# We have to override the new %%install behavior because, well... the kernel is special.

%global __spec_install_pre %{___build_pre}

Summary: The Linux kernel

# For a stable, released kernel, released_kernel should be 1. For rawhide

# and/or a kernel built from an rc or git snapshot, released_kernel should

# be 0.

%global released_kernel 1

# Sign modules on x86.  Make sure the config files match this setting if more

# architectures are added.

%ifarch %{ix86} x86_64

%global signkernel 1

%global signmodules 1

%global zipmodules 1

%else

%global signkernel 0

%global signmodules 1

%global zipmodules 1

%endif

%if %{zipmodules}

%global zipsed -e 's/\.ko$/\.ko.xz/'

%endif

# define buildid .local

# baserelease defines which build revision of this kernel version we're

# building.  We used to call this fedora_build, but the magical name

# baserelease is matched by the rpmdev-bumpspec tool, which you should use.

#

# We used to have some extra magic weirdness to bump this automatically,

# but now we don't.  Just use: rpmdev-bumpspec -c 'comment for changelog'

# When changing base_sublevel below or going from rc to a final kernel,

# reset this by hand to 1 (or to 0 and then use rpmdev-bumpspec).

# scripts/rebase.sh should be made to do that for you, actually.

#

# NOTE: baserelease must be > 0 or bad things will happen if you switch

#       to a released kernel (released version will be < rc version)

#

# For non-released -rc kernels, this will be appended after the rcX and

# gitX tags, so a 3 here would become part of release "0.rcX.gitX.3"

#

%global baserelease 300

%global fedora_build %{baserelease}

# base_sublevel is the kernel version we're starting with and patching

# on top of -- for example, 3.1-rc7-git1 starts with a 3.0 base,

# which yields a base_sublevel of 0.

%define base_sublevel 19

## If this is a released kernel ##

%if 0%{?released_kernel}

# Do we have a -stable update to apply?

%define stable_update 32

# Set rpm version accordingly

%if 0%{?stable_update}

%define stablerev %{stable_update}

%define stable_base %{stable_update}

%endif

%define rpmversion 4.%{base_sublevel}.%{stable_update}

## The not-released-kernel case ##

%else

# The next upstream release sublevel (base_sublevel+1)

%define upstream_sublevel %(echo $((%{base_sublevel} + 1)))

# The rc snapshot level

%global rcrev 0

# The git snapshot level

%define gitrev 0

# Set rpm version accordingly

%define rpmversion 4.%{upstream_sublevel}.0

%endif

# Nb: The above rcrev and gitrev values automagically define Patch00 and Patch01 below.

# What parts do we want to build?  We must build at least one kernel.

# These are the kernels that are built IF the architecture allows it.

# All should default to 1 (enabled) and be flipped to 0 (disabled)

# by later arch-specific checks.

# The following build options are enabled by default.

# Use either --without <opt> in your rpmbuild command or force values

# to 0 in here to disable them.

#

# standard kernel

%define with_up        %{?_without_up:        0} %{?!_without_up:        1}

# kernel PAE (only valid for i686 (PAE) and ARM (lpae))

%define with_pae       %{?_without_pae:       0} %{?!_without_pae:       1}

# kernel-debug

%define with_debug     %{?_without_debug:     0} %{?!_without_debug:     1}

# kernel-headers

%define with_headers   %{?_without_headers:   0} %{?!_without_headers:   1}

%define with_cross_headers   %{?_without_cross_headers:   0} %{?!_without_cross_headers:   1}

# perf

%define with_perf      %{?_without_perf:      0} %{?!_without_perf:      1}

# tools

%define with_tools     %{?_without_tools:     0} %{?!_without_tools:     1}

# kernel-debuginfo

%define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}

# Want to build a the vsdo directories installed

%define with_vdso_install %{?_without_vdso_install: 0} %{?!_without_vdso_install: 1}

#

# Additional options for user-friendly one-off kernel building:

#

# Only build the base kernel (--with baseonly):

%define with_baseonly  %{?_with_baseonly:     1} %{?!_with_baseonly:     0}

# Only build the pae kernel (--with paeonly):

%define with_paeonly   %{?_with_paeonly:      1} %{?!_with_paeonly:      0}

# Only build the debug kernel (--with dbgonly):

%define with_dbgonly   %{?_with_dbgonly:      1} %{?!_with_dbgonly:      0}

#

# should we do C=1 builds with sparse

%define with_sparse    %{?_with_sparse:       1} %{?!_with_sparse:       0}

#

# Cross compile requested?

%define with_cross    %{?_with_cross:         1} %{?!_with_cross:        0}

#

# build a release kernel on rawhide

%define with_release   %{?_with_release:      1} %{?!_with_release:      0}

# verbose build, i.e. no silent rules and V=1

%define with_verbose %{?_with_verbose:        1} %{?!_with_verbose:      0}

# Set debugbuildsenabled to 1 for production (build separate debug kernels)

#  and 0 for rawhide (all kernels are debug kernels).

# See also 'make debug' and 'make release'.

%define debugbuildsenabled 1

# Kernel headers are being split out into a separate package

%if 0%{?fedora}

%define with_headers 0

%define with_cross_headers 0

%endif

%if %{with_verbose}

%define make_opts V=1

%else

%define make_opts -s

%endif

# Want to build a vanilla kernel build without any non-upstream patches?

%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}

# pkg_release is what we'll fill in for the rpm Release: field

%if 0%{?released_kernel}

%define pkg_release %{fedora_build}%{?buildid}%{?dist}

%else

# non-released_kernel

%if 0%{?rcrev}

%define rctag .rc%rcrev

%else

%define rctag .rc0

%endif

%if 0%{?gitrev}

%define gittag .git%gitrev

%else

%define gittag .git0

%endif

%define pkg_release 0%{?rctag}%{?gittag}.%{fedora_build}%{?buildid}%{?dist}

%endif

# The kernel tarball/base version

%define kversion 4.%{base_sublevel}

%define make_target bzImage

%define image_install_path boot

%define KVERREL %{version}-%{release}.%{_target_cpu}

%define hdrarch %_target_cpu

%define asmarch %_target_cpu

%if 0%{!?nopatches:1}

%define nopatches 0

%endif

%if %{with_vanilla}

%define nopatches 1

%endif

%if %{nopatches}

%define variant -vanilla

%endif

%if !%{debugbuildsenabled}

%define with_debug 0

%endif

%if !%{with_debuginfo}

%define _enable_debug_packages 0

%endif

%define debuginfodir /usr/lib/debug

# Needed because we override almost everything involving build-ids

# and debuginfo generation. Currently we rely on the old alldebug setting.

%global _build_id_links alldebug

# kernel PAE is only built on ARMv7 in rawhide.

# Fedora 27 and earlier still support PAE, so change this on rebases.

# %ifnarch i686 armv7hl

%ifnarch armv7hl

%define with_pae 0

%endif

# if requested, only build base kernel

%if %{with_baseonly}

%define with_pae 0

%define with_debug 0

%endif

# if requested, only build pae kernel

%if %{with_paeonly}

%define with_up 0

%define with_debug 0

%endif

# if requested, only build debug kernel

%if %{with_dbgonly}

%if %{debugbuildsenabled}

%define with_up 0

%define with_pae 0

%endif

%define with_pae 0

%define with_tools 0

%define with_perf 0

%endif

%define all_x86 i386 i686

%if %{with_vdso_install}

%define use_vdso 1

%endif

# Overrides for generic default options

# don't do debug builds on anything but i686 and x86_64

%ifnarch i686 x86_64

%define with_debug 0

%endif

# don't build noarch kernels or headers (duh)

%ifarch noarch

%define with_up 0

%define with_headers 0

%define with_cross_headers 0

%define with_tools 0

%define with_perf 0

%define all_arch_configs kernel-%{version}-*.config

%endif

# sparse blows up on ppc

%ifnarch %{power64}

%define with_sparse 0

%endif

# Per-arch tweaks

%ifarch %{all_x86}

%define asmarch x86

%define hdrarch i386

%define pae PAE

%define all_arch_configs kernel-%{version}-i?86*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch x86_64

%define asmarch x86

%define all_arch_configs kernel-%{version}-x86_64*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch %{power64}

%define asmarch powerpc

%define hdrarch powerpc

%define make_target vmlinux

%define kernel_image vmlinux

%define kernel_image_elf 1

%ifarch ppc64le

%define all_arch_configs kernel-%{version}-ppc64le*.config

%endif

%endif

%ifarch s390x

%define asmarch s390

%define hdrarch s390

%define all_arch_configs kernel-%{version}-s390x.config

%define kernel_image arch/s390/boot/bzImage

%endif

%ifarch %{arm}

%define all_arch_configs kernel-%{version}-arm*.config

%define skip_nonpae_vdso 1

%define asmarch arm

%define hdrarch arm

%define pae lpae

%define make_target bzImage

%define kernel_image arch/arm/boot/zImage

# http://lists.infradead.org/pipermail/linux-arm-kernel/2012-March/091404.html

%define kernel_mflags KALLSYMS_EXTRA_PASS=1

# we only build headers/perf/tools on the base arm arches

# just like we used to only build them on i386 for x86

%ifnarch armv7hl

%define with_headers 0

%define with_cross_headers 0

%define with_perf 0

%define with_tools 0

%endif

%endif

%ifarch aarch64

%define all_arch_configs kernel-%{version}-aarch64*.config

%define asmarch arm64

%define hdrarch arm64

%define make_target Image.gz

%define kernel_image arch/arm64/boot/Image.gz

%endif

# Should make listnewconfig fail if there's config options

# printed out?

%if %{nopatches}

%define listnewconfig_fail 0

%define configmismatch_fail 0

%else

%define listnewconfig_fail 1

%define configmismatch_fail 1

%endif

# To temporarily exclude an architecture from being built, add it to

# %%nobuildarches. Do _NOT_ use the ExclusiveArch: line, because if we

# don't build kernel-headers then the new build system will no longer let

# us use the previous build of that package -- it'll just be completely AWOL.

# Which is a BadThing(tm).

# We only build kernel-headers on the following...

%define nobuildarches i386

%ifarch %nobuildarches

%define with_up 0

%define with_pae 0

%define with_debuginfo 0

%define with_debug 0

%define with_perf 0

%define with_tools 0

%define _enable_debug_packages 0

%endif

%define with_pae_debug 0

%if %{with_pae}

%define with_pae_debug %{with_debug}

%endif

# Architectures we build tools/cpupower on

%define cpupowerarchs %{ix86} x86_64 %{power64} %{arm} aarch64

%if %{use_vdso}

%if 0%{?skip_nonpae_vdso}

%define _use_vdso 0

%else

%define _use_vdso 1

%endif

%else

%define _use_vdso 0

%endif

#

# Packages that need to be installed before the kernel is, because the %%post

# scripts use them.

#

%define kernel_prereq  coreutils, systemd >= 203-2, /usr/bin/kernel-install

%define initrd_prereq  dracut >= 027

Name: kernel%{?variant}

License: GPLv2 and Redistributable, no modification permitted

URL: https://www.kernel.org/

Version: %{rpmversion}

Release: %{pkg_release}

# DO NOT CHANGE THE 'ExclusiveArch' LINE TO TEMPORARILY EXCLUDE AN ARCHITECTURE BUILD.

# SET %%nobuildarches (ABOVE) INSTEAD

ExclusiveArch: %{all_x86} x86_64 s390x %{arm} aarch64 ppc64le

ExclusiveOS: Linux

%ifnarch %{nobuildarches}

Requires: kernel-core-uname-r = %{KVERREL}%{?variant}

Requires: kernel-modules-uname-r = %{KVERREL}%{?variant}

%endif

Conflicts: xorg-x11-drv-vmmouse < 14.0.0

#

# List the packages used during the kernel build

#

BuildRequires: kmod, patch, bash, tar, git-core

BuildRequires: bzip2, xz, findutils, gzip, m4, perl-interpreter, perl-Carp, perl-devel, perl-generators, make, diffutils, gawk

BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex

BuildRequires: net-tools, hostname, bc, elfutils-devel

%if %{with_sparse}

BuildRequires: sparse

%endif

%if %{with_perf}

BuildRequires: zlib-devel binutils-devel newt-devel python-devel perl(ExtUtils::Embed) bison flex xz-devel

BuildRequires: audit-libs-devel

BuildRequires: asciidoc xmlto

%ifnarch s390x %{arm}

BuildRequires: numactl-devel

%endif

%endif

%if %{with_tools}

BuildRequires: pciutils-devel gettext ncurses-devel

%endif

BuildConflicts: rhbuildsys(DiskFree) < 500Mb

%if %{with_debuginfo}

BuildRequires: rpm-build, elfutils

BuildConflicts: rpm < 4.13.0.1-19

# Most of these should be enabled after more investigation

%undefine _include_minidebuginfo

%undefine _find_debuginfo_dwz_opts

%undefine _unique_build_ids

%undefine _unique_debug_names

%undefine _unique_debug_srcs

%undefine _debugsource_packages

%undefine _debuginfo_subpackages

%undefine _include_gdb_index

%global _find_debuginfo_opts -r

%global _missing_build_ids_terminate_build 1

%global _no_recompute_build_ids 1

%endif

%if %{signkernel}%{signmodules}

BuildRequires: openssl openssl-devel

%if %{signkernel}

BuildRequires: pesign >= 0.10-4

%endif

%endif

%if %{with_cross}

BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu

%define cross_opts CROSS_COMPILE=%{_build_arch}-linux-gnu-

%endif

Source0: https://www.kernel.org/pub/linux/kernel/v4.x/linux-%{kversion}.tar.xz

Source11: x509.genkey

Source12: remove-binary-diff.pl

Source15: merge.pl

Source16: mod-extra.list

Source17: mod-extra.sh

Source18: mod-sign.sh

Source90: filter-x86_64.sh

Source91: filter-armv7hl.sh

Source92: filter-i686.sh

Source93: filter-aarch64.sh

Source94: filter-ppc64le.sh

Source95: filter-s390x.sh

Source99: filter-modules.sh

%define modsign_cmd %{SOURCE18}

Source20: kernel-aarch64.config

Source21: kernel-aarch64-debug.config

Source22: kernel-armv7hl.config

Source23: kernel-armv7hl-debug.config

Source24: kernel-armv7hl-lpae.config

Source25: kernel-armv7hl-lpae-debug.config

Source26: kernel-i686.config

Source27: kernel-i686-debug.config

Source30: kernel-ppc64le.config

Source31: kernel-ppc64le-debug.config

Source32: kernel-s390x.config

Source33: kernel-s390x-debug.config

Source34: kernel-x86_64.config

Source35: kernel-x86_64-debug.config

Source40: generate_all_configs.sh

Source41: generate_debug_configs.sh

Source42: process_configs.sh

Source43: generate_bls_conf.sh

# This file is intentionally left empty in the stock kernel. Its a nicety

# added for those wanting to do custom rebuilds with altered config opts.

Source1000: kernel-local

# Sources for kernel-tools

Source2000: cpupower.service

Source2001: cpupower.config

# Here should be only the patches up to the upstream canonical Linus tree.

# For a stable release kernel

%if 0%{?stable_update}

%if 0%{?stable_base}

%define    stable_patch_00  patch-4.%{base_sublevel}.%{stable_base}.xz

Source5000: %{stable_patch_00}

%endif

# non-released_kernel case

# These are automagically defined by the rcrev and gitrev values set up

# near the top of this spec file.

%else

%if 0%{?rcrev}

Source5000: patch-4.%{upstream_sublevel}-rc%{rcrev}.xz

%if 0%{?gitrev}

Source5001: patch-4.%{upstream_sublevel}-rc%{rcrev}-git%{gitrev}.xz

%endif

%else

# pre-{base_sublevel+1}-rc1 case

%if 0%{?gitrev}

Source5000: patch-4.%{base_sublevel}-git%{gitrev}.xz

%endif

%endif

%endif

## Patches needed for building this package

## compile fixes

# ongoing complaint, full discussion delayed until ksummit/plumbers

Patch002: 0001-iio-Use-event-header-from-kernel-tree.patch

%if !%{nopatches}

# Git trees.

# Standalone patches

# 100 - Generic long running patches

Patch110: lib-cpumask-Make-CPUMASK_OFFSTACK-usable-without-deb.patch

Patch111: input-kill-stupid-messages.patch

Patch112: die-floppy-die.patch

Patch113: no-pcspkr-modalias.patch

Patch114: silence-fbcon-logo.patch

Patch115: Kbuild-Add-an-option-to-enable-GCC-VTA.patch

Patch116: crash-driver.patch

Patch117: lis3-improve-handling-of-null-rate.patch

Patch118: scsi-sd_revalidate_disk-prevent-NULL-ptr-deref.patch

Patch119: namespaces-no-expert.patch

Patch120: ath9k-rx-dma-stop-check.patch

Patch121: xen-pciback-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch

Patch122: Input-synaptics-pin-3-touches-when-the-firmware-repo.patch

# This no longer applies, let's see if it needs to be updated

# Patch123: firmware-Drop-WARN-from-usermodehelper_read_trylock-.patch

# 200 - x86 / secureboot

Patch201: efi-lockdown.patch

Patch202: KEYS-Allow-unrestricted-boot-time-addition-of-keys-t.patch

Patch203: Add-EFI-signature-data-types.patch

Patch204: Add-an-EFI-signature-blob-parser-and-key-loader.patch

Patch205: MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch

Patch206: MODSIGN-Support-not-importing-certs-from-db.patch

# bz 1497559 - Make kernel MODSIGN code not error on missing variables

Patch207: 0001-Make-get_cert_list-not-complain-about-cert-lists-tha.patch

Patch208: 0002-Add-efi_status_to_str-and-rework-efi_status_to_err.patch

Patch209: 0003-Make-get_cert_list-use-efi_status_to_str-to-print-er.patch

Patch210: disable-i8042-check-on-apple-mac.patch

Patch211: drm-i915-hush-check-crtc-state.patch

Patch212: efi-secureboot.patch

# 300 - ARM patches

Patch300: arm64-Add-option-of-13-for-FORCE_MAX_ZONEORDER.patch

# http://www.spinics.net/lists/linux-tegra/msg26029.html

Patch301: usb-phy-tegra-Add-38.4MHz-clock-table-entry.patch

# http://patchwork.ozlabs.org/patch/587554/

Patch302: ARM-tegra-usb-no-reset.patch

# https://patchwork.kernel.org/patch/10351797/

Patch303: ACPI-scan-Fix-regression-related-to-X-Gene-UARTs.patch

# rhbz 1574718

Patch304: ACPI-irq-Workaround-firmware-issue-on-X-Gene-based-m400.patch

# https://patchwork.kernel.org/patch/9820417/

Patch305: qcom-msm89xx-fixes.patch

# https://patchwork.kernel.org/project/linux-mmc/list/?submitter=71861

Patch306: arm-sdhci-esdhc-imx-fixes.patch

# https://www.spinics.net/lists/arm-kernel/msg670137.html

Patch307: arm64-ZynqMP-firmware-clock-drivers-core.patch

Patch308: arm64-96boards-Rock960-CE-board-support.patch

Patch309: arm64-rockchip-add-initial-Rockpro64.patch

Patch310: arm64-rk3399-add-idle-states.patch

Patch311: gpio-pxa-handle-corner-case-of-unprobed-device.patch

Patch330: bcm2835-cpufreq-add-CPU-frequency-control-driver.patch

# https://patchwork.kernel.org/patch/10686407/

Patch332: raspberrypi-Fix-firmware-calls-with-large-buffers.patch

# From 4.20, fix eth link/act lights on 3B+

Patch334: bcm2837-fix-eth-leds.patch

# Patches enabling device specific brcm firmware nvram

# https://www.spinics.net/lists/linux-wireless/msg178827.html

Patch340: brcmfmac-Remove-firmware-loading-code-duplication.patch

# 400 - IBM (ppc/s390x) patches

# 500 - Temp fixes/CVEs etc

# rhbz 1476467

Patch501: Fix-for-module-sig-verification.patch

# rhbz 1431375

Patch502: input-rmi4-remove-the-need-for-artifical-IRQ.patch

# Ena fixes from 4.20

Patch503: ena-fixes.patch

# rhbz 1526312, patch is in 4.20, can be dropped on rebase

Patch507: 0001-HID-i2c-hid-override-HID-descriptors-for-certain-dev.patch

# Patches from 4.20 fixing black screen on CHT devices with i915.fastboot=1

Patch508: cherrytrail-pwm-lpss-fixes.patch

# rhbz 1526312 (accelerometer part of the bug), patches pending upstream

Patch510: iio-accel-kxcjk1013-Add-more-hardware-ids.patch

# rhbz 1645070 patch queued upstream for merging into 4.21

Patch516: asus-fx503-keyb.patch

# rhbz 1661961 patch merged upstream in 4.20

Patch517: 0001-Bluetooth-btsdio-Do-not-bind-to-non-removable-BCM434.patch

# CVE-2019-3459 and CVE-2019-3460 rbhz 1663176 1663179 1665925

Patch519: CVE-2019-3459-and-CVE-2019-3460.patch

##centos

Patch10002: 9999-centos-a83t-hdmi.patch

Patch11002: 9999-centos-r40sata.patch

##end centos

# END OF PATCH DEFINITIONS

%endif

%description

The kernel meta package

#

# This macro does requires, provides, conflicts, obsoletes for a kernel package.

#	%%kernel_reqprovconf <subpackage>

# It uses any kernel_<subpackage>_conflicts and kernel_<subpackage>_obsoletes

# macros defined above.

#

%define kernel_reqprovconf \

Provides: kernel = %{rpmversion}-%{pkg_release}\

Provides: kernel-%{_target_cpu} = %{rpmversion}-%{pkg_release}%{?1:+%{1}}\

Provides: kernel-drm-nouveau = 16\

Provides: kernel-uname-r = %{KVERREL}%{?variant}%{?1:+%{1}}\

Requires(pre): %{kernel_prereq}\

Requires(pre): %{initrd_prereq}\

Requires(pre): linux-firmware >= 20150904-56.git6ebf5d57\

Requires(preun): systemd >= 200\

Conflicts: xfsprogs < 4.3.0-1\

Conflicts: xorg-x11-drv-vmmouse < 13.0.99\

%{expand:%%{?kernel%{?1:_%{1}}_conflicts:Conflicts: %%{kernel%{?1:_%{1}}_conflicts}}}\

%{expand:%%{?kernel%{?1:_%{1}}_obsoletes:Obsoletes: %%{kernel%{?1:_%{1}}_obsoletes}}}\

%{expand:%%{?kernel%{?1:_%{1}}_provides:Provides: %%{kernel%{?1:_%{1}}_provides}}}\

# We can't let RPM do the dependencies automatic because it'll then pick up\

# a correct but undesirable perl dependency from the module headers which\

# isn't required for the kernel proper to function\

AutoReq: no\

AutoProv: yes\

%{nil}

%package headers

Summary: Header files for the Linux kernel for use by glibc

Obsoletes: glibc-kernheaders < 3.0-46

Provides: glibc-kernheaders = 3.0-46

%if "0%{?variant}"

Obsoletes: kernel-headers < %{rpmversion}-%{pkg_release}

Provides: kernel-headers = %{rpmversion}-%{pkg_release}

%endif

%description headers

Kernel-headers includes the C header files that specify the interface

between the Linux kernel and userspace libraries and programs.  The

header files define structures and constants that are needed for

building most standard programs and are also needed for rebuilding the

glibc package.

%package cross-headers

Summary: Header files for the Linux kernel for use by cross-glibc

%description cross-headers

Kernel-cross-headers includes the C header files that specify the interface

between the Linux kernel and userspace libraries and programs.  The

header files define structures and constants that are needed for