified patch for using medany instead of large model for riscv to apply to grub-2.16
- The two patches reverting configure commits from grub-2.14 are no longer needed as
   they have been removed and replaced with altertnatives that allow grub to build
   without issues.
- Changelog
2.16
	* New/improved filesystem and disk support:
	  * Native NVMe disk driver, allowing boot from NVMe devices on coreboot and on
	    systems whose firmware cannot reach them. (833f3b5f9)
	  * NVMe over Fibre Channel support and multiple NVMe boot paths on IEEE 1275,
	    including fibre channel discovery for ofpathname and FCP methods for WWPN
	    and LUNs. (1ffe804c0, 0f13508bc, dab8ef7f8, adeeeeda3, d0773a062,
	    edcdf6598)
	  * New `btrfs-info', `btrfs-list-subvols' and `btrfs-get-default-subvol'
	    commands. (9ade9d031, e31292f7d, 8b23e97f1)
	  * Btrfs on-disk structures are now explicitly packed. (96f2dfb92)
	  * Bound directory iteration, symlink sizes and superblock fields in f2fs, and
	    reject zero-length directory entry names. (a11cc4333, 6fbc6055b, 994e63b1d,
	    8c345080c)
	  * Bound the symlink target size in HFS+. (b157604e0, b1d888d70)
	  * Fix undefined behaviour and uninitialised reads on malformed ext2
	    filesystems. (d1d53ed56, 8908f4bc9)
	  * Fix uninitialised reads in FAT and a possible infinite loop in exFAT.
	    (56d859d14, ba8d0bae2)
	  * Fix an incorrect runlist offset boundary check in NTFS. (ae0143f1d)
	  * Handle root inode read failure when mounting XFS. (006994468)
	  * Fix null pointer member access on mount failure in nilfs2, f2fs and erofs.
	    (246ade44d)
	  * Free the block list on file close and fix a node leak in fshelp.
	    (fc5d56b44, adc0cdd58)
	  * Fix root dataset detection on encrypted ZFS pools, and mark the ZFS
	    bookmark_v2 and bookmark_written features as supported. (248fc0ea7,
	    8cda718c0)
	  * Fix logical partition numbering when no primary partitions exist.
	    (27c157c1e, a4257251f)
	  * LVM metadata buffers are now allocated from the raw contents. (e219cc41e)
	  * Fix raid_disks decoding for mdraid 1.x on big-endian systems. (dcfb9f917)
	  * Reuse free slots when attaching USB mass storage devices. (00f8ad96c)
	  * Disk cache slot thrashing, cache locking and hit-ratio accounting fixes.
	    (63c601d8f, dc0b2735b, 490e0e57f)
	* New/improved terminal and video support:
	  * AMBA PL011 UART support. (fcff8f881)
	  * Scan all BARs on PCI serial devices when looking for an I/O port.
	    (af8c7012e)
	  * Jump- and delete-word shortcuts in the command line editor. (ad4cf56cc)
	  * Drop support for the UGA Draw and Console Control protocols; efi_uga is now
	    loaded only on x86 EFI platforms. (ef6ee4ad4, 129588e49)
	  * Fix integer overflow and shift undefined behaviour in the PNG and JPEG
	    decoders, and EOF misdetection in the PNG, JPEG and TGA readers.
	    (368b11823, f08903403, 1d4899bae)
	  * Reject out-of-range and overflowing proportional-spec values in gfxmenu.
	    (b10f26d9b)
	  * Free cached glyphs when freeing a font, plus font memory leak fixes found
	    by fuzzing. (ac4b9c3f5, f3e63f295)
	* Boot protocol improvements:
	  * Set the loaded image device path for the EFI Linux and chainloader loaders
	    when firmware leaves it missing. (b13e52e0a, 07243a5e9, b681823b9)
	  * Use device tree bootargs for the EFI Linux loader when no command line is
	    given. (cfba8a4ef, 7272ed9ec)
	  * Ensure the FDT blob is 8-byte aligned. (bcc8f0d71)
	  * Allow xen_hypervisor and xen_module on x86_64-efi. (5754c5a51)
	  * Restrict the x86 relocator preamble page table to FreeBSD, clear its unused
	    entries and move runtime-patched stubs to the .data section. (62289192b,
	    f8617b653, 577272de9, c7a81c2f1, 4347e1bfc)
	  * Inherit the firmware PML4 in the x86 relocator preamble page table and
	    identity map the full 512G of every PML4 entry GRUB overwrites, so that
	    MMIO and EFI boot services mappings above the top of RAM stay reachable.
	    (f40e41a31, 8773969ac)
	  * Append the version to BLS entry titles and the uname to UKI entry titles,
	    and skip UKIs with no PRETTY_NAME. (7f46a3987, 9be1b7564, 00f09ed61)
	* New/improved network support:
	  * New `net_dhcp6' command providing DHCPv6 support. (b175570c4, 31a40660a,
	    42bff9bdb)
	  * Configure the network from the UEFI device path and set the DNS server from
	    the UEFI protocol. (2386c1909, fe0a09e85)
	  * Process the DHCPACK packet during HTTP Boot. (3e20a68f9)
	  * Print URI and DNS device path information, and correct the endianness of
	    IPv6 device paths. (a59e894a5, 945fc8647)
	  * Return the HTTP status code from http_establish and handle HTTP error
	    responses more cleanly. (e2cdb5c4c, 176ba4445)
	  * Fix a hang when a TFTP file is a directory. (74a33ddd4)
	  * Fix an uninitialised cmd_server.option causing DNS failures. (7e864f345)
	  * Fix a logical operator in the DHCP option overload check. (9dcd6f100)
	  * Check the result of grub_netbuff_put() in http_receive(). (e5fce9d0c)
	  * New virtio-net driver. (6ebf1c8eb, abfba8add, 65bb6c229)
	* New/improved platform support:
	  * New `connectefi' command, connecting UEFI Disk I/O and SCSI I/O devices so
	    that network-booted GRUB can chainload from a local disk. (80d59ed3e)
	  * New `lsefivar' command to dump UEFI runtime variables. (f296813a0,
	    f107c2ad7, bcb738d8c)
	  * New `efibootnext' module and 31_efi_bootnext script for one-shot boot
	    entries, keyed off the ESP PARTUUID and vendor directory. (3d0a81dc0,
	    6b8d690e3, 53b7b754b, ba20519fc, 9cc5ebba6, 69a08ed5f)
	  * Complete the UEFI status code definitions. (72792baa7)
	  * Fix UTF-16 to UTF-8 conversion and variable enumeration in the EFI
	    commands. (c0aaffa8b, e1da075fe)
	  * Try allocating in the lower 4GB first, and limit arm64 allocations to the
	    4GB boundary. (091e50562, 1cae86131)
	  * Enable (u)divdi3 and (u)moddi3 for MIPS and implement __aeabi_uldivmod.
	    (22a15660c, 7dfe88fcc)
	  * Only flush the cache on VIA CPUs when the cpuid family matches. (3b3458f72)
	  * Mandatory install device check for PowerPC. (456ab994a)
	  * Convert several PowerPC IEEE 1275 error logs to debug logs. (147a52298)
	  * Fix a left shift overflow on ia64. (42889fea3)
	* Security:
	  * ML-DSA post-quantum signature support for appended signatures, including
	    the algorithm OID parser and test vectors. (c59c042bf, a37b0c0db,
	    d8da70576, 3394f6f9f, ef122da81, ce3ac8f2b, 41081d572, 4e1510370)
	  * Complete dbx image and certificate revocation checks for appended
	    signatures, with db and dbx read at module load on PowerPC IEEE 1275.
	    (15413acb6, e40793ccf)
	  * Parse and verify PKCS#7 signedAttrs -- contentType, messageDigest and
	    signingTime -- against the content and the signer certificate, and decode
	    X.509 certificate validity periods. (d86ddefba, 9badd596c, 59fd2c25a,
	    928904041, 549b988e0, 07635d644, bd9ded192, 96dcc3c29, f7c25f1fa,
	    19200af70, 19abb28a2)
	  * Parse the signer issuer and serial number and the signature algorithm from
	    PKCS#7 signerInfos, and enforce signature length validation. (32855cf73,
	    31c6b0a98, 59fd2c25a)
	  * Large refactor of the appendedsig module: X.509 handling isolated, RSA
	    verification extracted into a pk module, db/dbx hash lists converted to
	    linked lists. (ec5877a3e, 70aa3f557, f0dab014d, 487cd55c6, 719adb7f4,
	    c000ff57e, 6cce77cdd)
	  * TPCM (Trusted Platform Control Module) verifier on x86_64 EFI. (096aa1da6,
	    f5e0c076c, 558411534, 5e4648a61)
	  * New `tpm_record_pcrs' command recording a TPM PCR snapshot for the OS, via
	    an EFI variable or, on PowerPC IEEE 1275, the /chosen device tree node.
	    (1bd155080, 9a8369807, 0e346a131, 178144cb5, 6aa93964c)
	  * Skip TPM measurement of inspection-only file types. (4c6efaca3)
	  * New `password_argon2' command and grub-mkpasswd-argon2 utility, adding
	    Argon2 hashes for GRUB user passwords. (0511c84c0, a2b9258d5, ccc3620a0)
	  * Access levels for authentication in grub-mkconfig, used by all the default
	    grub.d scripts. (9ef06ff1d, 530a02f36, abf868b1b, ed5fbe400)
	  * MFA key protector. (40a1f9e5b, 9ca263d81, 1ea9e4f86)
	  * Downstream SBAT support: an sbat.csv template, validation of the SBAT CSV
	    against the build-time SBAT level, and an empty --sbat now meaning the
	    bundled sbat.csv. (99ab9d04b, bb483e1f4, 3777c2071, 1a7158490)
	  * Reject caller-supplied serial port and MMIO addresses under lockdown: the
	    `serial' command now only accepts a raw address when a port is already
	    registered at it, so it can no longer be used to write to arbitrary memory.
	    Lookups by name and `auto' are unaffected, as is the behaviour outside of
	    lockdown. (26beaa3b2, 92a2f034e)
	  * Print human readable authentication failure messages instead of the source
	    location of the failing check. (0c2822769)
	  * Exclude PKS support from grub-emu in the appendedsig module. (aaaf50378)
	  * Fix an off-by-one out-of-bounds read of the PGP issuer key-ID subpacket,
	    fix new-format packet length parsing, look for the key ID in hashed
	    signature subpackets, and warn when a secret key packet is found.
	    (d0902e62a, 5ee2e04db, f9fe263f0, 6f71f6502, 0a0c5e6bb)
	  * Fix a heap overflow reading the NVMe-oF address in ofpath. (284aa65ef)
	  * Fix an integer overflow in the mmap binary search. (170221b35)
	  * Fix boot failure when shim validation is disabled. (089d0567c)
	  * Cap the PCR unconditionally in the TPM2 key protector. (75f6ee3bb)
	  * Handle cryptodisk_passphrase_tries=0 correctly. (c605317e0)
	  * Do not require authentication to exit a submenu. (6f5955148)
	* Performance:
	  * Optimise grub_memmove() with word-by-word copying, restore grub_memcpy() as
	    an inline function, and add a memmove benchmark. (ace5fddc2, 2f0547739,
	    c82f5c540)
	  * Reduce disk cache slot thrashing. (63c601d8f)
	  * Require SSE before enabling AVX and avoid duplicate enable/reset calls in
	    the libgcrypt hardware feature detection. (4aa3a7995, 4cdb8b163, 3b17bc627,
	    bb8d22837, 14e526983, 63c32fde3)
	* Installation and other utility improvements:
	  * grub-install skips EFI registration when GRUB is already registered and
	    passes GRUB_DISTRIBUTOR directly for the bootloader ID. (9f682bf19,
	    ddb8f4c1f)
	  * grub-editenv removes a stale env_block on unsupported filesystems.
	    (a0476c1a3)
	  * grub-mkstandalone warns on non-regular files. (7d3e803e3)
	  * Force the device path for diskfilter and dmraid roots in 10_linux and
	    20_linux_xen. (928df0770)
	  * Use findfs for UUID and PARTUUID device lookup in the templates.
	    (26f82dc61)
	  * Default gfxpayload=keep only when booting using EFI. (bcc760dc5)
	  * Skip mount points in grub_find_device. (715c60967)
	  * Support canonical paths not starting with / in render-label. (b4800d434)
	  * Do not treat non-GPT partitions as an error in the bli command. (7b037605e)
	  * Fix an rmmod underflow on autoloaded modules. (74fca99f2)
	  * New grub_list_length() helper counting the elements of a list. (3e1ab0ee0)
	  * ofpath robustness fixes: correct the path_size calculation, bound the
	    fscanf string and read sizes in of_fc_port_name(), initialise nsid in
	    of_path_get_nvme_nsid(), handle lstat errors and harden the strncpy() and
	    strstr() calls. (b71ae6db2, 675d85810, 3b2aff5d4, 02efab276, c6f759f9c,
	    0ff251503, f81b844e9)
	  * Check for NULL in add_multiple_nvme_bootdevices() and initialise sectors
	    and nsec in grub-setup. (ddf942168, 79b76893c)
	  * Save the str[r]chr() return values into const pointers in grub-probe and
	    the device name resolver. (9f4a586f1, ce6f2b57f)
	  * Skip .mo and .gmo directory entries in copy_locales(). (25e9f2154)
	  * Memory and resource leak fixes across ofpath, getroot, platform,
	    grub-mkrescue, efidisk, appendedsig and the configuration parser.
	    (284aa65ef, fc9f05fe2, 0a1877cb1, e6e3ece5b, 28ee8ff77, d67dec8d2,
	    92eb0acb2, 7cafb2fa7, bb2c5c740, dd6cb6deb, 7115cf2ad, 52f113a86)
	* Testing and debugging:
	  * New unit and functional tests: tpcm_unit_test, mfa_key_protector_test,
	    rmmod_test, net_http_transfer_test, network protocol integration tests,
	    loadenv unit and end-to-end tests, FDT and Image processing unit tests,
	    MLDSA tests and a memmove benchmark. (558411534, 1ea9e4f86, 807a3f1d9,
	    abfba8add, b74260f8c, 4379c4e02, feb0f7be5, 916327d56, dc74b43b5,
	    3394f6f9f, ef122da81, c82f5c540)
	  * Run the libtasn1 coding-long-oid and Test_errors self-tests. (424b36804)
	  * Serial tests enabled for arm*-efi and loongarch64-efi. (9e9efbe3c,
	    6d76ae440)
	  * New partmap_test case for logical partitions without primaries. (2d9f8846b,
	    df576cac8)
	  * PGP signature tests against Sequoia-PGP generated keys and signatures.
	    (5ef6337a2, 1d0b9fd17)
	  * Fix a loop device race condition in the ext tests. (278263d39)
	  * Fix the -f test on files served over TFTP and HTTP, and clarify what that
	    test guarantees. (ffc05ec96, 83cc0e322)
	  * Distribute the network test scripts. (02d4b7b7b)
	  * Teach grub-fs-tester about luks2_test and remove the emu device.map in the
	    grub-shell cleanup. (03fa65f1f, add20d17b)
	* Build system:
	  * libgcrypt 1.12.2, including Dilithium/ML-DSA and support for verifying raw
	    data larger than 65535 bytes. (9469e618d, d5ca1a78b, ce3ac8f2b, c33dadaac)
	  * libtasn1 4.21.0. (7a30313dc, d21625937, 234bb2aaf, 49ef3593a)
	  * Cygwin and mingw cross-compilation fixes: updated i386-cygwin linker
	    script, stripped extra sections, a pei386 runtime relocator stub and
	    correct PE relocation section flags. (7d0a4c07a, 3dce38eb1, 3a509d3b0,
	    6d32b5a87, 87fef5611, a23d4a235, 172a50f07, 747275485, 2e8c7b4c1,
	    feb3115f7)
	  * clang build fixes across x86_64, PowerPC IEEE 1275 and the tests, and
	    llvm/lld link flag fixes for LoongArch, PowerPC, SPARC and MIPS.
	    (047ee58ef, 990544b46, 0459424d3, e35f31246)
	  * i386-pc kernel image generation reworked around --image-base rather than
	    -Ttext. The 2.14 --image-base linker probe and the GNU Autoconf Archive
	    requirement it brought in were reverted in favour of this approach.
	    (ba2f35114, 86283bfd4, ab6f73517, 9922ed133, 1dc2986c7, 7b72d6cbd,
	    935e889ab)
	  * Parallel build support and a parallel build failure fix. (304ba2637,
	    c2a215245)
	  * Fix a linker error on macOS hosts and a build failure with platform=emu and
	    libzfs. (8a58da21a, 943ce33da)
	  * Stop forcibly distributing all gnulib headers. (dc827846a)
	  * Compiler warning cleanups across ofpath, bootp, platform, gnulib,
	    grub-protect and the arm64 Xen boot loader. (6a7fb8f74, 23becbaaf,
	    f2601de58, 1ae2a2cf3, 6a9d21eaf, 081347a87, cf8b48019)
	  * Replace codecs.open() in util/import_gcry.py and drop the unused
	    SHA1_DIGEST_SIZE definition. (89ce24a7b, c592a9d46)
	* Continuous integration:
	  * GitLab CI introduced for GRUB, with builds and checks across multiple
	    architectures, a powerpc64le-linux-gnu/ieee1275 job, clang jobs, scheduled
	    Windows mingw builds, weekly Coverity scans, a Signed-off-by check and a
	    release pipeline. (15c99a7a6, da0200d5a, 7bba0975e, ee4a4aa35, 4345af6d3,
	    a3b64ccb1, 5fd3a91e7, b7c5ed972, addd5742c, f89af02ce, 1b9d412ba,
	    a40d8f3fc, 1ab34666a, c1d8befec, e511c82bc)
	  * CI coverage and turnaround improvements: wider clang platform coverage on
	    x86_64, the bootnext functional tests added to the native and non-native
	    test matrices, duplicate target/platform entries removed, failing checks
	    re-run with debug information, bash xtrace enabled in the scripts, build
	    artifacts always stored with a 30 day lifetime for check, and the pages job
	    limited to index.html changes. (4482637b4, 4cdcb3dfa, ae199dfec, 920a440c3,
	    edd057b5c, 206d331b8, c5aa88220, ae792be6b, 94a457f18, c7bf1d032,
	    4a1a96a8e)
	* Documentation and project infrastructure:
	  * Documentation for the new commands and features: ML-DSA appended
	    signatures, tpm_record_pcrs, lsefivar, the Btrfs commands, virtionet,
	    net_dhcp6, access levels, the MFA key protector, password_argon2 and
	    grub-mkpasswd-argon2, and device tree boot arguments. (19b933baa,
	    93aedcb21, f107c2ad7, e36337934, 65bb6c229, 42bff9bdb, ed5fbe400,
	    9ca263d81, ccc3620a0, 32a720f36, 7272ed9ec)
	  * Document the serial port restrictions under lockdown, add the missing
	    connectefi entry to the command-line command list, note that cryptomount
	    now supports Argon2 and fix assorted typos in the comments and the
	    documentation. (92a2f034e, 4e284ff4d, 53fae3e8a, c160b5861)
	  * The 'Authentication and Authorisation' section was renamed and access level
	    documentation added. (abf868b1b, ed5fbe400)
	  * CONTRIBUTING and a Code of Conduct were added, and MAINTAINERS and the
	    SECURITY policy were updated. (754a3d867, 9b74ffa69, da3675583, 14949bbd1,
	    b07cc37ca, 342661cb8)

Tested-by: Adolf Berlka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/aarch64/grub          | 23 ++++++++
 config/rootfiles/common/loongarch64/grub      | 23 ++++++++
 config/rootfiles/common/riscv64/grub          | 23 ++++++++
 config/rootfiles/common/x86_64/grub           | 47 +++++++++++++++-
 lfs/grub                                      |  8 ++-
 ...heck_linker_for_--image-base_support.patch | 53 -------------------
 ...if_autoconf-archive_is_not_installed.patch | 15 ------
 ...ny-instead-of-large-model-for-RISCV.patch} | 24 +++------
 8 files changed, 123 insertions(+), 93 deletions(-)
 delete mode 100644 src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
 delete mode 100644 src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
 rename src/patches/grub/{grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch => grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch} (50%)

diff --git a/config/rootfiles/common/aarch64/grub b/config/rootfiles/common/aarch64/grub
index 83166a61c..c62eadee7 100644
--- a/config/rootfiles/common/aarch64/grub
+++ b/config/rootfiles/common/aarch64/grub
@@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen
 etc/grub.d/25_bli
 etc/grub.d/30_os-prober
 etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
 etc/grub.d/40_custom
 etc/grub.d/41_custom
 #etc/grub.d/README
@@ -23,6 +24,7 @@ usr/bin/grub-mkfont
 usr/bin/grub-mkimage
 usr/bin/grub-mklayout
 usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
 usr/bin/grub-mkpasswd-pbkdf2
 usr/bin/grub-mkrelpath
 usr/bin/grub-mkrescue
@@ -89,6 +91,8 @@ usr/lib/grub/arm64-efi/command.lst
 usr/lib/grub/arm64-efi/config.h
 usr/lib/grub/arm64-efi/configfile.mod
 usr/lib/grub/arm64-efi/configfile.module
+usr/lib/grub/arm64-efi/connectefi.mod
+usr/lib/grub/arm64-efi/connectefi.module
 usr/lib/grub/arm64-efi/cpio.mod
 usr/lib/grub/arm64-efi/cpio.module
 usr/lib/grub/arm64-efi/cpio_be.mod
@@ -126,6 +130,8 @@ usr/lib/grub/arm64-efi/echo.mod
 usr/lib/grub/arm64-efi/echo.module
 usr/lib/grub/arm64-efi/efi_gop.mod
 usr/lib/grub/arm64-efi/efi_gop.module
+usr/lib/grub/arm64-efi/efibootnext.mod
+usr/lib/grub/arm64-efi/efibootnext.module
 usr/lib/grub/arm64-efi/efifwsetup.mod
 usr/lib/grub/arm64-efi/efifwsetup.module
 usr/lib/grub/arm64-efi/efinet.mod
@@ -196,6 +202,8 @@ usr/lib/grub/arm64-efi/gcry_md4.mod
 usr/lib/grub/arm64-efi/gcry_md4.module
 usr/lib/grub/arm64-efi/gcry_md5.mod
 usr/lib/grub/arm64-efi/gcry_md5.module
+usr/lib/grub/arm64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/arm64-efi/gcry_pubkey_dilithium.module
 usr/lib/grub/arm64-efi/gcry_rfc2268.mod
 usr/lib/grub/arm64-efi/gcry_rfc2268.module
 usr/lib/grub/arm64-efi/gcry_rijndael.mod
@@ -294,6 +302,8 @@ usr/lib/grub/arm64-efi/lsefimmap.mod
 usr/lib/grub/arm64-efi/lsefimmap.module
 usr/lib/grub/arm64-efi/lsefisystab.mod
 usr/lib/grub/arm64-efi/lsefisystab.module
+usr/lib/grub/arm64-efi/lsefivar.mod
+usr/lib/grub/arm64-efi/lsefivar.module
 usr/lib/grub/arm64-efi/lsmmap.mod
 usr/lib/grub/arm64-efi/lsmmap.module
 usr/lib/grub/arm64-efi/lssal.mod
@@ -318,8 +328,12 @@ usr/lib/grub/arm64-efi/mdraid1x.mod
 usr/lib/grub/arm64-efi/mdraid1x.module
 usr/lib/grub/arm64-efi/memdisk.mod
 usr/lib/grub/arm64-efi/memdisk.module
+usr/lib/grub/arm64-efi/memmove_bench.mod
+usr/lib/grub/arm64-efi/memmove_bench.module
 usr/lib/grub/arm64-efi/memrw.mod
 usr/lib/grub/arm64-efi/memrw.module
+usr/lib/grub/arm64-efi/mfa.mod
+usr/lib/grub/arm64-efi/mfa.module
 usr/lib/grub/arm64-efi/minicmd.mod
 usr/lib/grub/arm64-efi/minicmd.module
 usr/lib/grub/arm64-efi/minix.mod
@@ -334,6 +348,8 @@ usr/lib/grub/arm64-efi/minix3_be.mod
 usr/lib/grub/arm64-efi/minix3_be.module
 usr/lib/grub/arm64-efi/minix_be.mod
 usr/lib/grub/arm64-efi/minix_be.module
+usr/lib/grub/arm64-efi/mldsa_test.mod
+usr/lib/grub/arm64-efi/mldsa_test.module
 usr/lib/grub/arm64-efi/mmap.mod
 usr/lib/grub/arm64-efi/mmap.module
 usr/lib/grub/arm64-efi/moddep.lst
@@ -388,6 +404,8 @@ usr/lib/grub/arm64-efi/parttool.mod
 usr/lib/grub/arm64-efi/parttool.module
 usr/lib/grub/arm64-efi/password.mod
 usr/lib/grub/arm64-efi/password.module
+usr/lib/grub/arm64-efi/password_argon2.mod
+usr/lib/grub/arm64-efi/password_argon2.module
 usr/lib/grub/arm64-efi/password_pbkdf2.mod
 usr/lib/grub/arm64-efi/password_pbkdf2.module
 usr/lib/grub/arm64-efi/pbkdf2.mod
@@ -426,6 +444,7 @@ usr/lib/grub/arm64-efi/romfs.mod
 usr/lib/grub/arm64-efi/romfs.module
 usr/lib/grub/arm64-efi/rsa_sexp_test.mod
 usr/lib/grub/arm64-efi/rsa_sexp_test.module
+usr/lib/grub/arm64-efi/sbat.csv
 usr/lib/grub/arm64-efi/scsi.mod
 usr/lib/grub/arm64-efi/scsi.module
 usr/lib/grub/arm64-efi/search.mod
@@ -485,6 +504,8 @@ usr/lib/grub/arm64-efi/tpm.mod
 usr/lib/grub/arm64-efi/tpm.module
 usr/lib/grub/arm64-efi/tpm2_key_protector.mod
 usr/lib/grub/arm64-efi/tpm2_key_protector.module
+usr/lib/grub/arm64-efi/tpm_record_pcrs.mod
+usr/lib/grub/arm64-efi/tpm_record_pcrs.module
 usr/lib/grub/arm64-efi/tr.mod
 usr/lib/grub/arm64-efi/tr.module
 usr/lib/grub/arm64-efi/trig.mod
@@ -607,6 +628,7 @@ usr/share/grub/unicode.pf2
 #usr/share/locale/ko/LC_MESSAGES/grub.mo
 #usr/share/locale/lg/LC_MESSAGES/grub.mo
 #usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
 #usr/share/locale/nb/LC_MESSAGES/grub.mo
 #usr/share/locale/nl/LC_MESSAGES/grub.mo
 #usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -633,6 +655,7 @@ usr/share/grub/unicode.pf2
 #usr/share/man/man1/grub-mkimage.1
 #usr/share/man/man1/grub-mklayout.1
 #usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1
 #usr/share/man/man1/grub-mkrelpath.1
 #usr/share/man/man1/grub-mkrescue.1
diff --git a/config/rootfiles/common/loongarch64/grub b/config/rootfiles/common/loongarch64/grub
index a8ae2a2e1..c9d704578 100644
--- a/config/rootfiles/common/loongarch64/grub
+++ b/config/rootfiles/common/loongarch64/grub
@@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen
 etc/grub.d/25_bli
 etc/grub.d/30_os-prober
 etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
 etc/grub.d/40_custom
 etc/grub.d/41_custom
 #etc/grub.d/README
@@ -23,6 +24,7 @@ usr/bin/grub-mkfont
 usr/bin/grub-mkimage
 usr/bin/grub-mklayout
 usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
 usr/bin/grub-mkpasswd-pbkdf2
 usr/bin/grub-mkrelpath
 usr/bin/grub-mkrescue
@@ -89,6 +91,8 @@ usr/lib/grub/loongarch64-efi/command.lst
 usr/lib/grub/loongarch64-efi/config.h
 usr/lib/grub/loongarch64-efi/configfile.mod
 usr/lib/grub/loongarch64-efi/configfile.module
+usr/lib/grub/loongarch64-efi/connectefi.mod
+usr/lib/grub/loongarch64-efi/connectefi.module
 usr/lib/grub/loongarch64-efi/cpio.mod
 usr/lib/grub/loongarch64-efi/cpio.module
 usr/lib/grub/loongarch64-efi/cpio_be.mod
@@ -126,6 +130,8 @@ usr/lib/grub/loongarch64-efi/echo.mod
 usr/lib/grub/loongarch64-efi/echo.module
 usr/lib/grub/loongarch64-efi/efi_gop.mod
 usr/lib/grub/loongarch64-efi/efi_gop.module
+usr/lib/grub/loongarch64-efi/efibootnext.mod
+usr/lib/grub/loongarch64-efi/efibootnext.module
 usr/lib/grub/loongarch64-efi/efifwsetup.mod
 usr/lib/grub/loongarch64-efi/efifwsetup.module
 usr/lib/grub/loongarch64-efi/efinet.mod
@@ -196,6 +202,8 @@ usr/lib/grub/loongarch64-efi/gcry_md4.mod
 usr/lib/grub/loongarch64-efi/gcry_md4.module
 usr/lib/grub/loongarch64-efi/gcry_md5.mod
 usr/lib/grub/loongarch64-efi/gcry_md5.module
+usr/lib/grub/loongarch64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/loongarch64-efi/gcry_pubkey_dilithium.module
 usr/lib/grub/loongarch64-efi/gcry_rfc2268.mod
 usr/lib/grub/loongarch64-efi/gcry_rfc2268.module
 usr/lib/grub/loongarch64-efi/gcry_rijndael.mod
@@ -294,6 +302,8 @@ usr/lib/grub/loongarch64-efi/lsefimmap.mod
 usr/lib/grub/loongarch64-efi/lsefimmap.module
 usr/lib/grub/loongarch64-efi/lsefisystab.mod
 usr/lib/grub/loongarch64-efi/lsefisystab.module
+usr/lib/grub/loongarch64-efi/lsefivar.mod
+usr/lib/grub/loongarch64-efi/lsefivar.module
 usr/lib/grub/loongarch64-efi/lsmmap.mod
 usr/lib/grub/loongarch64-efi/lsmmap.module
 usr/lib/grub/loongarch64-efi/lssal.mod
@@ -318,8 +328,12 @@ usr/lib/grub/loongarch64-efi/mdraid1x.mod
 usr/lib/grub/loongarch64-efi/mdraid1x.module
 usr/lib/grub/loongarch64-efi/memdisk.mod
 usr/lib/grub/loongarch64-efi/memdisk.module
+usr/lib/grub/loongarch64-efi/memmove_bench.mod
+usr/lib/grub/loongarch64-efi/memmove_bench.module
 usr/lib/grub/loongarch64-efi/memrw.mod
 usr/lib/grub/loongarch64-efi/memrw.module
+usr/lib/grub/loongarch64-efi/mfa.mod
+usr/lib/grub/loongarch64-efi/mfa.module
 usr/lib/grub/loongarch64-efi/minicmd.mod
 usr/lib/grub/loongarch64-efi/minicmd.module
 usr/lib/grub/loongarch64-efi/minix.mod
@@ -334,6 +348,8 @@ usr/lib/grub/loongarch64-efi/minix3_be.mod
 usr/lib/grub/loongarch64-efi/minix3_be.module
 usr/lib/grub/loongarch64-efi/minix_be.mod
 usr/lib/grub/loongarch64-efi/minix_be.module
+usr/lib/grub/loongarch64-efi/mldsa_test.mod
+usr/lib/grub/loongarch64-efi/mldsa_test.module
 usr/lib/grub/loongarch64-efi/mmap.mod
 usr/lib/grub/loongarch64-efi/mmap.module
 usr/lib/grub/loongarch64-efi/moddep.lst
@@ -388,6 +404,8 @@ usr/lib/grub/loongarch64-efi/parttool.mod
 usr/lib/grub/loongarch64-efi/parttool.module
 usr/lib/grub/loongarch64-efi/password.mod
 usr/lib/grub/loongarch64-efi/password.module
+usr/lib/grub/loongarch64-efi/password_argon2.mod
+usr/lib/grub/loongarch64-efi/password_argon2.module
 usr/lib/grub/loongarch64-efi/password_pbkdf2.mod
 usr/lib/grub/loongarch64-efi/password_pbkdf2.module
 usr/lib/grub/loongarch64-efi/pbkdf2.mod
@@ -426,6 +444,7 @@ usr/lib/grub/loongarch64-efi/romfs.mod
 usr/lib/grub/loongarch64-efi/romfs.module
 usr/lib/grub/loongarch64-efi/rsa_sexp_test.mod
 usr/lib/grub/loongarch64-efi/rsa_sexp_test.module
+usr/lib/grub/loongarch64-efi/sbat.csv
 usr/lib/grub/loongarch64-efi/scsi.mod
 usr/lib/grub/loongarch64-efi/scsi.module
 usr/lib/grub/loongarch64-efi/search.mod
@@ -485,6 +504,8 @@ usr/lib/grub/loongarch64-efi/tpm.mod
 usr/lib/grub/loongarch64-efi/tpm.module
 usr/lib/grub/loongarch64-efi/tpm2_key_protector.mod
 usr/lib/grub/loongarch64-efi/tpm2_key_protector.module
+usr/lib/grub/loongarch64-efi/tpm_record_pcrs.mod
+usr/lib/grub/loongarch64-efi/tpm_record_pcrs.module
 usr/lib/grub/loongarch64-efi/tr.mod
 usr/lib/grub/loongarch64-efi/tr.module
 usr/lib/grub/loongarch64-efi/trig.mod
@@ -605,6 +626,7 @@ usr/share/grub/unicode.pf2
 #usr/share/locale/ko/LC_MESSAGES/grub.mo
 #usr/share/locale/lg/LC_MESSAGES/grub.mo
 #usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
 #usr/share/locale/nb/LC_MESSAGES/grub.mo
 #usr/share/locale/nl/LC_MESSAGES/grub.mo
 #usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -631,6 +653,7 @@ usr/share/grub/unicode.pf2
 #usr/share/man/man1/grub-mkimage.1
 #usr/share/man/man1/grub-mklayout.1
 #usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1
 #usr/share/man/man1/grub-mkrelpath.1
 #usr/share/man/man1/grub-mkrescue.1
diff --git a/config/rootfiles/common/riscv64/grub b/config/rootfiles/common/riscv64/grub
index f9b981db9..5709ba46f 100644
--- a/config/rootfiles/common/riscv64/grub
+++ b/config/rootfiles/common/riscv64/grub
@@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen
 etc/grub.d/25_bli
 etc/grub.d/30_os-prober
 etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
 etc/grub.d/40_custom
 etc/grub.d/41_custom
 #etc/grub.d/README
@@ -23,6 +24,7 @@ usr/bin/grub-mkfont
 usr/bin/grub-mkimage
 usr/bin/grub-mklayout
 usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
 usr/bin/grub-mkpasswd-pbkdf2
 usr/bin/grub-mkrelpath
 usr/bin/grub-mkrescue
@@ -89,6 +91,8 @@ usr/lib/grub/riscv64-efi/command.lst
 usr/lib/grub/riscv64-efi/config.h
 usr/lib/grub/riscv64-efi/configfile.mod
 usr/lib/grub/riscv64-efi/configfile.module
+usr/lib/grub/riscv64-efi/connectefi.mod
+usr/lib/grub/riscv64-efi/connectefi.module
 usr/lib/grub/riscv64-efi/cpio.mod
 usr/lib/grub/riscv64-efi/cpio.module
 usr/lib/grub/riscv64-efi/cpio_be.mod
@@ -126,6 +130,8 @@ usr/lib/grub/riscv64-efi/echo.mod
 usr/lib/grub/riscv64-efi/echo.module
 usr/lib/grub/riscv64-efi/efi_gop.mod
 usr/lib/grub/riscv64-efi/efi_gop.module
+usr/lib/grub/riscv64-efi/efibootnext.mod
+usr/lib/grub/riscv64-efi/efibootnext.module
 usr/lib/grub/riscv64-efi/efifwsetup.mod
 usr/lib/grub/riscv64-efi/efifwsetup.module
 usr/lib/grub/riscv64-efi/efinet.mod
@@ -196,6 +202,8 @@ usr/lib/grub/riscv64-efi/gcry_md4.mod
 usr/lib/grub/riscv64-efi/gcry_md4.module
 usr/lib/grub/riscv64-efi/gcry_md5.mod
 usr/lib/grub/riscv64-efi/gcry_md5.module
+usr/lib/grub/riscv64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/riscv64-efi/gcry_pubkey_dilithium.module
 usr/lib/grub/riscv64-efi/gcry_rfc2268.mod
 usr/lib/grub/riscv64-efi/gcry_rfc2268.module
 usr/lib/grub/riscv64-efi/gcry_rijndael.mod
@@ -294,6 +302,8 @@ usr/lib/grub/riscv64-efi/lsefimmap.mod
 usr/lib/grub/riscv64-efi/lsefimmap.module
 usr/lib/grub/riscv64-efi/lsefisystab.mod
 usr/lib/grub/riscv64-efi/lsefisystab.module
+usr/lib/grub/riscv64-efi/lsefivar.mod
+usr/lib/grub/riscv64-efi/lsefivar.module
 usr/lib/grub/riscv64-efi/lsmmap.mod
 usr/lib/grub/riscv64-efi/lsmmap.module
 usr/lib/grub/riscv64-efi/lssal.mod
@@ -318,8 +328,12 @@ usr/lib/grub/riscv64-efi/mdraid1x.mod
 usr/lib/grub/riscv64-efi/mdraid1x.module
 usr/lib/grub/riscv64-efi/memdisk.mod
 usr/lib/grub/riscv64-efi/memdisk.module
+usr/lib/grub/riscv64-efi/memmove_bench.mod
+usr/lib/grub/riscv64-efi/memmove_bench.module
 usr/lib/grub/riscv64-efi/memrw.mod
 usr/lib/grub/riscv64-efi/memrw.module
+usr/lib/grub/riscv64-efi/mfa.mod
+usr/lib/grub/riscv64-efi/mfa.module
 usr/lib/grub/riscv64-efi/minicmd.mod
 usr/lib/grub/riscv64-efi/minicmd.module
 usr/lib/grub/riscv64-efi/minix.mod
@@ -334,6 +348,8 @@ usr/lib/grub/riscv64-efi/minix3_be.mod
 usr/lib/grub/riscv64-efi/minix3_be.module
 usr/lib/grub/riscv64-efi/minix_be.mod
 usr/lib/grub/riscv64-efi/minix_be.module
+usr/lib/grub/riscv64-efi/mldsa_test.mod
+usr/lib/grub/riscv64-efi/mldsa_test.module
 usr/lib/grub/riscv64-efi/mmap.mod
 usr/lib/grub/riscv64-efi/mmap.module
 usr/lib/grub/riscv64-efi/moddep.lst
@@ -388,6 +404,8 @@ usr/lib/grub/riscv64-efi/parttool.mod
 usr/lib/grub/riscv64-efi/parttool.module
 usr/lib/grub/riscv64-efi/password.mod
 usr/lib/grub/riscv64-efi/password.module
+usr/lib/grub/riscv64-efi/password_argon2.mod
+usr/lib/grub/riscv64-efi/password_argon2.module
 usr/lib/grub/riscv64-efi/password_pbkdf2.mod
 usr/lib/grub/riscv64-efi/password_pbkdf2.module
 usr/lib/grub/riscv64-efi/pbkdf2.mod
@@ -426,6 +444,7 @@ usr/lib/grub/riscv64-efi/romfs.mod
 usr/lib/grub/riscv64-efi/romfs.module
 usr/lib/grub/riscv64-efi/rsa_sexp_test.mod
 usr/lib/grub/riscv64-efi/rsa_sexp_test.module
+usr/lib/grub/riscv64-efi/sbat.csv
 usr/lib/grub/riscv64-efi/scsi.mod
 usr/lib/grub/riscv64-efi/scsi.module
 usr/lib/grub/riscv64-efi/search.mod
@@ -485,6 +504,8 @@ usr/lib/grub/riscv64-efi/tpm.mod
 usr/lib/grub/riscv64-efi/tpm.module
 usr/lib/grub/riscv64-efi/tpm2_key_protector.mod
 usr/lib/grub/riscv64-efi/tpm2_key_protector.module
+usr/lib/grub/riscv64-efi/tpm_record_pcrs.mod
+usr/lib/grub/riscv64-efi/tpm_record_pcrs.module
 usr/lib/grub/riscv64-efi/tr.mod
 usr/lib/grub/riscv64-efi/tr.module
 usr/lib/grub/riscv64-efi/trig.mod
@@ -605,6 +626,7 @@ usr/share/grub/unicode.pf2
 #usr/share/locale/ko/LC_MESSAGES/grub.mo
 #usr/share/locale/lg/LC_MESSAGES/grub.mo
 #usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
 #usr/share/locale/nb/LC_MESSAGES/grub.mo
 #usr/share/locale/nl/LC_MESSAGES/grub.mo
 #usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -631,6 +653,7 @@ usr/share/grub/unicode.pf2
 #usr/share/man/man1/grub-mkimage.1
 #usr/share/man/man1/grub-mklayout.1
 #usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1
 #usr/share/man/man1/grub-mkrelpath.1
 #usr/share/man/man1/grub-mkrescue.1
diff --git a/config/rootfiles/common/x86_64/grub b/config/rootfiles/common/x86_64/grub
index b6ddd5709..0d56c2fa5 100644
--- a/config/rootfiles/common/x86_64/grub
+++ b/config/rootfiles/common/x86_64/grub
@@ -11,6 +11,7 @@ etc/grub.d/20_linux_xen
 etc/grub.d/25_bli
 etc/grub.d/30_os-prober
 etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
 etc/grub.d/40_custom
 etc/grub.d/41_custom
 #etc/grub.d/README
@@ -24,6 +25,7 @@ usr/bin/grub-mkfont
 usr/bin/grub-mkimage
 usr/bin/grub-mklayout
 usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
 usr/bin/grub-mkpasswd-pbkdf2
 usr/bin/grub-mkrelpath
 usr/bin/grub-mkrescue
@@ -231,6 +233,8 @@ usr/lib/grub/i386-pc/gcry_md4.mod
 usr/lib/grub/i386-pc/gcry_md4.module
 usr/lib/grub/i386-pc/gcry_md5.mod
 usr/lib/grub/i386-pc/gcry_md5.module
+usr/lib/grub/i386-pc/gcry_pubkey_dilithium.mod
+usr/lib/grub/i386-pc/gcry_pubkey_dilithium.module
 usr/lib/grub/i386-pc/gcry_rfc2268.mod
 usr/lib/grub/i386-pc/gcry_rfc2268.module
 usr/lib/grub/i386-pc/gcry_rijndael.mod
@@ -369,8 +373,12 @@ usr/lib/grub/i386-pc/mdraid1x.mod
 usr/lib/grub/i386-pc/mdraid1x.module
 usr/lib/grub/i386-pc/memdisk.mod
 usr/lib/grub/i386-pc/memdisk.module
+usr/lib/grub/i386-pc/memmove_bench.mod
+usr/lib/grub/i386-pc/memmove_bench.module
 usr/lib/grub/i386-pc/memrw.mod
 usr/lib/grub/i386-pc/memrw.module
+usr/lib/grub/i386-pc/mfa.mod
+usr/lib/grub/i386-pc/mfa.module
 usr/lib/grub/i386-pc/minicmd.mod
 usr/lib/grub/i386-pc/minicmd.module
 usr/lib/grub/i386-pc/minix.mod
@@ -385,6 +393,8 @@ usr/lib/grub/i386-pc/minix3_be.mod
 usr/lib/grub/i386-pc/minix3_be.module
 usr/lib/grub/i386-pc/minix_be.mod
 usr/lib/grub/i386-pc/minix_be.module
+usr/lib/grub/i386-pc/mldsa_test.mod
+usr/lib/grub/i386-pc/mldsa_test.module
 usr/lib/grub/i386-pc/mmap.mod
 usr/lib/grub/i386-pc/mmap.module
 usr/lib/grub/i386-pc/moddep.lst
@@ -417,6 +427,8 @@ usr/lib/grub/i386-pc/ntfscomp.mod
 usr/lib/grub/i386-pc/ntfscomp.module
 usr/lib/grub/i386-pc/ntldr.mod
 usr/lib/grub/i386-pc/ntldr.module
+usr/lib/grub/i386-pc/nvme.mod
+usr/lib/grub/i386-pc/nvme.module
 usr/lib/grub/i386-pc/odc.mod
 usr/lib/grub/i386-pc/odc.module
 usr/lib/grub/i386-pc/offsetio.mod
@@ -451,6 +463,8 @@ usr/lib/grub/i386-pc/parttool.mod
 usr/lib/grub/i386-pc/parttool.module
 usr/lib/grub/i386-pc/password.mod
 usr/lib/grub/i386-pc/password.module
+usr/lib/grub/i386-pc/password_argon2.mod
+usr/lib/grub/i386-pc/password_argon2.module
 usr/lib/grub/i386-pc/password_pbkdf2.mod
 usr/lib/grub/i386-pc/password_pbkdf2.module
 usr/lib/grub/i386-pc/pata.mod
@@ -629,6 +643,8 @@ usr/lib/grub/i386-pc/videotest.mod
 usr/lib/grub/i386-pc/videotest.module
 usr/lib/grub/i386-pc/videotest_checksum.mod
 usr/lib/grub/i386-pc/videotest_checksum.module
+usr/lib/grub/i386-pc/virtionet.mod
+usr/lib/grub/i386-pc/virtionet.module
 usr/lib/grub/i386-pc/wrmsr.mod
 usr/lib/grub/i386-pc/wrmsr.module
 usr/lib/grub/i386-pc/xfs.mod
@@ -734,6 +750,8 @@ usr/lib/grub/x86_64-efi/command.lst
 usr/lib/grub/x86_64-efi/config.h
 usr/lib/grub/x86_64-efi/configfile.mod
 usr/lib/grub/x86_64-efi/configfile.module
+usr/lib/grub/x86_64-efi/connectefi.mod
+usr/lib/grub/x86_64-efi/connectefi.module
 usr/lib/grub/x86_64-efi/cpio.mod
 usr/lib/grub/x86_64-efi/cpio.module
 usr/lib/grub/x86_64-efi/cpio_be.mod
@@ -775,8 +793,8 @@ usr/lib/grub/x86_64-efi/echo.mod
 usr/lib/grub/x86_64-efi/echo.module
 usr/lib/grub/x86_64-efi/efi_gop.mod
 usr/lib/grub/x86_64-efi/efi_gop.module
-usr/lib/grub/x86_64-efi/efi_uga.mod
-usr/lib/grub/x86_64-efi/efi_uga.module
+usr/lib/grub/x86_64-efi/efibootnext.mod
+usr/lib/grub/x86_64-efi/efibootnext.module
 usr/lib/grub/x86_64-efi/efifwsetup.mod
 usr/lib/grub/x86_64-efi/efifwsetup.module
 usr/lib/grub/x86_64-efi/efinet.mod
@@ -849,6 +867,8 @@ usr/lib/grub/x86_64-efi/gcry_md4.mod
 usr/lib/grub/x86_64-efi/gcry_md4.module
 usr/lib/grub/x86_64-efi/gcry_md5.mod
 usr/lib/grub/x86_64-efi/gcry_md5.module
+usr/lib/grub/x86_64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/x86_64-efi/gcry_pubkey_dilithium.module
 usr/lib/grub/x86_64-efi/gcry_rfc2268.mod
 usr/lib/grub/x86_64-efi/gcry_rfc2268.module
 usr/lib/grub/x86_64-efi/gcry_rijndael.mod
@@ -961,6 +981,8 @@ usr/lib/grub/x86_64-efi/lsefimmap.mod
 usr/lib/grub/x86_64-efi/lsefimmap.module
 usr/lib/grub/x86_64-efi/lsefisystab.mod
 usr/lib/grub/x86_64-efi/lsefisystab.module
+usr/lib/grub/x86_64-efi/lsefivar.mod
+usr/lib/grub/x86_64-efi/lsefivar.module
 usr/lib/grub/x86_64-efi/lsmmap.mod
 usr/lib/grub/x86_64-efi/lsmmap.module
 usr/lib/grub/x86_64-efi/lspci.mod
@@ -987,8 +1009,12 @@ usr/lib/grub/x86_64-efi/mdraid1x.mod
 usr/lib/grub/x86_64-efi/mdraid1x.module
 usr/lib/grub/x86_64-efi/memdisk.mod
 usr/lib/grub/x86_64-efi/memdisk.module
+usr/lib/grub/x86_64-efi/memmove_bench.mod
+usr/lib/grub/x86_64-efi/memmove_bench.module
 usr/lib/grub/x86_64-efi/memrw.mod
 usr/lib/grub/x86_64-efi/memrw.module
+usr/lib/grub/x86_64-efi/mfa.mod
+usr/lib/grub/x86_64-efi/mfa.module
 usr/lib/grub/x86_64-efi/minicmd.mod
 usr/lib/grub/x86_64-efi/minicmd.module
 usr/lib/grub/x86_64-efi/minix.mod
@@ -1003,6 +1029,8 @@ usr/lib/grub/x86_64-efi/minix3_be.mod
 usr/lib/grub/x86_64-efi/minix3_be.module
 usr/lib/grub/x86_64-efi/minix_be.mod
 usr/lib/grub/x86_64-efi/minix_be.module
+usr/lib/grub/x86_64-efi/mldsa_test.mod
+usr/lib/grub/x86_64-efi/mldsa_test.module
 usr/lib/grub/x86_64-efi/mmap.mod
 usr/lib/grub/x86_64-efi/mmap.module
 usr/lib/grub/x86_64-efi/moddep.lst
@@ -1033,6 +1061,8 @@ usr/lib/grub/x86_64-efi/ntfs.mod
 usr/lib/grub/x86_64-efi/ntfs.module
 usr/lib/grub/x86_64-efi/ntfscomp.mod
 usr/lib/grub/x86_64-efi/ntfscomp.module
+usr/lib/grub/x86_64-efi/nvme.mod
+usr/lib/grub/x86_64-efi/nvme.module
 usr/lib/grub/x86_64-efi/odc.mod
 usr/lib/grub/x86_64-efi/odc.module
 usr/lib/grub/x86_64-efi/offsetio.mod
@@ -1067,6 +1097,8 @@ usr/lib/grub/x86_64-efi/parttool.mod
 usr/lib/grub/x86_64-efi/parttool.module
 usr/lib/grub/x86_64-efi/password.mod
 usr/lib/grub/x86_64-efi/password.module
+usr/lib/grub/x86_64-efi/password_argon2.mod
+usr/lib/grub/x86_64-efi/password_argon2.module
 usr/lib/grub/x86_64-efi/password_pbkdf2.mod
 usr/lib/grub/x86_64-efi/password_pbkdf2.module
 usr/lib/grub/x86_64-efi/pata.mod
@@ -1117,6 +1149,7 @@ usr/lib/grub/x86_64-efi/romfs.mod
 usr/lib/grub/x86_64-efi/romfs.module
 usr/lib/grub/x86_64-efi/rsa_sexp_test.mod
 usr/lib/grub/x86_64-efi/rsa_sexp_test.module
+usr/lib/grub/x86_64-efi/sbat.csv
 usr/lib/grub/x86_64-efi/scsi.mod
 usr/lib/grub/x86_64-efi/scsi.module
 usr/lib/grub/x86_64-efi/search.mod
@@ -1176,10 +1209,14 @@ usr/lib/grub/x86_64-efi/tga.mod
 usr/lib/grub/x86_64-efi/tga.module
 usr/lib/grub/x86_64-efi/time.mod
 usr/lib/grub/x86_64-efi/time.module
+usr/lib/grub/x86_64-efi/tpcm.mod
+usr/lib/grub/x86_64-efi/tpcm.module
 usr/lib/grub/x86_64-efi/tpm.mod
 usr/lib/grub/x86_64-efi/tpm.module
 usr/lib/grub/x86_64-efi/tpm2_key_protector.mod
 usr/lib/grub/x86_64-efi/tpm2_key_protector.module
+usr/lib/grub/x86_64-efi/tpm_record_pcrs.mod
+usr/lib/grub/x86_64-efi/tpm_record_pcrs.module
 usr/lib/grub/x86_64-efi/tr.mod
 usr/lib/grub/x86_64-efi/tr.module
 usr/lib/grub/x86_64-efi/trig.mod
@@ -1231,8 +1268,12 @@ usr/lib/grub/x86_64-efi/videotest.mod
 usr/lib/grub/x86_64-efi/videotest.module
 usr/lib/grub/x86_64-efi/videotest_checksum.mod
 usr/lib/grub/x86_64-efi/videotest_checksum.module
+usr/lib/grub/x86_64-efi/virtionet.mod
+usr/lib/grub/x86_64-efi/virtionet.module
 usr/lib/grub/x86_64-efi/wrmsr.mod
 usr/lib/grub/x86_64-efi/wrmsr.module
+usr/lib/grub/x86_64-efi/xen_boot.mod
+usr/lib/grub/x86_64-efi/xen_boot.module
 usr/lib/grub/x86_64-efi/xfs.mod
 usr/lib/grub/x86_64-efi/xfs.module
 usr/lib/grub/x86_64-efi/xnu.mod
@@ -1326,6 +1367,7 @@ usr/share/grub/unicode.pf2
 #usr/share/locale/ko/LC_MESSAGES/grub.mo
 #usr/share/locale/lg/LC_MESSAGES/grub.mo
 #usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
 #usr/share/locale/nb/LC_MESSAGES/grub.mo
 #usr/share/locale/nl/LC_MESSAGES/grub.mo
 #usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -1352,6 +1394,7 @@ usr/share/grub/unicode.pf2
 #usr/share/man/man1/grub-mkimage.1
 #usr/share/man/man1/grub-mklayout.1
 #usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1
 #usr/share/man/man1/grub-mkrelpath.1
 #usr/share/man/man1/grub-mkrescue.1
diff --git a/lfs/grub b/lfs/grub
index 226775c63..6bfa7e964 100644
--- a/lfs/grub
+++ b/lfs/grub
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.14
+VER        = 2.16
 
 THISAPP    = grub-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -61,7 +61,7 @@ objects = $(DL_FILE) \
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 unifont-7.0.03.pcf.gz = $(DL_FROM)/unifont-7.0.03.pcf.gz
 
-$(DL_FILE)_BLAKE2 = 724bb430d8824bec39e6a025cf354a780b79260684c7c4e3d28beb08c8bee10d082a089fcb799f8f5eb6e83abcf8675fb7c5f5ddf443c5c0e61d6f180ee341af
+$(DL_FILE)_BLAKE2 = 74437966a70854ec29f3d80715ac3436f4340e6f69ccd084b8762dd36f80a30e707333d2102639372ce421b79179a1fa043cbb6a2d25e568d035b916b228fca1
 unifont-7.0.03.pcf.gz_BLAKE2 = fb96c1786fcc8c77796c90ce30a2b7d544013bd62cedbf7b027e1894fe75cdbd2044717796cb0e3150db1457fcb58076491d9c0b855621b652fb9a52c0793469
 
 install : $(TARGET)
@@ -94,9 +94,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@rm -rf $(DIR_APP) $(DIR_APP_EFI) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.06-remove_os_prober_disabled_warning.patch
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.02_disable_vga_fallback.patch
-	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch
-	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
-	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
+	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
 	cd $(DIR_APP) && [ ! -e grub-core/extra_deps.lst ] && echo 'depends bli part_gpt' > grub-core/extra_deps.lst
 	cd $(DIR_APP) && autoreconf -vfi
 
diff --git a/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch b/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
deleted file mode 100644
index 33013e46b..000000000
--- a/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
+++ /dev/null
@@ -1,53 +0,0 @@
-diff -Naur grub-2.14.orig/acinclude.m4 grub-2.14/acinclude.m4
---- grub-2.14.orig/acinclude.m4	2025-11-20 17:02:39.000000000 +0100
-+++ grub-2.14/acinclude.m4	2026-05-05 17:11:21.117127788 +0200
-@@ -79,11 +79,6 @@
- [AC_MSG_CHECKING([whether ${TARGET_OBJCOPY} works for absolute addresses])
- AC_CACHE_VAL(grub_cv_prog_objcopy_absolute,
- [cat > conftest.c <<\EOF
--asm (
--    ".globl start, _start, __start\n"
--    ".ifdef cmain; .set start = _start = __start = cmain\n.endif\n"
--    ".ifdef _cmain; .set start = _start = __start = _cmain\n.endif\n"
--);
- void cmain (void);
- void
- cmain (void)
-diff -Naur grub-2.14.orig/configure.ac grub-2.14/configure.ac
---- grub-2.14.orig/configure.ac	2026-01-14 15:30:04.000000000 +0100
-+++ grub-2.14/configure.ac	2026-05-05 17:09:38.251922592 +0200
-@@ -1461,6 +1461,7 @@
-   TARGET_IMG_LDSCRIPT='$(top_srcdir)'"/conf/i386-cygwin-img-ld.sc"
-   TARGET_IMG_LDFLAGS="-Wl,-T${TARGET_IMG_LDSCRIPT}"
-   TARGET_IMG_LDFLAGS_AC="-Wl,-T${srcdir}/conf/i386-cygwin-img-ld.sc"
-+  TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"
-   TARGET_IMG_CFLAGS=
- else
-   TARGET_APPLE_LINKER=0
-@@ -1468,6 +1469,7 @@
-   TARGET_IMG_LDSCRIPT=
-   TARGET_IMG_LDFLAGS='-Wl,-N'
-   TARGET_IMG_LDFLAGS_AC='-Wl,-N'
-+  TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"
-   TARGET_IMG_CFLAGS=
- fi
- 
-@@ -1798,18 +1800,6 @@
- m4_ifndef([AX_CHECK_LINK_FLAG], [m4_fatal([autoconf-archive is missing. You must install it to generate the configure script.])])
- 
- if test "x$TARGET_APPLE_LINKER" != x1 ; then
--AX_CHECK_LINK_FLAG([-Wl,--image-base,0x400000],
--    [TARGET_IMG_BASE_LDOPT="-Wl,--image-base"],
--    [TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"],
--    [],
--    [AC_LANG_SOURCE([
--asm (".globl start; start:");
--asm (".globl _start; _start:");
--asm (".globl __start; __start:");
--void __main (void);
--void __main (void) {}
--int main (void);
--    ])])
- grub_PROG_OBJCOPY_ABSOLUTE
- fi
- grub_PROG_LD_BUILD_ID_NONE
diff --git a/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch b/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
deleted file mode 100644
index 5bde9e56c..000000000
--- a/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
+++ /dev/null
@@ -1,15 +0,0 @@
-diff -Naur grub-2.14.orig/configure.ac grub-2.14/configure.ac
---- grub-2.14.orig/configure.ac	2026-05-05 17:09:38.251922592 +0200
-+++ grub-2.14/configure.ac	2026-05-05 17:32:27.405733625 +0200
-@@ -1794,11 +1794,6 @@
- # Defined in acinclude.m4.
- grub_ASM_USCORE
- grub_PROG_TARGET_CC
--
--# The error message produced by autoconf if autoconf-archive is not installed is
--# quite misleading and not very helpful. So, try point people in the right direction.
--m4_ifndef([AX_CHECK_LINK_FLAG], [m4_fatal([autoconf-archive is missing. You must install it to generate the configure script.])])
--
- if test "x$TARGET_APPLE_LINKER" != x1 ; then
- grub_PROG_OBJCOPY_ABSOLUTE
- fi
diff --git a/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch b/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
similarity index 50%
rename from src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch
rename to src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
index 4bfd46856..0416d9af4 100644
--- a/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch
+++ b/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
@@ -1,27 +1,15 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Jason Montleon <jason@montleon.com>
-Date: Fri, 3 May 2024 13:18:37 -0400
-Subject: [PATCH] Use medany instead of large model for RISCV
-
-Signed-off-by: Jason Montleon <jason@montleon.com>
----
- configure.ac | 6 ++++--
- 1 file changed, 4 insertions(+), 2 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index d223fe3ef6e..6a6688e362a 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -1313,7 +1313,7 @@ AC_SUBST(TARGET_LDFLAGS_OLDMAGIC)
+--- grub-2.16/configure.ac.orig	2026-10-05 23:16:28.087549369 +0200
++++ grub-2.16/configure.ac	2026-10-05 23:23:51.374295457 +0200
+@@ -1712,7 +1712,7 @@
  
- LDFLAGS="$TARGET_LDFLAGS"
+ CFLAGS="$TARGET_CFLAGS"
  
 -if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 || test "$target_cpu" = riscv64 ; then
 +if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 ; then
    # Use large model to support 4G memory
    AC_CACHE_CHECK([whether option -mcmodel=large works], grub_cv_cc_mcmodel, [
      CFLAGS="$TARGET_CFLAGS -mcmodel=large"
-@@ -1323,9 +1323,11 @@ if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 || test "$target_
+@@ -1722,9 +1722,11 @@
    ])
    if test "x$grub_cv_cc_mcmodel" = xyes; then
      TARGET_CFLAGS="$TARGET_CFLAGS -mcmodel=large"
@@ -33,4 +21,4 @@ index d223fe3ef6e..6a6688e362a 100644
 +    TARGET_CFLAGS="$TARGET_CFLAGS -mcmodel=medany"
  fi
  
- if test "$target_cpu"-"$platform" = x86_64-efi; then
+ # Stack smashing protector.
-- 
2.55.0



^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-10-07 13:49 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-10-07 13:49 [PATCH] core205: Ship grub Adolf Belka
2026-10-07 13:49 ` [PATCH] grub: Update to version 2.16 Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox