# # spec file for package kernel-@FLAVOR@ # # Copyright (c) @YEAR@ SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # needssslcertforbuild %define srcversion @SRCVERSION@ %define patchversion @PATCHVERSION@ %define variant @VARIANT@%{nil} %define vanilla_only @VANILLA_ONLY@ %define compress_modules @COMPRESS_MODULES@ %define compress_vmlinux @COMPRESS_VMLINUX@ %define livepatch @LIVEPATCH@%{nil} %include %_sourcedir/kernel-spec-macros %define build_flavor @FLAVOR@ %define build_default ("%build_flavor" == "default") %define build_vanilla ("%build_flavor" == "vanilla") %if ! %build_vanilla %define src_install_dir /usr/src/linux-%kernelrelease%variant %else %define src_install_dir /usr/src/linux-%kernelrelease-vanilla %endif %define obj_install_dir /usr/src/linux-%kernelrelease%variant-obj %define rpm_install_dir %buildroot%obj_install_dir %define kernel_build_dir %my_builddir/linux-%srcversion/linux-obj %if 0%{?_project:1} && ( %(echo %_project | grep -Ex -f %_sourcedir/release-projects | grep -v ^PTF | grep -vc openSUSE) || %(echo %_project | grep -Ec "^(Devel:)?Kernel:") ) %define klp_symbols 1 %endif %(chmod +x %_sourcedir/{@SCRIPTS@}) %global cpu_arch %(%_sourcedir/arch-symbols %_target_cpu) %define cpu_arch_flavor %cpu_arch/%build_flavor # Define some CONFIG variables as rpm macros as well. (rpm cannot handle # defining them all at once.) %define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES %{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)} %define split_extra ("%CONFIG_MODULES" == "y" && "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y") %if "%CONFIG_MODULES" != "y" %define klp_symbols 0 %endif %ifarch %ix86 x86_64 %define install_vdso 1 %else %define install_vdso 0 %endif Name: kernel-@FLAVOR@ Summary: @SUMMARY@ License: GPL-2.0 Group: System/Kernel Version: @RPMVERSION@ %if 0%{?is_kotd} Release: .g@COMMIT@ %else Release: @RELEASE@ %endif Url: http://www.kernel.org/ BuildRequires: bc BuildRequires: bison BuildRequires: coreutils BuildRequires: fdupes BuildRequires: flex # Cannot test %%CONFIG_GCC_PLUGINS here because the buildservice parser # does not expand %%(...) %if "%build_flavor" == "syzkaller" # Needed by scripts/gcc-plugin.sh BuildRequires: gcc-c++ BuildRequires: gcc-devel %endif %if 0%{?suse_version} > 1310 BuildRequires: hmaccalc %endif BuildRequires: libopenssl-devel BuildRequires: modutils # Used to sign the kernel in the buildservice BuildRequires: openssl BuildRequires: pesign-obs-integration # for objtool BuildRequires: libelf-devel Provides: %name = %version-%source_rel # bnc#901925 Provides: %name-%version-%source_rel Provides: %{name}_%_target_cpu = %version-%source_rel Provides: kernel-base = %version-%source_rel Provides: multiversion(kernel) # In SLE11, kernel-$flavor complemented kernel-$flavor-base. With SLE12, # kernel-$flavor itself contains all the needed files and kernel-$flavor-base # is a subset that can replace kernel-$flavor in some scenarios. We need to # obsolete the -base subpackage from SLE11, so that the base files are not # owned by multiple packages now. The dependency is not correct wrt openSUSE # 11.2 - 11.4, but we primarily care about the supported upgrade path. Obsoletes: %name-base < 3.1 %if ("%build_flavor" != "kvmsmall") && ("%build_flavor" != "azure") Recommends: kernel-firmware %endif # The following is copied to the -base subpackage as well # BEGIN COMMON DEPS Requires(pre): coreutils awk # For /usr/lib/module-init-tools/weak-modules2 Requires(post): suse-module-tools # For depmod (modutils is a dependency provided by both module-init-tools and # kmod-compat) Requires(post): modutils # This Requires is wrong, because the post/postun scripts have a # test -x update-bootloader, having perl-Bootloader is not a hard requirement. # But, there is no way to tell rpm or yast to schedule the installation # of perl-Bootloader before kernel-binary.rpm if both are in the list of # packages to install/update. Likewise, this is true for mkinitrd. # Need a perl-Bootloader with /usr/lib/bootloader/bootloader_entry Requires(post): perl-Bootloader >= 0.4.15 %if %build_vanilla Requires(post): mkinitrd %else # Require a mkinitrd that can handle usbhid/hid-generic built-in (bnc#773559) Requires(post): mkinitrd >= 2.7.1 %endif # Install the package providing /etc/SuSE-release early enough, so that # the grub entry has correct title (bnc#757565) Requires(post): distribution-release # Do not install p-b and mkinitrd for the install check, the %post script is # able to handle this #!BuildIgnore: perl-Bootloader mkinitrd distribution-release # Remove some packages that are installed automatically by the build system, # but are not needed to build the kernel #!BuildIgnore: autoconf automake gettext-runtime libtool cvs gettext-tools udev insserv %ifarch s390 s390x %if %build_vanilla && 0%{?suse_version} < 1130 BuildRequires: dwarfextract %endif %endif %ifarch %arm BuildRequires: u-boot-tools %endif Obsoletes: microcode_ctl # Force bzip2 instead of lzma compression to # 1) allow install on older dist versions, and # 2) decrease build times (bsc#962356 boo#1175882) %define _binary_payload w9.bzdio # Do not recompute the build-id of vmlinux in find-debuginfo.sh (bsc#964063) %undefine _unique_build_ids %define _no_recompute_build_ids 1 # prevent usr/lib/debug/boot/vmlinux-4.12.14-11.10-default-4.12.14-11.10.ppc64le.debug %undefine _unique_debug_names # dead network if installed on SLES10, otherwise it will work (mostly) Conflicts: sysfsutils < 2.0 Conflicts: apparmor-profiles <= 2.1 Conflicts: apparmor-parser < 2.3 # root-lvm only works with newer udevs Conflicts: udev < 118 Conflicts: lvm2 < 2.02.33 # Interface to hv_kvp_daemon changed Conflicts: hyper-v < 4 %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel Provides: kernel-%build_flavor-base-srchash-@COMMIT_FULL@ Provides: kernel-srchash-@COMMIT_FULL@ # END COMMON DEPS Provides: %name-srchash-@COMMIT_FULL@ @PROVIDES_OBSOLETES@ @PROVIDES_OBSOLETES_BASE@ %obsolete_rebuilds %name @SOURCES@ BuildRoot: %{_tmppath}/%{name}-%{version}-build ExclusiveArch: @ARCHS@ %define kmp_target_cpu %_target_cpu %ifarch %ix86 # Only i386/default supports i586, mark other flavors' packages as i686 %if ! %build_default BuildArch: i686 # KMPs are always built as i586, because rpm does not allow to build # subpackages for different architectures. Therefore, we change the # /usr/src/linux-obj/ symlink to i586. %define kmp_target_cpu i586 %endif %endif # These files are found in the kernel-source package: @NOSOURCE@ # The following KMPs have been integrated into the kernel package, # grouped by the last product that contained them. # Usage: obsolete_kmp # Note that KMPs embed the version of the kernel built against, that's why # the _3 suffix for 2.6.x-based KMPs %define obsolete_kmp() Obsoletes: %1-kmp-%build_flavor <= %2 \ Provides: %1-kmp = %2.1 \ Provides: %1-kmp-%build_flavor = %2.1 # sles10 / 10.3 %obsolete_kmp iwlwifi 1.3.27_3 %obsolete_kmp ipw3945 1.2.2_3 # sled10 / 11.0 %obsolete_kmp uvcvideo r200_3 # sle11-ga %obsolete_kmp enic 0.0.1_3 %obsolete_kmp fnic 1.0.0_3 %obsolete_kmp brocade-bfa 1.1.0.2_3 %obsolete_kmp kvm 78.2.6.30.1_3 %obsolete_kmp perfmon 2_3 %obsolete_kmp iwlagn-2-6-27 1.0_3 %obsolete_kmp msi-wmi 1.0_3 # 11.1 %obsolete_kmp quickcam 0.6.7 # sle11-sp1 %obsolete_kmp wacom 0.8.1_3 %obsolete_kmp btrfs 0_3 %obsolete_kmp brocade-bna 2.1.0.0_3 %obsolete_kmp hyper-v 0_3 %obsolete_kmp intel-e1000e 2.2.14 Obsoletes: firewire <= 3.0 Provides: firewire = 3.0 %obsolete_kmp firewire 3.0 %obsolete_kmp iwlagn 3.0 Obsoletes: compat-ath9k <= 3.0 Provides: compat-ath9k = 3.0 %obsolete_kmp compat-ath9k 3.0 %obsolete_kmp realtek-r8192ce_pci 2.6.0005_3 %obsolete_kmp realtek-r8192se_pci 2.6.0019.1207.2010_3 %obsolete_kmp rt3090 2.4.0.4_3 %obsolete_kmp rt3592 2.4.1.1_3 %obsolete_kmp rt5390 2.4.0.4_3 %obsolete_kmp ath3k 1.0_3 %obsolete_kmp compat-wireless 3.12 %obsolete_kmp rts5229 1.08 %obsolete_kmp rts_pstor 1.11 # sle12-sp1 / Leap 42.1 %obsolete_kmp xen 4.6.1 %obsolete_kmp compat-wireless 4.4 # TW 4.8 %obsolete_kmp ftsteutates 20160601 # SLE12-SP3 / Leap 42.3 %obsolete_kmp drm 4.12 # Will modules not listed in supported.conf abort the kernel build (0/1)? %define supported_modules_check 1 %description @DESCRIPTION@ %source_timestamp %prep if ! [ -e %{S:0} ]; then echo "The %name-%version.nosrc.rpm package does not contain the" \ "complete sources. Please install kernel-source-%version.src.rpm." exit 1 fi SYMBOLS= if test -e %_sourcedir/extra-symbols; then SYMBOLS=$(cat %_sourcedir/extra-symbols) echo "extra symbol(s):" $SYMBOLS fi # Unpack all sources and patches %setup -q -c -T -a 0 @UNPACK_PATCHES@ mkdir -p %kernel_build_dir # Generate a list of modules with their support status marking %_sourcedir/guards --list --with-guards <%_sourcedir/supported.conf | \ awk ' /\+external / { print $(NF) " external"; next; } /^-/ { print $(NF) " no"; next; } { print $(NF); } ' >%kernel_build_dir/Module.supported subpackages=( base %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" @KMPS@ %endif ) for package in "${subpackages[@]}"; do %_sourcedir/guards --default=0 "$package" \ <%_sourcedir/supported.conf | sed 's,.*/,,; s,\.ko$,,' | \ sort -u >%kernel_build_dir/Module."$package" done cd linux-%srcversion %_sourcedir/apply-patches \ %if %{build_vanilla} --vanilla \ %endif %_sourcedir/series.conf .. $SYMBOLS cd %kernel_build_dir # Override the timestamp 'uname -v' reports with the source timestamp and # the commit hash. date=$(head -n 1 %_sourcedir/source-timestamp) commit=$(sed -n 's/GIT Revision: //p' %_sourcedir/source-timestamp) cat > .kernel-binary.spec.buildenv < localversion fi config_base="default" %ifarch %ix86 config_base="pae" %endif if ! [ -f %my_builddir/config/%cpu_arch/$config_base ] ; then config_base=%variant config_base=${config_base#-} fi if ! grep -q CONFIG_MMU= "%my_builddir/config/%cpu_arch_flavor"; then cp "%my_builddir/config/%cpu_arch/$config_base" .config ../scripts/kconfig/merge_config.sh -m .config \ %my_builddir/config/%cpu_arch_flavor else cp %my_builddir/config/%cpu_arch_flavor .config fi if test -e %my_builddir/config.addon/%cpu_arch_flavor; then # FIXME: config.addon doesn't affect the %CONFIG_ macros defined at # the top of the specfile ../scripts/kconfig/merge_config.sh -m .config %my_builddir/config.addon/%cpu_arch_flavor fi CONFIG_SUSE_KERNEL_RELEASED="--disable CONFIG_SUSE_KERNEL_RELEASED" %if 0%{?_project:1} if echo %_project | grep -Eqx -f %_sourcedir/release-projects; then CONFIG_SUSE_KERNEL_RELEASED="--enable CONFIG_SUSE_KERNEL_RELEASED" fi %endif ../scripts/config \ --set-str CONFIG_LOCALVERSION -%source_rel-%build_flavor \ --enable CONFIG_SUSE_KERNEL \ $CONFIG_SUSE_KERNEL_RELEASED \ %if 0%{?__debug_package:1} --enable CONFIG_DEBUG_INFO %else --disable CONFIG_DEBUG_INFO %endif case %cpu_arch in x86_64 | i386) MAKE_ARGS="$MAKE_ARGS ARCH=x86" ;; ppc*) MAKE_ARGS="$MAKE_ARGS ARCH=powerpc" ;; s390x) MAKE_ARGS="$MAKE_ARGS ARCH=s390" ;; arm64) MAKE_ARGS="$MAKE_ARGS ARCH=arm64" ;; armv*) MAKE_ARGS="$MAKE_ARGS ARCH=arm" ;; riscv*) MAKE_ARGS="$MAKE_ARGS ARCH=riscv" ;; *) MAKE_ARGS="$MAKE_ARGS ARCH=%cpu_arch" ;; esac makeoutputsync= if make --output-sync --help >/dev/null 2>&1 ; then makeoutputsync=--output-sync else echo make does not support --output-sync flag. Build messages may be mangled. 1>&2 fi MAKE_ARGS="$MAKE_ARGS $makeoutputsync %{?_smp_mflags}" echo export MAKE_ARGS=\""$MAKE_ARGS"\" >> .kernel-binary.spec.buildenv KERN_DIRS="-C .. O=$PWD" if test -e %_sourcedir/TOLERATE-UNKNOWN-NEW-CONFIG-OPTIONS; then yes '' | make oldconfig $MAKE_ARGS $KERN_DIRS else cp .config .config.orig if test -f ../scripts/kconfig/Makefile && \ grep -q syncconfig ../scripts/kconfig/Makefile; then syncconfig="syncconfig" else syncconfig="silentoldconfig" fi make $syncconfig $MAKE_ARGS $KERN_DIRS < /dev/null %_sourcedir/check-for-config-changes .config.orig .config rm .config.orig fi make prepare $MAKE_ARGS make scripts $MAKE_ARGS krel=$(make -s kernelrelease $MAKE_ARGS) if [ "$krel" != "%kernelrelease-%build_flavor" ]; then echo "Kernel release mismatch: $krel != %kernelrelease-%build_flavor" >&2 exit 1 fi make clean $MAKE_ARGS rm -f source find . ! -type d ! -name 'Module.base' ! -name 'Module.*-kmp' -printf '%%P\n' \ > %my_builddir/obj-files %build cd %kernel_build_dir source .kernel-binary.spec.buildenv # create *.symref files in the tree if test -e %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor; then %_sourcedir/modversions --unpack . < $_ fi # copy module signing certificate(s). We use the default path and trick # certs/Makefile to not regenerate the certificate. It is done this way so # that the kernel-source package can be rebuilt even without the certificate mkdir -p certs for f in %_sourcedir/*.crt; do if ! test -e "$f"; then continue fi touch certs/x509.genkey cat "$f" >>certs/signing_key.pem done %if "%CONFIG_KMSG_IDS" == "y" chmod +x ../scripts/kmsg-doc MAKE_ARGS="$MAKE_ARGS D=2" %endif mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log while true; do make all $MAKE_ARGS 2> >(tee "$log") if test "${PIPESTATUS[0]}" -eq 0; then break fi # In the linux-next and vanilla branches, we try harder to build a # package. if test 0%vanilla_only -gt 0 && %_sourcedir/try-disable-staging-driver "$log"; then echo "Retrying make" else exit 1 fi done # Generate list of symbols that are used to create kernel livepatches %if 0%{?klp_symbols} %_sourcedir/klp-symbols . Symbols.list %endif %install # get rid of /usr/lib/rpm/brp-strip-debug # strip removes too much from the vmlinux ELF binary export NO_BRP_STRIP_DEBUG=true export STRIP_KEEP_SYMTAB='*/vmlinux-*' # /lib/modules/%kernelrelease-%build_flavor/source points to the source # directory installed by kernel-devel. The kernel-%build_flavor-devel package # has a correct dependency on kernel-devel, but the brp check does not see # kernel-devel during build. export NO_BRP_STALE_LINK_ERROR=yes cd %kernel_build_dir source .kernel-binary.spec.buildenv mkdir -p %buildroot/boot # (Could strip out non-public symbols.) cp -p System.map %buildroot/boot/System.map-%kernelrelease-%build_flavor add_vmlinux() { local vmlinux=boot/vmlinux-%kernelrelease-%build_flavor cp vmlinux %buildroot/$vmlinux # make sure that find-debuginfo.sh picks it up. In the filelist, we # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then # avoid using the gzip -n option to make kdump happy (bnc#880848#c20) ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} %if 0%{?__debug_package:1} # compress the vmlinux image after find-debuginfo.sh has processed it %global __debug_install_post %__debug_install_post \ %_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor %else %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux %endif ghost_vmlinux=true else ghost_vmlinux=false fi } # architecture specifics %ifarch %ix86 x86_64 add_vmlinux --compressed image=bzImage cp -p arch/x86/boot/$image %buildroot/boot/vmlinuz-%kernelrelease-%build_flavor image=vmlinuz %endif %ifarch ppc ppc64 ppc64le add_vmlinux image=vmlinux %endif %ifarch s390 s390x add_vmlinux --compressed image=image if test ! -f arch/s390/boot/$image; then image=bzImage fi cp -p arch/s390/boot/$image %buildroot/boot/image-%kernelrelease-%build_flavor image=image if test -e arch/s390/boot/kerntypes.o; then cp -p arch/s390/boot/kerntypes.o %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor elif test -x "$(which dwarfextract 2>/dev/null)"; then dwarfextract vmlinux %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor || echo "dwarfextract failed ($?)" fi %if "%CONFIG_KMSG_IDS" == "y" mkdir -p %buildroot/usr/share/man/man9 find man -name '*.9' -exec install -m 644 -D '{}' %buildroot/usr/share/man/man9/ ';' %endif %endif %ifarch %arm add_vmlinux --compressed image=zImage cp -p arch/arm/boot/$image %buildroot/boot/$image-%kernelrelease-%build_flavor %endif %ifarch aarch64 add_vmlinux --compressed image=Image cp -p arch/arm64/boot/$image %buildroot/boot/$image-%kernelrelease-%build_flavor %endif %ifarch riscv64 add_vmlinux --compressed image=Image cp -p arch/riscv/boot/$image %buildroot/boot/$image-%kernelrelease-%build_flavor %endif # sign the modules, firmware and possibly the kernel in the buildservice BRP_PESIGN_FILES="" %if "%CONFIG_EFI_STUB" == "y" BRP_PESIGN_FILES="/boot/$image-%kernelrelease-%build_flavor" %endif %ifarch s390x ppc64 ppc64le BRP_PESIGN_FILES="/boot/$image-%kernelrelease-%build_flavor" %endif %if "%CONFIG_MODULE_SIG" == "y" BRP_PESIGN_FILES="$BRP_PESIGN_FILES *.ko" %endif %ifarch %ix86 # XXX: do not sign on x86, as the repackaging changes kernel-pae # from i686 to i586 BRP_PESIGN_FILES="" %endif export BRP_PESIGN_FILES %if "%{compress_modules}" != "none" export BRP_PESIGN_COMPRESS_MODULE=%{compress_modules} %endif if test -x /usr/lib/rpm/pesign/gen-hmac; then $_ -r %buildroot /boot/$image-%kernelrelease-%build_flavor fi # Package the compiled-in certificates as DER files in /etc/uefi/certs # and have mokutil enroll them when the kernel is installed certs=() if test %CONFIG_MODULE_SIG = "y"; then for f in %_sourcedir/*.crt; do if ! test -s "$f"; then continue fi h=$(openssl x509 -inform PEM -fingerprint -noout -in "$f") test -n "$h" cert=/etc/uefi/certs/$(echo "$h" | \ sed -rn 's/^SHA1 Fingerprint=//; T; s/://g; s/(.{8}).*/\1/p').crt if test -e %buildroot/"$cert"; then continue fi mkdir -p %buildroot/etc/uefi/certs openssl x509 -inform PEM -in "$f" -outform DER -out %buildroot/"$cert" certs=("${certs[@]}" "$cert") done fi for sub in '' '-extra'; do case "$sub" in '') base_package=1 ;; *) base_package=0 ;; esac for script in preun postun pre post devel-pre devel-post; do if test %build_flavor = "zfcpdump"; then : >%my_builddir/$script$sub.sh continue fi sed -e "s:@KERNELRELEASE@:%kernelrelease:g" \ -e "s:@IMAGE@:$image:g" \ -e "s:@FLAVOR""@:%build_flavor:g" \ -e "s:@SUBPACKAGE@:%name$sub:g" \ -e "s:@BASE_PACKAGE@:$base_package:g" \ -e "s:@RPM_VERSION_RELEASE@:%version-%release:g" \ -e "s:@RPM_TARGET_CPU@:%_target_cpu:g" \ -e "s:@CPU_ARCH_FLAVOR@:%cpu_arch_flavor:g" \ -e "s:@SRCVARIANT@:%variant:g" \ %_sourcedir/$script.sh > %my_builddir/$script$sub.sh if test "$base_package" -eq 1 -a "${#certs[@]}" -gt 0; then case "$script" in preun | postun | post) # Copy the respective scriptlet from kernel-cert-subpackage sed "1,/^%%$script / d; /^%%[^%%]/,\$ d; s:@CERTS@:${certs[*]}:g" \ %_sourcedir/kernel-cert-subpackage \ >>"%my_builddir/$script$sub.sh" esac fi # Do an exit 0 at the end of each scriptlet. If the last real command # in the scriptlet (e.g. update-bootloader call, see bnc#809617) # returns an error, we do not want to amplify the damage by leaving # the system in an inconsistent state. echo "exit 0" >>"%my_builddir/$script$sub.sh" done done %if %build_vanilla # keep this -suffix list in sync with post.sh and postun.sh suffix=-%build_flavor %endif cp -p .config %buildroot/boot/config-%kernelrelease-%build_flavor sysctl_file=%buildroot/boot/sysctl.conf-%kernelrelease-%build_flavor for file in %my_builddir/sysctl/{defaults,%cpu_arch/arch-defaults,%cpu_arch_flavor}; do if [ -f "$file" ]; then cat "$file" fi done | sed '1i # Generated file - do not edit.' >$sysctl_file if [ ! -s $sysctl_file ]; then rm $sysctl_file fi %if %install_vdso # Install the unstripped vdso's that are linked in the kernel image make vdso_install $MAKE_ARGS INSTALL_MOD_PATH=%buildroot rm -rf %buildroot/lib/modules/%kernelrelease-%build_flavor/vdso/.build-id %endif # Create a dummy initrd with roughly the size the real one will have. # That way, YaST will know that this package requires some additional # space in /boot. dd if=/dev/zero of=%buildroot/boot/initrd-%kernelrelease-%build_flavor \ bs=1024 seek=2047 count=1 # Also reserve some space for the kdump initrd cp %buildroot/boot/initrd-%kernelrelease-%build_flavor{,-kdump} %if 0%{?suse_version} >= 1500 # Use same permissions as dracut chmod 0600 %buildroot/boot/initrd-%kernelrelease-%build_flavor{,-kdump} %endif if [ %CONFIG_MODULES = y ]; then mkdir -p %rpm_install_dir/%cpu_arch_flavor mkdir -p %buildroot/usr/src/linux-obj/%cpu_arch install -m 755 -D -t %rpm_install_dir/%cpu_arch_flavor/scripts/mod/ scripts/mod/ksym-provides gzip -n -c9 < Module.symvers > %buildroot/boot/symvers-%kernelrelease-%build_flavor.gz make modules_install $MAKE_ARGS INSTALL_MOD_PATH=%buildroot %ifarch s390 s390x if test -e arch/s390/boot/kerntypes.o; then : elif test -x "$(which dwarfextract 2>/dev/null)" -a \ -f %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor; then find %buildroot -name "*.ko" > kofiles.list dwarfextract %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor -C kofiles.list || echo "dwarfextract failed ($?)" fi %endif # Also put the resulting file in %rpm_install_dir/%cpu_arch/%build_flavor # so that kernel-devel + kernel-%build_flavor is sufficient for building # modules that have modversions as well. mkdir -p %rpm_install_dir/%cpu_arch/%build_flavor cp Module.symvers %rpm_install_dir/%cpu_arch/%build_flavor # List of symbols that are used to generate kernel livepatches %if 0%{?klp_symbols} cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir %if "%CONFIG_LIVEPATCH_IPA_CLONES" == "y" find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf- cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir %endif %endif # Table of types used in exported symbols (for modversion debugging). %_sourcedir/modversions --pack . > %buildroot/boot/symtypes-%kernelrelease-%build_flavor if [ -s %buildroot/boot/symtypes-%kernelrelease-%build_flavor ]; then gzip -n -9 %buildroot/boot/symtypes-%kernelrelease-%build_flavor else rm -f %buildroot/boot/symtypes-%kernelrelease-%build_flavor fi # Some architecture's $(uname -m) output is different from the ARCH # parameter that needs to be passed to kbuild. Create symlinks from # $(uname -m) to the ARCH directory. if [ ! -e %rpm_install_dir/%kmp_target_cpu ]; then ln -sf %cpu_arch %rpm_install_dir/%kmp_target_cpu ln -sf %cpu_arch %buildroot/usr/src/linux-obj/%kmp_target_cpu fi # We were building in %my_builddir/linux-%srcversion, but the sources will # later be installed in /usr/src/linux-%srcversion-%source_rel. Fix up the # build symlink. rm -f %buildroot/lib/modules/%kernelrelease-%build_flavor/{source,build} ln -s %src_install_dir \ %buildroot/lib/modules/%kernelrelease-%build_flavor/source ln -s %obj_install_dir/%cpu_arch/%build_flavor \ %buildroot/lib/modules/%kernelrelease-%build_flavor/build # Abort if there are any undefined symbols msg="$(/sbin/depmod -F %buildroot/boot/System.map-%kernelrelease-%build_flavor \ -b %buildroot -ae %kernelrelease-%build_flavor 2>&1)" if [ $? -ne 0 ] || echo "$msg" | grep 'needs unknown symbol'; then exit 1 fi %_sourcedir/split-modules -d %buildroot \ -o %my_builddir \ -b %kernel_build_dir \ %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" -e \ %endif %if ! %supported_modules_check -i \ %endif %nil %if ! %split_extra cat %my_builddir/unsupported-modules >>%my_builddir/main-modules %endif # The modules.dep file is sorted randomly which produces strange file # checksums. As the file is not included in the resulting RPM, it's # pointless to rely on its contents. Replacing by zeros to make the # checksums always the same for several builds of the same package. test -s %buildroot/lib/modules/%kernelrelease-%build_flavor/modules.dep && \ dd if=/dev/zero of=%buildroot/lib/modules/%kernelrelease-%build_flavor/modules.dep ibs=`stat -c%s %buildroot/lib/modules/%kernelrelease-%build_flavor/modules.dep` count=1 res=0 if test -e %my_builddir/kabi/%cpu_arch/symvers-%build_flavor; then # check for kabi changes %_sourcedir/kabi.pl --rules %my_builddir/kabi/severities \ %my_builddir/kabi/%cpu_arch/symvers-%build_flavor \ Module.symvers || res=$? fi if [ $res -ne 0 ]; then # %ignore_kabi_badness is defined in the Kernel:* projects in the # OBS to be able to build the KOTD in spite of kabi errors if [ 0%{?ignore_kabi_badness} -eq 0 -a \ ! -e %my_builddir/kabi/%cpu_arch/ignore-%build_flavor -a \ ! -e %_sourcedir/IGNORE-KABI-BADNESS ]; then echo "Create a file IGNORE-KABI-BADNESS in the kernel-source" \ "directory to build this kernel even though its badness is" \ "higher than allowed for an official kernel." exit 1 fi fi # Check the license in each module if ! sh %_sourcedir/check-module-license %buildroot; then echo "Please fix the missing licenses!" %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" exit 1 %endif fi # These files are required for building external modules for FILE in arch/powerpc/lib/crtsavres.o arch/arm64/kernel/ftrace-mod.o \ arch/*/kernel/macros.s scripts/module.lds do if [ -f %kernel_build_dir/$FILE ]; then echo $FILE >> %my_builddir/obj-files fi done tar --exclude=\*.ipa-clones --exclude=.config.old --exclude=.kernel-binary.spec.buildenv \ -cf - -T %my_builddir/obj-files | \ tar -xf - -C %rpm_install_dir/%cpu_arch_flavor # bnc#507084 find %rpm_install_dir/%cpu_arch_flavor/scripts -type f -perm -111 | \ while read f; do case "$(file -b "$f")" in ELF\ *\ executable*) strip "$f" esac done # Recreate the generated Makefile with correct path sh ../scripts/mkmakefile ../../../%{basename:%src_install_dir} \ %rpm_install_dir/%cpu_arch_flavor \ $(echo %srcversion | sed -r 's/^([0-9]+)\.([0-9]+).*/\1 \2/') fi rm -rf %{buildroot}/lib/firmware add_dirs_to_filelist() { sed -rn ' # print file name p # remove filelist macros s:%%[a-z]+(\([^)]+\))? ?::g # add %%dir prefix s:^:%%dir : # print all parents :a # skip directories owned by other packages s:^%%dir (/boot|/etc|/lib/(modules|firmware)|/usr/src)/[^/]+$:: s:/[^/]+$::p ta ' "$@" | sort -u } # Collect the file lists. if [ -f %my_builddir/livepatch-files.no_dir ] ; then cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files fi shopt -s nullglob dotglob > %my_builddir/kernel-devel.files for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do f=${file##%buildroot} echo "$f" done | add_dirs_to_filelist >%my_builddir/kernel-devel.files ( cd %buildroot ; find .%obj_install_dir/%cpu_arch_flavor -type f ; ) | \ sed -e 's/^[.]//' | grep -v -e '[.]ipa-clones$' -e '/Symbols[.]list$' -e '/ipa-clones[.]list$'| \ add_dirs_to_filelist >> %my_builddir/kernel-devel.files { echo %ghost /boot/$image$suffix echo %ghost /boot/initrd$suffix cd %buildroot for f in boot/*; do if test -L "$f"; then echo "%%ghost /$f" continue elif test ! -f "$f"; then continue fi case "$f" in boot/initrd-*) echo "%%ghost /$f" continue ;; boot/vmlinux-*.%{compress_vmlinux}) ;; boot/vmlinux-*) if $ghost_vmlinux; then echo "%%ghost /$f" continue fi ;; boot/symtypes*) continue ;; esac echo "%%attr(0644, root, root) /$f" done if [ %CONFIG_MODULES = y ]; then find lib/modules/%kernelrelease-%build_flavor \ -type d -o \ \( -path '*/modules.*' ! -path '*/modules.order' \ ! -path '*/modules.builtin' \ ! -path '*/modules.builtin.modinfo' \) -printf '%%%%ghost /%%p\n' \ -o -name '*.ko' -prune -o -type f -printf '/%%p\n' cat %my_builddir/base-modules fi if test %CONFIG_MODULE_SIG = "y" -a -d etc/uefi/certs; then find etc/uefi/certs -type f -printf '/%%p\n' fi if test -d lib/firmware/%kernelrelease-%build_flavor; then echo "%%dir /lib/firmware/%kernelrelease-%build_flavor" cat %my_builddir/base-firmware fi if [ -e .%_docdir/%name ]; then echo "%%doc %_docdir/%name" fi } | sort -u | add_dirs_to_filelist >%my_builddir/kernel-base.files { add_dirs_to_filelist %my_builddir/{kernel-base.files,main-modules} if test -d %buildroot/lib/firmware/%kernelrelease-%build_flavor; then echo "/lib/firmware/%kernelrelease-%build_flavor" fi } > %my_builddir/kernel-main.files %if %split_extra add_dirs_to_filelist %my_builddir/unsupported-modules > %my_builddir/kernel-extra.files %if 0%{?sle_version} >= 150000 # By default, loading unsupported modules is disabled on SLE through # /etc/modprobe.d/10-unsupported-modules.conf from the suse-module-tools # package. # modules in kernel-$flavor-extra don't have the supported flag set, # yet loading them should be possible if the package is installed. # CAUTION PACKAGERS: The file content below must not change between # kernel versions, otherwise file conflicts might arise with # multiversion(kernel). mkdir -p %buildroot/etc/modprobe.d cat >%buildroot/etc/modprobe.d/20-kernel-%{build_flavor}-extra.conf <> %my_builddir/kernel-extra.files echo '%%config(noreplace) /etc/modprobe.d/20-kernel-%{build_flavor}-extra.conf' >> %my_builddir/kernel-extra.files %endif %endif for f in %my_builddir/*-kmp-modules; do f2=${f%%-modules}.files add_dirs_to_filelist "$f" >"$f2" done if [ %CONFIG_MODULES = y ]; then install -m 644 %_sourcedir/modules.fips %{buildroot}/lib/modules/%kernelrelease-%build_flavor/modules.fips echo /lib/modules/%kernelrelease-%build_flavor/modules.fips >> %my_builddir/kernel-base.files echo /lib/modules/%kernelrelease-%build_flavor/modules.fips >> %my_builddir/kernel-main.files fi # Hardlink duplicate files automatically (from package fdupes): It doesn't save # much, but it keeps rpmlint from breaking the package build. Note that we skip # /usr/src/linux-obj intentionally, to not accidentally break timestamps there %fdupes $RPM_BUILD_ROOT/lib %preun -f preun.sh %postun -f postun.sh %pre -f pre.sh %post -f post.sh %files -f kernel-main.files %defattr(-, root, root) %package extra Summary: @SUMMARY@ - Unsupported kernel modules Group: System/Kernel Url: http://www.kernel.org/ Provides: %name-extra_%_target_cpu = %version-%source_rel Provides: kernel-extra = %version-%source_rel Provides: multiversion(kernel) Requires: %{name}_%_target_cpu = %version-%source_rel Requires(pre): coreutils awk Requires(post): modutils Requires(post): perl-Bootloader Requires(post): mkinitrd @PROVIDES_OBSOLETES_EXTRA@ %obsolete_rebuilds %name-extra Supplements: packageand(product(SLED):%{name}_%_target_cpu) Supplements: packageand(product(sle-we):%{name}_%_target_cpu) %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif %description extra @DESCRIPTION@ This package contains additional modules not supported by SUSE. %source_timestamp %preun extra -f preun-extra.sh %postun extra -f postun-extra.sh %pre extra -f pre-extra.sh %post extra -f post-extra.sh %if %split_extra %files extra -f kernel-extra.files %defattr(-, root, root) %endif %if "%CONFIG_KMSG_IDS" == "y" %package man Summary: The collection of man pages generated by the kmsg script Group: System/Kernel %description man This package includes the man pages that have been generated from the kmsg message documentation comments. %source_timestamp %files man %defattr(-,root,root) /usr/share/man/man9/* %endif %package devel Summary: Development files necessary for building kernel modules Group: Development/Sources Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) Requires: %{name} = %version-%source_rel %if ! %build_vanilla Requires: kernel-devel%variant = %version-%source_rel Recommends: make Recommends: gcc Recommends: perl # for objtool Requires: libelf-devel Supplements: packageand(%name:kernel-devel%variant) %else Requires: kernel-source-vanilla = %version-%source_rel Supplements: packageand(%name:kernel-source-vanilla) %endif @PROVIDES_OBSOLETES_DEVEL@ %obsolete_rebuilds %name-devel PreReq: coreutils %description devel This package contains files necessary for building kernel modules (and kernel module packages) against the %build_flavor flavor of the kernel. %source_timestamp %if "%CONFIG_MODULES" == "y" %pre devel -f devel-pre.sh %post devel -f devel-post.sh %files devel -f kernel-devel.files %defattr(-,root,root) %dir /usr/src/linux-obj %dir /usr/src/linux-obj/%cpu_arch %ghost /usr/src/linux-obj/%cpu_arch_flavor %exclude %obj_install_dir/%cpu_arch_flavor/Symbols.list %if "%kmp_target_cpu" != "%cpu_arch" %obj_install_dir/%kmp_target_cpu /usr/src/linux-obj/%kmp_target_cpu %endif %if "%livepatch" != "" && "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" && "%variant" == "" && %build_default %if "%livepatch" == "kgraft" %define patch_package %{livepatch}-patch %else %define patch_package kernel-%{livepatch} %endif %package %{livepatch} Summary: Metapackage to pull in matching %patch_package package Group: System/Kernel Requires: %{patch_package}-%(echo %{version}-%{source_rel} | sed 'y/\./_/')-%{build_flavor} Provides: kernel-default-kgraft = %version Provides: kernel-xen-kgraft = %version Provides: multiversion(kernel) %if "%livepatch" != "kgraft" Obsoletes: kernel-default-kgraft < %version Obsoletes: kernel-xen-kgraft < %version %endif %description %{livepatch} This is a metapackage that pulls in the matching %patch_package package for a given kernel version. The advantage of the metapackage is that its name is static, unlike the %{patch_package}--flavor package names. %files %{livepatch} # rpmlint complains about empty packages, so lets own something %defattr(-, root, root) %dir /lib/modules/%kernelrelease-%build_flavor %endif %if 0%{?klp_symbols} && "%livepatch" != "" %package %{livepatch}-devel Summary: Kernel symbols file used during kGraft patch development Group: System/Kernel Provides: klp-symbols = %version %description %{livepatch}-devel This package brings a file named Symbols.list, which contains a list of all kernel symbols and its respective kernel object . This list is to be used by the klp-convert tool, which helps livepatch developers by enabling automatic symbol resolution. %files %{livepatch}-devel -f livepatch-files %endif %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" # BEGIN KMP %package -n @KMP_NAME@-%build_flavor Summary: @KMP_SUMMARY@ Group: System/Kernel Requires: %name = %version-%source_rel Provides: @KMP_NAME@ = %version-%source_rel Provides: multiversion(kernel) # tell weak-modules2 to ignore this package Provides: kmp_in_kernel Requires(post): suse-module-tools >= 12.4 @KMP_DEPS@ %description -n @KMP_NAME@-%build_flavor @KMP_DESCRIPTION@ %post -n @KMP_NAME@-%build_flavor wm2=/usr/lib/module-init-tools/weak-modules2 nvr=@KMP_NAME@-%build_flavor-%version-%release if test -x "$wm2"; then rpm -ql "$nvr" | INITRD_IN_POSTTRANS=1 /bin/bash -${-/e/} "$wm2" \ --add-kernel-modules %kernelrelease-%build_flavor fi %posttrans -n @KMP_NAME@-%build_flavor %{?regenerate_initrd_posttrans} %preun -n @KMP_NAME@-%build_flavor nvr=@KMP_NAME@-%build_flavor-%version-%release rpm -ql "$nvr" | grep '\.ko\(\.xz\)\?$' > "/var/run/rpm-$nvr-modules" %postun -n @KMP_NAME@-%build_flavor wm2=/usr/lib/module-init-tools/weak-modules2 nvr=@KMP_NAME@-%build_flavor-%version-%release if test -x "$wm2"; then /bin/bash -${-/e/} "$wm2" < "/var/run/rpm-$nvr-modules" \ --remove-kernel-modules %kernelrelease-%build_flavor fi rm -f "/var/run/rpm-$nvr-modules" %files -n @KMP_NAME@-%build_flavor -f @KMP_NAME@.files %defattr(-, root, root) # END KMP %endif # %CONFIG_SUSE_KERNEL_SUPPORTED %endif # %CONFIG_MODULES %changelog