* [PATCH] grub: Update to version 2.16
2026-10-07 13:49 [PATCH] core205: Ship grub Adolf Belka
@ 2026-10-07 13:49 ` Adolf Belka
0 siblings, 0 replies; 2+ messages in thread
From: Adolf Belka @ 2026-10-07 13:49 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.14 to 2.16
- Update of all 4 rootfiles
- Tested out grub-2.16 on a non-efi vm build and it worked with no issues
- Modified patch for using medany instead of large model for riscv to apply to grub-2.16
- The two patches reverting configure commits from grub-2.14 are no longer needed as
they have been removed and replaced with altertnatives that allow grub to build
without issues.
- Changelog
2.16
* New/improved filesystem and disk support:
* Native NVMe disk driver, allowing boot from NVMe devices on coreboot and on
systems whose firmware cannot reach them. (833f3b5f9)
* NVMe over Fibre Channel support and multiple NVMe boot paths on IEEE 1275,
including fibre channel discovery for ofpathname and FCP methods for WWPN
and LUNs. (1ffe804c0, 0f13508bc, dab8ef7f8, adeeeeda3, d0773a062,
edcdf6598)
* New `btrfs-info', `btrfs-list-subvols' and `btrfs-get-default-subvol'
commands. (9ade9d031, e31292f7d, 8b23e97f1)
* Btrfs on-disk structures are now explicitly packed. (96f2dfb92)
* Bound directory iteration, symlink sizes and superblock fields in f2fs, and
reject zero-length directory entry names. (a11cc4333, 6fbc6055b, 994e63b1d,
8c345080c)
* Bound the symlink target size in HFS+. (b157604e0, b1d888d70)
* Fix undefined behaviour and uninitialised reads on malformed ext2
filesystems. (d1d53ed56, 8908f4bc9)
* Fix uninitialised reads in FAT and a possible infinite loop in exFAT.
(56d859d14, ba8d0bae2)
* Fix an incorrect runlist offset boundary check in NTFS. (ae0143f1d)
* Handle root inode read failure when mounting XFS. (006994468)
* Fix null pointer member access on mount failure in nilfs2, f2fs and erofs.
(246ade44d)
* Free the block list on file close and fix a node leak in fshelp.
(fc5d56b44, adc0cdd58)
* Fix root dataset detection on encrypted ZFS pools, and mark the ZFS
bookmark_v2 and bookmark_written features as supported. (248fc0ea7,
8cda718c0)
* Fix logical partition numbering when no primary partitions exist.
(27c157c1e, a4257251f)
* LVM metadata buffers are now allocated from the raw contents. (e219cc41e)
* Fix raid_disks decoding for mdraid 1.x on big-endian systems. (dcfb9f917)
* Reuse free slots when attaching USB mass storage devices. (00f8ad96c)
* Disk cache slot thrashing, cache locking and hit-ratio accounting fixes.
(63c601d8f, dc0b2735b, 490e0e57f)
* New/improved terminal and video support:
* AMBA PL011 UART support. (fcff8f881)
* Scan all BARs on PCI serial devices when looking for an I/O port.
(af8c7012e)
* Jump- and delete-word shortcuts in the command line editor. (ad4cf56cc)
* Drop support for the UGA Draw and Console Control protocols; efi_uga is now
loaded only on x86 EFI platforms. (ef6ee4ad4, 129588e49)
* Fix integer overflow and shift undefined behaviour in the PNG and JPEG
decoders, and EOF misdetection in the PNG, JPEG and TGA readers.
(368b11823, f08903403, 1d4899bae)
* Reject out-of-range and overflowing proportional-spec values in gfxmenu.
(b10f26d9b)
* Free cached glyphs when freeing a font, plus font memory leak fixes found
by fuzzing. (ac4b9c3f5, f3e63f295)
* Boot protocol improvements:
* Set the loaded image device path for the EFI Linux and chainloader loaders
when firmware leaves it missing. (b13e52e0a, 07243a5e9, b681823b9)
* Use device tree bootargs for the EFI Linux loader when no command line is
given. (cfba8a4ef, 7272ed9ec)
* Ensure the FDT blob is 8-byte aligned. (bcc8f0d71)
* Allow xen_hypervisor and xen_module on x86_64-efi. (5754c5a51)
* Restrict the x86 relocator preamble page table to FreeBSD, clear its unused
entries and move runtime-patched stubs to the .data section. (62289192b,
f8617b653, 577272de9, c7a81c2f1, 4347e1bfc)
* Inherit the firmware PML4 in the x86 relocator preamble page table and
identity map the full 512G of every PML4 entry GRUB overwrites, so that
MMIO and EFI boot services mappings above the top of RAM stay reachable.
(f40e41a31, 8773969ac)
* Append the version to BLS entry titles and the uname to UKI entry titles,
and skip UKIs with no PRETTY_NAME. (7f46a3987, 9be1b7564, 00f09ed61)
* New/improved network support:
* New `net_dhcp6' command providing DHCPv6 support. (b175570c4, 31a40660a,
42bff9bdb)
* Configure the network from the UEFI device path and set the DNS server from
the UEFI protocol. (2386c1909, fe0a09e85)
* Process the DHCPACK packet during HTTP Boot. (3e20a68f9)
* Print URI and DNS device path information, and correct the endianness of
IPv6 device paths. (a59e894a5, 945fc8647)
* Return the HTTP status code from http_establish and handle HTTP error
responses more cleanly. (e2cdb5c4c, 176ba4445)
* Fix a hang when a TFTP file is a directory. (74a33ddd4)
* Fix an uninitialised cmd_server.option causing DNS failures. (7e864f345)
* Fix a logical operator in the DHCP option overload check. (9dcd6f100)
* Check the result of grub_netbuff_put() in http_receive(). (e5fce9d0c)
* New virtio-net driver. (6ebf1c8eb, abfba8add, 65bb6c229)
* New/improved platform support:
* New `connectefi' command, connecting UEFI Disk I/O and SCSI I/O devices so
that network-booted GRUB can chainload from a local disk. (80d59ed3e)
* New `lsefivar' command to dump UEFI runtime variables. (f296813a0,
f107c2ad7, bcb738d8c)
* New `efibootnext' module and 31_efi_bootnext script for one-shot boot
entries, keyed off the ESP PARTUUID and vendor directory. (3d0a81dc0,
6b8d690e3, 53b7b754b, ba20519fc, 9cc5ebba6, 69a08ed5f)
* Complete the UEFI status code definitions. (72792baa7)
* Fix UTF-16 to UTF-8 conversion and variable enumeration in the EFI
commands. (c0aaffa8b, e1da075fe)
* Try allocating in the lower 4GB first, and limit arm64 allocations to the
4GB boundary. (091e50562, 1cae86131)
* Enable (u)divdi3 and (u)moddi3 for MIPS and implement __aeabi_uldivmod.
(22a15660c, 7dfe88fcc)
* Only flush the cache on VIA CPUs when the cpuid family matches. (3b3458f72)
* Mandatory install device check for PowerPC. (456ab994a)
* Convert several PowerPC IEEE 1275 error logs to debug logs. (147a52298)
* Fix a left shift overflow on ia64. (42889fea3)
* Security:
* ML-DSA post-quantum signature support for appended signatures, including
the algorithm OID parser and test vectors. (c59c042bf, a37b0c0db,
d8da70576, 3394f6f9f, ef122da81, ce3ac8f2b, 41081d572, 4e1510370)
* Complete dbx image and certificate revocation checks for appended
signatures, with db and dbx read at module load on PowerPC IEEE 1275.
(15413acb6, e40793ccf)
* Parse and verify PKCS#7 signedAttrs -- contentType, messageDigest and
signingTime -- against the content and the signer certificate, and decode
X.509 certificate validity periods. (d86ddefba, 9badd596c, 59fd2c25a,
928904041, 549b988e0, 07635d644, bd9ded192, 96dcc3c29, f7c25f1fa,
19200af70, 19abb28a2)
* Parse the signer issuer and serial number and the signature algorithm from
PKCS#7 signerInfos, and enforce signature length validation. (32855cf73,
31c6b0a98, 59fd2c25a)
* Large refactor of the appendedsig module: X.509 handling isolated, RSA
verification extracted into a pk module, db/dbx hash lists converted to
linked lists. (ec5877a3e, 70aa3f557, f0dab014d, 487cd55c6, 719adb7f4,
c000ff57e, 6cce77cdd)
* TPCM (Trusted Platform Control Module) verifier on x86_64 EFI. (096aa1da6,
f5e0c076c, 558411534, 5e4648a61)
* New `tpm_record_pcrs' command recording a TPM PCR snapshot for the OS, via
an EFI variable or, on PowerPC IEEE 1275, the /chosen device tree node.
(1bd155080, 9a8369807, 0e346a131, 178144cb5, 6aa93964c)
* Skip TPM measurement of inspection-only file types. (4c6efaca3)
* New `password_argon2' command and grub-mkpasswd-argon2 utility, adding
Argon2 hashes for GRUB user passwords. (0511c84c0, a2b9258d5, ccc3620a0)
* Access levels for authentication in grub-mkconfig, used by all the default
grub.d scripts. (9ef06ff1d, 530a02f36, abf868b1b, ed5fbe400)
* MFA key protector. (40a1f9e5b, 9ca263d81, 1ea9e4f86)
* Downstream SBAT support: an sbat.csv template, validation of the SBAT CSV
against the build-time SBAT level, and an empty --sbat now meaning the
bundled sbat.csv. (99ab9d04b, bb483e1f4, 3777c2071, 1a7158490)
* Reject caller-supplied serial port and MMIO addresses under lockdown: the
`serial' command now only accepts a raw address when a port is already
registered at it, so it can no longer be used to write to arbitrary memory.
Lookups by name and `auto' are unaffected, as is the behaviour outside of
lockdown. (26beaa3b2, 92a2f034e)
* Print human readable authentication failure messages instead of the source
location of the failing check. (0c2822769)
* Exclude PKS support from grub-emu in the appendedsig module. (aaaf50378)
* Fix an off-by-one out-of-bounds read of the PGP issuer key-ID subpacket,
fix new-format packet length parsing, look for the key ID in hashed
signature subpackets, and warn when a secret key packet is found.
(d0902e62a, 5ee2e04db, f9fe263f0, 6f71f6502, 0a0c5e6bb)
* Fix a heap overflow reading the NVMe-oF address in ofpath. (284aa65ef)
* Fix an integer overflow in the mmap binary search. (170221b35)
* Fix boot failure when shim validation is disabled. (089d0567c)
* Cap the PCR unconditionally in the TPM2 key protector. (75f6ee3bb)
* Handle cryptodisk_passphrase_tries=0 correctly. (c605317e0)
* Do not require authentication to exit a submenu. (6f5955148)
* Performance:
* Optimise grub_memmove() with word-by-word copying, restore grub_memcpy() as
an inline function, and add a memmove benchmark. (ace5fddc2, 2f0547739,
c82f5c540)
* Reduce disk cache slot thrashing. (63c601d8f)
* Require SSE before enabling AVX and avoid duplicate enable/reset calls in
the libgcrypt hardware feature detection. (4aa3a7995, 4cdb8b163, 3b17bc627,
bb8d22837, 14e526983, 63c32fde3)
* Installation and other utility improvements:
* grub-install skips EFI registration when GRUB is already registered and
passes GRUB_DISTRIBUTOR directly for the bootloader ID. (9f682bf19,
ddb8f4c1f)
* grub-editenv removes a stale env_block on unsupported filesystems.
(a0476c1a3)
* grub-mkstandalone warns on non-regular files. (7d3e803e3)
* Force the device path for diskfilter and dmraid roots in 10_linux and
20_linux_xen. (928df0770)
* Use findfs for UUID and PARTUUID device lookup in the templates.
(26f82dc61)
* Default gfxpayload=keep only when booting using EFI. (bcc760dc5)
* Skip mount points in grub_find_device. (715c60967)
* Support canonical paths not starting with / in render-label. (b4800d434)
* Do not treat non-GPT partitions as an error in the bli command. (7b037605e)
* Fix an rmmod underflow on autoloaded modules. (74fca99f2)
* New grub_list_length() helper counting the elements of a list. (3e1ab0ee0)
* ofpath robustness fixes: correct the path_size calculation, bound the
fscanf string and read sizes in of_fc_port_name(), initialise nsid in
of_path_get_nvme_nsid(), handle lstat errors and harden the strncpy() and
strstr() calls. (b71ae6db2, 675d85810, 3b2aff5d4, 02efab276, c6f759f9c,
0ff251503, f81b844e9)
* Check for NULL in add_multiple_nvme_bootdevices() and initialise sectors
and nsec in grub-setup. (ddf942168, 79b76893c)
* Save the str[r]chr() return values into const pointers in grub-probe and
the device name resolver. (9f4a586f1, ce6f2b57f)
* Skip .mo and .gmo directory entries in copy_locales(). (25e9f2154)
* Memory and resource leak fixes across ofpath, getroot, platform,
grub-mkrescue, efidisk, appendedsig and the configuration parser.
(284aa65ef, fc9f05fe2, 0a1877cb1, e6e3ece5b, 28ee8ff77, d67dec8d2,
92eb0acb2, 7cafb2fa7, bb2c5c740, dd6cb6deb, 7115cf2ad, 52f113a86)
* Testing and debugging:
* New unit and functional tests: tpcm_unit_test, mfa_key_protector_test,
rmmod_test, net_http_transfer_test, network protocol integration tests,
loadenv unit and end-to-end tests, FDT and Image processing unit tests,
MLDSA tests and a memmove benchmark. (558411534, 1ea9e4f86, 807a3f1d9,
abfba8add, b74260f8c, 4379c4e02, feb0f7be5, 916327d56, dc74b43b5,
3394f6f9f, ef122da81, c82f5c540)
* Run the libtasn1 coding-long-oid and Test_errors self-tests. (424b36804)
* Serial tests enabled for arm*-efi and loongarch64-efi. (9e9efbe3c,
6d76ae440)
* New partmap_test case for logical partitions without primaries. (2d9f8846b,
df576cac8)
* PGP signature tests against Sequoia-PGP generated keys and signatures.
(5ef6337a2, 1d0b9fd17)
* Fix a loop device race condition in the ext tests. (278263d39)
* Fix the -f test on files served over TFTP and HTTP, and clarify what that
test guarantees. (ffc05ec96, 83cc0e322)
* Distribute the network test scripts. (02d4b7b7b)
* Teach grub-fs-tester about luks2_test and remove the emu device.map in the
grub-shell cleanup. (03fa65f1f, add20d17b)
* Build system:
* libgcrypt 1.12.2, including Dilithium/ML-DSA and support for verifying raw
data larger than 65535 bytes. (9469e618d, d5ca1a78b, ce3ac8f2b, c33dadaac)
* libtasn1 4.21.0. (7a30313dc, d21625937, 234bb2aaf, 49ef3593a)
* Cygwin and mingw cross-compilation fixes: updated i386-cygwin linker
script, stripped extra sections, a pei386 runtime relocator stub and
correct PE relocation section flags. (7d0a4c07a, 3dce38eb1, 3a509d3b0,
6d32b5a87, 87fef5611, a23d4a235, 172a50f07, 747275485, 2e8c7b4c1,
feb3115f7)
* clang build fixes across x86_64, PowerPC IEEE 1275 and the tests, and
llvm/lld link flag fixes for LoongArch, PowerPC, SPARC and MIPS.
(047ee58ef, 990544b46, 0459424d3, e35f31246)
* i386-pc kernel image generation reworked around --image-base rather than
-Ttext. The 2.14 --image-base linker probe and the GNU Autoconf Archive
requirement it brought in were reverted in favour of this approach.
(ba2f35114, 86283bfd4, ab6f73517, 9922ed133, 1dc2986c7, 7b72d6cbd,
935e889ab)
* Parallel build support and a parallel build failure fix. (304ba2637,
c2a215245)
* Fix a linker error on macOS hosts and a build failure with platform=emu and
libzfs. (8a58da21a, 943ce33da)
* Stop forcibly distributing all gnulib headers. (dc827846a)
* Compiler warning cleanups across ofpath, bootp, platform, gnulib,
grub-protect and the arm64 Xen boot loader. (6a7fb8f74, 23becbaaf,
f2601de58, 1ae2a2cf3, 6a9d21eaf, 081347a87, cf8b48019)
* Replace codecs.open() in util/import_gcry.py and drop the unused
SHA1_DIGEST_SIZE definition. (89ce24a7b, c592a9d46)
* Continuous integration:
* GitLab CI introduced for GRUB, with builds and checks across multiple
architectures, a powerpc64le-linux-gnu/ieee1275 job, clang jobs, scheduled
Windows mingw builds, weekly Coverity scans, a Signed-off-by check and a
release pipeline. (15c99a7a6, da0200d5a, 7bba0975e, ee4a4aa35, 4345af6d3,
a3b64ccb1, 5fd3a91e7, b7c5ed972, addd5742c, f89af02ce, 1b9d412ba,
a40d8f3fc, 1ab34666a, c1d8befec, e511c82bc)
* CI coverage and turnaround improvements: wider clang platform coverage on
x86_64, the bootnext functional tests added to the native and non-native
test matrices, duplicate target/platform entries removed, failing checks
re-run with debug information, bash xtrace enabled in the scripts, build
artifacts always stored with a 30 day lifetime for check, and the pages job
limited to index.html changes. (4482637b4, 4cdcb3dfa, ae199dfec, 920a440c3,
edd057b5c, 206d331b8, c5aa88220, ae792be6b, 94a457f18, c7bf1d032,
4a1a96a8e)
* Documentation and project infrastructure:
* Documentation for the new commands and features: ML-DSA appended
signatures, tpm_record_pcrs, lsefivar, the Btrfs commands, virtionet,
net_dhcp6, access levels, the MFA key protector, password_argon2 and
grub-mkpasswd-argon2, and device tree boot arguments. (19b933baa,
93aedcb21, f107c2ad7, e36337934, 65bb6c229, 42bff9bdb, ed5fbe400,
9ca263d81, ccc3620a0, 32a720f36, 7272ed9ec)
* Document the serial port restrictions under lockdown, add the missing
connectefi entry to the command-line command list, note that cryptomount
now supports Argon2 and fix assorted typos in the comments and the
documentation. (92a2f034e, 4e284ff4d, 53fae3e8a, c160b5861)
* The 'Authentication and Authorisation' section was renamed and access level
documentation added. (abf868b1b, ed5fbe400)
* CONTRIBUTING and a Code of Conduct were added, and MAINTAINERS and the
SECURITY policy were updated. (754a3d867, 9b74ffa69, da3675583, 14949bbd1,
b07cc37ca, 342661cb8)
Tested-by: Adolf Berlka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/aarch64/grub | 23 ++++++++
config/rootfiles/common/loongarch64/grub | 23 ++++++++
config/rootfiles/common/riscv64/grub | 23 ++++++++
config/rootfiles/common/x86_64/grub | 47 +++++++++++++++-
lfs/grub | 8 ++-
...heck_linker_for_--image-base_support.patch | 53 -------------------
...if_autoconf-archive_is_not_installed.patch | 15 ------
...ny-instead-of-large-model-for-RISCV.patch} | 24 +++------
8 files changed, 123 insertions(+), 93 deletions(-)
delete mode 100644 src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
delete mode 100644 src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
rename src/patches/grub/{grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch => grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch} (50%)
diff --git a/config/rootfiles/common/aarch64/grub b/config/rootfiles/common/aarch64/grub
index 83166a61c..c62eadee7 100644
--- a/config/rootfiles/common/aarch64/grub
+++ b/config/rootfiles/common/aarch64/grub
@@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen
etc/grub.d/25_bli
etc/grub.d/30_os-prober
etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
etc/grub.d/40_custom
etc/grub.d/41_custom
#etc/grub.d/README
@@ -23,6 +24,7 @@ usr/bin/grub-mkfont
usr/bin/grub-mkimage
usr/bin/grub-mklayout
usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
usr/bin/grub-mkpasswd-pbkdf2
usr/bin/grub-mkrelpath
usr/bin/grub-mkrescue
@@ -89,6 +91,8 @@ usr/lib/grub/arm64-efi/command.lst
usr/lib/grub/arm64-efi/config.h
usr/lib/grub/arm64-efi/configfile.mod
usr/lib/grub/arm64-efi/configfile.module
+usr/lib/grub/arm64-efi/connectefi.mod
+usr/lib/grub/arm64-efi/connectefi.module
usr/lib/grub/arm64-efi/cpio.mod
usr/lib/grub/arm64-efi/cpio.module
usr/lib/grub/arm64-efi/cpio_be.mod
@@ -126,6 +130,8 @@ usr/lib/grub/arm64-efi/echo.mod
usr/lib/grub/arm64-efi/echo.module
usr/lib/grub/arm64-efi/efi_gop.mod
usr/lib/grub/arm64-efi/efi_gop.module
+usr/lib/grub/arm64-efi/efibootnext.mod
+usr/lib/grub/arm64-efi/efibootnext.module
usr/lib/grub/arm64-efi/efifwsetup.mod
usr/lib/grub/arm64-efi/efifwsetup.module
usr/lib/grub/arm64-efi/efinet.mod
@@ -196,6 +202,8 @@ usr/lib/grub/arm64-efi/gcry_md4.mod
usr/lib/grub/arm64-efi/gcry_md4.module
usr/lib/grub/arm64-efi/gcry_md5.mod
usr/lib/grub/arm64-efi/gcry_md5.module
+usr/lib/grub/arm64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/arm64-efi/gcry_pubkey_dilithium.module
usr/lib/grub/arm64-efi/gcry_rfc2268.mod
usr/lib/grub/arm64-efi/gcry_rfc2268.module
usr/lib/grub/arm64-efi/gcry_rijndael.mod
@@ -294,6 +302,8 @@ usr/lib/grub/arm64-efi/lsefimmap.mod
usr/lib/grub/arm64-efi/lsefimmap.module
usr/lib/grub/arm64-efi/lsefisystab.mod
usr/lib/grub/arm64-efi/lsefisystab.module
+usr/lib/grub/arm64-efi/lsefivar.mod
+usr/lib/grub/arm64-efi/lsefivar.module
usr/lib/grub/arm64-efi/lsmmap.mod
usr/lib/grub/arm64-efi/lsmmap.module
usr/lib/grub/arm64-efi/lssal.mod
@@ -318,8 +328,12 @@ usr/lib/grub/arm64-efi/mdraid1x.mod
usr/lib/grub/arm64-efi/mdraid1x.module
usr/lib/grub/arm64-efi/memdisk.mod
usr/lib/grub/arm64-efi/memdisk.module
+usr/lib/grub/arm64-efi/memmove_bench.mod
+usr/lib/grub/arm64-efi/memmove_bench.module
usr/lib/grub/arm64-efi/memrw.mod
usr/lib/grub/arm64-efi/memrw.module
+usr/lib/grub/arm64-efi/mfa.mod
+usr/lib/grub/arm64-efi/mfa.module
usr/lib/grub/arm64-efi/minicmd.mod
usr/lib/grub/arm64-efi/minicmd.module
usr/lib/grub/arm64-efi/minix.mod
@@ -334,6 +348,8 @@ usr/lib/grub/arm64-efi/minix3_be.mod
usr/lib/grub/arm64-efi/minix3_be.module
usr/lib/grub/arm64-efi/minix_be.mod
usr/lib/grub/arm64-efi/minix_be.module
+usr/lib/grub/arm64-efi/mldsa_test.mod
+usr/lib/grub/arm64-efi/mldsa_test.module
usr/lib/grub/arm64-efi/mmap.mod
usr/lib/grub/arm64-efi/mmap.module
usr/lib/grub/arm64-efi/moddep.lst
@@ -388,6 +404,8 @@ usr/lib/grub/arm64-efi/parttool.mod
usr/lib/grub/arm64-efi/parttool.module
usr/lib/grub/arm64-efi/password.mod
usr/lib/grub/arm64-efi/password.module
+usr/lib/grub/arm64-efi/password_argon2.mod
+usr/lib/grub/arm64-efi/password_argon2.module
usr/lib/grub/arm64-efi/password_pbkdf2.mod
usr/lib/grub/arm64-efi/password_pbkdf2.module
usr/lib/grub/arm64-efi/pbkdf2.mod
@@ -426,6 +444,7 @@ usr/lib/grub/arm64-efi/romfs.mod
usr/lib/grub/arm64-efi/romfs.module
usr/lib/grub/arm64-efi/rsa_sexp_test.mod
usr/lib/grub/arm64-efi/rsa_sexp_test.module
+usr/lib/grub/arm64-efi/sbat.csv
usr/lib/grub/arm64-efi/scsi.mod
usr/lib/grub/arm64-efi/scsi.module
usr/lib/grub/arm64-efi/search.mod
@@ -485,6 +504,8 @@ usr/lib/grub/arm64-efi/tpm.mod
usr/lib/grub/arm64-efi/tpm.module
usr/lib/grub/arm64-efi/tpm2_key_protector.mod
usr/lib/grub/arm64-efi/tpm2_key_protector.module
+usr/lib/grub/arm64-efi/tpm_record_pcrs.mod
+usr/lib/grub/arm64-efi/tpm_record_pcrs.module
usr/lib/grub/arm64-efi/tr.mod
usr/lib/grub/arm64-efi/tr.module
usr/lib/grub/arm64-efi/trig.mod
@@ -607,6 +628,7 @@ usr/share/grub/unicode.pf2
#usr/share/locale/ko/LC_MESSAGES/grub.mo
#usr/share/locale/lg/LC_MESSAGES/grub.mo
#usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
#usr/share/locale/nb/LC_MESSAGES/grub.mo
#usr/share/locale/nl/LC_MESSAGES/grub.mo
#usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -633,6 +655,7 @@ usr/share/grub/unicode.pf2
#usr/share/man/man1/grub-mkimage.1
#usr/share/man/man1/grub-mklayout.1
#usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
#usr/share/man/man1/grub-mkpasswd-pbkdf2.1
#usr/share/man/man1/grub-mkrelpath.1
#usr/share/man/man1/grub-mkrescue.1
diff --git a/config/rootfiles/common/loongarch64/grub b/config/rootfiles/common/loongarch64/grub
index a8ae2a2e1..c9d704578 100644
--- a/config/rootfiles/common/loongarch64/grub
+++ b/config/rootfiles/common/loongarch64/grub
@@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen
etc/grub.d/25_bli
etc/grub.d/30_os-prober
etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
etc/grub.d/40_custom
etc/grub.d/41_custom
#etc/grub.d/README
@@ -23,6 +24,7 @@ usr/bin/grub-mkfont
usr/bin/grub-mkimage
usr/bin/grub-mklayout
usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
usr/bin/grub-mkpasswd-pbkdf2
usr/bin/grub-mkrelpath
usr/bin/grub-mkrescue
@@ -89,6 +91,8 @@ usr/lib/grub/loongarch64-efi/command.lst
usr/lib/grub/loongarch64-efi/config.h
usr/lib/grub/loongarch64-efi/configfile.mod
usr/lib/grub/loongarch64-efi/configfile.module
+usr/lib/grub/loongarch64-efi/connectefi.mod
+usr/lib/grub/loongarch64-efi/connectefi.module
usr/lib/grub/loongarch64-efi/cpio.mod
usr/lib/grub/loongarch64-efi/cpio.module
usr/lib/grub/loongarch64-efi/cpio_be.mod
@@ -126,6 +130,8 @@ usr/lib/grub/loongarch64-efi/echo.mod
usr/lib/grub/loongarch64-efi/echo.module
usr/lib/grub/loongarch64-efi/efi_gop.mod
usr/lib/grub/loongarch64-efi/efi_gop.module
+usr/lib/grub/loongarch64-efi/efibootnext.mod
+usr/lib/grub/loongarch64-efi/efibootnext.module
usr/lib/grub/loongarch64-efi/efifwsetup.mod
usr/lib/grub/loongarch64-efi/efifwsetup.module
usr/lib/grub/loongarch64-efi/efinet.mod
@@ -196,6 +202,8 @@ usr/lib/grub/loongarch64-efi/gcry_md4.mod
usr/lib/grub/loongarch64-efi/gcry_md4.module
usr/lib/grub/loongarch64-efi/gcry_md5.mod
usr/lib/grub/loongarch64-efi/gcry_md5.module
+usr/lib/grub/loongarch64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/loongarch64-efi/gcry_pubkey_dilithium.module
usr/lib/grub/loongarch64-efi/gcry_rfc2268.mod
usr/lib/grub/loongarch64-efi/gcry_rfc2268.module
usr/lib/grub/loongarch64-efi/gcry_rijndael.mod
@@ -294,6 +302,8 @@ usr/lib/grub/loongarch64-efi/lsefimmap.mod
usr/lib/grub/loongarch64-efi/lsefimmap.module
usr/lib/grub/loongarch64-efi/lsefisystab.mod
usr/lib/grub/loongarch64-efi/lsefisystab.module
+usr/lib/grub/loongarch64-efi/lsefivar.mod
+usr/lib/grub/loongarch64-efi/lsefivar.module
usr/lib/grub/loongarch64-efi/lsmmap.mod
usr/lib/grub/loongarch64-efi/lsmmap.module
usr/lib/grub/loongarch64-efi/lssal.mod
@@ -318,8 +328,12 @@ usr/lib/grub/loongarch64-efi/mdraid1x.mod
usr/lib/grub/loongarch64-efi/mdraid1x.module
usr/lib/grub/loongarch64-efi/memdisk.mod
usr/lib/grub/loongarch64-efi/memdisk.module
+usr/lib/grub/loongarch64-efi/memmove_bench.mod
+usr/lib/grub/loongarch64-efi/memmove_bench.module
usr/lib/grub/loongarch64-efi/memrw.mod
usr/lib/grub/loongarch64-efi/memrw.module
+usr/lib/grub/loongarch64-efi/mfa.mod
+usr/lib/grub/loongarch64-efi/mfa.module
usr/lib/grub/loongarch64-efi/minicmd.mod
usr/lib/grub/loongarch64-efi/minicmd.module
usr/lib/grub/loongarch64-efi/minix.mod
@@ -334,6 +348,8 @@ usr/lib/grub/loongarch64-efi/minix3_be.mod
usr/lib/grub/loongarch64-efi/minix3_be.module
usr/lib/grub/loongarch64-efi/minix_be.mod
usr/lib/grub/loongarch64-efi/minix_be.module
+usr/lib/grub/loongarch64-efi/mldsa_test.mod
+usr/lib/grub/loongarch64-efi/mldsa_test.module
usr/lib/grub/loongarch64-efi/mmap.mod
usr/lib/grub/loongarch64-efi/mmap.module
usr/lib/grub/loongarch64-efi/moddep.lst
@@ -388,6 +404,8 @@ usr/lib/grub/loongarch64-efi/parttool.mod
usr/lib/grub/loongarch64-efi/parttool.module
usr/lib/grub/loongarch64-efi/password.mod
usr/lib/grub/loongarch64-efi/password.module
+usr/lib/grub/loongarch64-efi/password_argon2.mod
+usr/lib/grub/loongarch64-efi/password_argon2.module
usr/lib/grub/loongarch64-efi/password_pbkdf2.mod
usr/lib/grub/loongarch64-efi/password_pbkdf2.module
usr/lib/grub/loongarch64-efi/pbkdf2.mod
@@ -426,6 +444,7 @@ usr/lib/grub/loongarch64-efi/romfs.mod
usr/lib/grub/loongarch64-efi/romfs.module
usr/lib/grub/loongarch64-efi/rsa_sexp_test.mod
usr/lib/grub/loongarch64-efi/rsa_sexp_test.module
+usr/lib/grub/loongarch64-efi/sbat.csv
usr/lib/grub/loongarch64-efi/scsi.mod
usr/lib/grub/loongarch64-efi/scsi.module
usr/lib/grub/loongarch64-efi/search.mod
@@ -485,6 +504,8 @@ usr/lib/grub/loongarch64-efi/tpm.mod
usr/lib/grub/loongarch64-efi/tpm.module
usr/lib/grub/loongarch64-efi/tpm2_key_protector.mod
usr/lib/grub/loongarch64-efi/tpm2_key_protector.module
+usr/lib/grub/loongarch64-efi/tpm_record_pcrs.mod
+usr/lib/grub/loongarch64-efi/tpm_record_pcrs.module
usr/lib/grub/loongarch64-efi/tr.mod
usr/lib/grub/loongarch64-efi/tr.module
usr/lib/grub/loongarch64-efi/trig.mod
@@ -605,6 +626,7 @@ usr/share/grub/unicode.pf2
#usr/share/locale/ko/LC_MESSAGES/grub.mo
#usr/share/locale/lg/LC_MESSAGES/grub.mo
#usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
#usr/share/locale/nb/LC_MESSAGES/grub.mo
#usr/share/locale/nl/LC_MESSAGES/grub.mo
#usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -631,6 +653,7 @@ usr/share/grub/unicode.pf2
#usr/share/man/man1/grub-mkimage.1
#usr/share/man/man1/grub-mklayout.1
#usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
#usr/share/man/man1/grub-mkpasswd-pbkdf2.1
#usr/share/man/man1/grub-mkrelpath.1
#usr/share/man/man1/grub-mkrescue.1
diff --git a/config/rootfiles/common/riscv64/grub b/config/rootfiles/common/riscv64/grub
index f9b981db9..5709ba46f 100644
--- a/config/rootfiles/common/riscv64/grub
+++ b/config/rootfiles/common/riscv64/grub
@@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen
etc/grub.d/25_bli
etc/grub.d/30_os-prober
etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
etc/grub.d/40_custom
etc/grub.d/41_custom
#etc/grub.d/README
@@ -23,6 +24,7 @@ usr/bin/grub-mkfont
usr/bin/grub-mkimage
usr/bin/grub-mklayout
usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
usr/bin/grub-mkpasswd-pbkdf2
usr/bin/grub-mkrelpath
usr/bin/grub-mkrescue
@@ -89,6 +91,8 @@ usr/lib/grub/riscv64-efi/command.lst
usr/lib/grub/riscv64-efi/config.h
usr/lib/grub/riscv64-efi/configfile.mod
usr/lib/grub/riscv64-efi/configfile.module
+usr/lib/grub/riscv64-efi/connectefi.mod
+usr/lib/grub/riscv64-efi/connectefi.module
usr/lib/grub/riscv64-efi/cpio.mod
usr/lib/grub/riscv64-efi/cpio.module
usr/lib/grub/riscv64-efi/cpio_be.mod
@@ -126,6 +130,8 @@ usr/lib/grub/riscv64-efi/echo.mod
usr/lib/grub/riscv64-efi/echo.module
usr/lib/grub/riscv64-efi/efi_gop.mod
usr/lib/grub/riscv64-efi/efi_gop.module
+usr/lib/grub/riscv64-efi/efibootnext.mod
+usr/lib/grub/riscv64-efi/efibootnext.module
usr/lib/grub/riscv64-efi/efifwsetup.mod
usr/lib/grub/riscv64-efi/efifwsetup.module
usr/lib/grub/riscv64-efi/efinet.mod
@@ -196,6 +202,8 @@ usr/lib/grub/riscv64-efi/gcry_md4.mod
usr/lib/grub/riscv64-efi/gcry_md4.module
usr/lib/grub/riscv64-efi/gcry_md5.mod
usr/lib/grub/riscv64-efi/gcry_md5.module
+usr/lib/grub/riscv64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/riscv64-efi/gcry_pubkey_dilithium.module
usr/lib/grub/riscv64-efi/gcry_rfc2268.mod
usr/lib/grub/riscv64-efi/gcry_rfc2268.module
usr/lib/grub/riscv64-efi/gcry_rijndael.mod
@@ -294,6 +302,8 @@ usr/lib/grub/riscv64-efi/lsefimmap.mod
usr/lib/grub/riscv64-efi/lsefimmap.module
usr/lib/grub/riscv64-efi/lsefisystab.mod
usr/lib/grub/riscv64-efi/lsefisystab.module
+usr/lib/grub/riscv64-efi/lsefivar.mod
+usr/lib/grub/riscv64-efi/lsefivar.module
usr/lib/grub/riscv64-efi/lsmmap.mod
usr/lib/grub/riscv64-efi/lsmmap.module
usr/lib/grub/riscv64-efi/lssal.mod
@@ -318,8 +328,12 @@ usr/lib/grub/riscv64-efi/mdraid1x.mod
usr/lib/grub/riscv64-efi/mdraid1x.module
usr/lib/grub/riscv64-efi/memdisk.mod
usr/lib/grub/riscv64-efi/memdisk.module
+usr/lib/grub/riscv64-efi/memmove_bench.mod
+usr/lib/grub/riscv64-efi/memmove_bench.module
usr/lib/grub/riscv64-efi/memrw.mod
usr/lib/grub/riscv64-efi/memrw.module
+usr/lib/grub/riscv64-efi/mfa.mod
+usr/lib/grub/riscv64-efi/mfa.module
usr/lib/grub/riscv64-efi/minicmd.mod
usr/lib/grub/riscv64-efi/minicmd.module
usr/lib/grub/riscv64-efi/minix.mod
@@ -334,6 +348,8 @@ usr/lib/grub/riscv64-efi/minix3_be.mod
usr/lib/grub/riscv64-efi/minix3_be.module
usr/lib/grub/riscv64-efi/minix_be.mod
usr/lib/grub/riscv64-efi/minix_be.module
+usr/lib/grub/riscv64-efi/mldsa_test.mod
+usr/lib/grub/riscv64-efi/mldsa_test.module
usr/lib/grub/riscv64-efi/mmap.mod
usr/lib/grub/riscv64-efi/mmap.module
usr/lib/grub/riscv64-efi/moddep.lst
@@ -388,6 +404,8 @@ usr/lib/grub/riscv64-efi/parttool.mod
usr/lib/grub/riscv64-efi/parttool.module
usr/lib/grub/riscv64-efi/password.mod
usr/lib/grub/riscv64-efi/password.module
+usr/lib/grub/riscv64-efi/password_argon2.mod
+usr/lib/grub/riscv64-efi/password_argon2.module
usr/lib/grub/riscv64-efi/password_pbkdf2.mod
usr/lib/grub/riscv64-efi/password_pbkdf2.module
usr/lib/grub/riscv64-efi/pbkdf2.mod
@@ -426,6 +444,7 @@ usr/lib/grub/riscv64-efi/romfs.mod
usr/lib/grub/riscv64-efi/romfs.module
usr/lib/grub/riscv64-efi/rsa_sexp_test.mod
usr/lib/grub/riscv64-efi/rsa_sexp_test.module
+usr/lib/grub/riscv64-efi/sbat.csv
usr/lib/grub/riscv64-efi/scsi.mod
usr/lib/grub/riscv64-efi/scsi.module
usr/lib/grub/riscv64-efi/search.mod
@@ -485,6 +504,8 @@ usr/lib/grub/riscv64-efi/tpm.mod
usr/lib/grub/riscv64-efi/tpm.module
usr/lib/grub/riscv64-efi/tpm2_key_protector.mod
usr/lib/grub/riscv64-efi/tpm2_key_protector.module
+usr/lib/grub/riscv64-efi/tpm_record_pcrs.mod
+usr/lib/grub/riscv64-efi/tpm_record_pcrs.module
usr/lib/grub/riscv64-efi/tr.mod
usr/lib/grub/riscv64-efi/tr.module
usr/lib/grub/riscv64-efi/trig.mod
@@ -605,6 +626,7 @@ usr/share/grub/unicode.pf2
#usr/share/locale/ko/LC_MESSAGES/grub.mo
#usr/share/locale/lg/LC_MESSAGES/grub.mo
#usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
#usr/share/locale/nb/LC_MESSAGES/grub.mo
#usr/share/locale/nl/LC_MESSAGES/grub.mo
#usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -631,6 +653,7 @@ usr/share/grub/unicode.pf2
#usr/share/man/man1/grub-mkimage.1
#usr/share/man/man1/grub-mklayout.1
#usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
#usr/share/man/man1/grub-mkpasswd-pbkdf2.1
#usr/share/man/man1/grub-mkrelpath.1
#usr/share/man/man1/grub-mkrescue.1
diff --git a/config/rootfiles/common/x86_64/grub b/config/rootfiles/common/x86_64/grub
index b6ddd5709..0d56c2fa5 100644
--- a/config/rootfiles/common/x86_64/grub
+++ b/config/rootfiles/common/x86_64/grub
@@ -11,6 +11,7 @@ etc/grub.d/20_linux_xen
etc/grub.d/25_bli
etc/grub.d/30_os-prober
etc/grub.d/30_uefi-firmware
+etc/grub.d/31_efi_bootnext
etc/grub.d/40_custom
etc/grub.d/41_custom
#etc/grub.d/README
@@ -24,6 +25,7 @@ usr/bin/grub-mkfont
usr/bin/grub-mkimage
usr/bin/grub-mklayout
usr/bin/grub-mknetdir
+usr/bin/grub-mkpasswd-argon2
usr/bin/grub-mkpasswd-pbkdf2
usr/bin/grub-mkrelpath
usr/bin/grub-mkrescue
@@ -231,6 +233,8 @@ usr/lib/grub/i386-pc/gcry_md4.mod
usr/lib/grub/i386-pc/gcry_md4.module
usr/lib/grub/i386-pc/gcry_md5.mod
usr/lib/grub/i386-pc/gcry_md5.module
+usr/lib/grub/i386-pc/gcry_pubkey_dilithium.mod
+usr/lib/grub/i386-pc/gcry_pubkey_dilithium.module
usr/lib/grub/i386-pc/gcry_rfc2268.mod
usr/lib/grub/i386-pc/gcry_rfc2268.module
usr/lib/grub/i386-pc/gcry_rijndael.mod
@@ -369,8 +373,12 @@ usr/lib/grub/i386-pc/mdraid1x.mod
usr/lib/grub/i386-pc/mdraid1x.module
usr/lib/grub/i386-pc/memdisk.mod
usr/lib/grub/i386-pc/memdisk.module
+usr/lib/grub/i386-pc/memmove_bench.mod
+usr/lib/grub/i386-pc/memmove_bench.module
usr/lib/grub/i386-pc/memrw.mod
usr/lib/grub/i386-pc/memrw.module
+usr/lib/grub/i386-pc/mfa.mod
+usr/lib/grub/i386-pc/mfa.module
usr/lib/grub/i386-pc/minicmd.mod
usr/lib/grub/i386-pc/minicmd.module
usr/lib/grub/i386-pc/minix.mod
@@ -385,6 +393,8 @@ usr/lib/grub/i386-pc/minix3_be.mod
usr/lib/grub/i386-pc/minix3_be.module
usr/lib/grub/i386-pc/minix_be.mod
usr/lib/grub/i386-pc/minix_be.module
+usr/lib/grub/i386-pc/mldsa_test.mod
+usr/lib/grub/i386-pc/mldsa_test.module
usr/lib/grub/i386-pc/mmap.mod
usr/lib/grub/i386-pc/mmap.module
usr/lib/grub/i386-pc/moddep.lst
@@ -417,6 +427,8 @@ usr/lib/grub/i386-pc/ntfscomp.mod
usr/lib/grub/i386-pc/ntfscomp.module
usr/lib/grub/i386-pc/ntldr.mod
usr/lib/grub/i386-pc/ntldr.module
+usr/lib/grub/i386-pc/nvme.mod
+usr/lib/grub/i386-pc/nvme.module
usr/lib/grub/i386-pc/odc.mod
usr/lib/grub/i386-pc/odc.module
usr/lib/grub/i386-pc/offsetio.mod
@@ -451,6 +463,8 @@ usr/lib/grub/i386-pc/parttool.mod
usr/lib/grub/i386-pc/parttool.module
usr/lib/grub/i386-pc/password.mod
usr/lib/grub/i386-pc/password.module
+usr/lib/grub/i386-pc/password_argon2.mod
+usr/lib/grub/i386-pc/password_argon2.module
usr/lib/grub/i386-pc/password_pbkdf2.mod
usr/lib/grub/i386-pc/password_pbkdf2.module
usr/lib/grub/i386-pc/pata.mod
@@ -629,6 +643,8 @@ usr/lib/grub/i386-pc/videotest.mod
usr/lib/grub/i386-pc/videotest.module
usr/lib/grub/i386-pc/videotest_checksum.mod
usr/lib/grub/i386-pc/videotest_checksum.module
+usr/lib/grub/i386-pc/virtionet.mod
+usr/lib/grub/i386-pc/virtionet.module
usr/lib/grub/i386-pc/wrmsr.mod
usr/lib/grub/i386-pc/wrmsr.module
usr/lib/grub/i386-pc/xfs.mod
@@ -734,6 +750,8 @@ usr/lib/grub/x86_64-efi/command.lst
usr/lib/grub/x86_64-efi/config.h
usr/lib/grub/x86_64-efi/configfile.mod
usr/lib/grub/x86_64-efi/configfile.module
+usr/lib/grub/x86_64-efi/connectefi.mod
+usr/lib/grub/x86_64-efi/connectefi.module
usr/lib/grub/x86_64-efi/cpio.mod
usr/lib/grub/x86_64-efi/cpio.module
usr/lib/grub/x86_64-efi/cpio_be.mod
@@ -775,8 +793,8 @@ usr/lib/grub/x86_64-efi/echo.mod
usr/lib/grub/x86_64-efi/echo.module
usr/lib/grub/x86_64-efi/efi_gop.mod
usr/lib/grub/x86_64-efi/efi_gop.module
-usr/lib/grub/x86_64-efi/efi_uga.mod
-usr/lib/grub/x86_64-efi/efi_uga.module
+usr/lib/grub/x86_64-efi/efibootnext.mod
+usr/lib/grub/x86_64-efi/efibootnext.module
usr/lib/grub/x86_64-efi/efifwsetup.mod
usr/lib/grub/x86_64-efi/efifwsetup.module
usr/lib/grub/x86_64-efi/efinet.mod
@@ -849,6 +867,8 @@ usr/lib/grub/x86_64-efi/gcry_md4.mod
usr/lib/grub/x86_64-efi/gcry_md4.module
usr/lib/grub/x86_64-efi/gcry_md5.mod
usr/lib/grub/x86_64-efi/gcry_md5.module
+usr/lib/grub/x86_64-efi/gcry_pubkey_dilithium.mod
+usr/lib/grub/x86_64-efi/gcry_pubkey_dilithium.module
usr/lib/grub/x86_64-efi/gcry_rfc2268.mod
usr/lib/grub/x86_64-efi/gcry_rfc2268.module
usr/lib/grub/x86_64-efi/gcry_rijndael.mod
@@ -961,6 +981,8 @@ usr/lib/grub/x86_64-efi/lsefimmap.mod
usr/lib/grub/x86_64-efi/lsefimmap.module
usr/lib/grub/x86_64-efi/lsefisystab.mod
usr/lib/grub/x86_64-efi/lsefisystab.module
+usr/lib/grub/x86_64-efi/lsefivar.mod
+usr/lib/grub/x86_64-efi/lsefivar.module
usr/lib/grub/x86_64-efi/lsmmap.mod
usr/lib/grub/x86_64-efi/lsmmap.module
usr/lib/grub/x86_64-efi/lspci.mod
@@ -987,8 +1009,12 @@ usr/lib/grub/x86_64-efi/mdraid1x.mod
usr/lib/grub/x86_64-efi/mdraid1x.module
usr/lib/grub/x86_64-efi/memdisk.mod
usr/lib/grub/x86_64-efi/memdisk.module
+usr/lib/grub/x86_64-efi/memmove_bench.mod
+usr/lib/grub/x86_64-efi/memmove_bench.module
usr/lib/grub/x86_64-efi/memrw.mod
usr/lib/grub/x86_64-efi/memrw.module
+usr/lib/grub/x86_64-efi/mfa.mod
+usr/lib/grub/x86_64-efi/mfa.module
usr/lib/grub/x86_64-efi/minicmd.mod
usr/lib/grub/x86_64-efi/minicmd.module
usr/lib/grub/x86_64-efi/minix.mod
@@ -1003,6 +1029,8 @@ usr/lib/grub/x86_64-efi/minix3_be.mod
usr/lib/grub/x86_64-efi/minix3_be.module
usr/lib/grub/x86_64-efi/minix_be.mod
usr/lib/grub/x86_64-efi/minix_be.module
+usr/lib/grub/x86_64-efi/mldsa_test.mod
+usr/lib/grub/x86_64-efi/mldsa_test.module
usr/lib/grub/x86_64-efi/mmap.mod
usr/lib/grub/x86_64-efi/mmap.module
usr/lib/grub/x86_64-efi/moddep.lst
@@ -1033,6 +1061,8 @@ usr/lib/grub/x86_64-efi/ntfs.mod
usr/lib/grub/x86_64-efi/ntfs.module
usr/lib/grub/x86_64-efi/ntfscomp.mod
usr/lib/grub/x86_64-efi/ntfscomp.module
+usr/lib/grub/x86_64-efi/nvme.mod
+usr/lib/grub/x86_64-efi/nvme.module
usr/lib/grub/x86_64-efi/odc.mod
usr/lib/grub/x86_64-efi/odc.module
usr/lib/grub/x86_64-efi/offsetio.mod
@@ -1067,6 +1097,8 @@ usr/lib/grub/x86_64-efi/parttool.mod
usr/lib/grub/x86_64-efi/parttool.module
usr/lib/grub/x86_64-efi/password.mod
usr/lib/grub/x86_64-efi/password.module
+usr/lib/grub/x86_64-efi/password_argon2.mod
+usr/lib/grub/x86_64-efi/password_argon2.module
usr/lib/grub/x86_64-efi/password_pbkdf2.mod
usr/lib/grub/x86_64-efi/password_pbkdf2.module
usr/lib/grub/x86_64-efi/pata.mod
@@ -1117,6 +1149,7 @@ usr/lib/grub/x86_64-efi/romfs.mod
usr/lib/grub/x86_64-efi/romfs.module
usr/lib/grub/x86_64-efi/rsa_sexp_test.mod
usr/lib/grub/x86_64-efi/rsa_sexp_test.module
+usr/lib/grub/x86_64-efi/sbat.csv
usr/lib/grub/x86_64-efi/scsi.mod
usr/lib/grub/x86_64-efi/scsi.module
usr/lib/grub/x86_64-efi/search.mod
@@ -1176,10 +1209,14 @@ usr/lib/grub/x86_64-efi/tga.mod
usr/lib/grub/x86_64-efi/tga.module
usr/lib/grub/x86_64-efi/time.mod
usr/lib/grub/x86_64-efi/time.module
+usr/lib/grub/x86_64-efi/tpcm.mod
+usr/lib/grub/x86_64-efi/tpcm.module
usr/lib/grub/x86_64-efi/tpm.mod
usr/lib/grub/x86_64-efi/tpm.module
usr/lib/grub/x86_64-efi/tpm2_key_protector.mod
usr/lib/grub/x86_64-efi/tpm2_key_protector.module
+usr/lib/grub/x86_64-efi/tpm_record_pcrs.mod
+usr/lib/grub/x86_64-efi/tpm_record_pcrs.module
usr/lib/grub/x86_64-efi/tr.mod
usr/lib/grub/x86_64-efi/tr.module
usr/lib/grub/x86_64-efi/trig.mod
@@ -1231,8 +1268,12 @@ usr/lib/grub/x86_64-efi/videotest.mod
usr/lib/grub/x86_64-efi/videotest.module
usr/lib/grub/x86_64-efi/videotest_checksum.mod
usr/lib/grub/x86_64-efi/videotest_checksum.module
+usr/lib/grub/x86_64-efi/virtionet.mod
+usr/lib/grub/x86_64-efi/virtionet.module
usr/lib/grub/x86_64-efi/wrmsr.mod
usr/lib/grub/x86_64-efi/wrmsr.module
+usr/lib/grub/x86_64-efi/xen_boot.mod
+usr/lib/grub/x86_64-efi/xen_boot.module
usr/lib/grub/x86_64-efi/xfs.mod
usr/lib/grub/x86_64-efi/xfs.module
usr/lib/grub/x86_64-efi/xnu.mod
@@ -1326,6 +1367,7 @@ usr/share/grub/unicode.pf2
#usr/share/locale/ko/LC_MESSAGES/grub.mo
#usr/share/locale/lg/LC_MESSAGES/grub.mo
#usr/share/locale/lt/LC_MESSAGES/grub.mo
+#usr/share/locale/lv/LC_MESSAGES/grub.mo
#usr/share/locale/nb/LC_MESSAGES/grub.mo
#usr/share/locale/nl/LC_MESSAGES/grub.mo
#usr/share/locale/pa/LC_MESSAGES/grub.mo
@@ -1352,6 +1394,7 @@ usr/share/grub/unicode.pf2
#usr/share/man/man1/grub-mkimage.1
#usr/share/man/man1/grub-mklayout.1
#usr/share/man/man1/grub-mknetdir.1
+#usr/share/man/man1/grub-mkpasswd-argon2.1
#usr/share/man/man1/grub-mkpasswd-pbkdf2.1
#usr/share/man/man1/grub-mkrelpath.1
#usr/share/man/man1/grub-mkrescue.1
diff --git a/lfs/grub b/lfs/grub
index 226775c63..6bfa7e964 100644
--- a/lfs/grub
+++ b/lfs/grub
@@ -24,7 +24,7 @@
include Config
-VER = 2.14
+VER = 2.16
THISAPP = grub-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -61,7 +61,7 @@ objects = $(DL_FILE) \
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
unifont-7.0.03.pcf.gz = $(DL_FROM)/unifont-7.0.03.pcf.gz
-$(DL_FILE)_BLAKE2 = 724bb430d8824bec39e6a025cf354a780b79260684c7c4e3d28beb08c8bee10d082a089fcb799f8f5eb6e83abcf8675fb7c5f5ddf443c5c0e61d6f180ee341af
+$(DL_FILE)_BLAKE2 = 74437966a70854ec29f3d80715ac3436f4340e6f69ccd084b8762dd36f80a30e707333d2102639372ce421b79179a1fa043cbb6a2d25e568d035b916b228fca1
unifont-7.0.03.pcf.gz_BLAKE2 = fb96c1786fcc8c77796c90ce30a2b7d544013bd62cedbf7b027e1894fe75cdbd2044717796cb0e3150db1457fcb58076491d9c0b855621b652fb9a52c0793469
install : $(TARGET)
@@ -94,9 +94,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@rm -rf $(DIR_APP) $(DIR_APP_EFI) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.06-remove_os_prober_disabled_warning.patch
cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.02_disable_vga_fallback.patch
- cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch
- cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
- cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
+ cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
cd $(DIR_APP) && [ ! -e grub-core/extra_deps.lst ] && echo 'depends bli part_gpt' > grub-core/extra_deps.lst
cd $(DIR_APP) && autoreconf -vfi
diff --git a/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch b/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
deleted file mode 100644
index 33013e46b..000000000
--- a/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch
+++ /dev/null
@@ -1,53 +0,0 @@
-diff -Naur grub-2.14.orig/acinclude.m4 grub-2.14/acinclude.m4
---- grub-2.14.orig/acinclude.m4 2025-11-20 17:02:39.000000000 +0100
-+++ grub-2.14/acinclude.m4 2026-05-05 17:11:21.117127788 +0200
-@@ -79,11 +79,6 @@
- [AC_MSG_CHECKING([whether ${TARGET_OBJCOPY} works for absolute addresses])
- AC_CACHE_VAL(grub_cv_prog_objcopy_absolute,
- [cat > conftest.c <<\EOF
--asm (
-- ".globl start, _start, __start\n"
-- ".ifdef cmain; .set start = _start = __start = cmain\n.endif\n"
-- ".ifdef _cmain; .set start = _start = __start = _cmain\n.endif\n"
--);
- void cmain (void);
- void
- cmain (void)
-diff -Naur grub-2.14.orig/configure.ac grub-2.14/configure.ac
---- grub-2.14.orig/configure.ac 2026-01-14 15:30:04.000000000 +0100
-+++ grub-2.14/configure.ac 2026-05-05 17:09:38.251922592 +0200
-@@ -1461,6 +1461,7 @@
- TARGET_IMG_LDSCRIPT='$(top_srcdir)'"/conf/i386-cygwin-img-ld.sc"
- TARGET_IMG_LDFLAGS="-Wl,-T${TARGET_IMG_LDSCRIPT}"
- TARGET_IMG_LDFLAGS_AC="-Wl,-T${srcdir}/conf/i386-cygwin-img-ld.sc"
-+ TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"
- TARGET_IMG_CFLAGS=
- else
- TARGET_APPLE_LINKER=0
-@@ -1468,6 +1469,7 @@
- TARGET_IMG_LDSCRIPT=
- TARGET_IMG_LDFLAGS='-Wl,-N'
- TARGET_IMG_LDFLAGS_AC='-Wl,-N'
-+ TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"
- TARGET_IMG_CFLAGS=
- fi
-
-@@ -1798,18 +1800,6 @@
- m4_ifndef([AX_CHECK_LINK_FLAG], [m4_fatal([autoconf-archive is missing. You must install it to generate the configure script.])])
-
- if test "x$TARGET_APPLE_LINKER" != x1 ; then
--AX_CHECK_LINK_FLAG([-Wl,--image-base,0x400000],
-- [TARGET_IMG_BASE_LDOPT="-Wl,--image-base"],
-- [TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"],
-- [],
-- [AC_LANG_SOURCE([
--asm (".globl start; start:");
--asm (".globl _start; _start:");
--asm (".globl __start; __start:");
--void __main (void);
--void __main (void) {}
--int main (void);
-- ])])
- grub_PROG_OBJCOPY_ABSOLUTE
- fi
- grub_PROG_LD_BUILD_ID_NONE
diff --git a/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch b/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
deleted file mode 100644
index 5bde9e56c..000000000
--- a/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch
+++ /dev/null
@@ -1,15 +0,0 @@
-diff -Naur grub-2.14.orig/configure.ac grub-2.14/configure.ac
---- grub-2.14.orig/configure.ac 2026-05-05 17:09:38.251922592 +0200
-+++ grub-2.14/configure.ac 2026-05-05 17:32:27.405733625 +0200
-@@ -1794,11 +1794,6 @@
- # Defined in acinclude.m4.
- grub_ASM_USCORE
- grub_PROG_TARGET_CC
--
--# The error message produced by autoconf if autoconf-archive is not installed is
--# quite misleading and not very helpful. So, try point people in the right direction.
--m4_ifndef([AX_CHECK_LINK_FLAG], [m4_fatal([autoconf-archive is missing. You must install it to generate the configure script.])])
--
- if test "x$TARGET_APPLE_LINKER" != x1 ; then
- grub_PROG_OBJCOPY_ABSOLUTE
- fi
diff --git a/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch b/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
similarity index 50%
rename from src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch
rename to src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
index 4bfd46856..0416d9af4 100644
--- a/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch
+++ b/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch
@@ -1,27 +1,15 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Jason Montleon <jason@montleon.com>
-Date: Fri, 3 May 2024 13:18:37 -0400
-Subject: [PATCH] Use medany instead of large model for RISCV
-
-Signed-off-by: Jason Montleon <jason@montleon.com>
----
- configure.ac | 6 ++++--
- 1 file changed, 4 insertions(+), 2 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index d223fe3ef6e..6a6688e362a 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -1313,7 +1313,7 @@ AC_SUBST(TARGET_LDFLAGS_OLDMAGIC)
+--- grub-2.16/configure.ac.orig 2026-10-05 23:16:28.087549369 +0200
++++ grub-2.16/configure.ac 2026-10-05 23:23:51.374295457 +0200
+@@ -1712,7 +1712,7 @@
- LDFLAGS="$TARGET_LDFLAGS"
+ CFLAGS="$TARGET_CFLAGS"
-if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 || test "$target_cpu" = riscv64 ; then
+if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 ; then
# Use large model to support 4G memory
AC_CACHE_CHECK([whether option -mcmodel=large works], grub_cv_cc_mcmodel, [
CFLAGS="$TARGET_CFLAGS -mcmodel=large"
-@@ -1323,9 +1323,11 @@ if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 || test "$target_
+@@ -1722,9 +1722,11 @@
])
if test "x$grub_cv_cc_mcmodel" = xyes; then
TARGET_CFLAGS="$TARGET_CFLAGS -mcmodel=large"
@@ -33,4 +21,4 @@ index d223fe3ef6e..6a6688e362a 100644
+ TARGET_CFLAGS="$TARGET_CFLAGS -mcmodel=medany"
fi
- if test "$target_cpu"-"$platform" = x86_64-efi; then
+ # Stack smashing protector.
--
2.55.0
^ permalink raw reply [flat|nested] 2+ messages in thread