# Modules always contain just 32-bit code

%define _libdir %{_exec_prefix}/lib

# 64bit intel machines use 32bit boot loader

# (We cannot just redefine _target_cpu, as we'd get i386.rpm packages then)

%ifarch x86_64

%define _target_platform i386-%{_vendor}-%{_target_os}%{?_gnu}

%endif

# sparc is always compiled 64 bit

%ifarch %{sparc}

%define _target_platform sparc64-%{_vendor}-%{_target_os}%{?_gnu}

%endif

%if ! 0%{?efi}

%global efi_only aarch64

%global efiarchs x86_64 ia64 %{efi_only}

%ifarch x86_64

%global grubefiarch %{_arch}-efi

%global grubefiname grubx64.efi

%global grubeficdname gcdx64.efi

%endif

%ifarch aarch64

%global grubefiarch arm64-efi

%global grubefiname grubaa64.efi

%global grubeficdname gcdaa64.efi

%endif

%if 0%{?rhel}

%global efidir redhat

%endif

%if 0%{?fedora}

%global efidir fedora

%endif

%if 0%{?centos}

%global efidir centos

%endif

%endif

%global tarversion 2.02~beta2

%undefine _missing_build_ids_terminate_build

Name:           grub2

Epoch:          1

Version:        2.02

Release:        0.34%{?dist}

Summary:        Bootloader with support for Linux, Multiboot and more

Group:          System Environment/Base

License:        GPLv3+

URL:            http://www.gnu.org/software/grub/

Obsoletes:	grub < 1:0.98

Source0:        ftp://alpha.gnu.org/gnu/grub/grub-%{tarversion}.tar.xz

#Source0:	ftp://ftp.gnu.org/gnu/grub/grub-%%{tarversion}.tar.xz

Source1:	centos.cer

#(source removed)

Source4:	http://unifoundry.com/unifont-5.1.20080820.pcf.gz

Source5:	theme.tar.bz2

Source6:	gitignore

#Source6:	grub-cd.cfg

Patch0001: 0001-fix-EFI-detection-on-Windows.patch

Patch0002: 0002-grub-core-kern-arm-cache_armv6.S-Remove-.arch-direct.patch

Patch0003: 0003-INSTALL-Cross-compiling-the-GRUB-Fix-some-spelling-m.patch

Patch0004: 0004-NEWS-First-draft-of-2.02-entry.patch

Patch0005: 0005-Merge-branch-master-of-git.sv.gnu.org-srv-git-grub.patch

Patch0006: 0006-NEWS-The-cmosclean-command-in-fact-dates-back-to-1.9.patch

Patch0007: 0007-remove-unused-error.h-from-kern-emu-misc.c.patch

Patch0008: 0008-Don-t-abort-on-unavailable-coreboot-tables-if-not-ru.patch

Patch0009: 0009-NEWS-Add-few-missing-entries.-Correct-existing-ones.patch

Patch0010: 0010-strip-.eh_frame-section-from-arm64-efi-kernel.patch

Patch0011: 0011-use-grub-boot-aa64.efi-for-boot-images-on-AArch64.patch

Patch0012: 0012-fix-32-bit-compilation-on-MinGW-w64.patch

Patch0013: 0013-Change-grub-mkrescue-to-use-bootaa64.efi-too.patch

Patch0014: 0014-arm64-set-correct-length-of-device-path-end-entry.patch

Patch0015: 0015-Makefile.util.def-grub-macbless-Change-mansection-to.patch

Patch0016: 0016-add-part_apple-to-EFI-rescue-image-to-fix-missing-pr.patch

Patch0017: 0017-freebsd-hostdisk.c-is-only-ever-compiled-on-FreeBSD.patch

Patch0018: 0018-Prefer-more-portable-test-1-constructs.patch

Patch0019: 0019-NEWS-Add-few-missing-entries.patch

Patch0020: 0020-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch

Patch0021: 0021-util-grub-mount.c-Extend-GCC-warning-workaround-to-g.patch

Patch0022: 0022-reintroduce-BUILD_LDFLAGS-for-the-cross-compile-case.patch

Patch0023: 0023-grub-core-term-terminfo.c-Recognize-keys-F1-F12.patch

Patch0024: 0024-Fix-ChangeLog-date.patch

Patch0025: 0025-Use-_W64-to-detect-MinGW-W64-32-instead-of-_FILE_OFF.patch

Patch0026: 0026-add-BUILD_EXEEXT-support-to-fix-make-clean-on-Window.patch

Patch0027: 0027-fix-include-loop-on-MinGW-due-to-libintl.h-pulling-s.patch

Patch0028: 0028-grub-core-commands-macbless.c-Rename-FILE-and-DIR-to.patch

Patch0029: 0029-Makefile.util.def-Link-grub-ofpathname-with-zfs-libs.patch

Patch0030: 0030-Makefile.am-default_payload.elf-Add-modules.patch

Patch0031: 0031-fix-removal-of-cpu-machine-links-on-mingw-msys.patch

Patch0032: 0032-grub-core-normal-main.c-read_config_file-Buffer-conf.patch

Patch0033: 0033-util-grub-install.c-Fix-a-typo.patch

Patch0034: 0034-use-MODULE_FILES-for-genemuinit-instead-of-MOD_FILES.patch

Patch0035: 0035-Ignore-EPERM-when-modifying-kern.geom.debugflags.patch

Patch0036: 0036-change-stop-condition-to-avoid-infinite-loops.patch

Patch0037: 0037-increase-network-try-interval-gradually.patch

Patch0038: 0038-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch

Patch0039: 0039-Show-detected-path-to-DejaVuSans-in-configure-summar.patch

Patch0040: 0040-add-GRUB_WINDOWS_EXTRA_DIST-to-allow-shipping-runtim.patch

Patch0041: 0041-util-grub-install.c-write_to_disk-Add-an-info-messag.patch

Patch0042: 0042-util-grub-install.c-List-available-targets.patch

Patch0043: 0043-Fix-several-translatable-strings.patch

Patch0044: 0044-do-not-set-default-prefix-in-grub-mkimage.patch

Patch0045: 0045-fix-Mingw-W64-32-cross-compile-failure-due-to-printf.patch

Patch0046: 0046-grub-core-term-serial.c-grub_serial_register-Fix-inv.patch

Patch0047: 0047-grub-install-support-for-partitioned-partx-loop-devi.patch

Patch0048: 0048-grub-core-term-at_keyboard.c-Tolerate-missing-keyboa.patch

Patch0049: 0049-.gitignore-add-missing-files-and-.exe-variants.patch

Patch0050: 0050-util-grub-mkfont.c-Downgrade-warnings-about-unhandle.patch

Patch0051: 0051-grub-core-disk-ahci.c-Do-not-enable-I-O-decoding-and.patch

Patch0052: 0052-grub-core-disk-ahci.c-Allocate-and-clean-space-for-a.patch

Patch0053: 0053-grub-core-disk-ahci.c-Add-safety-cleanups.patch

Patch0054: 0054-grub-core-disk-ahci.c-Properly-handle-transactions-w.patch

Patch0055: 0055-grub-core-disk-ahci.c-Increase-timeout.-Some-SSDs-ta.patch

Patch0056: 0056-util-grub-mkfont.c-Build-fix-for-argp.h-with-older-g.patch

Patch0057: 0057-util-grub-mkrescue.c-Build-fix-for-argp.h-with-older.patch

Patch0058: 0058-add-grub_env_set_net_property-function.patch

Patch0059: 0059-add-bootpath-parser-for-open-firmware.patch

Patch0060: 0060-grub-core-disk-ahci.c-Ignore-NPORTS-field-and-rely-o.patch

Patch0061: 0061-grub-core-kern-i386-coreboot-mmap.c-Filter-out-0xa00.patch

Patch0062: 0062-grub-core-loader-i386-multiboot_mbi.c-grub_multiboot.patch

Patch0063: 0063-grub-core-mmap-i386-uppermem.c-lower_hook-COREBOOT-I.patch

Patch0064: 0064-grub-core-kern-i386-pc-mmap.c-Fallback-to-EISA-memor.patch

Patch0065: 0065-include-grub-i386-openbsd_bootarg.h-Add-addr-and-fre.patch

Patch0066: 0066-ieee1275-check-for-IBM-pseries-emulated-machine.patch

Patch0067: 0067-grub-core-loader-arm64-linux.c-Remove-redundant-0x.patch

Patch0068: 0068-grub-core-lib-relocator.c-Fix-the-case-when-end-of-l.patch

Patch0069: 0069-Fix-grub-probe-0-option.patch

Patch0070: 0070-Fix-partmap-cryptodisk-and-abstraction-handling-in-g.patch

Patch0071: 0071-btrfs-fix-get_root-key-comparison-failures-due-to-en.patch

Patch0072: 0072-grub-core-osdep-linux-getroot.c-grub_util_part_to_di.patch

Patch0073: 0073-Replace-few-instances-of-memcmp-memcpy-in-the-code-t.patch

Patch0074: 0074-include-grub-libgcc.h-Remove-ctzsi2-and-ctzdi2.-They.patch

Patch0075: 0075-Add-missing-endif.patch

Patch0076: 0076-grub-core-lib-syslinux_parse.c-Fix-timeout-quoting.patch

Patch0077: 0077-Improve-LVM-logical_volumes-string-matching.patch

Patch0078: 0078-Tolerate-devices-with-no-filesystem-UUID-returned-by.patch

Patch0079: 0079-Allow-loading-old-kernels-by-placing-GDT-in-conventi.patch

Patch0080: 0080-grub-core-kern-misc.c-__bzero-Don-t-compile-in-GRUB_.patch

Patch0081: 0081-grub-core-commands-verify.c-grub_pubkey_open-Fix-mem.patch

Patch0082: 0082-grub-core-commands-verify.c-grub_pubkey_open-Trust-p.patch

Patch0083: 0083-util-grub-gen-asciih.c-add_glyph-Fix-uninitialised-v.patch

Patch0084: 0084-grub-core-commands-efi-lsefisystab.c-grub_cmd_lsefis.patch

Patch0085: 0085-grub-core-loader-i386-bsd.c-grub_netbsd_boot-Pass-po.patch

Patch0086: 0086-util-grub-install.c-Fix-handling-of-disk-module.patch

Patch0087: 0087-grub-core-commands-loadenv.c-check_blocklists-Fix-ov.patch

Patch0088: 0088-NEWS-The-cmosclean-command-in-fact-dates-back-to-1.9.patch

Patch0089: 0089-Migrate-PPC-from-Yaboot-to-Grub2.patch

Patch0090: 0090-Add-fw_path-variable-revised.patch

Patch0091: 0091-Add-support-for-linuxefi.patch

Patch0092: 0092-Use-linuxefi-and-initrdefi-where-appropriate.patch

Patch0093: 0093-Don-t-allow-insmod-when-secure-boot-is-enabled.patch

Patch0094: 0094-Pass-x-hex-hex-straight-through-unmolested.patch

Patch0095: 0095-Fix-crash-on-http.patch

Patch0096: 0096-IBM-client-architecture-CAS-reboot-support.patch

Patch0097: 0097-Add-vlan-tag-support.patch

Patch0098: 0098-Add-X-option-to-printf-functions.patch

Patch0099: 0099-DHCP-client-ID-and-UUID-options-added.patch

Patch0100: 0100-Search-for-specific-config-file-for-netboot.patch

Patch0101: 0101-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch

Patch0102: 0102-Move-bash-completion-script-922997.patch

Patch0103: 0103-for-ppc-reset-console-display-attr-when-clear-screen.patch

Patch0104: 0104-Don-t-write-messages-to-the-screen.patch

Patch0105: 0105-Don-t-print-GNU-GRUB-header.patch

Patch0106: 0106-Don-t-add-to-highlighted-row.patch

Patch0107: 0107-Message-string-cleanups.patch

Patch0108: 0108-Fix-border-spacing-now-that-we-aren-t-displaying-it.patch

Patch0109: 0109-Use-the-correct-indentation-for-the-term-help-text.patch

Patch0110: 0110-Indent-menu-entries.patch

Patch0111: 0111-Fix-margins.patch

Patch0112: 0112-Add-support-for-UEFI-operating-systems-returned-by-o.patch

Patch0113: 0113-Disable-GRUB-video-support-for-IBM-power-machines.patch

Patch0114: 0114-Use-2-instead-of-1-for-our-right-hand-margin-so-line.patch

Patch0115: 0115-Use-linux16-when-appropriate-880840.patch

Patch0116: 0116-Enable-pager-by-default.-985860.patch

Patch0117: 0117-F10-doesn-t-work-on-serial-so-don-t-tell-the-user-to.patch

Patch0118: 0118-Don-t-say-GNU-Linux-in-generated-menus.patch

Patch0119: 0119-Don-t-draw-a-border-around-the-menu.patch

Patch0120: 0120-Use-the-standard-margin-for-the-timeout-string.patch

Patch0121: 0121-Fix-grub_script_execute_sourcecode-usage-on-ppc.patch

Patch0122: 0122-Add-.eh_frame-to-list-of-relocations-stripped.patch

Patch0123: 0123-Make-10_linux-work-with-our-changes-for-linux16-and-.patch

Patch0124: 0124-Don-t-print-during-fdt-loading-method.patch

Patch0125: 0125-Honor-a-symlink-when-generating-configuration-by-gru.patch

Patch0126: 0126-Don-t-munge-raw-spaces-when-we-re-doing-our-cmdline-.patch

Patch0127: 0127-Don-t-require-a-password-to-boot-entries-generated-b.patch

Patch0128: 0128-Don-t-emit-Booting-.-message.patch

Patch0129: 0129-Make-CTRL-and-ALT-keys-work-as-expected-on-EFI-syste.patch

Patch0130: 0130-May-as-well-try-it.patch

Patch0131: 0131-use-fw_path-prefix-when-fallback-searching-for-grub-.patch

Patch0132: 0132-Try-mac-guid-etc-before-grub.cfg-on-tftp-config-file.patch

Patch0133: 0133-trim-arp-packets-with-abnormal-size.patch

Patch0134: 0134-Fix-convert-function-to-support-NVMe-devices.patch

Patch0135: 0135-Fix-bad-test-on-GRUB_DISABLE_SUBMENU.patch

Patch0136: 0136-Switch-to-use-APM-Mustang-device-tree-for-hardware-t.patch

Patch0137: 0137-Use-the-default-device-tree-from-the-grub-default-fi.patch

Patch0138: 0138-reopen-SNP-protocol-for-exclusive-use-by-grub.patch

Patch0139: 0139-Reduce-timer-event-frequency-by-10.patch

Patch0140: 0140-always-return-error-to-UEFI.patch

Patch0141: 0141-Add-powerpc-little-endian-ppc64le-flags.patch

Patch0142: 0142-Files-reorganization-and-include-some-libgcc-fuction.patch

Patch0143: 0143-Suport-for-bi-endianess-in-elf-file.patch

Patch0144: 0001-Fix-exit-back-to-EFI-firmware.patch

Patch0145: 0144-Add-grub_util_readlink.patch

Patch0146: 0145-Make-editenv-chase-symlinks-including-those-across-d.patch

Patch0147: 0001-Generate-OS-and-CLASS-in-10_linux-from-etc-os-releas.patch

Patch0148: 0001-Minimize-the-sort-ordering-for-.debug-and-rescue-ker.patch

Patch0149: 0001-Add-GRUB_DISABLE_UUID.patch

Patch0150: 0001-Allow-fallback-to-include-entries-by-title-not-just-.patch

Patch0151: 0001-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch

Patch0152: 0002-Load-arm-with-SB-enabled.patch

Patch0153: 0001-Fix-up-some-man-pages-rpmdiff-noticed.patch

Patch0154: 0001-Try-prefix-if-fw_path-doesn-t-work.patch

Patch0155: 0001-Update-info-with-grub.cfg-netboot-selection-order-11.patch

Patch0156: 0002-Use-Distribution-Package-Sort-for-grub2-mkconfig-112.patch

Patch0157: 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch

Patch0158: 0158-efinet-Check-for-immediate-completition.patch

Patch0159: 0159-efinet-memory-leak-on-module-removal.patch

Patch0160: 0160-efinet-cannot-free-const-char-pointer.patch

Patch0161: 0161-Revert-efinet-memory-leak-on-module-removal.patch

Patch0162: 0162-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch

Patch0163: 0163-efinet-open-Simple-Network-Protocol-exclusively.patch

Patch0164: 0164-efinet-enable-hardware-filters-when-opening-interfac.patch

Patch0165: 0165-efinet-handle-get_status-on-buggy-firmware-properly.patch

Patch0166: 0166-Handle-rssd-storage-devices.patch

Patch0167: 0167-xfs-Fix-termination-loop-for-directory-iteration.patch

Patch0168: 0168-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch

Patch0169: 0169-xfs-Add-helpers-for-inode-size.patch

Patch0170: 0170-xfs-V5-filesystem-format-support.patch

Patch0171: 0171-xfs-silence-Coverity-overflow-warning.patch

Patch0172: 0172-send-router-solicitation-for-ipv6-address-autoconf-v.patch

Patch0173: 0173-icmp6-fix-no-respond-to-neighbor-solicit-message.patch

Patch0174: 0174-calibrate_tsc-use-the-Stall-EFI-boot-service-on-GRUB.patch

Patch0175: 0175-fix-memory-corruption-in-pubkey-filter-over-network.patch

Patch0176: 0176-Make-grub2-mkconfig-construct-titles-that-look-like-.patch

Patch0177: 0177-don-t-strip-fw_path-twice-for-EFI-network-boot.patch

Patch0178: 0178-Add-friendly-grub2-password-config-tool-985962.patch

Patch0179: 0179-Try-to-make-sure-configure.ac-and-grub-rpm-sort-play.patch

Patch0180: 0180-ppc64le-sync-mkconfig-to-disk-1212114.patch

Patch0181: 0181-tcp-ack-when-we-get-an-OOO-lost-packet.patch

Patch0182: 0182-tcp-add-window-scaling-support.patch

Patch0183: 0183-efinet-retransmit-if-our-device-is-busy.patch

Patch0184: 0184-Be-more-aggro-about-actually-using-the-configured-ne.patch

Patch0185: 0185-efinet-add-filter-for-the-first-exclusive-reopen-of-.patch

Patch0186: 0186-Fix-security-issue-when-reading-username-and-passwor.patch

Patch0187: 0187-01_users-Handle-GRUB_PASSWORD-better.patch

BuildRequires:  flex bison binutils python

BuildRequires:  ncurses-devel xz-devel bzip2-devel

BuildRequires:  freetype-devel libusb-devel

%ifarch %{sparc} x86_64 aarch64 ppc64le

# sparc builds need 64 bit glibc-devel - also for 32 bit userland

BuildRequires:  /usr/lib64/crt1.o glibc-static

%else

# ppc64 builds need the ppc crt1.o

BuildRequires:  /usr/lib/crt1.o glibc-static

%endif

BuildRequires:  autoconf automake autogen device-mapper-devel

BuildRequires:	freetype-devel gettext-devel git

BuildRequires:	texinfo

BuildRequires:	dejavu-sans-fonts

BuildRequires:	help2man

BuildRequires:	rpm-devel

%ifarch %{efiarchs}

%ifnarch aarch64

BuildRequires:	pesign >= 0.109-3.el7

%endif

%endif

Requires:	gettext os-prober which file

Requires:	%{name}-tools = %{epoch}:%{version}-%{release}

Requires(pre):  dracut

Requires(post): dracut

ExcludeArch:	s390 s390x %{arm}

Obsoletes:	grub2 <= 1:2.00-20%{?dist}

%description

The GRand Unified Bootloader (GRUB) is a highly configurable and customizable

bootloader with modular architecture.  It support rich varietyof kernel formats,

file systems, computer architectures and hardware devices.  This subpackage

provides support for PC BIOS systems.

%ifarch %{efiarchs}

%package efi

Summary:	GRUB for EFI systems.

Group:		System Environment/Base

Requires:	%{name}-tools = %{epoch}:%{version}-%{release}

Obsoletes:	grub2-efi <= 1:2.00-20%{?dist}

%description efi

The GRand Unified Bootloader (GRUB) is a highly configurable and customizable

bootloader with modular architecture.  It support rich varietyof kernel formats,

file systems, computer architectures and hardware devices.  This subpackage

provides support for EFI systems.

%package efi-modules

Summary:	Modules used to build custom grub.efi images

Group:		System Environment/Base

Requires:	%{name}-tools = %{epoch}:%{version}-%{release}

Obsoletes:	grub2-efi <= 1:2.00-20%{?dist}

%description efi-modules

The GRand Unified Bootloader (GRUB) is a highly configurable and customizable

bootloader with modular architecture.  It support rich varietyof kernel formats,

file systems, computer architectures and hardware devices.  This subpackage

provides support for rebuilding your own grub.efi on EFI systems.

%endif

%package tools

Summary:	Support tools for GRUB.

Group:		System Environment/Base

Requires:	gettext os-prober which file system-logos

Requires(pre):	sed grep coreutils

%description tools

The GRand Unified Bootloader (GRUB) is a highly configurable and customizable

bootloader with modular architecture.  It support rich varietyof kernel formats,

file systems, computer architectures and hardware devices.  This subpackage

provides tools for support of all platforms.

%prep

%setup -T -c -n grub-%{tarversion}

%ifarch %{efiarchs}

%setup -D -q -T -a 0 -n grub-%{tarversion}

cd grub-%{tarversion}

# place unifont in the '.' from which configure is run

cp %{SOURCE4} unifont.pcf.gz

cp %{SOURCE6} .gitignore

git init

git config user.email "example@example.com"

git config user.name "RHEL Ninjas"

git add .

git commit -a -q -m "%{tarversion} baseline."

git am %{patches}

cd ..

mv grub-%{tarversion} grub-efi-%{tarversion}

%endif

%ifarch %{efi_only}

ln -s grub-efi-%{tarversion} grub-%{tarversion}

%else

%setup -D -q -T -a 0 -n grub-%{tarversion}

cd grub-%{tarversion}

# place unifont in the '.' from which configure is run

cp %{SOURCE4} unifont.pcf.gz

cp %{SOURCE6} .gitignore

git init

git config user.email "example@example.com"

git config user.name "RHEL Ninjas"

git add .

git commit -a -q -m "%{tarversion} baseline."

git am %{patches}

%endif

%build

%ifarch %{efiarchs}

cd grub-efi-%{tarversion}

./autogen.sh

%configure							\

	CFLAGS="$(echo $RPM_OPT_FLAGS | sed			\

		-e 's/-O.//g'					\

		-e 's/-fstack-protector[[:alpha:]-]\+//g'	\

		-e 's/--param=ssp-buffer-size=4//g'		\

		-e 's/-mregparm=3/-mregparm=4/g'		\

		-e 's/-fexceptions//g'				\

		-e 's/-fasynchronous-unwind-tables//g'		\

		-e 's/^/ -fno-strict-aliasing -std=gnu99 /' )"	\

	TARGET_LDFLAGS=-static					\

        --with-platform=efi					\

	--with-grubdir=%{name}					\

        --program-transform-name=s,grub,%{name},		\

	--disable-grub-mount					\

	--disable-werror

make %{?_smp_mflags}

GRUB_MODULES="	all_video boot btrfs cat chain configfile echo efifwsetup \

		efinet ext2 fat font gfxmenu gfxterm gzio halt hfsplus iso9660 \

		jpeg loadenv lvm mdraid09 mdraid1x minicmd normal part_apple \

		part_msdos part_gpt password_pbkdf2 png reboot search \

		search_fs_uuid search_fs_file search_label sleep syslinuxcfg \

		test tftp regexp video xfs"

%ifarch aarch64

GRUB_MODULES="${GRUB_MODULES} linux"

%else

GRUB_MODULES="${GRUB_MODULES} linuxefi"

%endif

./grub-mkimage -O %{grubefiarch} -o %{grubefiname}.orig -p /EFI/%{efidir} \

		-d grub-core ${GRUB_MODULES}

./grub-mkimage -O %{grubefiarch} -o %{grubeficdname}.orig -p /EFI/BOOT \

		-d grub-core ${GRUB_MODULES}

%ifarch aarch64

mv %{grubefiname}.orig %{grubefiname}

mv %{grubeficdname}.orig %{grubeficdname}

%else

%pesign -s -i %{grubefiname}.orig -o %{grubefiname} -a %{SOURCE1} -c %{SOURCE1} -n redhatsecureboot301

%pesign -s -i %{grubeficdname}.orig -o %{grubeficdname} -a %{SOURCE1} -c %{SOURCE1} -n redhatsecureboot301

%endif

cd ..

%endif

cd grub-%{tarversion}

%ifnarch %{efi_only}

./autogen.sh

# -static is needed so that autoconf script is able to link

# test that looks for _start symbol on 64 bit platforms

%ifarch %{sparc} ppc ppc64 ppc64le

%define platform ieee1275

%else

%define platform pc

%endif

%configure							\

	CFLAGS="$(echo $RPM_OPT_FLAGS | sed			\

		-e 's/-O.//g'					\

		-e 's/-fstack-protector[[:alpha:]-]\+//g'	\

		-e 's/--param=ssp-buffer-size=4//g'		\

		-e 's/-mregparm=3/-mregparm=4/g'		\

		-e 's/-fexceptions//g'				\

		-e 's/-m64//g'					\

		-e 's/-fasynchronous-unwind-tables//g'		\

		-e 's/-mcpu=power7/-mcpu=power6/g'		\

		-e 's/^/ -fno-strict-aliasing -std=gnu99 /' )"	\

	TARGET_LDFLAGS=-static					\

        --with-platform=%{platform}				\

	--with-grubdir=%{name}					\

        --program-transform-name=s,grub,%{name},		\

	--disable-grub-mount					\

	--disable-werror

make %{?_smp_mflags}

%endif

sed -i -e 's,(grub),(%{name}),g' \

	-e 's,grub.info,%{name}.info,g' \

	-e 's,\* GRUB:,* GRUB2:,g' \

	-e 's,/boot/grub/,/boot/%{name}/,g' \

	-e 's,\([^-]\)grub-\([a-z]\),\1%{name}-\2,g' \

	docs/grub.info

sed -i -e 's,grub-dev,%{name}-dev,g' docs/grub-dev.info

/usr/bin/makeinfo --html --no-split -I docs -o grub-dev.html docs/grub-dev.texi

/usr/bin/makeinfo --html --no-split -I docs -o grub.html docs/grub.texi

sed -i	-e 's,/boot/grub/,/boot/%{name}/,g' \

	-e 's,\([^-]\)grub-\([a-z]\),\1%{name}-\2,g' \

	grub.html

%install

set -e

rm -fr $RPM_BUILD_ROOT

%ifarch %{efiarchs}

cd grub-efi-%{tarversion}

make DESTDIR=$RPM_BUILD_ROOT install

find $RPM_BUILD_ROOT -iname "*.module" -exec chmod a-x {} \;

# Ghost config file

install -m 755 -d $RPM_BUILD_ROOT/boot/efi/EFI/%{efidir}/

touch $RPM_BUILD_ROOT/boot/efi/EFI/%{efidir}/grub.cfg

ln -s ../boot/efi/EFI/%{efidir}/grub.cfg $RPM_BUILD_ROOT%{_sysconfdir}/%{name}-efi.cfg

# Install ELF files modules and images were created from into

# the shadow root, where debuginfo generator will grab them from

find $RPM_BUILD_ROOT -name '*.mod' -o -name '*.img' |

while read MODULE

do

        BASE=$(echo $MODULE |sed -r "s,.*/([^/]*)\.(mod|img),\1,")

        # Symbols from .img files are in .exec files, while .mod

        # modules store symbols in .elf. This is just because we

        # have both boot.img and boot.mod ...

        EXT=$(echo $MODULE |grep -q '.mod' && echo '.elf' || echo '.exec')

        TGT=$(echo $MODULE |sed "s,$RPM_BUILD_ROOT,.debugroot,")

#        install -m 755 -D $BASE$EXT $TGT

done

install -m 755 %{grubefiname} $RPM_BUILD_ROOT/boot/efi/EFI/%{efidir}/%{grubefiname}

install -m 755 %{grubeficdname} $RPM_BUILD_ROOT/boot/efi/EFI/%{efidir}/%{grubeficdname}

install -D -m 644 unicode.pf2 $RPM_BUILD_ROOT/boot/efi/EFI/%{efidir}/fonts/unicode.pf2

cd ..

%endif

cd grub-%{tarversion}

%ifnarch %{efi_only}

make DESTDIR=$RPM_BUILD_ROOT install

# Ghost config file

install -d $RPM_BUILD_ROOT/boot/%{name}

touch $RPM_BUILD_ROOT/boot/%{name}/grub.cfg

ln -s ../boot/%{name}/grub.cfg $RPM_BUILD_ROOT%{_sysconfdir}/%{name}.cfg

%endif

cp -a $RPM_BUILD_ROOT%{_datarootdir}/locale/en\@quot $RPM_BUILD_ROOT%{_datarootdir}/locale/en

# Install ELF files modules and images were created from into

# the shadow root, where debuginfo generator will grab them from

find $RPM_BUILD_ROOT -name '*.mod' -o -name '*.img' |

while read MODULE

do

        BASE=$(echo $MODULE |sed -r "s,.*/([^/]*)\.(mod|img),\1,")

        # Symbols from .img files are in .exec files, while .mod

        # modules store symbols in .elf. This is just because we

        # have both boot.img and boot.mod ...

        EXT=$(echo $MODULE |grep -q '.mod' && echo '.elf' || echo '.exec')

        TGT=$(echo $MODULE |sed "s,$RPM_BUILD_ROOT,.debugroot,")

#        install -m 755 -D $BASE$EXT $TGT

done

mv $RPM_BUILD_ROOT%{_infodir}/grub.info $RPM_BUILD_ROOT%{_infodir}/%{name}.info

mv $RPM_BUILD_ROOT%{_infodir}/grub-dev.info $RPM_BUILD_ROOT%{_infodir}/%{name}-dev.info

rm $RPM_BUILD_ROOT%{_infodir}/dir

# Defaults

mkdir ${RPM_BUILD_ROOT}%{_sysconfdir}/default

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/default/grub

mkdir ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig

ln -sf %{_sysconfdir}/default/grub \

	${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/grub

cd ..

%find_lang grub

# Fedora theme in /boot/grub2/themes/system/

cd $RPM_BUILD_ROOT

tar xjf %{SOURCE5}

$RPM_BUILD_ROOT%{_bindir}/%{name}-mkfont -o boot/grub2/themes/system/DejaVuSans-10.pf2      -s 10 /usr/share/fonts/dejavu/DejaVuSans.ttf # "DejaVu Sans Regular 10"

$RPM_BUILD_ROOT%{_bindir}/%{name}-mkfont -o boot/grub2/themes/system/DejaVuSans-12.pf2      -s 12 /usr/share/fonts/dejavu/DejaVuSans.ttf # "DejaVu Sans Regular 12"

$RPM_BUILD_ROOT%{_bindir}/%{name}-mkfont -o boot/grub2/themes/system/DejaVuSans-Bold-14.pf2 -s 14 /usr/share/fonts/dejavu/DejaVuSans-Bold.ttf # "DejaVu Sans Bold 14"

# Make selinux happy with exec stack binaries.

mkdir ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/

cat << EOF > ${RPM_BUILD_ROOT}%{_sysconfdir}/prelink.conf.d/grub2.conf

# these have execstack, and break under selinux

-b /usr/bin/grub2-script-check

-b /usr/bin/grub2-mkrelpath

-b /usr/bin/grub2-fstest

-b /usr/sbin/grub2-bios-setup

-b /usr/sbin/grub2-probe

-b /usr/sbin/grub2-sparc64-setup

EOF

%ifarch %{efiarchs}

mkdir -p boot/efi/EFI/%{efidir}/

ln -s /boot/efi/EFI/%{efidir}/grubenv boot/grub2/grubenv

%endif

%clean    

rm -rf $RPM_BUILD_ROOT

%pre tools

if [ -f /boot/grub2/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' /boot/grub2/user.cfg

    fi

elif [ -f /boot/efi/EFI/%{efidir}/user.cfg ]; then

    if grep -q '^GRUB_PASSWORD=' /boot/efi/EFI/%{efidir}/user.cfg ; then

	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' \

	    /boot/efi/EFI/%{efidir}/user.cfg

    fi

elif [ -f /etc/grub.d/01_users ] && \

	grep -q '^password_pbkdf2 root' /etc/grub.d/01_users ; then

    if [ -f /boot/efi/EFI/%{efidir}/grub.cfg ]; then

	# on EFI we don't get permissions on the file, but

	# the directory is protected.

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/efi/EFI/%{efidir}/user.cfg

    fi

    if [ -f /boot/grub2/grub.cfg ]; then

	install -m 0600 /dev/null /boot/grub2/user.cfg

	chmod 0600 /boot/grub2/user.cfg

	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \

		sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \

	    > /boot/grub2/user.cfg

    fi

fi

%post tools

if [ "$1" = 1 ]; then

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%triggerun -- grub2 < 1:1.99-4

# grub2 < 1.99-4 removed a number of essential files in postun. To fix upgrades

# from the affected grub2 packages, we first back up the files in triggerun and

# later restore them in triggerpostun.

# https://bugzilla.redhat.com/show_bug.cgi?id=735259

# Back up the files before uninstalling old grub2

mkdir -p /boot/grub2.tmp &&

mv -f /boot/grub2/*.mod \

      /boot/grub2/*.img \

      /boot/grub2/*.lst \

      /boot/grub2/device.map \

      /boot/grub2.tmp/ || :

%triggerpostun -- grub2 < 1:1.99-4

# ... and restore the files.

test ! -f /boot/grub2/device.map &&

test -d /boot/grub2.tmp &&

mv -f /boot/grub2.tmp/*.mod \

      /boot/grub2.tmp/*.img \

      /boot/grub2.tmp/*.lst \

      /boot/grub2.tmp/device.map \

      /boot/grub2/ &&

rm -r /boot/grub2.tmp/ || :

%preun tools

if [ "$1" = 0 ]; then

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz || :

	/sbin/install-info --delete --info-dir=%{_infodir} %{_infodir}/%{name}-dev.info.gz || :

fi

%ifnarch %{efi_only}

%files -f grub.lang

%defattr(-,root,root,-)

%{_libdir}/grub/*-%{platform}/

%config(noreplace) %{_sysconfdir}/%{name}.cfg

%ghost %config(noreplace) /boot/%{name}/grub.cfg

%doc grub-%{tarversion}/COPYING

%config(noreplace) %ghost /boot/grub2/grubenv

%endif

%ifarch %{efiarchs}

%files efi

%defattr(-,root,root,-)

%config(noreplace) %{_sysconfdir}/%{name}-efi.cfg

%attr(0755,root,root)/boot/efi/EFI/%{efidir}

%attr(0755,root,root)/boot/efi/EFI/%{efidir}/fonts

%ghost %config(noreplace) /boot/efi/EFI/%{efidir}/grub.cfg

%doc grub-%{tarversion}/COPYING

/boot/grub2/grubenv

# I know 0700 seems strange, but it lives on FAT so that's what it'll

# get no matter what we do.

%config(noreplace) %ghost %attr(0700,root,root)/boot/efi/EFI/%{efidir}/grubenv

%files efi-modules

%defattr(-,root,root,-)

%{_libdir}/grub/%{grubefiarch}

%endif

%files tools -f grub.lang

%defattr(-,root,root,-)

%dir %{_libdir}/grub/

%dir %{_datarootdir}/grub/

%dir %{_datarootdir}/grub/themes

%{_datarootdir}/grub/*

%{_sbindir}/%{name}-bios-setup

%{_sbindir}/%{name}-install

%{_sbindir}/%{name}-macbless

%{_sbindir}/%{name}-mkconfig

%{_sbindir}/%{name}-ofpathname

%{_sbindir}/%{name}-probe

%{_sbindir}/%{name}-reboot

%{_sbindir}/%{name}-rpm-sort

%{_sbindir}/%{name}-set-default

%{_sbindir}/%{name}-setpassword

%{_sbindir}/%{name}-sparc64-setup

%{_bindir}/%{name}-editenv

%{_bindir}/%{name}-file

%{_bindir}/%{name}-fstest

%{_bindir}/%{name}-glue-efi

%{_bindir}/%{name}-kbdcomp

%{_bindir}/%{name}-menulst2cfg

%{_bindir}/%{name}-mkfont

%{_bindir}/%{name}-mkimage

%{_bindir}/%{name}-mklayout

%{_bindir}/%{name}-mknetdir

%{_bindir}/%{name}-mkpasswd-pbkdf2

%{_bindir}/%{name}-mkrelpath

%ifnarch %{sparc}

%{_bindir}/%{name}-mkrescue

%endif

%{_bindir}/%{name}-mkstandalone

%{_bindir}/%{name}-render-label

%{_bindir}/%{name}-script-check

%{_bindir}/%{name}-syslinux2cfg

%{_datarootdir}/bash-completion/completions/grub

%{_sysconfdir}/prelink.conf.d/grub2.conf

%attr(0700,root,root) %dir %{_sysconfdir}/grub.d

%config %{_sysconfdir}/grub.d/??_*

%{_sysconfdir}/grub.d/README

%attr(0644,root,root) %ghost %config(noreplace) %{_sysconfdir}/default/grub

%{_sysconfdir}/sysconfig/grub

%attr(0700,root,root) %dir /boot/%{name}

%dir /boot/%{name}/themes/

%dir /boot/%{name}/themes/system

%exclude /boot/%{name}/themes/system/*

%exclude %{_datarootdir}/grub/themes/

%{_infodir}/%{name}*

%doc grub-%{tarversion}/COPYING grub-%{tarversion}/INSTALL

%doc grub-%{tarversion}/NEWS grub-%{tarversion}/README

%doc grub-%{tarversion}/THANKS grub-%{tarversion}/TODO

%doc grub-%{tarversion}/grub.html

%doc grub-%{tarversion}/grub-dev.html grub-%{tarversion}/docs/font_char_metrics.png

%doc %{_mandir}/man1/*

%doc %{_mandir}/man8/*

%dir /boot/%{name}/themes/

%dir %{_datarootdir}/grub/themes

%exclude %{_datarootdir}/grub/themes/starfield

%changelog

* Tue Jan 05 2016 CentOS Sources <bugs@centos.org> - 2.02-0.34.el7.centos

- Roll in CentOS Secureboot keys

- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos

* Tue Dec 15 2015 Peter Jones <pjones@redhat.com> - 2.02-0.34

- Rebuild with the right credentials.

  Related: rhbz#1290089

* Thu Dec 10 2015 Peter Jones <pjones@redhat.com> - 2.02-0.33

- Don't remove 01_users, it's the wrong thing to do.

  Related:rhbz1290089

* Wed Dec 09 2015 Peter Jones <pjones@redhat.com> - 2.02-0.32