# We have to override the new %%install behavior because, well... the kernel is special.

%global __spec_install_pre %{___build_pre}

# At the time of this writing (2019-03), RHEL8 packages use w2.xzdio

# compression for rpms (xz, level 2).

# Kernel has several large (hundreds of mbytes) rpms, they take ~5 mins

# to compress by single-threaded xz. Switch to threaded compression,

# and from level 2 to 3 to keep compressed sizes close to "w2" results.

#

# NB: if default compression in /usr/lib/rpm/redhat/macros ever changes,

# this one might need tweaking (e.g. if default changes to w3.xzdio,

# change below to w4T.xzdio):

#

# This is disabled on i686 as it triggers oom errors

%ifnarch i686

%define _binary_payload w3T.xzdio

%endif

Summary: The Linux kernel

# For a kernel released for public testing, released_kernel should be 1.

# For internal testing builds during development, it should be 0.

# For rawhide and/or a kernel built from an rc or git snapshot,

# released_kernel should be 0.

# For a stable, released kernel, released_kernel should be 1.

%global released_kernel 1

%if 0%{?fedora}

%define secure_boot_arch x86_64

%else

%define secure_boot_arch x86_64 aarch64 s390x ppc64le

%endif

# Signing for secure boot authentication

%ifarch %{secure_boot_arch}

%global signkernel 1

%else

%global signkernel 0

%endif

# Sign modules on all arches

%global signmodules 1

# Compress modules only for architectures that build modules

%ifarch noarch

%global zipmodules 0

%else

%global zipmodules 1

%endif

%if %{zipmodules}

%global zipsed -e 's/\.ko$/\.ko.xz/'

%endif

# define buildid .local

%if 0%{?fedora}%{?centos}

%define primary_target fedora

%else

%define primary_target rhel

%endif

# baserelease defines which build revision of this kernel version we're

# building.  We used to call this fedora_build, but the magical name

# baserelease is matched by the rpmdev-bumpspec tool, which you should use.

#

# We used to have some extra magic weirdness to bump this automatically,

# but now we don't.  Just use: rpmdev-bumpspec -c 'comment for changelog'

# When changing base_sublevel below or going from rc to a final kernel,

# reset this by hand to 1 (or to 0 and then use rpmdev-bumpspec).

# scripts/rebase.sh should be made to do that for you, actually.

#

# NOTE: baserelease must be > 0 or bad things will happen if you switch

#       to a released kernel (released version will be < rc version)

#

# For non-released -rc kernels, this will be appended after the rcX and

# gitX tags, so a 3 here would become part of release "0.rcX.gitX.3"

#

%global baserelease 200

%global fedora_build %{baserelease}

# base_sublevel is the kernel version we're starting with and patching

# on top of -- for example, 3.1-rc7-git1 starts with a 3.0 base,

# which yields a base_sublevel of 0.

%define base_sublevel 4

## If this is a released kernel ##

%if 0%{?released_kernel}

# Do we have a -stable update to apply?

%define stable_update 28

# Set rpm version accordingly

%if 0%{?stable_update}

%define stablerev %{stable_update}

%define stable_base %{stable_update}

%endif

%define rpmversion 5.%{base_sublevel}.%{stable_update}

## The not-released-kernel case ##

%else

# The next upstream release sublevel (base_sublevel+1)

%define upstream_sublevel %(echo $((%{base_sublevel} + 1)))

# The rc snapshot level

%global rcrev 0

# The git snapshot level

%define gitrev 0

# Set rpm version accordingly

%define rpmversion 5.%{upstream_sublevel}.0

%endif

# Nb: The above rcrev and gitrev values automagically define Patch00 and Patch01 below.

# What parts do we want to build?  We must build at least one kernel.

# These are the kernels that are built IF the architecture allows it.

# All should default to 1 (enabled) and be flipped to 0 (disabled)

# by later arch-specific checks.

# The following build options are enabled by default.

# Use either --without <opt> in your rpmbuild command or force values

# to 0 in here to disable them.

#

# standard kernel

%define with_up        %{?_without_up:        0} %{?!_without_up:        1}

# kernel PAE (only valid for ARM (lpae))

%define with_pae       %{?_without_pae:       0} %{?!_without_pae:       1}

# kernel-debug

%define with_debug     %{?_without_debug:     0} %{?!_without_debug:     1}

# kernel-doc

%define with_doc       %{?_without_doc:       0} %{?!_without_doc:       1}

# kernel-headers

%define with_headers   %{?_without_headers:   0} %{?!_without_headers:   1}

%define with_cross_headers   %{?_without_cross_headers:   0} %{?!_without_cross_headers:   1}

# perf

%define with_perf      %{?_without_perf:      0} %{?!_without_perf:      1}

# tools

%define with_tools     %{?_without_tools:     0} %{?!_without_tools:     1}

# bpf tool

%define with_bpftool   %{?_without_bpftool:   0} %{?!_without_bpftool:   1}

# kernel-debuginfo

%define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}

# Want to build a the vsdo directories installed

%define with_vdso_install %{?_without_vdso_install: 0} %{?!_without_vdso_install: 1}

# kernel-zfcpdump (s390 specific kernel for zfcpdump)

%define with_zfcpdump  %{?_without_zfcpdump:  0} %{?!_without_zfcpdump:  1}

# kernel-abi-whitelists

%define with_kernel_abi_whitelists %{?_without_kernel_abi_whitelists: 0} %{?!_without_kernel_abi_whitelists: 1}

# internal samples and selftests

%define with_selftests %{?_without_selftests: 0} %{?!_without_selftests: 1}

#

# Additional options for user-friendly one-off kernel building:

#

# Only build the base kernel (--with baseonly):

%define with_baseonly  %{?_with_baseonly:     1} %{?!_with_baseonly:     0}

# Only build the pae kernel (--with paeonly):

%define with_paeonly   %{?_with_paeonly:      1} %{?!_with_paeonly:      0}

# Only build the debug kernel (--with dbgonly):

%define with_dbgonly   %{?_with_dbgonly:      1} %{?!_with_dbgonly:      0}

# Control whether we perform a compat. check against published ABI.

%define with_kabichk   %{?_without_kabichk:   0} %{?!_without_kabichk:   1}

# Temporarily disable kabi checks until RC.

%define with_kabichk 0

# Control whether we perform a compat. check against DUP ABI.

%define with_kabidupchk %{?_with_kabidupchk:  1} %{?!_with_kabidupchk:   0}

#

# Control whether to run an extensive DWARF based kABI check.

# Note that this option needs to have baseline setup in SOURCE300.

%define with_kabidwchk %{?_without_kabidwchk: 0} %{?!_without_kabidwchk: 1}

%define with_kabidw_base %{?_with_kabidw_base: 1} %{?!_with_kabidw_base: 0}

#

# should we do C=1 builds with sparse

%define with_sparse    %{?_with_sparse:       1} %{?!_with_sparse:       0}

#

# Cross compile requested?

%define with_cross    %{?_with_cross:         1} %{?!_with_cross:        0}

#

# build a release kernel on rawhide

%define with_release   %{?_with_release:      1} %{?!_with_release:      0}

# verbose build, i.e. no silent rules and V=1

%define with_verbose %{?_with_verbose:        1} %{?!_with_verbose:      0}

#

# check for mismatched config options

%define with_configchecks %{?_without_configchecks:        0} %{?!_without_configchecks:        1}

#

# gcov support

%define with_gcov %{?_with_gcov: 1} %{?!_with_gcov: 0}

#

# ipa_clone support

%define with_ipaclones %{?_without_ipaclones: 0} %{?!_without_ipaclones: 1}

# Want to build a vanilla kernel build without any non-upstream patches?

%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}

# Set debugbuildsenabled to 1 for production (build separate debug kernels)

#  and 0 for rawhide (all kernels are debug kernels).

# See also 'make debug' and 'make release'.

%define debugbuildsenabled 1

%if 0%{?fedora}

# Kernel headers are being split out into a separate package

%define with_headers 0

%define with_cross_headers 0

# no selftests for now

%define with_selftests 0

# no ipa_clone for now

%define with_ipaclones 0

# no whitelist

%define with_kernel_abi_whitelists 0

# Fedora builds these separately

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%endif

%if 0%{?centos}

# no selftests for now

%define with_selftests 0

# no ipa_clone for now

%define with_ipaclones 0

%endif

%if %{with_verbose}

%define make_opts V=1

%else

%define make_opts -s

%endif

# pkg_release is what we'll fill in for the rpm Release: field

%if 0%{?released_kernel}

%define pkg_release %{fedora_build}%{?buildid}%{?dist}

%else

# non-released_kernel

%if 0%{?rcrev}

%define rctag .rc%rcrev

%else

%define rctag .rc0

%endif

%if 0%{?gitrev}

%define gittag .git%gitrev

%else

%define gittag .git0

%endif

%define pkg_release 0%{?rctag}%{?gittag}.%{fedora_build}%{?buildid}%{?dist}

%endif

# The kernel tarball/base version

%define kversion 5.%{base_sublevel}

# turn off debug kernel and kabichk for gcov builds

%if %{with_gcov}

%define with_debug 0

%define with_kabichk 0

%define with_kabidupchk 0

%define with_kabidwchk 0

%endif

# turn off kABI DWARF-based check if we're generating the base dataset

%if %{with_kabidw_base}

%define with_kabidwchk 0

%endif

# kpatch_kcflags are extra compiler flags applied to base kernel

# -fdump-ipa-clones is enabled only for base kernels on selected arches

%if %{with_ipaclones}

%ifarch x86_64 ppc64le

%define kpatch_kcflags -fdump-ipa-clones

%else

%define with_ipaclones 0

%endif

%endif

%define make_target bzImage

%define image_install_path boot

%define KVERREL %{version}-%{release}.%{_target_cpu}

%define KVERREL_RE %(echo %KVERREL | sed 's/+/[+]/g')

%define hdrarch %_target_cpu

%define asmarch %_target_cpu

%if 0%{!?nopatches:1}

%define nopatches 0

%endif

%if %{with_vanilla}

%define nopatches 1

%endif

%if %{nopatches}

%define variant -vanilla

%endif

%if !%{debugbuildsenabled}

%define with_debug 0

%endif

%if !%{with_debuginfo}

%define _enable_debug_packages 0

%endif

%define debuginfodir /usr/lib/debug

# Needed because we override almost everything involving build-ids

# and debuginfo generation. Currently we rely on the old alldebug setting.

%global _build_id_links alldebug

# kernel PAE is only built on ARMv7

%ifnarch armv7hl

%define with_pae 0

%endif

# if requested, only build base kernel

%if %{with_baseonly}

%define with_pae 0

%define with_debug 0

%endif

# if requested, only build pae kernel

%if %{with_paeonly}

%define with_up 0

%define with_debug 0

%endif

# if requested, only build debug kernel

%if %{with_dbgonly}

%if %{debugbuildsenabled}

%define with_up 0

%define with_pae 0

%endif

%define with_pae 0

%define with_tools 0

%define with_perf 0

%define with_bpftool 0

%endif

# turn off kABI DUP check and DWARF-based check if kABI check is disabled

%if !%{with_kabichk}

%define with_kabidupchk 0

%define with_kabidwchk 0

%endif

%if %{with_vdso_install}

%define use_vdso 1

%endif

%ifnarch noarch

%define with_kernel_abi_whitelists 0

%endif

# Overrides for generic default options

# only package docs noarch

%ifnarch noarch

%define with_doc 0

%define doc_build_fail true

%endif

%if 0%{?fedora}%{?centos}

# don't do debug builds on anything but i686 and x86_64

%ifnarch i686 x86_64

%define with_debug 0

%endif

%endif

# don't build noarch kernels or headers (duh)

%ifarch noarch

%define with_up 0

%define with_headers 0

%define with_cross_headers 0

%define with_tools 0

%define with_perf 0

%define with_bpftool 0

%define with_selftests 0

%define with_debug 0

%define all_arch_configs kernel-%{version}-*.config

%endif

# sparse blows up on ppc

%ifnarch ppc64le

%define with_sparse 0

%endif

# zfcpdump mechanism is s390 only

%ifnarch s390x

%define with_zfcpdump 0

%endif

%if 0%{?fedora}

# This is not for Fedora

%define with_zfcpdump 0

%endif

# Per-arch tweaks

%ifarch i686

%define asmarch x86

%define hdrarch i386

%define all_arch_configs kernel-%{version}-i?86*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch x86_64

%define asmarch x86

%define all_arch_configs kernel-%{version}-x86_64*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch ppc64le

%define asmarch powerpc

%define hdrarch powerpc

%define make_target vmlinux

%define kernel_image vmlinux

%define kernel_image_elf 1

%define all_arch_configs kernel-%{version}-ppc64le*.config

%define kcflags -O3

%endif

%ifarch s390x

%define asmarch s390

%define hdrarch s390

%define all_arch_configs kernel-%{version}-s390x.config

%define kernel_image arch/s390/boot/bzImage

%endif

%ifarch %{arm}

%define all_arch_configs kernel-%{version}-arm*.config

%define skip_nonpae_vdso 1

%define asmarch arm

%define hdrarch arm

%define make_target bzImage

%define kernel_image arch/arm/boot/zImage

# http://lists.infradead.org/pipermail/linux-arm-kernel/2012-March/091404.html

%define kernel_mflags KALLSYMS_EXTRA_PASS=1

# we only build headers/perf/tools on the base arm arches

# just like we used to only build them on i386 for x86

%ifnarch armv7hl

%define with_headers 0

%define with_cross_headers 0

%endif

# These currently don't compile on armv7

%define with_selftests 0

%endif

%ifarch aarch64

%define all_arch_configs kernel-%{version}-aarch64*.config

%define asmarch arm64

%define hdrarch arm64

%define make_target Image.gz

%define kernel_image arch/arm64/boot/Image.gz

%endif

# Should make listnewconfig fail if there's config options

# printed out?

%if %{nopatches}

%define with_configchecks 0

%endif

# To temporarily exclude an architecture from being built, add it to

# %%nobuildarches. Do _NOT_ use the ExclusiveArch: line, because if we

# don't build kernel-headers then the new build system will no longer let

# us use the previous build of that package -- it'll just be completely AWOL.

# Which is a BadThing(tm).

# We only build kernel-headers on the following...

%if 0%{?fedora}%{?centos}

%define nobuildarches i386

%else

%define nobuildarches i386 i686

%endif

%ifarch %nobuildarches

%define with_up 0

%define with_debug 0

%define with_debuginfo 0

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%define with_selftests 0

%define with_pae 0

%define _enable_debug_packages 0

%endif

# Architectures we build tools/cpupower on

%if 0%{?fedora}%{?centos}

%define cpupowerarchs %{ix86} x86_64 ppc64le %{arm} aarch64

%else

%define cpupowerarchs i686 x86_64 ppc64le aarch64

%endif

%if %{use_vdso}

%if 0%{?skip_nonpae_vdso}

%define _use_vdso 0

%else

%define _use_vdso 1

%endif

%else

%define _use_vdso 0

%endif

#

# Packages that need to be installed before the kernel is, because the %%post

# scripts use them.

#

%define kernel_prereq  coreutils, systemd >= 203-2, /usr/bin/kernel-install

%define initrd_prereq  dracut >= 027

Name: kernel%{?variant}

License: GPLv2 and Redistributable, no modification permitted

URL: https://www.kernel.org/

Version: %{rpmversion}

Release: %{pkg_release}

# DO NOT CHANGE THE 'ExclusiveArch' LINE TO TEMPORARILY EXCLUDE AN ARCHITECTURE BUILD.

# SET %%nobuildarches (ABOVE) INSTEAD

%if 0%{?fedora}

ExclusiveArch: x86_64 s390x %{arm} aarch64 ppc64le

%else

ExclusiveArch: noarch i386 i686 x86_64 s390x %{arm} aarch64 ppc64le

%endif

ExclusiveOS: Linux

%ifnarch %{nobuildarches}

Requires: kernel-core-uname-r = %{KVERREL}%{?variant}

Requires: kernel-modules-uname-r = %{KVERREL}%{?variant}

%endif

#

# List the packages used during the kernel build

#

BuildRequires: kmod, patch, bash, tar, git-core

BuildRequires: bzip2, xz, findutils, gzip, m4, perl-interpreter, perl-Carp, perl-devel, perl-generators, make, diffutils, gawk

BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex

BuildRequires: net-tools, hostname, bc, elfutils-devel

%if 0%{?rhel} == 7

BuildRequires:  devtoolset-8-build

BuildRequires:  devtoolset-8-binutils

BuildRequires:  devtoolset-8-gcc

BuildRequires:  devtoolset-8-make

BuildRequires:  python3-rpm-macros

%endif

%if 0%{?fedora}

BuildRequires: dwarves

%endif

# Used to mangle unversioned shebangs to be Python 3

BuildRequires: python3-devel

%if %{with_headers}

BuildRequires: rsync

%endif

%if %{with_doc}

BuildRequires: xmlto, asciidoc, python3-sphinx

%endif

%if %{with_sparse}

BuildRequires: sparse

%endif

%if %{with_perf}

BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison flex xz-devel

BuildRequires: audit-libs-devel

BuildRequires: java-devel

%ifnarch %{arm} s390x

BuildRequires: numactl-devel

%endif

%endif

%if %{with_tools}

BuildRequires: gettext ncurses-devel

%ifnarch s390x

BuildRequires: pciutils-devel

%endif

%endif

%if %{with_bpftool}

%if 0%{?rhel} == 7

BuildRequires: python-docutils

%else

BuildRequires: python3-docutils

%endif

BuildRequires: zlib-devel binutils-devel

%endif

%if %{with_selftests}

%if 0%{?fedora}

BuildRequires: clang llvm

%else

%if 0%{?rhel} == 7

BuildRequires: llvm-toolset-7.0

%else

BuildRequires: llvm-toolset

%endif

%endif

%ifnarch %{arm}

BuildRequires: numactl-devel

%endif

BuildRequires: libcap-devel libcap-ng-devel rsync

%endif

BuildConflicts: rhbuildsys(DiskFree) < 500Mb

%if %{with_debuginfo}

BuildRequires: rpm-build, elfutils

BuildConflicts: rpm < 4.13.0.1-19

%if 0%{?fedora}

BuildConflicts: dwarves < 1.13

%endif

# Most of these should be enabled after more investigation

%undefine _include_minidebuginfo

%undefine _find_debuginfo_dwz_opts

%undefine _unique_build_ids

%undefine _unique_debug_names

%undefine _unique_debug_srcs

%undefine _debugsource_packages

%undefine _debuginfo_subpackages

%global _find_debuginfo_opts -r

%global _missing_build_ids_terminate_build 1

%global _no_recompute_build_ids 1

%endif

%if %{with_kabidwchk} || %{with_kabidw_base}

BuildRequires: kabi-dw

%endif

%if %{signkernel}%{signmodules}

BuildRequires: openssl openssl-devel

%if %{signkernel}

%ifarch x86_64 aarch64

BuildRequires: nss-tools

BuildRequires: pesign >= 0.10-4

%endif

%endif

%endif

%if %{with_cross}

BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu

%define cross_opts CROSS_COMPILE=%{_build_arch}-linux-gnu-

%endif

# These below are required to build man pages

%if %{with_perf}

BuildRequires: xmlto

%endif

%if %{with_perf} || %{with_tools}

BuildRequires: asciidoc

%endif

Source0: https://www.kernel.org/pub/linux/kernel/v5.x/linux-%{kversion}.tar.xz

# Name of the packaged file containing signing key

%ifarch ppc64le

%define signing_key_filename kernel-signing-ppc.cer

%endif

%ifarch s390x

%define signing_key_filename kernel-signing-s390.cer

%endif

Source10: x509.genkey.rhel

Source11: x509.genkey.fedora

%if %{?released_kernel}

Source12: securebootca.cer

Source13: secureboot.cer

%define secureboot_ca %{SOURCE12}

%ifarch x86_64 aarch64

%define secureboot_key %{SOURCE13}

%define pesign_name redhatsecureboot301

%endif

%else # released_kernel

Source12: redhatsecurebootca2.cer

Source13: redhatsecureboot003.cer

%define secureboot_ca %{SOURCE12}

%define secureboot_key %{SOURCE13}

%define pesign_name redhatsecureboot003

%endif # released_kernel

Source15: mod-extra.list.rhel

Source16: mod-extra.list.fedora

Source17: mod-extra.sh

Source18: mod-sign.sh

Source19: mod-extra-blacklist.sh

Source79: parallel_xz.sh

Source80: filter-x86_64.sh.fedora

Source81: filter-armv7hl.sh.fedora

Source82: filter-i686.sh.fedora

Source83: filter-aarch64.sh.fedora

Source86: filter-ppc64le.sh.fedora

Source87: filter-s390x.sh.fedora

Source89: filter-modules.sh.fedora

Source90: filter-x86_64.sh.rhel

Source91: filter-armv7hl.sh.rhel

Source92: filter-i686.sh.rhel

Source93: filter-aarch64.sh.rhel

Source96: filter-ppc64le.sh.rhel

Source97: filter-s390x.sh.rhel

Source99: filter-modules.sh.rhel

%define modsign_cmd %{SOURCE18}

Source20: kernel-aarch64-rhel.config

Source21: kernel-aarch64-debug-rhel.config

Source30: kernel-ppc64le-rhel.config

Source31: kernel-ppc64le-debug-rhel.config

Source32: kernel-s390x-rhel.config

Source33: kernel-s390x-debug-rhel.config

Source34: kernel-s390x-zfcpdump-rhel.config

Source35: kernel-x86_64-rhel.config

Source36: kernel-x86_64-debug-rhel.config

Source37: kernel-aarch64-fedora.config

Source38: kernel-aarch64-debug-fedora.config

Source39: kernel-armv7hl-fedora.config

Source40: kernel-armv7hl-debug-fedora.config

Source41: kernel-armv7hl-lpae-fedora.config

Source42: kernel-armv7hl-lpae-debug-fedora.config

Source43: kernel-i686-fedora.config

Source44: kernel-i686-debug-fedora.config

Source45: kernel-ppc64le-fedora.config

Source46: kernel-ppc64le-debug-fedora.config

Source47: kernel-s390x-fedora.config

Source48: kernel-s390x-debug-fedora.config

Source49: kernel-x86_64-fedora.config

Source50: kernel-x86_64-debug-fedora.config

Source51: generate_all_configs.sh

Source52: process_configs.sh

Source53: generate_bls_conf.sh

Source56: update_scripts.sh

Source54: mod-internal.list

Source55: merge.pl

Source200: check-kabi

Source201: Module.kabi_aarch64

Source202: Module.kabi_ppc64le

Source203: Module.kabi_s390x

Source204: Module.kabi_x86_64

Source210: Module.kabi_dup_aarch64

Source211: Module.kabi_dup_ppc64le

Source212: Module.kabi_dup_s390x

Source213: Module.kabi_dup_x86_64

# Source300: kernel-abi-whitelists-%{rpmversion}-%{distro_build}.tar.bz2

# Source301: kernel-kabi-dw-%{rpmversion}-%{distro_build}.tar.bz2

# Sources for kernel-tools

Source2000: cpupower.service

Source2001: cpupower.config

## Patches needed for building this package

# Patch1: patch-%{rpmversion}-redhat.patch

# empty final patch to facilitate testing of kernel patches

# Patch999999: linux-kernel-test.patch

# This file is intentionally left empty in the stock kernel. Its a nicety

# added for those wanting to do custom rebuilds with altered config opts.

Source1000: kernel-local

# Here should be only the patches up to the upstream canonical Linus tree.

# For a stable release kernel

%if 0%{?stable_update}

%if 0%{?stable_base}

%define    stable_patch_00  patch-5.%{base_sublevel}.%{stable_base}.xz

Source5000: %{stable_patch_00}

%endif

# non-released_kernel case

# These are automagically defined by the rcrev and gitrev values set up

# near the top of this spec file.

%else

%if 0%{?rcrev}

Source5000: patch-5.%{upstream_sublevel}-rc%{rcrev}.xz

%if 0%{?gitrev}

Source5001: patch-5.%{upstream_sublevel}-rc%{rcrev}-git%{gitrev}.xz

%endif

%else

# pre-{base_sublevel+1}-rc1 case

%if 0%{?gitrev}

Source5000: patch-5.%{base_sublevel}-git%{gitrev}.xz

%endif

%endif

%endif

## Patches needed for building this package

## compile fixes

%if !%{nopatches}

# Git trees.

# Standalone patches

# 100 - Generic long running patches

# 200 - x86 / secureboot

# bz 1497559 - Make kernel MODSIGN code not error on missing variables

Patch201: 0002-Add-efi_status_to_str-and-rework-efi_status_to_err.patch

Patch202: 0003-Make-get_cert_list-use-efi_status_to_str-to-print-er.patch

Patch204: efi-secureboot.patch

# 300 - ARM patches

Patch300: arm64-Add-option-of-13-for-FORCE_MAX_ZONEORDER.patch

# RHBZ Bug 1576593 - work around while vendor investigates

Patch301: arm-make-highpte-not-expert.patch

# https://patchwork.kernel.org/patch/10351797/

Patch302: ACPI-scan-Fix-regression-related-to-X-Gene-UARTs.patch

# rhbz 1574718

Patch303: ACPI-irq-Workaround-firmware-issue-on-X-Gene-based-m400.patch

# http://www.spinics.net/lists/linux-tegra/msg26029.html

Patch304: usb-phy-tegra-Add-38.4MHz-clock-table-entry.patch

# http://patchwork.ozlabs.org/patch/587554/

Patch305: ARM-tegra-usb-no-reset.patch

# Tegra bits

Patch320: arm64-tegra-jetson-tx1-fixes.patch

# https://www.spinics.net/lists/linux-tegra/msg43110.html

Patch321: arm64-tegra-Jetson-TX2-Allow-bootloader-to-configure.patch

# https://patchwork.kernel.org/patch/11171225/

Patch322: mfd-max77620-Do-not-allocate-IRQs-upfront.patch

# https://patchwork.ozlabs.org/patch/1170631/

Patch323: gpio-max77620-Use-correct-unit-for-debounce-times.patch

# https://www.spinics.net/lists/linux-tegra/msg44216.html

Patch324: arm64-tegra186-enable-USB-on-Jetson-TX2.patch

# https://patchwork.kernel.org/patch/11224177/

Patch325: arm64-usb-host-xhci-tegra-set-MODULE_FIRMWARE-for-tegra186.patch

# 400 - IBM (ppc/s390x) patches

# 500 - Temp fixes/CVEs etc

Patch500: PATCH-v2-selinux-allow-labeling-before-policy-is-loaded.patch

# rhbz 1431375

Patch501: input-rmi4-remove-the-need-for-artifical-IRQ.patch

# gcc9 fixes

Patch502: 0001-Drop-that-for-now.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=1701096

# Submitted upstream at https://lkml.org/lkml/2019/4/23/89

Patch503: KEYS-Make-use-of-platform-keyring-for-module-signature.patch

# it seems CONFIG_OPTIMIZE_INLINING has been forced now and is causing issues on ARMv7

# https://lore.kernel.org/patchwork/patch/1132459/

# https://lkml.org/lkml/2019/8/29/1772

Patch504: ARM-fix-__get_user_check-in-case-uaccess_-calls-are-not-inlined.patch

# CVE-2019-19054 rhbz 1775063 1775117

Patch523: media-rc-prevent-memory-leak-in-cx23888_ir_probe.patch

# CVE-2019-18808 rhbz 1777418 1777421

Patch527: 0001-crypto-ccp-Release-all-allocated-memory-if-sha-type-.patch

# ALSA code from v5.5 (Intel ASoC Sound Open Firmware driver support)

Patch600: alsa-5.5.patch

# ALSA code from v5.6 (Intel ASoC Sound Open Firmware driver support)

Patch601: alsa-5.6.patch

# This is already in 5.5 rhbz 1794369

Patch603: 0001-e1000e-Add-support-for-Comet-Lake.patch