mirror of
https://gitlab.alpinelinux.org/alpine/aports.git
synced 2026-03-24 06:51:37 +01:00
374 lines
13 KiB
Plaintext
374 lines
13 KiB
Plaintext
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
|
|
|
|
_flavor=lts
|
|
pkgname=linux-$_flavor
|
|
pkgver=6.12.19
|
|
_kernver=${pkgver%.*}
|
|
pkgrel=0
|
|
pkgdesc="Linux lts kernel"
|
|
url="https://www.kernel.org"
|
|
depends="initramfs-generator"
|
|
_depends_dev="perl gmp-dev mpc1-dev mpfr-dev elfutils-dev bash flex bison zstd"
|
|
makedepends="$_depends_dev sed installkernel bc linux-headers linux-firmware-any openssl-dev>3 mawk
|
|
diffutils findutils zstd pahole python3 gcc>=13.1.1_git20230624"
|
|
options="!strip !check"
|
|
_config=${config:-config-lts.${CARCH}}
|
|
source="https://cdn.kernel.org/pub/linux/kernel/v${pkgver%%.*}.x/linux-$_kernver.tar.xz
|
|
0001-powerpc-boot-wrapper-Add-z-notext-flag-for-ppc64le.patch
|
|
0002-x86-Compress-vmlinux-with-zstd-19-instead-of-22.patch
|
|
0003-kexec-add-kexec_load_disabled-boot-option.patch
|
|
0004-objtool-respect-AWK-setting.patch
|
|
0005-powerpc-config-defang-gcc-check-for-stack-protector-.patch
|
|
|
|
lts.aarch64.config
|
|
lts.armv7.config
|
|
lts.loongarch64.config
|
|
lts.ppc64le.config
|
|
lts.riscv64.config
|
|
lts.s390x.config
|
|
lts.x86.config
|
|
lts.x86_64.config
|
|
|
|
virt.aarch64.config
|
|
virt.armv7.config
|
|
virt.ppc64le.config
|
|
virt.x86.config
|
|
virt.x86_64.config
|
|
"
|
|
subpackages="$pkgname-dev:_dev:$CBUILD_ARCH $pkgname-doc"
|
|
for _i in $source; do
|
|
case $_i in
|
|
*.$CARCH.config)
|
|
_f=${_i%."$CARCH".config}
|
|
_flavors="$_flavors $_f"
|
|
if [ "linux-$_f" != "$pkgname" ]; then
|
|
subpackages="$subpackages linux-$_f::$CBUILD_ARCH linux-$_f-dev:_dev:$CBUILD_ARCH"
|
|
fi
|
|
;;
|
|
esac
|
|
done
|
|
builddir="$srcdir"/linux-$_kernver
|
|
|
|
if [ "${pkgver%.0}" = "$pkgver" ]; then
|
|
# Prepend to apply first
|
|
source="patch-$pkgver.patch.xz::https://cdn.kernel.org/pub/linux/kernel/v${pkgver%%.*}.x/patch-$pkgver.xz $source"
|
|
fi
|
|
arch="all !armhf"
|
|
license="GPL-2.0-only"
|
|
|
|
# secfixes:
|
|
# 5.10.4-r0:
|
|
# - CVE-2020-29568
|
|
# - CVE-2020-29569
|
|
# 5.15.74-r0:
|
|
# - CVE-2022-41674
|
|
# - CVE-2022-42719
|
|
# - CVE-2022-42720
|
|
# - CVE-2022-42721
|
|
# - CVE-2022-42722
|
|
# 6.1.27-r3:
|
|
# - CVE-2023-32233
|
|
# 6.6.13-r1:
|
|
# - CVE-46838
|
|
|
|
prepare() {
|
|
default_prepare
|
|
|
|
# remove localversion from patch if any
|
|
rm -f localversion*
|
|
}
|
|
|
|
_kernelarch() {
|
|
local arch="$1"
|
|
case "$arch" in
|
|
aarch64*) arch="arm64" ;;
|
|
arm*) arch="arm" ;;
|
|
ppc*) arch="powerpc" ;;
|
|
s390*) arch="s390" ;;
|
|
riscv*) arch="riscv" ;;
|
|
loongarch64) arch="loongarch" ;;
|
|
esac
|
|
echo "$arch"
|
|
}
|
|
|
|
_prepareconfig() {
|
|
local _flavor="$1"
|
|
local _arch="$2"
|
|
local _config=$_flavor.$_arch.config
|
|
local _builddir="$srcdir"/build-$_flavor.$_arch
|
|
mkdir -p "$_builddir"
|
|
echo "-$pkgrel-$_flavor" > "$_builddir"/localversion-alpine
|
|
|
|
cp "$srcdir"/$_config "$_builddir"/.config
|
|
msg "Configuring $_flavor kernel ($_arch)"
|
|
make -C "$builddir" \
|
|
O="$_builddir" \
|
|
ARCH="$(_kernelarch $_arch)" \
|
|
olddefconfig
|
|
|
|
if grep "CONFIG_MODULE_SIG=y" "$_builddir"/.config >/dev/null; then
|
|
if [ -f "$KERNEL_SIGNING_KEY" ]; then
|
|
sed -i -e "s:^CONFIG_MODULE_SIG_KEY=.*:CONFIG_MODULE_SIG_KEY=\"$KERNEL_SIGNING_KEY\":" \
|
|
"$_builddir"/.config
|
|
msg "Using $KERNEL_SIGNING_KEY to sign $_flavor kernel ($_arch) modules"
|
|
else
|
|
warning "KERNEL_SIGNING_KEY was not set. A signing key will be generated, but 3rd"
|
|
warning "party modules can not be signed"
|
|
fi
|
|
fi
|
|
}
|
|
|
|
listconfigs() {
|
|
for i in $source; do
|
|
case "$i" in
|
|
*.config) echo $i;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
prepareconfigs() {
|
|
for _config in $(listconfigs); do
|
|
local _flavor=${_config%%.*}
|
|
local _arch=${_config%.config}
|
|
_arch=${_arch#*.}
|
|
local _builddir="$srcdir"/build-$_flavor.$_arch
|
|
_prepareconfig "$_flavor" "$_arch"
|
|
done
|
|
}
|
|
|
|
# this is supposed to be run before version is bumped so we can compare
|
|
# what new kernel config knobs are introduced
|
|
prepareupdate() {
|
|
clean && fetch && unpack && prepare && deps
|
|
prepareconfigs
|
|
rm -r "$builddir"
|
|
}
|
|
|
|
updateconfigs() {
|
|
if ! [ -d "$builddir" ]; then
|
|
deps && fetch && unpack && prepare
|
|
fi
|
|
for _config in ${CONFIGS:-$(listconfigs)}; do
|
|
msg "updating $_config"
|
|
local _flavor=${_config%%.*}
|
|
local _arch=${_config%.config}
|
|
_arch=${_arch#*.}
|
|
local _builddir="$srcdir"/build-$_flavor.$_arch
|
|
mkdir -p "$_builddir"
|
|
echo "-$pkgrel-$_flavor" > "$_builddir"/localversion-alpine
|
|
local actions="listnewconfig oldconfig"
|
|
if ! [ -f "$_builddir"/.config ]; then
|
|
cp "$srcdir"/$_config "$_builddir"/.config
|
|
actions="olddefconfig"
|
|
fi
|
|
env | grep ^CONFIG_ >> "$_builddir"/.config || true
|
|
make -j1 -C "$builddir" \
|
|
O="$_builddir" \
|
|
ARCH="$(_kernelarch $_arch)" \
|
|
$actions savedefconfig
|
|
|
|
cp "$_builddir"/defconfig "$startdir"/$_config
|
|
done
|
|
}
|
|
|
|
set_kbuild_timestamp() {
|
|
# KBUILD_BUILD_TIMESTAMP needs to be parsable by busybox date
|
|
export KBUILD_BUILD_TIMESTAMP="$(date '+%Y-%m-%d %H:%M:%S' -u${SOURCE_DATE_EPOCH:+d @$SOURCE_DATE_EPOCH})"
|
|
}
|
|
|
|
build() {
|
|
unset LDFLAGS
|
|
# for some reason these sometimes leak into the kernel build,
|
|
# -Werror=format-security breaks some stuff
|
|
unset CFLAGS CPPFLAGS CXXFLAGS
|
|
set_kbuild_timestamp
|
|
for i in $_flavors; do
|
|
_prepareconfig "$i" "$CARCH"
|
|
done
|
|
for i in $_flavors; do
|
|
msg "Building $i kernel"
|
|
cd "$srcdir"/build-$i.$CARCH
|
|
|
|
# set org in cert for modules signing
|
|
# https://www.kernel.org/doc/html/v6.1/admin-guide/module-signing.html#generating-signing-keys
|
|
mkdir -p certs
|
|
sed -e 's/#O = Unspecified company/O = alpinelinux.org/' \
|
|
"$builddir"/certs/default_x509.genkey \
|
|
> certs/x509.genkey
|
|
|
|
make ARCH="$(_kernelarch $CARCH)" \
|
|
CC="${CC:-gcc}" \
|
|
AWK="${AWK:-mawk}" \
|
|
KBUILD_BUILD_VERSION="$((pkgrel + 1 ))-Alpine"
|
|
done
|
|
}
|
|
|
|
_package() {
|
|
local _buildflavor="$1" _outdir="$2"
|
|
set_kbuild_timestamp
|
|
|
|
cd "$srcdir"/build-$_buildflavor.$CARCH
|
|
local _abi_release="$(make -s kernelrelease)"
|
|
# modules_install seems to regenerate a defect Modules.symvers on s390x. Work
|
|
# around it by backing it up and restore it after modules_install
|
|
cp Module.symvers Module.symvers.backup
|
|
|
|
mkdir -p "$_outdir"/boot "$_outdir"/lib/modules
|
|
|
|
local _install
|
|
case "$CARCH" in
|
|
arm*|aarch64|riscv*) _install="zinstall dtbs_install";;
|
|
*) _install=install;;
|
|
esac
|
|
|
|
make modules_install $_install \
|
|
ARCH="$(_kernelarch $CARCH)" \
|
|
INSTALL_MOD_PATH="$_outdir" \
|
|
INSTALL_MOD_STRIP=1 \
|
|
INSTALL_PATH="$_outdir"/boot \
|
|
INSTALL_DTBS_PATH="$_outdir/boot/dtbs-$_buildflavor"
|
|
|
|
cp Module.symvers.backup Module.symvers
|
|
|
|
rm -f "$_outdir"/lib/modules/"$_abi_release"/build \
|
|
"$_outdir"/lib/modules/"$_abi_release"/source
|
|
rm -rf "$_outdir"/lib/firmware
|
|
|
|
install -D -m644 include/config/kernel.release \
|
|
"$_outdir"/usr/share/kernel/$_buildflavor/kernel.release
|
|
|
|
case "$CARCH" in
|
|
loongarch64)
|
|
mv "$_outdir"/boot/vmlinuz-$_abi_release \
|
|
"$_outdir"/boot/vmlinuz-$_buildflavor
|
|
|
|
mv "$_outdir"/boot/config-$_abi_release \
|
|
"$_outdir"/boot/config-$_buildflavor
|
|
|
|
mv "$_outdir"/boot/System.map-$_abi_release \
|
|
"$_outdir"/boot/System.map-$_buildflavor
|
|
;;
|
|
esac
|
|
}
|
|
|
|
# main flavor installs in $pkgdir
|
|
package() {
|
|
depends="$depends linux-firmware-any"
|
|
|
|
_package "$_flavor" "$pkgdir"
|
|
|
|
# copy files for linux-lts-doc sub package
|
|
mkdir -p "$pkgdir"/usr/share/doc
|
|
cp -r "$builddir"/Documentation \
|
|
"$pkgdir"/usr/share/doc/linux-doc-"$pkgver"/
|
|
# remove files that aren't part of the documentation itself
|
|
for nondoc in \
|
|
.gitignore conf.py docutils.conf \
|
|
dontdiff Kconfig Makefile
|
|
do
|
|
rm "$pkgdir"/usr/share/doc/linux-doc-"$pkgver"/"$nondoc"
|
|
done
|
|
# create /usr/share/doc/linux-doc symlink
|
|
cd "$pkgdir"/usr/share/doc; ln -s linux-doc-"$pkgver" linux-doc
|
|
}
|
|
|
|
# subflavors install in $subpkgdir
|
|
virt() {
|
|
_package virt "$subpkgdir"
|
|
}
|
|
|
|
_dev() {
|
|
local _flavor=$(echo $subpkgname | sed -E 's/(^linux-|-dev$)//g')
|
|
local _builddir="$srcdir"/build-$_flavor.$CARCH
|
|
local _abi_release="$(make -C "$_builddir" -s kernelrelease)"
|
|
# copy the only the parts that we really need for build 3rd party
|
|
# kernel modules and install those as /usr/src/linux-headers,
|
|
# simlar to what ubuntu does
|
|
#
|
|
# this way you dont need to install the 300-400 kernel sources to
|
|
# build a tiny kernel module
|
|
#
|
|
pkgdesc="Headers and script for third party modules for $_flavor kernel"
|
|
depends="$_depends_dev"
|
|
local dir="$subpkgdir"/usr/src/linux-headers-"$_abi_release"
|
|
set_kbuild_timestamp
|
|
|
|
# first we import config, run prepare to set up for building
|
|
# external modules, and create the scripts
|
|
mkdir -p "$dir"
|
|
cp -a "$_builddir"/.config "$_builddir"/localversion-alpine \
|
|
"$dir"/
|
|
|
|
install -D -t "$dir"/certs "$_builddir"/certs/signing_key.x509 || :
|
|
|
|
make -C "$builddir" \
|
|
O="$dir" \
|
|
ARCH="$(_kernelarch $CARCH)" \
|
|
AWK="${AWK:-mawk}" \
|
|
prepare modules_prepare scripts
|
|
|
|
# remove the stuff that points to real sources. we want 3rd party
|
|
# modules to believe this is the sources
|
|
rm "$dir"/Makefile "$dir"/source
|
|
|
|
# copy the needed stuff from real sources
|
|
#
|
|
# this is taken from ubuntu kernel build script
|
|
# http://kernel.ubuntu.com/git/ubuntu/ubuntu-zesty.git/tree/debian/rules.d/3-binary-indep.mk
|
|
cd "$builddir"
|
|
find . -path './include/*' -prune \
|
|
-o -path './scripts/*' -prune -o -type f \
|
|
\( -name 'Makefile*' -o -name 'Kconfig*' -o -name 'Kbuild*' -o \
|
|
-name '*.sh' -o -name '*.pl' -o -name '*.lds' -o -name 'Platform' \) \
|
|
-print | cpio -pdm "$dir"
|
|
|
|
cp -a scripts include "$dir"
|
|
|
|
find "arch/$_karch" -name include -type d -print | while IFS='' read -r folder; do
|
|
find "$folder" -type f
|
|
done | sort -u | cpio -pdm "$dir"
|
|
|
|
install -Dm644 "$srcdir"/build-$_flavor.$CARCH/Module.symvers \
|
|
"$dir"/Module.symvers
|
|
|
|
# remove unneeded things
|
|
msg "Removing documentation..."
|
|
rm -r "$dir"/Documentation
|
|
find "$dir" -type f -name '*.o' -printf 'Removing %P\n' -delete
|
|
local _karch="$(_kernelarch $CARCH | sed 's/x86_64/x86/')"
|
|
msg "Removing unneeded arch headers..."
|
|
for i in "$dir"/arch/*; do
|
|
if [ "${i##*/}" != "$_karch" ]; then
|
|
echo " ${i##*/}"
|
|
rm -r "$i"
|
|
fi
|
|
done
|
|
|
|
mkdir -p "$subpkgdir"/lib/modules/"$_abi_release"
|
|
ln -sf /usr/src/linux-headers-"$_abi_release" \
|
|
"$subpkgdir"/lib/modules/"$_abi_release"/build
|
|
}
|
|
|
|
sha512sums="
|
|
032c7a975d98711520b5174da7ed546b10feec503a4f6f36e1229503db4d46787fcc10df10b227cd26b543eb84fe05d1ddd24b672f5478b8514a11b765ff7162 patch-6.12.19.patch.xz
|
|
a37b1823df7b4f72542f689b65882634740ba0401a42fdcf6601d9efd2e132e5a7650e70450ba76f6cd1f13ca31180f2ccee9d54fe4df89bc0000ade4380a548 linux-6.12.tar.xz
|
|
b296717ef0cd63978142b4d47b3bc49faa04daf77e115e702ba611cc254a6e782cdab7d5639e724cd5f029cfb6a3dc33c3036f346d681d1fdfe0df723c7e0321 0001-powerpc-boot-wrapper-Add-z-notext-flag-for-ppc64le.patch
|
|
055e10e7b3e00bb3621389315d5206a8feb5022a1f0dc51c3aa107facfe83d191da05a502a0c62488be7299677a63c1da84f87c42cbf3125788c56db67e810ee 0002-x86-Compress-vmlinux-with-zstd-19-instead-of-22.patch
|
|
7e066473fd0e234a279280eee0351bf9c3efab1e7ad0e1a85cb62193e63df06a7641015229445aaab6f68019c4852e6731b2cb3c4a54c0dbe405fac12b365873 0003-kexec-add-kexec_load_disabled-boot-option.patch
|
|
28c83be4c97152001381cd5e3a8acb8552a42d9dac9aaec8f096e3762b7944035aa5a4363fb4602f9bb427c4f72cfd2f996a0a725f7f9e07ab250317985aff9e 0004-objtool-respect-AWK-setting.patch
|
|
5ce79416f8f111c36393718656e3eeb4cb0adccd117dcf661876d1564010e5c58b6351cc4116d187d0a9a838bcca0fecc236d81ac71afb940b89ccb14f21e179 0005-powerpc-config-defang-gcc-check-for-stack-protector-.patch
|
|
d3e3754893a530886daafae039bf8464cd3e9c3fa4a26f4a6c10ce5b8f78213c4d96770be342096664615730c94014719876d42d8ed496ec7e5352158aa76095 lts.aarch64.config
|
|
e0048832f94d07ef581c4660263625e1f63afe867d517ce512d866cd09ad55bbc1ec2a07d808898fdcb54dc4721e2e9109374ef684d078032cf815170056c6ba lts.armv7.config
|
|
3f53983da5107ea189b0b43fbae57a1ae1fcd0e32e00c56ec38e034b79b2370c1a208ae165ce5a243b6f0d7b96cbbfad58777facb918f0e42df0a1c159b12284 lts.loongarch64.config
|
|
4f98dbb3aa5ced04a2a6f5f06b72b7052cf7bf4e8004fc6f3848007e3bd2a1d1412e44baf7709677b6edba9cb20ee498d14ee0f6e26872b582a8980f8be1f9b5 lts.ppc64le.config
|
|
3a6059b5cf02712dd7031f2db6da3315035d7ed7ddee788ae46418ab6025133b7149f585a0a58bae2803ab3d0945f4b31985a7474131718e27141046f66ba072 lts.riscv64.config
|
|
2da141e087ec6f870a87d9b6ba4be0b711810da9c11a58a8dd0094a6f4654c4b05c550072b97483f6b747ecd10913da3cddc2fe9cfcc86ec7d1d23bd6adeb652 lts.s390x.config
|
|
147936235750fceb5d15b1018362d21d1001cd82c177a02e8f9c3b2050498ddb7a2f048411f7fe8d3529cee2ada0a77ad936db1ad3a6bc44c64d3139ddd8d1f8 lts.x86.config
|
|
75d180fcf731612c21e771a8e59ff81fe397a980a1ff18ee3056c16e3e90ae3f7e6a102a9490e774f79e8ce34a837a794cc4f7d1131f2c36a85c4f09c8dadcc6 lts.x86_64.config
|
|
bf96ec7e8ad7dacd0597d71e33a76abedfbcf84ceed55d705703f4fc9dc0ce92b93447cd3881d4c724462789790648bb74f75ae71cdaa907f3635dff5823e01a virt.aarch64.config
|
|
10748a1f2a13657d92caf4fea8be7774030818db34007f308710c2419d280baf72e4fbeb8cdb9ecf98be4b83b128cba9931c45701d14eafc9e54bde9d1d2b170 virt.armv7.config
|
|
e801706a97dbc0f481c644217e3a9c99a26b0d4fea90f71cf5233cc8c460ca49e142bcdd2946891997e6af115624f72f372b02b778397e60b83f617e39e5e8c6 virt.ppc64le.config
|
|
59d4bc6e215a9e66edbe425f448074fb2e4d5baa6fb1eb420111da1d1f87067fc8e71a06b89c5db9d98bb701fec4a1f9737bd3e40ab87f39b58a5314b4d11b0d virt.x86.config
|
|
dbf9dba853cce23263ee9696d25eaaa809db47437cdda0db1d2c024f686d0358dec30cbfd045cd2642677276f7a5da4b0908e4c21f18e2030a1b399f507eb83e virt.x86_64.config
|
|
"
|