From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 3.x development tree branch, master, updated. 75c364aa4e563bc7c2e3543839e622d07428ca43 Date: Fri, 29 Mar 2019 11:43:27 +0000 Message-ID: <20190329114328.4103A84FDAF@people01.i.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8162905116241218324==" List-Id: --===============8162905116241218324== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 3.x development tree". The branch, master has been updated via 75c364aa4e563bc7c2e3543839e622d07428ca43 (commit) via de0069e81ba1dae2bb7bc02b5a5b724e6fdaac04 (commit) via 79519274fd9d2dbead3f8d9b1538ce758d95bb1e (commit) via 64c99e09c6b34aa72f97192faf8a1c8abf075bf3 (commit) via 09daa9bc449f5fef939dc0d1680b33bef7868c9a (commit) via 44717f281a402b9f447026f62386cccfde0a8615 (commit) via 006f7c4022c618b2883843b3ad41d46e30027a9e (commit) from e9446154830ab69738d1423ae863431a0a46dfad (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 75c364aa4e563bc7c2e3543839e622d07428ca43 Author: Michael Tremer Date: Fri Mar 29 11:42:28 2019 +0000 pcengines-apu-firmware: New package =20 This is the latest firmware for PC Engines APU boards =20 This can now be updated with firmware-update =20 Signed-off-by: Michael Tremer commit de0069e81ba1dae2bb7bc02b5a5b724e6fdaac04 Author: Michael Tremer Date: Fri Mar 29 11:42:01 2019 +0000 firmware-update: New package =20 This tools makes it easy to update the firmware on various boards. =20 Signed-off-by: Michael Tremer commit 79519274fd9d2dbead3f8d9b1538ce758d95bb1e Author: Michael Tremer Date: Fri Mar 29 03:58:56 2019 +0000 kernel: Drop ld.so placeholder files =20 Signed-off-by: Michael Tremer commit 64c99e09c6b34aa72f97192faf8a1c8abf075bf3 Author: Michael Tremer Date: Fri Mar 29 03:54:30 2019 +0000 spectre-meltdown-checker: New package =20 Handy to have this available to check how well a system is protected against Spectre & Meltdown =20 Signed-off-by: Michael Tremer commit 09daa9bc449f5fef939dc0d1680b33bef7868c9a Author: Michael Tremer Date: Fri Mar 29 03:38:48 2019 +0000 .gitignore: Ignore any files edited by vim =20 Signed-off-by: Michael Tremer commit 44717f281a402b9f447026f62386cccfde0a8615 Author: Michael Tremer Date: Fri Mar 29 03:37:59 2019 +0000 flashrom: New package =20 This tool can flash firmware on various chipsets and BIOSes =20 Signed-off-by: Michael Tremer commit 006f7c4022c618b2883843b3ad41d46e30027a9e Author: Michael Tremer Date: Fri Mar 29 03:37:27 2019 +0000 kernel: Enable /dev/mem =20 This is required to be able to flash any firmware. =20 Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: .gitignore | 1 + firmware-update/firmware-update.nm | 41 ++++++++++++++++ flashrom/flashrom.nm | 42 +++++++++++++++++ kernel/config-arm32-generic | 2 +- kernel/config-generic | 6 ++- kernel/config-x86-generic | 2 +- kernel/kernel.nm | 8 +--- pcengines-apu-firmware/pcengines-apu-firmware.nm | 54 ++++++++++++++++++++= ++ .../spectre-meltdown-checker.nm | 36 +++++++++++++++ 9 files changed, 181 insertions(+), 11 deletions(-) create mode 100644 firmware-update/firmware-update.nm create mode 100644 flashrom/flashrom.nm create mode 100644 pcengines-apu-firmware/pcengines-apu-firmware.nm create mode 100644 spectre-meltdown-checker/spectre-meltdown-checker.nm Difference in files: diff --git a/.gitignore b/.gitignore index b25c15b81..b72f9be20 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ *~ +*.swp diff --git a/firmware-update/firmware-update.nm b/firmware-update/firmware-up= date.nm new file mode 100644 index 000000000..d43e3a6af --- /dev/null +++ b/firmware-update/firmware-update.nm @@ -0,0 +1,41 @@ +############################################################################= ### +# IPFire.org - An Open Source Firewall Solution = # +# Copyright (C) - IPFire Development Team = # +############################################################################= ### + +name =3D firmware-update +version =3D 20190329 +release =3D 1 +arch =3D noarch + +maintainer =3D Michael Tremer +groups =3D System/Tools +url =3D https://git.ipfire.org/?p=3Dpeople/ms/firmware-update.git;a= =3Dsummary +license =3D GPLv3+ +summary =3D A tool to automatically update firmware + +description + firmware-update automatically updates firmware on various systems +end + +source_dl =3D https://source.ipfire.org/releases/firmware-update/ + +build + requires + autoconf + automake + sed + end + + prepare_cmds + [ -e "configure" ] || ./autogen.sh + end +end + +packages + package %{name} + requires + flashrom + end + end +end diff --git a/flashrom/flashrom.nm b/flashrom/flashrom.nm new file mode 100644 index 000000000..e27f69486 --- /dev/null +++ b/flashrom/flashrom.nm @@ -0,0 +1,42 @@ +############################################################################= ### +# IPFire.org - An Open Source Firewall Solution = # +# Copyright (C) - IPFire Development Team = # +############################################################################= ### + +name =3D flashrom +version =3D 1.0 +release =3D 1 + +groups =3D Development/Tools +url =3D https://www.flashrom.org +license =3D GPLv2 +summary =3D flashrom is a utility to write flash chips + +description + flashrom is a utility for identifying, reading, writing, verifying + and erasing flash chips. + It is designed to flash BIOS/EFI/coreboot/firmware/optionROM images + on mainboards, network/graphics/storage controller cards, and various + other programmer devices. +end + +source_dl =3D https://download.flashrom.org/releases/ +sources =3D %{thisapp}.tar.bz2 + +build + requires + libusb-compat-devel + libusb-devel + pciutils-devel + end + + make_install_targets +=3D PREFIX=3D%{prefix} MANDIR=3D%{mandir} +end + +packages + package %{name} + + package %{name}-debuginfo + template DEBUGINFO + end +end diff --git a/kernel/config-arm32-generic b/kernel/config-arm32-generic index 14f999bcb..9c714b288 100644 --- a/kernel/config-arm32-generic +++ b/kernel/config-arm32-generic @@ -655,7 +655,7 @@ CONFIG_SERIO_SUN4I_PS2=3Dm # # Character devices # -CONFIG_DEVKMEM=3Dy +# CONFIG_DEVKMEM is not set =20 # # Serial drivers diff --git a/kernel/config-generic b/kernel/config-generic index 184cd4e47..007d0d216 100644 --- a/kernel/config-generic +++ b/kernel/config-generic @@ -4,7 +4,7 @@ # # CONFIG_CC_IS_GCC=3Dy -CONFIG_GCC_VERSION=3D80200 +CONFIG_GCC_VERSION=3D80300 CONFIG_CLANG_VERSION=3D0 CONFIG_IRQ_WORK=3Dy CONFIG_BUILDTIME_EXTABLE_SORT=3Dy @@ -2430,7 +2430,7 @@ CONFIG_SERIAL_NONSTANDARD=3Dy CONFIG_N_HDLC=3Dm CONFIG_N_GSM=3Dm # CONFIG_TRACE_SINK is not set -# CONFIG_DEVMEM is not set +CONFIG_DEVMEM=3Dy =20 # # Serial drivers @@ -6002,4 +6002,6 @@ CONFIG_HAVE_ARCH_KGDB=3Dy # CONFIG_KGDB is not set # CONFIG_UBSAN is not set CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=3Dy +CONFIG_STRICT_DEVMEM=3Dy +CONFIG_IO_STRICT_DEVMEM=3Dy CONFIG_TRACE_IRQFLAGS_SUPPORT=3Dy diff --git a/kernel/config-x86-generic b/kernel/config-x86-generic index 0bdeab015..8848a3ab4 100644 --- a/kernel/config-x86-generic +++ b/kernel/config-x86-generic @@ -722,7 +722,7 @@ CONFIG_SYNCLINK=3Dm CONFIG_SYNCLINKMP=3Dm CONFIG_SYNCLINK_GT=3Dm CONFIG_NOZOMI=3Dm -CONFIG_DEVKMEM=3Dy +# CONFIG_DEVKMEM is not set =20 # # Serial drivers diff --git a/kernel/kernel.nm b/kernel/kernel.nm index 4595e62ca..c82223e53 100644 --- a/kernel/kernel.nm +++ b/kernel/kernel.nm @@ -5,7 +5,7 @@ =20 name =3D kernel version =3D 4.20 -release =3D 12 +release =3D 14 thisapp =3D linux-%{version} =20 maintainer =3D Arne Fitzenreiter @@ -192,11 +192,6 @@ build make ARCH=3D%{kernel_arch} INSTALL_MOD_PATH=3D%{BUILDROOT}/usr mod-fw=3D = V=3D1 \ KERNELRELEASE=3D${fullversion} modules_install =20 - # Create an empty settings file for dracut - mkdir -p %{BUILDROOT}/etc/ld.so.conf.d - echo "# Placeholder file, no vDSO hwcap entries used in this kernel." \ - > %{BUILDROOT}/etc/ld.so.conf.d/kernel-${fullversion}.conf - # And now the scary looking part. # # Recreate source and build links. @@ -323,7 +318,6 @@ packages /boot/dtb-%{kernel_release} /boot/vmlinuz-%{kernel_release} /boot/initramfs-%{kernel_release}.img - /etc/ld.so.conf.d/kernel-%{kernel_release}.conf /usr/lib/modules/%{kernel_release} end =20 diff --git a/pcengines-apu-firmware/pcengines-apu-firmware.nm b/pcengines-apu= -firmware/pcengines-apu-firmware.nm new file mode 100644 index 000000000..81308fe2b --- /dev/null +++ b/pcengines-apu-firmware/pcengines-apu-firmware.nm @@ -0,0 +1,54 @@ +############################################################################= ### +# IPFire.org - An Open Source Firewall Solution = # +# Copyright (C) - IPFire Development Team = # +############################################################################= ### + +name =3D pcengines-apu-firmware +version =3D 4.9.0.3 +release =3D 1 +arch =3D noarch + +maintainer =3D Arne Fitzenreiter +groups =3D System/Firmware +url =3D https://pcengines.github.io +license =3D GPLv2+ +summary =3D Firmware binaries for PC Engines APU boards + +description + Firmware binaries for PC Engines APU boards. + + This package ships the mainline branch of the firmware. +end + +sources =3D \ + apu1_v%{version}.rom \ + apu2_v%{version}.rom \ + apu3_v%{version}.rom \ + apu4_v%{version}.rom \ + apu5_v%{version}.rom + +build + MACRO_EXTRACT =3D : # Do not attempt to extract the binary files + + build + # XXX potentially we could compile this from source, but I am + # not sure how dangerous this is if that goes wrong + end + + install + mkdir -pv %{BUILDROOT}%{prefix}/lib/firmware/pcengines/apu + + for source in %{sources}; do + install -v -m 644 %{DIR_DL}/${source} \ + %{BUILDROOT}%{prefix}/lib/firmware/pcengines/apu + done + end +end + +packages + package %{name} + recommends + firmware-update + end + end +end diff --git a/spectre-meltdown-checker/spectre-meltdown-checker.nm b/spectre-m= eltdown-checker/spectre-meltdown-checker.nm new file mode 100644 index 000000000..bbea8217c --- /dev/null +++ b/spectre-meltdown-checker/spectre-meltdown-checker.nm @@ -0,0 +1,36 @@ +############################################################################= ### +# IPFire.org - An Open Source Firewall Solution = # +# Copyright (C) - IPFire Development Team = # +############################################################################= ### + +name =3D spectre-meltdown-checker +version =3D 0.40 +release =3D 1 + +groups =3D Development/Tools +url =3D https://github.com/speed47/spectre-meltdown-checker +license =3D GPLv3 +summary =3D A script to tell if your sytem is vulnerable to Spectre/Meltd= own + +description + A shell script to tell if your system is vulnerable against the + several "speculative execution" CVEs that were made public in 2018. +end + +source_dl =3D https://github.com/speed47/spectre-meltdown-checker/archive/%= {version}.tar.gz#/ + +build + build + : # Nothing to do + end + + install + mkdir -pv %{BUILDROOT}%{sbindir} + install -v -m 754 spectre-meltdown-checker.sh \ + %{BUILDROOT}%{sbindir}/spectre-meltdown-checker + end +end + +packages + package %{name} +end hooks/post-receive -- IPFire 3.x development tree --===============8162905116241218324==--