# All Global changes to build and install go here.

# Per the below section about __spec_install_pre, any rpm

# environment changes that affect %%install need to go

# here before the %%install macro is pre-built.

# Include Fedora files

%global include_fedora 0

# Include RHEL files

%global include_rhel 1

# Disable LTO in userspace packages.

%global _lto_cflags %{nil}

# Option to enable compiling with clang instead of gcc.

%bcond_with toolchain_clang

%if %{with toolchain_clang}

%global toolchain clang

%endif

# Compile the kernel with LTO (only supported when building with clang).

%bcond_with clang_lto

%if %{with clang_lto} && %{without toolchain_clang}

{error:clang_lto requires --with toolchain_clang}

%endif

# Cross compile on copr for arm

# See https://bugzilla.redhat.com/1879599

%if 0%{?_with_cross_arm:1}

%global _target_cpu armv7hl

%global _arch arm

%global _build_arch arm

%global _with_cross    1

%endif

# The kernel's %%install section is special

# Normally the %%install section starts by cleaning up the BUILD_ROOT

# like so:

#

# %%__spec_install_pre %%{___build_pre}\

#     [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf "${RPM_BUILD_ROOT}"\

#     mkdir -p `dirname "$RPM_BUILD_ROOT"`\

#     mkdir "$RPM_BUILD_ROOT"\

# %%{nil}

#

# But because of kernel variants, the %%build section, specifically

# BuildKernel(), moves each variant to its final destination as the

# variant is built.  This violates the expectation of the %%install

# section.  As a result we snapshot the current env variables and

# purposely leave out the removal section.  All global wide changes

# should be added above this line otherwise the %%install section

# will not see them.

%global __spec_install_pre %{___build_pre}

# At the time of this writing (2019-03), RHEL8 packages use w2.xzdio

# compression for rpms (xz, level 2).

# Kernel has several large (hundreds of mbytes) rpms, they take ~5 mins

# to compress by single-threaded xz. Switch to threaded compression,

# and from level 2 to 3 to keep compressed sizes close to "w2" results.

#

# NB: if default compression in /usr/lib/rpm/redhat/macros ever changes,

# this one might need tweaking (e.g. if default changes to w3.xzdio,

# change below to w4T.xzdio):

#

# This is disabled on i686 as it triggers oom errors

%ifnarch i686

%define _binary_payload w3T.xzdio

%endif

Summary: The Linux kernel

# Set debugbuildsenabled to 1 to build separate base and debug kernels

#  (on supported architectures). The kernel-debug-* subpackages will

#  contain the debug kernel.

# Set debugbuildsenabled to 0 to not build a separate debug kernel, but

#  to build the base kernel using the debug configuration. (Specifying

#  the --with-release option overrides this setting.)

%define debugbuildsenabled 1

%if 0%{?fedora}

%define secure_boot_arch x86_64

%else

%define secure_boot_arch x86_64 aarch64 s390x ppc64le

%endif

# Signing for secure boot authentication

%ifarch %{secure_boot_arch}

%global signkernel 1

%else

%global signkernel 0

%endif

# Sign modules on all arches

%global signmodules 1

# Compress modules only for architectures that build modules

%ifarch noarch

%global zipmodules 0

%else

%global zipmodules 1

%endif

%if %{zipmodules}

%global zipsed -e 's/\.ko$/\.ko.xz/'

# for parallel xz processes, replace with 1 to go back to single process

%global zcpu `nproc --all`

%endif

# define buildid .local

%if 0%{?fedora}

%define primary_target fedora

%else

%define primary_target rhel

%endif

# The kernel tarball/base version

%define kversion 5.14

%define rpmversion 5.14.0

%define pkgrelease 70.22.1.el9_0

# This is needed to do merge window version magic

%define patchlevel 14

# allow pkg_release to have configurable %%{?dist} tag

%define specrelease 70.22.1%{?buildid}%{?dist}

%define pkg_release %{specrelease}

# libexec dir is not used by the linker, so the shared object there

# should not be exported to RPM provides

%global __provides_exclude_from ^%{_libexecdir}/kselftests

%define _with_kabidupchk 1

# The following build options are enabled by default, but may become disabled

# by later architecture-specific checks. These can also be disabled by using

# --without <opt> in the rpmbuild command, or by forcing these values to 0.

#

# standard kernel

%define with_up        %{?_without_up:        0} %{?!_without_up:        1}

# kernel PAE (only valid for ARM (lpae))

%define with_pae       %{?_without_pae:       0} %{?!_without_pae:       1}

# kernel-debug

%define with_debug     %{?_without_debug:     0} %{?!_without_debug:     1}

# kernel-zfcpdump (s390 specific kernel for zfcpdump)

%define with_zfcpdump  %{?_without_zfcpdump:  0} %{?!_without_zfcpdump:  1}

# kernel-doc

%define with_doc       %{?_without_doc:       0} %{?!_without_doc:       1}

# kernel-headers

%define with_headers   %{?_without_headers:   0} %{?!_without_headers:   1}

%define with_cross_headers   %{?_without_cross_headers:   0} %{?!_without_cross_headers:   1}

# perf

%define with_perf      %{?_without_perf:      0} %{?!_without_perf:      1}

# tools

%define with_tools     %{?_without_tools:     0} %{?!_without_tools:     1}

# bpf tool

%define with_bpftool   %{?_without_bpftool:   0} %{?!_without_bpftool:   1}

# kernel-debuginfo

%define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}

# kernel-abi-stablelists

%define with_kernel_abi_stablelists %{?_without_kernel_abi_stablelists: 0} %{?!_without_kernel_abi_stablelists: 1}

# internal samples and selftests

%define with_selftests %{?_without_selftests: 0} %{?!_without_selftests: 1}

#

# Additional options for user-friendly one-off kernel building:

#

# Only build the base kernel (--with baseonly):

%define with_baseonly  %{?_with_baseonly:     1} %{?!_with_baseonly:     0}

# Only build the pae kernel (--with paeonly):

%define with_paeonly   %{?_with_paeonly:      1} %{?!_with_paeonly:      0}

# Only build the debug kernel (--with dbgonly):

%define with_dbgonly   %{?_with_dbgonly:      1} %{?!_with_dbgonly:      0}

# Control whether we perform a compat. check against published ABI.

%define with_kabichk   %{?_without_kabichk:   0} %{?!_without_kabichk:   1}

# Temporarily disable kabi checks until RC.

%define with_kabichk 0

# Control whether we perform a compat. check against DUP ABI.

%define with_kabidupchk %{?_with_kabidupchk:  1} %{?!_with_kabidupchk:   0}

#

# Control whether to run an extensive DWARF based kABI check.

# Note that this option needs to have baseline setup in SOURCE300.

%define with_kabidwchk %{?_without_kabidwchk: 0} %{?!_without_kabidwchk: 1}

%define with_kabidw_base %{?_with_kabidw_base: 1} %{?!_with_kabidw_base: 0}

#

# Control whether to install the vdso directories.

%define with_vdso_install %{?_without_vdso_install: 0} %{?!_without_vdso_install: 1}

#

# should we do C=1 builds with sparse

%define with_sparse    %{?_with_sparse:       1} %{?!_with_sparse:       0}

#

# Cross compile requested?

%define with_cross    %{?_with_cross:         1} %{?!_with_cross:        0}

#

# build a release kernel on rawhide

%define with_release   %{?_with_release:      1} %{?!_with_release:      0}

# verbose build, i.e. no silent rules and V=1

%define with_verbose %{?_with_verbose:        1} %{?!_with_verbose:      0}

#

# check for mismatched config options

%define with_configchecks %{?_without_configchecks:        0} %{?!_without_configchecks:        1}

#

# gcov support

%define with_gcov %{?_with_gcov:1}%{?!_with_gcov:0}

#

# ipa_clone support

%define with_ipaclones %{?_without_ipaclones: 0} %{?!_without_ipaclones: 1}

# Want to build a vanilla kernel build without any non-upstream patches?

%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}

%if 0%{?fedora}

# Kernel headers are being split out into a separate package

%define with_headers 0

%define with_cross_headers 0

# no ipa_clone for now

%define with_ipaclones 0

# no stablelist

%define with_kernel_abi_stablelists 0

# Fedora builds these separately

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

# selftests turns on bpftool

%define with_selftests 0

%endif

%if %{with_verbose}

%define make_opts V=1

%else

%define make_opts -s

%endif

%if %{with toolchain_clang}

%global clang_make_opts HOSTCC=clang CC=clang

%if %{with clang_lto}

%global clang_make_opts %{clang_make_opts} LD=ld.lld HOSTLD=ld.lld AR=llvm-ar NM=llvm-nm HOSTAR=llvm-ar HOSTNM=llvm-nm LLVM_IAS=1

%endif

%global make_opts %{make_opts} %{clang_make_opts}

# clang does not support the -fdump-ipa-clones option

%global with_ipaclones 0

%endif

# turn off debug kernel and kabichk for gcov builds

%if %{with_gcov}

%define with_debug 0

%define with_kabichk 0

%define with_kabidupchk 0

%define with_kabidwchk 0

%define with_kabidw_base 0

%define with_kernel_abi_stablelists 0

%endif

# turn off kABI DWARF-based check if we're generating the base dataset

%if %{with_kabidw_base}

%define with_kabidwchk 0

%endif

# kpatch_kcflags are extra compiler flags applied to base kernel

# -fdump-ipa-clones is enabled only for base kernels on selected arches

%if %{with_ipaclones}

%ifarch x86_64 ppc64le

%define kpatch_kcflags -fdump-ipa-clones

%else

%define with_ipaclones 0

%endif

%endif

%define make_target bzImage

%define image_install_path boot

%define KVERREL %{version}-%{release}.%{_target_cpu}

%define KVERREL_RE %(echo %KVERREL | sed 's/+/[+]/g')

%define hdrarch %_target_cpu

%define asmarch %_target_cpu

%if 0%{!?nopatches:1}

%define nopatches 0

%endif

%if %{with_vanilla}

%define nopatches 1

%endif

%if %{with_release}

%define debugbuildsenabled 1

%endif

%if !%{with_debuginfo}

%define _enable_debug_packages 0

%endif

%define debuginfodir /usr/lib/debug

# Needed because we override almost everything involving build-ids

# and debuginfo generation. Currently we rely on the old alldebug setting.

%global _build_id_links alldebug

# kernel PAE is only built on ARMv7

%ifnarch armv7hl

%define with_pae 0

%endif

# if requested, only build base kernel

%if %{with_baseonly}

%define with_pae 0

%define with_debug 0

%define with_vdso_install 0

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%define with_kernel_abi_stablelists 0

%define with_selftests 0

%define with_cross 0

%define with_cross_headers 0

%define with_ipaclones 0

%endif

# if requested, only build pae kernel

%if %{with_paeonly}

%define with_up 0

%define with_debug 0

%endif

# if requested, only build debug kernel

%if %{with_dbgonly}

%define with_up 0

%define with_vdso_install 0

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%define with_kernel_abi_stablelists 0

%define with_selftests 0

%define with_cross 0

%define with_cross_headers 0

%define with_ipaclones 0

%endif

# turn off kABI DUP check and DWARF-based check if kABI check is disabled

%if !%{with_kabichk}

%define with_kabidupchk 0

%define with_kabidwchk 0

%endif

%if %{with_vdso_install}

%define use_vdso 1

%endif

# selftests require bpftool to be built

%if %{with_selftests}

%define with_bpftool 1

%endif

%ifnarch noarch

%define with_kernel_abi_stablelists 0

%endif

# Overrides for generic default options

# only package docs noarch

%ifnarch noarch

%define with_doc 0

%define doc_build_fail true

%endif

%if 0%{?fedora}

# don't do debug builds on anything but i686 and x86_64

%ifnarch i686 x86_64

%define with_debug 0

%endif

%endif

# don't build noarch kernels or headers (duh)

%ifarch noarch

%define with_up 0

%define with_headers 0

%define with_cross_headers 0

%define with_tools 0

%define with_perf 0

%define with_bpftool 0

%define with_selftests 0

%define with_debug 0

%define all_arch_configs kernel-%{version}-*.config

%endif

# sparse blows up on ppc

%ifnarch ppc64le

%define with_sparse 0

%endif

# zfcpdump mechanism is s390 only

%ifnarch s390x

%define with_zfcpdump 0

%endif

%if 0%{?fedora}

# This is not for Fedora

%define with_zfcpdump 0

%endif

# Per-arch tweaks

%ifarch i686

%define asmarch x86

%define hdrarch i386

%define all_arch_configs kernel-%{version}-i?86*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch x86_64

%define asmarch x86

%define all_arch_configs kernel-%{version}-x86_64*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch ppc64le

%define asmarch powerpc

%define hdrarch powerpc

%define make_target vmlinux

%define kernel_image vmlinux

%define kernel_image_elf 1

%define use_vdso 0

%define all_arch_configs kernel-%{version}-ppc64le*.config

%endif

%ifarch s390x

%define asmarch s390

%define hdrarch s390

%define all_arch_configs kernel-%{version}-s390x.config

%define kernel_image arch/s390/boot/bzImage

%define vmlinux_decompressor arch/s390/boot/compressed/vmlinux

%endif

%ifarch %{arm}

%define all_arch_configs kernel-%{version}-arm*.config

%define skip_nonpae_vdso 1

%define asmarch arm

%define hdrarch arm

%define make_target bzImage

%define kernel_image arch/arm/boot/zImage

# http://lists.infradead.org/pipermail/linux-arm-kernel/2012-March/091404.html

%define kernel_mflags KALLSYMS_EXTRA_PASS=1

# we only build headers/perf/tools on the base arm arches

# just like we used to only build them on i386 for x86

%ifnarch armv7hl

%define with_headers 0

%define with_cross_headers 0

%endif

# These currently don't compile on armv7

%define with_selftests 0

%endif

%ifarch aarch64

%define all_arch_configs kernel-%{version}-aarch64*.config

%define asmarch arm64

%define hdrarch arm64

%define make_target Image.gz

%define kernel_image arch/arm64/boot/Image.gz

%endif

# Should make listnewconfig fail if there's config options

# printed out?

%if %{nopatches}

%define with_configchecks 0

%endif

# To temporarily exclude an architecture from being built, add it to

# %%nobuildarches. Do _NOT_ use the ExclusiveArch: line, because if we

# don't build kernel-headers then the new build system will no longer let

# us use the previous build of that package -- it'll just be completely AWOL.

# Which is a BadThing(tm).

# We only build kernel-headers on the following...

%if 0%{?fedora}

%define nobuildarches i386

%else

%define nobuildarches i386 i686 %{arm}

%endif

%ifarch %nobuildarches

# disable BuildKernel commands

%define with_up 0

%define with_debug 0

%define with_pae 0

%define with_zfcpdump 0

%define with_debuginfo 0

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%define with_selftests 0

%define _enable_debug_packages 0

%endif

# Architectures we build tools/cpupower on

%if 0%{?fedora}

%define cpupowerarchs %{ix86} x86_64 ppc64le %{arm} aarch64

%else

%define cpupowerarchs i686 x86_64 ppc64le aarch64

%endif

%if 0%{?use_vdso}

%if 0%{?skip_nonpae_vdso}

%define _use_vdso 0

%else

%define _use_vdso 1

%endif

%else

%define _use_vdso 0

%endif

# If build of debug packages is disabled, we need to know if we want to create

# meta debug packages or not, after we define with_debug for all specific cases

# above. So this must be at the end here, after all cases of with_debug or not.

%define with_debug_meta 0

%if !%{debugbuildsenabled}

%if %{with_debug}

%define with_debug_meta 1

%endif

%define with_debug 0

%endif

#

# Packages that need to be installed before the kernel is, because the %%post

# scripts use them.

#

%define kernel_prereq  coreutils, systemd >= 203-2, /usr/bin/kernel-install

%define initrd_prereq  dracut >= 027

Name: kernel

License: GPLv2 and Redistributable, no modification permitted

URL: https://www.kernel.org/

Version: %{rpmversion}

Release: %{pkg_release}

# DO NOT CHANGE THE 'ExclusiveArch' LINE TO TEMPORARILY EXCLUDE AN ARCHITECTURE BUILD.

# SET %%nobuildarches (ABOVE) INSTEAD

%if 0%{?fedora}

ExclusiveArch: x86_64 s390x %{arm} aarch64 ppc64le

%else

ExclusiveArch: noarch i386 i686 x86_64 s390x %{arm} aarch64 ppc64le

%endif

ExclusiveOS: Linux

%ifnarch %{nobuildarches}

Requires: kernel-core-uname-r = %{KVERREL}

Requires: kernel-modules-uname-r = %{KVERREL}

%endif

#

# List the packages used during the kernel build

#

BuildRequires: kmod, patch, bash, coreutils, tar, git-core, which

BuildRequires: bzip2, xz, findutils, gzip, m4, perl-interpreter, perl-Carp, perl-devel, perl-generators, make, diffutils, gawk

BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex, gcc-c++

BuildRequires: net-tools, hostname, bc, elfutils-devel

BuildRequires: dwarves

BuildRequires: python3-devel

BuildRequires: gcc-plugin-devel

# glibc-static is required for a consistent build environment (specifically

# CONFIG_CC_CAN_LINK_STATIC=y).

BuildRequires: glibc-static

BuildRequires: kernel-rpm-macros >= 185-9

%ifnarch %{nobuildarches} noarch

BuildRequires: bpftool

%endif

%if %{with_headers}

BuildRequires: rsync

%endif

%if %{with_doc}

BuildRequires: xmlto, asciidoc, python3-sphinx, python3-sphinx_rtd_theme

%endif

%if %{with_sparse}

BuildRequires: sparse

%endif

%if %{with_perf}

BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison flex xz-devel

BuildRequires: audit-libs-devel

BuildRequires: java-devel

BuildRequires: libbpf-devel

BuildRequires: libbabeltrace-devel

BuildRequires: libtraceevent-devel

%ifnarch %{arm} s390x

BuildRequires: numactl-devel

%endif

%ifarch aarch64

BuildRequires: opencsd-devel >= 1.0.0

%endif

%endif

%if %{with_tools}

BuildRequires: gettext ncurses-devel

BuildRequires: libcap-devel libcap-ng-devel

%ifnarch s390x

BuildRequires: pciutils-devel

%endif

%endif

%if %{with_tools} || %{signmodules} || %{signkernel}

BuildRequires: openssl-devel

%endif

%if %{with_bpftool}

BuildRequires: python3-docutils

BuildRequires: zlib-devel binutils-devel

%endif

%if %{with_selftests}

BuildRequires: clang llvm fuse-devel

%ifnarch %{arm}

BuildRequires: numactl-devel

%endif

BuildRequires: libcap-devel libcap-ng-devel rsync libmnl-devel

%endif

BuildConflicts: rhbuildsys(DiskFree) < 500Mb

%if %{with_debuginfo}

BuildRequires: rpm-build, elfutils

BuildConflicts: rpm < 4.13.0.1-19

BuildConflicts: dwarves < 1.13

# Most of these should be enabled after more investigation

%undefine _include_minidebuginfo

%undefine _find_debuginfo_dwz_opts

%undefine _unique_build_ids

%undefine _unique_debug_names

%undefine _unique_debug_srcs

%undefine _debugsource_packages

%undefine _debuginfo_subpackages

%global _find_debuginfo_opts -r

%global _missing_build_ids_terminate_build 1

%global _no_recompute_build_ids 1

%endif

%if %{with_kabidwchk} || %{with_kabidw_base}

BuildRequires: kabi-dw

%endif

%if %{signkernel}%{signmodules}

BuildRequires: openssl

%if %{signkernel}

BuildRequires: system-sb-certs

%ifarch x86_64 aarch64

BuildRequires: nss-tools

BuildRequires: pesign >= 0.10-4

%endif

%endif

%endif

%if %{with_cross}

BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu

%define cross_opts CROSS_COMPILE=%{_build_arch}-linux-gnu-

%define __strip %{_build_arch}-linux-gnu-strip

%endif

# These below are required to build man pages

%if %{with_perf}

BuildRequires: xmlto

%endif

%if %{with_perf} || %{with_tools}

BuildRequires: asciidoc

%endif

%if %{with toolchain_clang}

BuildRequires: clang

%endif

%if %{with clang_lto}

BuildRequires: llvm

BuildRequires: lld

%endif

# Because this is the kernel, it's hard to get a single upstream URL

# to represent the base without needing to do a bunch of patching. This

# tarball is generated from a src-git tree. If you want to see the

# exact git commit you can run

#

# xzcat -qq ${TARBALL} | git get-tar-commit-id

Source0: linux-5.14.0-70.22.1.el9_0.tar.xz

Source1: Makefile.rhelver

%if %{signkernel}

# Name of the packaged file containing signing key

%ifarch ppc64le

%define signing_key_filename kernel-signing-ppc.cer

%endif

%ifarch s390x

%define signing_key_filename kernel-signing-s390.cer

%endif

%define secureboot_ca_0 %{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer

%define secureboot_key_0 %{_datadir}/pki/sb-certs/secureboot-kernel-%{_arch}.cer

%if 0%{?centos}

%define pesign_name_0 centossecureboot201

%else

%ifarch x86_64 aarch64

%define pesign_name_0 redhatsecureboot501

%endif

%ifarch s390x

%define pesign_name_0 redhatsecureboot302

%endif

%ifarch ppc64le

%define pesign_name_0 redhatsecureboot601

%endif

%endif

# signkernel

%endif

Source20: mod-denylist.sh

Source21: mod-sign.sh

Source22: parallel_xz.sh