# https://fedoraproject.org/wiki/Changes/SetBuildFlagsBuildCheck

# breaks cross-building

%undefine _auto_set_build_flags

# actual firmware builds support cross-compiling.  edk2-tools

# in theory should build everywhere without much trouble, but

# in practice the edk2 build system barfs on archs it doesn't know

# (such as ppc), so lets limit things to the known-good ones.

ExclusiveArch: x86_64 aarch64

# edk2-stable202205

%define GITDATE        20220526

%define GITCOMMIT      16779ede2d36

%define TOOLCHAIN      GCC5

%define OPENSSL_VER    1.1.1k

%if %{defined rhel}

%if 0%{?centos_hs}

%define build_ovmf 1

%define build_aarch64 1

%else

%define build_ovmf 0

%define build_aarch64 0

%ifarch x86_64

  %define build_ovmf 1

%endif

%ifarch aarch64

  %define build_aarch64 1

%endif

%endif

%else

%define build_ovmf 1

%define build_aarch64 1

%endif

%global softfloat_version 20180726-gitb64af41

%if 0%{?fedora} || 0%{?centos_hs}

%define cross 1

%else

%define cross 0

%endif

%define disable_werror %{defined fedora}

Name:       edk2

Version:    %{GITDATE}git%{GITCOMMIT}

Release:    5.1%{?dist}

Summary:    UEFI firmware for 64-bit virtual machines

License:    BSD-2-Clause-Patent and OpenSSL and MIT

URL:        http://www.tianocore.org

# The source tarball is created using following commands:

# COMMIT=bb1bba3d7767

# git archive --format=tar --prefix=edk2-$COMMIT/ $COMMIT \

# | xz -9ev >/tmp/edk2-$COMMIT.tar.xz

Source0: edk2-%{GITCOMMIT}.tar.xz

Source1: ovmf-whitepaper-c770f8c.txt

Source2: openssl-rhel-bdd048e929dcfcf2f046d74e812e0e3d5fc58504.tar.xz

Source10: edk2-aarch64-verbose.json

Source11: edk2-aarch64.json

Source12: edk2-ovmf-sb.json

Source13: edk2-ovmf.json

Source14: edk2-ovmf-cc.json

Source15: edk2-ovmf-amdsev.json

Source16: edk2-ovmf-inteltdx.json

# Fedora specific sources

Source50: softfloat-%{softfloat_version}.tar.xz

Source55: 40-edk2-ovmf-ia32-sb-enrolled.json

Source56: 50-edk2-ovmf-ia32-sb.json

Source57: 60-edk2-ovmf-ia32.json

Source58: edk2-ovmf-nosb.json

Source59: 70-edk2-arm-verbose.json

Source60: edk2-microvm.json

Patch0001: 0001-BaseTools-do-not-build-BrotliCompress-RH-only.patch

Patch0002: 0002-MdeModulePkg-remove-package-private-Brotli-include-p.patch

Patch0003: 0003-OvmfPkg-increase-max-debug-message-length-to-512-RHE.patch

#Patch0004: 0004-MdeModulePkg-TerminalDxe-add-other-text-resolutions-.patch

Patch0005: 0005-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch

Patch0006: 0006-OvmfPkg-take-PcdResizeXterm-from-the-QEMU-command-li.patch

Patch0007: 0007-ArmVirtPkg-take-PcdResizeXterm-from-the-QEMU-command.patch

Patch0008: 0008-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch

Patch0009: 0009-ArmPlatformPkg-introduce-fixed-PCD-for-early-hello-m.patch

Patch0010: 0010-ArmPlatformPkg-PrePeiCore-write-early-hello-message-.patch

Patch0011: 0011-ArmVirtPkg-set-early-hello-message-RH-only.patch

#Patch0012: 0012-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch

Patch0013: 0013-OvmfPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuVide.patch

Patch0014: 0014-ArmVirtPkg-silence-DEBUG_VERBOSE-0x00400000-in-QemuR.patch

Patch0015: 0015-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch

Patch0016: 0016-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch

Patch0017: 0017-CryptoPkg-OpensslLib-list-RHEL8-specific-OpenSSL-fil.patch

Patch0018: 0018-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch

Patch0019: 0019-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch

Patch0020: 0020-Tweak-the-tools_def-to-support-cross-compiling.patch

Patch0021: 0021-tools_def-add-fno-omit-frame-pointer-to-GCC48_-IA32-.patch

# python3-devel and libuuid-devel are required for building tools.

# python3-devel is also needed for varstore template generation and

# verification with "ovmf-vars-generator".

BuildRequires:  python3-devel

BuildRequires:  libuuid-devel

BuildRequires:  /usr/bin/iasl

BuildRequires:  binutils gcc git gcc-c++ make

%if %{build_ovmf}

# Only OVMF includes 80x86 assembly files (*.nasm*).

BuildRequires:  nasm

# Only OVMF includes the Secure Boot feature, for which we need to separate out

# the UEFI shell.

BuildRequires:  dosfstools

BuildRequires:  mtools

BuildRequires:  xorriso

# For generating the variable store template with the default certificates

# enrolled.

BuildRequires:  python3-virt-firmware

# endif build_ovmf

%endif

%if %{cross}

BuildRequires:  gcc-aarch64-linux-gnu

BuildRequires:  gcc-arm-linux-gnu

BuildRequires:  gcc-x86_64-linux-gnu

%endif

%package ovmf

Summary:    UEFI firmware for x86_64 virtual machines

BuildArch:  noarch

Provides:   OVMF = %{version}-%{release}

Obsoletes:  OVMF < 20180508-100.gitee3198e672e2.el7

# OVMF includes the Secure Boot and IPv6 features; it has a builtin OpenSSL

# library.

Provides:   bundled(openssl) = %{OPENSSL_VER}

License:    BSD-2-Clause-Patent and OpenSSL

# URL taken from the Maintainers.txt file.

URL:        http://www.tianocore.org/ovmf/

%description ovmf

OVMF (Open Virtual Machine Firmware) is a project to enable UEFI support for

Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU

and KVM.

%package aarch64

Summary:    UEFI firmware for aarch64 virtual machines

BuildArch:  noarch

Provides:   AAVMF = %{version}-%{release}

Obsoletes:  AAVMF < 20180508-100.gitee3198e672e2.el7

# No Secure Boot for AAVMF yet, but we include OpenSSL for the IPv6 stack.

Provides:   bundled(openssl) = %{OPENSSL_VER}

License:    BSD-2-Clause-Patent and OpenSSL

# URL taken from the Maintainers.txt file.

URL:        https://github.com/tianocore/tianocore.github.io/wiki/ArmVirtPkg

%description aarch64

AAVMF (ARM Architecture Virtual Machine Firmware) is an EFI Development Kit II

platform that enables UEFI support for QEMU/KVM ARM Virtual Machines. This

package contains a 64-bit build.

%package tools

Summary:        EFI Development Kit II Tools

License:        BSD-2-Clause-Patent

URL:            https://github.com/tianocore/tianocore.github.io/wiki/BaseTools

%description tools

This package provides tools that are needed to

build EFI executables and ROMs using the GNU tools.

%package tools-doc

Summary:        Documentation for EFI Development Kit II Tools

BuildArch:      noarch

License:        BSD-2-Clause-Patent

URL:            https://github.com/tianocore/tianocore.github.io/wiki/BaseTools

%description tools-doc

This package documents the tools that are needed to

build EFI executables and ROMs using the GNU tools.

%description

EDK II is a modern, feature-rich, cross-platform firmware development

environment for the UEFI and PI specifications. This package contains sample

64-bit UEFI firmware builds for QEMU and KVM.

%if %{defined fedora}

%package ovmf-ia32

Summary:        Open Virtual Machine Firmware

License:        BSD-2-Clause-Patent and OpenSSL

Provides:       bundled(openssl)

BuildArch:      noarch

%description ovmf-ia32

EFI Development Kit II

Open Virtual Machine Firmware (ia32)

%package arm

Summary:        ARM Virtual Machine Firmware

BuildArch:      noarch

License:        BSD-2-Clause-Patent and OpenSSL

%description arm

EFI Development Kit II

ARMv7 UEFI Firmware

%package tools-python

Summary:        EFI Development Kit II Tools

Requires:       python3

BuildArch:      noarch

%description tools-python

This package provides tools that are needed to build EFI executables

and ROMs using the GNU tools.  You do not need to install this package;

you probably want to install edk2-tools only.

# endif fedora

%endif

%prep

# We needs some special git config options that %%autosetup won't give us.

# We init the git dir ourselves, then tell %%autosetup not to blow it away.

%setup -q -n edk2-%{GITCOMMIT}

git init -q

git config core.whitespace cr-at-eol

git config am.keepcr true

# -T is passed to %%setup to not re-extract the archive

# -D is passed to %%setup to not delete the existing archive dir

%autosetup -T -D -n edk2-%{GITCOMMIT} -S git_am

cp -a -- %{SOURCE1} .

cp -a -- %{SOURCE10} %{SOURCE11} %{SOURCE12} %{SOURCE13} .

cp -a -- %{SOURCE14} %{SOURCE15} %{SOURCE16} .

tar -C CryptoPkg/Library/OpensslLib -a -f %{SOURCE2} -x

# Done by %setup, but we do not use it for the auxiliary tarballs

chmod -Rf a+rX,u+w,g-w,o-w .

# extract softfloat into place

tar -xf %{SOURCE50} --strip-components=1 --directory ArmPkg/Library/ArmSoftFloatLib/berkeley-softfloat-3/

%build

export PYTHON_COMMAND=%{__python3}

source ./edksetup.sh

%make_build -C "$EDK_TOOLS_PATH" \

  EXTRA_OPTFLAGS="%{optflags}" \

  EXTRA_LDFLAGS="%{__global_ldflags}"

SMP_MFLAGS="%{?_smp_mflags}"

if [[ x"$SMP_MFLAGS" = x-j* ]]; then

        CC_FLAGS="$CC_FLAGS -n ${SMP_MFLAGS#-j}"

elif [ -n "%{?jobs}" ]; then

        CC_FLAGS="$CC_FLAGS -n %{?jobs}"

fi

CC_FLAGS="$CC_FLAGS --cmd-len=65536 -t %{TOOLCHAIN} -b DEBUG --hash"

CC_FLAGS="$CC_FLAGS -D NETWORK_IP6_ENABLE"

CC_FLAGS="$CC_FLAGS -D NETWORK_HTTP_BOOT_ENABLE -D NETWORK_TLS_ENABLE"

CC_FLAGS="$CC_FLAGS -D TPM2_ENABLE"

CC_FLAGS="$CC_FLAGS -D TPM1_ENABLE"

OVMF_FLAGS="${CC_FLAGS}"

%if %{defined rhel}

OVMF_FLAGS="${OVMF_FLAGS} -D FD_SIZE_4MB"

OVMF_FLAGS="${OVMF_FLAGS} -D PVSCSI_ENABLE=FALSE -D MPT_SCSI_ENABLE=FALSE"

%else

OVMF_FLAGS="${OVMF_FLAGS} -D FD_SIZE_2MB"

%endif

OVMF_SB_FLAGS="${OVMF_FLAGS}"

OVMF_SB_FLAGS="${OVMF_SB_FLAGS} -D SECURE_BOOT_ENABLE"

OVMF_SB_FLAGS="${OVMF_SB_FLAGS} -D SMM_REQUIRE"

OVMF_SB_FLAGS="${OVMF_SB_FLAGS} -D EXCLUDE_SHELL_FROM_FD"

%if %{disable_werror}

sed -i -e 's/-Werror//' Conf/tools_def.txt

%endif

%if %{cross}

export GCC5_IA32_PREFIX="x86_64-linux-gnu-"

export GCC5_X64_PREFIX="x86_64-linux-gnu-"

export GCC5_AARCH64_PREFIX="aarch64-linux-gnu-"

export GCC5_ARM_PREFIX="arm-linux-gnu-"

%endif

build_iso() {

  dir="$1"

  UEFI_SHELL_BINARY=${dir}/Shell.efi

  ENROLLER_BINARY=${dir}/EnrollDefaultKeys.efi

  UEFI_SHELL_IMAGE=uefi_shell.img

  ISO_IMAGE=${dir}/UefiShell.iso

  UEFI_SHELL_BINARY_BNAME=$(basename -- "$UEFI_SHELL_BINARY")

  UEFI_SHELL_SIZE=$(stat --format=%s -- "$UEFI_SHELL_BINARY")

  ENROLLER_SIZE=$(stat --format=%s -- "$ENROLLER_BINARY")

  # add 1MB then 10% for metadata

  UEFI_SHELL_IMAGE_KB=$((

    (UEFI_SHELL_SIZE + ENROLLER_SIZE + 1 * 1024 * 1024) * 11 / 10 / 1024

  ))

  # create non-partitioned FAT image

  rm -f -- "$UEFI_SHELL_IMAGE"

  mkdosfs -C "$UEFI_SHELL_IMAGE" -n UEFI_SHELL -- "$UEFI_SHELL_IMAGE_KB"

  # copy the shell binary into the FAT image

  export MTOOLS_SKIP_CHECK=1

  mmd   -i "$UEFI_SHELL_IMAGE"                       ::efi

  mmd   -i "$UEFI_SHELL_IMAGE"                       ::efi/boot

  mcopy -i "$UEFI_SHELL_IMAGE"  "$UEFI_SHELL_BINARY" ::efi/boot/bootx64.efi

  mcopy -i "$UEFI_SHELL_IMAGE"  "$ENROLLER_BINARY"   ::

  mdir  -i "$UEFI_SHELL_IMAGE"  -/                   ::

  # build ISO with FAT image file as El Torito EFI boot image

  mkisofs -input-charset ASCII -J -rational-rock \

    -e "$UEFI_SHELL_IMAGE" -no-emul-boot \

    -o "$ISO_IMAGE" "$UEFI_SHELL_IMAGE"

}

%if %{build_ovmf}

# Build with neither SB nor SMM; include UEFI shell.

build ${OVMF_FLAGS} -a X64 \

  -p OvmfPkg/OvmfPkgX64.dsc

# Build with SB and SMM; exclude UEFI shell.

build ${OVMF_SB_FLAGS} -a IA32 -a X64 \

  -p OvmfPkg/OvmfPkgIa32X64.dsc

# Build AmdSev and IntelTdx variants

touch OvmfPkg/AmdSev/Grub/grub.efi   # dummy

build ${OVMF_FLAGS} -a X64 \

  -p OvmfPkg/AmdSev/AmdSevX64.dsc

build ${OVMF_FLAGS} -a X64 \

  -p OvmfPkg/IntelTdx/IntelTdxX64.dsc

# Sanity check: the varstore templates must be identical.

cmp Build/OvmfX64/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.fd \

  Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.fd

# Prepare an ISO image that boots the UEFI shell.

build_iso Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/X64

virt-fw-vars --input Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.fd \

             --output Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.secboot.fd \

             --enroll-redhat --secure-boot

# endif build_ovmf

%endif

%if %{build_aarch64}

# Build with a verbose debug mask first, and stash the binary.

build ${CC_FLAGS} -a AARCH64 \

  -p ArmVirtPkg/ArmVirtQemu.dsc \

  -D DEBUG_PRINT_ERROR_LEVEL=0x8040004F

cp -a Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_EFI.fd \

  Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_EFI.verbose.fd

# Rebuild with a silent (errors only) debug mask.

build ${CC_FLAGS} -a AARCH64 \

  -p ArmVirtPkg/ArmVirtQemu.dsc \

  -D DEBUG_PRINT_ERROR_LEVEL=0x80000000

# endif build_aarch64

%endif

%if %{defined fedora}

%if %{build_ovmf}

# build microvm

build ${OVMF_FLAGS} -a X64 -p OvmfPkg/Microvm/MicrovmX64.dsc

# build ovmf-ia32

mkdir -p ovmf-ia32

build ${OVMF_FLAGS} -a IA32 -p OvmfPkg/OvmfPkgIa32.dsc

cp Build/OvmfIa32/*/FV/OVMF_CODE*.fd ovmf-ia32/

# cp VARS files from from ovmf/, which are all we need

cp -a Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS*.fd ovmf-ia32

rm -rf Build/OvmfIa32

# build ovmf-ia32 with secure boot

build ${OVMF_SB_FLAGS} -a IA32 -p OvmfPkg/OvmfPkgIa32.dsc

cp Build/OvmfIa32/*/FV/OVMF_CODE.fd ovmf-ia32/OVMF_CODE.secboot.fd

# build ovmf-ia32 shell iso with EnrollDefaultKeys

build_iso Build/OvmfIa32/DEBUG_%{TOOLCHAIN}/IA32

mv Build/OvmfIa32/DEBUG_%{TOOLCHAIN}/IA32/UefiShell.iso ovmf-ia32

cp -a Build/OvmfIa32/DEBUG_%{TOOLCHAIN}/IA32/Shell.efi ovmf-ia32

cp -a Build/OvmfIa32/DEBUG_%{TOOLCHAIN}/IA32/EnrollDefaultKeys.efi ovmf-ia32

# endif build_ovmf

%endif

# build ARMv7 firmware

mkdir -p arm

build ${CC_FLAGS} -a ARM -p ArmVirtPkg/ArmVirtQemu.dsc

cp Build/ArmVirtQemu-ARM/DEBUG_*/FV/*.fd arm

dd of="arm/QEMU_EFI-pflash.raw" if="/dev/zero" bs=1M count=64

dd of="arm/QEMU_EFI-pflash.raw" if="arm/QEMU_EFI.fd" conv=notrunc

dd of="arm/vars-template-pflash.raw" if="/dev/zero" bs=1M count=64

# endif defined fedora

%endif

%install

cp -a OvmfPkg/License.txt License.OvmfPkg.txt

cp -a CryptoPkg/Library/OpensslLib/openssl/LICENSE LICENSE.openssl

mkdir -p %{buildroot}%{_datadir}/qemu/firmware

# install the tools

mkdir -p %{buildroot}%{_bindir} \

         %{buildroot}%{_datadir}/%{name}/Conf \

         %{buildroot}%{_datadir}/%{name}/Scripts

install BaseTools/Source/C/bin/* \

        %{buildroot}%{_bindir}

install BaseTools/BinWrappers/PosixLike/LzmaF86Compress \

        %{buildroot}%{_bindir}

install BaseTools/BuildEnv \

        %{buildroot}%{_datadir}/%{name}

install BaseTools/Conf/*.template \

        %{buildroot}%{_datadir}/%{name}/Conf

install BaseTools/Scripts/GccBase.lds \

        %{buildroot}%{_datadir}/%{name}/Scripts

%if %{build_ovmf}

mkdir -p \

  %{buildroot}%{_datadir}/OVMF \

  %{buildroot}%{_datadir}/%{name}/ovmf

install -m 0644 Build/OvmfX64/DEBUG_%{TOOLCHAIN}/FV/OVMF_CODE.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF_CODE.fd

install -m 0644 Build/OvmfX64/DEBUG_%{TOOLCHAIN}/FV/OVMF_CODE.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF_CODE.cc.fd

install -m 0644 Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_CODE.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF_CODE.secboot.fd

install -m 0644 Build/OvmfX64/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF_VARS.fd

install -m 0644 Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.secboot.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF_VARS.secboot.fd

install -m 0644 Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/X64/UefiShell.iso \

  %{buildroot}%{_datadir}/%{name}/ovmf/UefiShell.iso

install -m 0644 Build/AmdSev/DEBUG_%{TOOLCHAIN}/FV/OVMF.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF.amdsev.fd

install -m 0644 Build/IntelTdx/DEBUG_%{TOOLCHAIN}/FV/OVMF.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/OVMF.inteltdx.fd

ln -s ../%{name}/ovmf/OVMF_CODE.fd         %{buildroot}%{_datadir}/OVMF

ln -s ../%{name}/ovmf/OVMF_CODE.secboot.fd %{buildroot}%{_datadir}/OVMF/

ln -s ../%{name}/ovmf/OVMF_VARS.fd         %{buildroot}%{_datadir}/OVMF/

ln -s ../%{name}/ovmf/OVMF_VARS.secboot.fd %{buildroot}%{_datadir}/OVMF/

ln -s ../%{name}/ovmf/UefiShell.iso        %{buildroot}%{_datadir}/OVMF/

install -m 0644 Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/X64/Shell.efi \

  %{buildroot}%{_datadir}/%{name}/ovmf/Shell.efi

install -m 0644 Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/X64/EnrollDefaultKeys.efi \

  %{buildroot}%{_datadir}/%{name}/ovmf/EnrollDefaultKeys.efi

install -m 0644 edk2-ovmf-sb.json \

  %{buildroot}%{_datadir}/qemu/firmware/40-edk2-ovmf-sb.json

install -m 0644 edk2-ovmf.json \

  %{buildroot}%{_datadir}/qemu/firmware/50-edk2-ovmf.json

install -m 0644 edk2-ovmf-cc.json \

  %{buildroot}%{_datadir}/qemu/firmware/50-edk2-ovmf-cc.json

install -m 0644 edk2-ovmf-amdsev.json \

  %{buildroot}%{_datadir}/qemu/firmware/50-edk2-ovmf-amdsev.json

install -m 0644 edk2-ovmf-inteltdx.json \

  %{buildroot}%{_datadir}/qemu/firmware/50-edk2-ovmf-inteltdx.json

# endif build_ovmf

%endif

mkdir -p %{buildroot}%{_datadir}/AAVMF

%if %{build_aarch64}

mkdir -p %{buildroot}%{_datadir}/%{name}/aarch64

# Pad and install the verbose binary.

cat Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_EFI.verbose.fd \

  /dev/zero \

| head -c 64m \

  > %{buildroot}%{_datadir}/%{name}/aarch64/QEMU_EFI-pflash.raw

# Pad and install the silent (default) binary.

cat Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_EFI.fd \

  /dev/zero \

| head -c 64m \

  > %{buildroot}%{_datadir}/%{name}/aarch64/QEMU_EFI-silent-pflash.raw

# Create varstore template.

cat Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_VARS.fd \

  /dev/zero \

| head -c 64m \

  > %{buildroot}%{_datadir}/%{name}/aarch64/vars-template-pflash.raw

ln -s ../%{name}/aarch64/QEMU_EFI-pflash.raw \

  %{buildroot}%{_datadir}/AAVMF/AAVMF_CODE.verbose.fd

ln -s ../%{name}/aarch64/QEMU_EFI-silent-pflash.raw \

  %{buildroot}%{_datadir}/AAVMF/AAVMF_CODE.fd

ln -s ../%{name}/aarch64/vars-template-pflash.raw \

  %{buildroot}%{_datadir}/AAVMF/AAVMF_VARS.fd

chmod 0644 -- %{buildroot}%{_datadir}/AAVMF/AAVMF_*.fd

install -m 0644 Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_EFI.verbose.fd \

  %{buildroot}%{_datadir}/%{name}/aarch64/QEMU_EFI.fd

install -m 0644 Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_EFI.fd \

  %{buildroot}%{_datadir}/%{name}/aarch64/QEMU_EFI.silent.fd

install -m 0644 Build/ArmVirtQemu-AARCH64/DEBUG_%{TOOLCHAIN}/FV/QEMU_VARS.fd \

  %{buildroot}%{_datadir}/%{name}/aarch64/QEMU_VARS.fd

install -m 0644 edk2-aarch64.json \

  %{buildroot}%{_datadir}/qemu/firmware/60-edk2-aarch64.json

install -m 0644 edk2-aarch64-verbose.json \

  %{buildroot}%{_datadir}/qemu/firmware/70-edk2-aarch64-verbose.json

# endif build_aarch64

%endif

%if %{defined fedora}

%if %{build_ovmf}

# install microvm

install -m 0644 Build/MicrovmX64/DEBUG_%{TOOLCHAIN}/FV/MICROVM.fd \

  %{buildroot}%{_datadir}/%{name}/ovmf/MICROVM.fd

install -p -m 0644 %{_sourcedir}/edk2-microvm.json \

  %{buildroot}%{_datadir}/qemu/firmware/60-edk2-ovmf-microvm.json

# Install extra x86_64 json files

install -p -m 0644 %{_sourcedir}/edk2-ovmf-nosb.json \

  %{buildroot}%{_datadir}/qemu/firmware/60-edk2-ovmf-nosb.json

# install ia32

cp -a ovmf-ia32 %{buildroot}%{_datadir}/%{name}

for f in %{_sourcedir}/*edk2-ovmf-ia32*.json; do

    install -pm 644 $f %{buildroot}/%{_datadir}/qemu/firmware

done

# endif build_ovmf

%endif

# install arm32

cp -a arm %{buildroot}%{_datadir}/%{name}

ln -sf ../%{name}/arm/QEMU_EFI-pflash.raw          %{buildroot}%{_datadir}/AAVMF/AAVMF32_CODE.fd

for f in %{_sourcedir}/*edk2-arm-*.json; do

    install -pm 644 $f %{buildroot}/%{_datadir}/qemu/firmware

done

# edk2-tools-python install

cp -R BaseTools/Source/Python %{buildroot}%{_datadir}/%{name}/Python

for i in build BPDG Ecc GenDepex GenFds GenPatchPcdTable PatchPcdValue TargetTool Trim UPT; do

echo '#!/bin/sh

export PYTHONPATH=%{_datadir}/%{name}/Python

exec python3 '%{_datadir}/%{name}/Python/$i/$i.py' "$@"' > %{buildroot}%{_bindir}/$i

  chmod +x %{buildroot}%{_bindir}/$i

done

%if 0%{?py_byte_compile:1}

# https://docs.fedoraproject.org/en-US/packaging-guidelines/Python_Appendix/#manual-bytecompilation

%py_byte_compile %{python3} %{buildroot}%{_datadir}/edk2/Python

%endif

# endif defined fedora

%endif

%check

%if %{build_ovmf}

virt-fw-vars --input Build/Ovmf3264/DEBUG_%{TOOLCHAIN}/FV/OVMF_VARS.secboot.fd \

             --print | grep "SecureBootEnable.*ON"

# endif build_ovmf

%endif

%global common_files \

  %%license License.txt License.OvmfPkg.txt License-History.txt LICENSE.openssl \

  %%dir %%{_datadir}/%%{name}/ \

  %%dir %%{_datadir}/qemu \

  %%dir %%{_datadir}/qemu/firmware

%if %{build_ovmf}

%files ovmf

%common_files

%doc OvmfPkg/README

%doc ovmf-whitepaper-c770f8c.txt

%dir %{_datadir}/OVMF/

%dir %{_datadir}/%{name}/ovmf/

%{_datadir}/%{name}/ovmf/OVMF_CODE.fd

%{_datadir}/%{name}/ovmf/OVMF_CODE.cc.fd

%{_datadir}/%{name}/ovmf/OVMF_CODE.secboot.fd

%{_datadir}/%{name}/ovmf/OVMF_VARS.fd

%{_datadir}/%{name}/ovmf/OVMF_VARS.secboot.fd

%{_datadir}/%{name}/ovmf/OVMF.amdsev.fd

%{_datadir}/%{name}/ovmf/OVMF.inteltdx.fd

%{_datadir}/%{name}/ovmf/UefiShell.iso

%{_datadir}/OVMF/OVMF_CODE.fd

%{_datadir}/OVMF/OVMF_CODE.secboot.fd

%{_datadir}/OVMF/OVMF_VARS.fd

%{_datadir}/OVMF/OVMF_VARS.secboot.fd

%{_datadir}/OVMF/UefiShell.iso

%{_datadir}/%{name}/ovmf/Shell.efi

%{_datadir}/%{name}/ovmf/EnrollDefaultKeys.efi

%{_datadir}/qemu/firmware/40-edk2-ovmf-sb.json

%{_datadir}/qemu/firmware/50-edk2-ovmf-cc.json

%{_datadir}/qemu/firmware/50-edk2-ovmf-amdsev.json

%{_datadir}/qemu/firmware/50-edk2-ovmf-inteltdx.json

%{_datadir}/qemu/firmware/50-edk2-ovmf.json

%if %{defined fedora}

%{_datadir}/%{name}/ovmf/MICROVM.fd

%{_datadir}/qemu/firmware/60-edk2-ovmf-nosb.json

%{_datadir}/qemu/firmware/60-edk2-ovmf-microvm.json

%endif

# endif build_ovmf

%endif

%if %{build_aarch64}

%files aarch64

%common_files

%dir %{_datadir}/AAVMF/

%dir %{_datadir}/%{name}/aarch64/

%{_datadir}/%{name}/aarch64/QEMU_EFI-pflash.raw

%{_datadir}/%{name}/aarch64/QEMU_EFI-silent-pflash.raw

%{_datadir}/%{name}/aarch64/vars-template-pflash.raw

%{_datadir}/AAVMF/AAVMF_CODE.verbose.fd

%{_datadir}/AAVMF/AAVMF_CODE.fd

%{_datadir}/AAVMF/AAVMF_VARS.fd

%{_datadir}/%{name}/aarch64/QEMU_EFI.fd

%{_datadir}/%{name}/aarch64/QEMU_EFI.silent.fd

%{_datadir}/%{name}/aarch64/QEMU_VARS.fd

%{_datadir}/qemu/firmware/60-edk2-aarch64.json

%{_datadir}/qemu/firmware/70-edk2-aarch64-verbose.json

# endif build_aarch64

%endif

%files tools

%license License.txt

%license License-History.txt

%{_bindir}/DevicePath

%{_bindir}/EfiRom

%{_bindir}/GenCrc32

%{_bindir}/GenFfs

%{_bindir}/GenFv

%{_bindir}/GenFw

%{_bindir}/GenSec

%{_bindir}/LzmaCompress

%{_bindir}/LzmaF86Compress

%{_bindir}/TianoCompress

%{_bindir}/VfrCompile

%{_bindir}/VolInfo

%dir %{_datadir}/%{name}

%{_datadir}/%{name}/BuildEnv

%{_datadir}/%{name}/Conf

%{_datadir}/%{name}/Scripts

%files tools-doc

%doc BaseTools/UserManuals/*.rtf

%if %{defined fedora}

%if %{build_ovmf}

%files ovmf-ia32

%common_files

%dir %{_datadir}/%{name}/ovmf-ia32

%{_datadir}/%{name}/ovmf-ia32

%{_datadir}/%{name}/ovmf-ia32/EnrollDefaultKeys.efi

%{_datadir}/%{name}/ovmf-ia32/OVMF_CODE.fd

%{_datadir}/%{name}/ovmf-ia32/OVMF_CODE.secboot.fd

%{_datadir}/%{name}/ovmf-ia32/OVMF_VARS.fd

%{_datadir}/%{name}/ovmf-ia32/OVMF_VARS.secboot.fd

%{_datadir}/%{name}/ovmf-ia32/Shell.efi

%{_datadir}/%{name}/ovmf-ia32/UefiShell.iso

%{_datadir}/qemu/firmware/40-edk2-ovmf-ia32-sb-enrolled.json

%{_datadir}/qemu/firmware/50-edk2-ovmf-ia32-sb.json

%{_datadir}/qemu/firmware/60-edk2-ovmf-ia32.json

%endif

%files arm

%common_files

%dir %{_datadir}/%{name}/arm

%{_datadir}/AAVMF/AAVMF32_CODE.fd

%{_datadir}/%{name}/arm

%{_datadir}/%{name}/arm/QEMU_EFI-pflash.raw

%{_datadir}/%{name}/arm/QEMU_EFI.fd

%{_datadir}/%{name}/arm/QEMU_VARS.fd

%{_datadir}/%{name}/arm/vars-template-pflash.raw

%{_datadir}/qemu/firmware/70-edk2-arm-verbose.json

%files tools-python

%{_bindir}/build

%{_bindir}/BPDG

%{_bindir}/Ecc

%{_bindir}/GenDepex

%{_bindir}/GenFds

%{_bindir}/GenPatchPcdTable

%{_bindir}/PatchPcdValue

%{_bindir}/TargetTool

%{_bindir}/Trim

%{_bindir}/UPT

%dir %{_datadir}/%{name}

%{_datadir}/%{name}/Python

# endif fedora

%endif

%changelog

* Thu Sep 08 2022 Davide Cavalca <dcavalca@centosproject.org> - 20220526git16779ede2d36-5.1

- Enable ovmf and aarch64 builds for Hyperscale

* Thu Aug 18 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220526git16779ede2d36-5

- comment out patch #4 (bug 2116534 workaround)

- comment out patch #12 (bug 2114858 workaround)

* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 20220526git16779ede2d36-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

* Fri Jun 10 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220526git16779ede2d36-3

- swap stack fix patch.

* Wed Jun 08 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220526git16779ede2d36-2

- fix PcdResizeXterm patch.

- minor specfile cleanup.

- add 0021-OvmfPkg-Sec-fix-stack-switch.patch

- Resolves rhbz#2093745

* Tue May 31 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220526git16779ede2d36-1

- update to new edk2 stable tag (2022-05), refresh patches.

- add amdsev and inteltdx builds

- drop qosb

* Tue Apr 19 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220221gitb24306f15daa-4

- switch to virt-firmware for secure boot key enrollment

- Stop builds on armv7 too (iasl missing).

* Thu Apr 07 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220221gitb24306f15daa-3

- Fix TPM build options.

- Stop builds on i686 (iasl missing).

- Resolves rhbz#2072827

* Wed Mar 23 2022 Gerd Hoffmann <kraxel@redhat.com> - 20220221gitb24306f15daa-1

- Update to edk2-stable202202

* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 20211126gitbb1bba3d7767-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

* Mon Dec 6 2021 Gerd Hoffmann <kraxel@redhat.com> - 20211126gitbb1bba3d7767-1

- Update to edk2-stable202111

- Resolves rhbz#1978966

- Resolves rhbz#2026744

* Mon Dec  6 2021 Daniel P. Berrangé <berrange@redhat.com> - 20210527gite1999b264f1f-5

- Drop glibc strcmp workaround

* Mon Nov 29 2021 Daniel P. Berrangé <berrange@redhat.com> - 20210527gite1999b264f1f-4