From patchwork Wed Oct 7 13:49:25 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10361 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4j0Dy44x3cz3wqs for ; Wed, 07 Oct 2026 13:49:32 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE2" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4j0Dy44BLpz6h1 for ; Wed, 07 Oct 2026 13:49:32 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4j0Dy43Mhsz32dD for ; Wed, 07 Oct 2026 13:49:32 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4j0Dy06vZfz32wR for ; Wed, 07 Oct 2026 13:49:28 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4j0Dy02z5Lz2kD; Wed, 07 Oct 2026 13:49:28 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1791380968; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/BxtGRsi7zvctsOneXQD5JbujOaSICUwvePRUeluthw=; b=uiao6k6cy7x0S3asE8juVJd5ahVbz+xs5zhwGE1FDtRm4baZ00svR2MSPxk0BlAL9exjPv daqDbme6sqgpzNBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1791380968; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/BxtGRsi7zvctsOneXQD5JbujOaSICUwvePRUeluthw=; b=djyNTGKiLORjC9GGQdfa/d/ELTuKJVitZG1oLezT2xtrnMbnt8Q/Q6LLylLX9eNqfxd18I /XLSIgeHio3rsbuMe1tO+IbDAXJxVCgPl47RrIHmRTgJFHgH3IRQ2mNQI6oZZt5u+1B78b buFcmYzpWcHoKdzhMCri5+rmRvhpUgavhSIRxt4DxfxjTRpS1b8x3hfC4nwWrgviOOVJz7 I9Xk++0xl/c5OpmQd0++b1tYLvNsa4SBGLiXmtgmEGP/9meKkLyIOrmLoksgsVj1hDveV7 JVBtlozWCu3enZWIGf02dRK+xI5aSXAG/Oz1FDIp2UGfcNlaT6gesr4OR9ATfQ== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] grub: Update to version 2.16 Date: Wed, 7 Oct 2026 15:49:25 +0200 Message-ID: <20261007134925.201970-2-adolf.belka@ipfire.org> In-Reply-To: <20261007134925.201970-1-adolf.belka@ipfire.org> References: <20261007134925.201970-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.14 to 2.16 - Update of all 4 rootfiles - Tested out grub-2.16 on a non-efi vm build and it worked with no issues - Modified patch for using medany instead of large model for riscv to apply to grub-2.16 - The two patches reverting configure commits from grub-2.14 are no longer needed as they have been removed and replaced with altertnatives that allow grub to build without issues. - Changelog 2.16 * New/improved filesystem and disk support: * Native NVMe disk driver, allowing boot from NVMe devices on coreboot and on systems whose firmware cannot reach them. (833f3b5f9) * NVMe over Fibre Channel support and multiple NVMe boot paths on IEEE 1275, including fibre channel discovery for ofpathname and FCP methods for WWPN and LUNs. (1ffe804c0, 0f13508bc, dab8ef7f8, adeeeeda3, d0773a062, edcdf6598) * New `btrfs-info', `btrfs-list-subvols' and `btrfs-get-default-subvol' commands. (9ade9d031, e31292f7d, 8b23e97f1) * Btrfs on-disk structures are now explicitly packed. (96f2dfb92) * Bound directory iteration, symlink sizes and superblock fields in f2fs, and reject zero-length directory entry names. (a11cc4333, 6fbc6055b, 994e63b1d, 8c345080c) * Bound the symlink target size in HFS+. (b157604e0, b1d888d70) * Fix undefined behaviour and uninitialised reads on malformed ext2 filesystems. (d1d53ed56, 8908f4bc9) * Fix uninitialised reads in FAT and a possible infinite loop in exFAT. (56d859d14, ba8d0bae2) * Fix an incorrect runlist offset boundary check in NTFS. (ae0143f1d) * Handle root inode read failure when mounting XFS. (006994468) * Fix null pointer member access on mount failure in nilfs2, f2fs and erofs. (246ade44d) * Free the block list on file close and fix a node leak in fshelp. (fc5d56b44, adc0cdd58) * Fix root dataset detection on encrypted ZFS pools, and mark the ZFS bookmark_v2 and bookmark_written features as supported. (248fc0ea7, 8cda718c0) * Fix logical partition numbering when no primary partitions exist. (27c157c1e, a4257251f) * LVM metadata buffers are now allocated from the raw contents. (e219cc41e) * Fix raid_disks decoding for mdraid 1.x on big-endian systems. (dcfb9f917) * Reuse free slots when attaching USB mass storage devices. (00f8ad96c) * Disk cache slot thrashing, cache locking and hit-ratio accounting fixes. (63c601d8f, dc0b2735b, 490e0e57f) * New/improved terminal and video support: * AMBA PL011 UART support. (fcff8f881) * Scan all BARs on PCI serial devices when looking for an I/O port. (af8c7012e) * Jump- and delete-word shortcuts in the command line editor. (ad4cf56cc) * Drop support for the UGA Draw and Console Control protocols; efi_uga is now loaded only on x86 EFI platforms. (ef6ee4ad4, 129588e49) * Fix integer overflow and shift undefined behaviour in the PNG and JPEG decoders, and EOF misdetection in the PNG, JPEG and TGA readers. (368b11823, f08903403, 1d4899bae) * Reject out-of-range and overflowing proportional-spec values in gfxmenu. (b10f26d9b) * Free cached glyphs when freeing a font, plus font memory leak fixes found by fuzzing. (ac4b9c3f5, f3e63f295) * Boot protocol improvements: * Set the loaded image device path for the EFI Linux and chainloader loaders when firmware leaves it missing. (b13e52e0a, 07243a5e9, b681823b9) * Use device tree bootargs for the EFI Linux loader when no command line is given. (cfba8a4ef, 7272ed9ec) * Ensure the FDT blob is 8-byte aligned. (bcc8f0d71) * Allow xen_hypervisor and xen_module on x86_64-efi. (5754c5a51) * Restrict the x86 relocator preamble page table to FreeBSD, clear its unused entries and move runtime-patched stubs to the .data section. (62289192b, f8617b653, 577272de9, c7a81c2f1, 4347e1bfc) * Inherit the firmware PML4 in the x86 relocator preamble page table and identity map the full 512G of every PML4 entry GRUB overwrites, so that MMIO and EFI boot services mappings above the top of RAM stay reachable. (f40e41a31, 8773969ac) * Append the version to BLS entry titles and the uname to UKI entry titles, and skip UKIs with no PRETTY_NAME. (7f46a3987, 9be1b7564, 00f09ed61) * New/improved network support: * New `net_dhcp6' command providing DHCPv6 support. (b175570c4, 31a40660a, 42bff9bdb) * Configure the network from the UEFI device path and set the DNS server from the UEFI protocol. (2386c1909, fe0a09e85) * Process the DHCPACK packet during HTTP Boot. (3e20a68f9) * Print URI and DNS device path information, and correct the endianness of IPv6 device paths. (a59e894a5, 945fc8647) * Return the HTTP status code from http_establish and handle HTTP error responses more cleanly. (e2cdb5c4c, 176ba4445) * Fix a hang when a TFTP file is a directory. (74a33ddd4) * Fix an uninitialised cmd_server.option causing DNS failures. (7e864f345) * Fix a logical operator in the DHCP option overload check. (9dcd6f100) * Check the result of grub_netbuff_put() in http_receive(). (e5fce9d0c) * New virtio-net driver. (6ebf1c8eb, abfba8add, 65bb6c229) * New/improved platform support: * New `connectefi' command, connecting UEFI Disk I/O and SCSI I/O devices so that network-booted GRUB can chainload from a local disk. (80d59ed3e) * New `lsefivar' command to dump UEFI runtime variables. (f296813a0, f107c2ad7, bcb738d8c) * New `efibootnext' module and 31_efi_bootnext script for one-shot boot entries, keyed off the ESP PARTUUID and vendor directory. (3d0a81dc0, 6b8d690e3, 53b7b754b, ba20519fc, 9cc5ebba6, 69a08ed5f) * Complete the UEFI status code definitions. (72792baa7) * Fix UTF-16 to UTF-8 conversion and variable enumeration in the EFI commands. (c0aaffa8b, e1da075fe) * Try allocating in the lower 4GB first, and limit arm64 allocations to the 4GB boundary. (091e50562, 1cae86131) * Enable (u)divdi3 and (u)moddi3 for MIPS and implement __aeabi_uldivmod. (22a15660c, 7dfe88fcc) * Only flush the cache on VIA CPUs when the cpuid family matches. (3b3458f72) * Mandatory install device check for PowerPC. (456ab994a) * Convert several PowerPC IEEE 1275 error logs to debug logs. (147a52298) * Fix a left shift overflow on ia64. (42889fea3) * Security: * ML-DSA post-quantum signature support for appended signatures, including the algorithm OID parser and test vectors. (c59c042bf, a37b0c0db, d8da70576, 3394f6f9f, ef122da81, ce3ac8f2b, 41081d572, 4e1510370) * Complete dbx image and certificate revocation checks for appended signatures, with db and dbx read at module load on PowerPC IEEE 1275. (15413acb6, e40793ccf) * Parse and verify PKCS#7 signedAttrs -- contentType, messageDigest and signingTime -- against the content and the signer certificate, and decode X.509 certificate validity periods. (d86ddefba, 9badd596c, 59fd2c25a, 928904041, 549b988e0, 07635d644, bd9ded192, 96dcc3c29, f7c25f1fa, 19200af70, 19abb28a2) * Parse the signer issuer and serial number and the signature algorithm from PKCS#7 signerInfos, and enforce signature length validation. (32855cf73, 31c6b0a98, 59fd2c25a) * Large refactor of the appendedsig module: X.509 handling isolated, RSA verification extracted into a pk module, db/dbx hash lists converted to linked lists. (ec5877a3e, 70aa3f557, f0dab014d, 487cd55c6, 719adb7f4, c000ff57e, 6cce77cdd) * TPCM (Trusted Platform Control Module) verifier on x86_64 EFI. (096aa1da6, f5e0c076c, 558411534, 5e4648a61) * New `tpm_record_pcrs' command recording a TPM PCR snapshot for the OS, via an EFI variable or, on PowerPC IEEE 1275, the /chosen device tree node. (1bd155080, 9a8369807, 0e346a131, 178144cb5, 6aa93964c) * Skip TPM measurement of inspection-only file types. (4c6efaca3) * New `password_argon2' command and grub-mkpasswd-argon2 utility, adding Argon2 hashes for GRUB user passwords. (0511c84c0, a2b9258d5, ccc3620a0) * Access levels for authentication in grub-mkconfig, used by all the default grub.d scripts. (9ef06ff1d, 530a02f36, abf868b1b, ed5fbe400) * MFA key protector. (40a1f9e5b, 9ca263d81, 1ea9e4f86) * Downstream SBAT support: an sbat.csv template, validation of the SBAT CSV against the build-time SBAT level, and an empty --sbat now meaning the bundled sbat.csv. (99ab9d04b, bb483e1f4, 3777c2071, 1a7158490) * Reject caller-supplied serial port and MMIO addresses under lockdown: the `serial' command now only accepts a raw address when a port is already registered at it, so it can no longer be used to write to arbitrary memory. Lookups by name and `auto' are unaffected, as is the behaviour outside of lockdown. (26beaa3b2, 92a2f034e) * Print human readable authentication failure messages instead of the source location of the failing check. (0c2822769) * Exclude PKS support from grub-emu in the appendedsig module. (aaaf50378) * Fix an off-by-one out-of-bounds read of the PGP issuer key-ID subpacket, fix new-format packet length parsing, look for the key ID in hashed signature subpackets, and warn when a secret key packet is found. (d0902e62a, 5ee2e04db, f9fe263f0, 6f71f6502, 0a0c5e6bb) * Fix a heap overflow reading the NVMe-oF address in ofpath. (284aa65ef) * Fix an integer overflow in the mmap binary search. (170221b35) * Fix boot failure when shim validation is disabled. (089d0567c) * Cap the PCR unconditionally in the TPM2 key protector. (75f6ee3bb) * Handle cryptodisk_passphrase_tries=0 correctly. (c605317e0) * Do not require authentication to exit a submenu. (6f5955148) * Performance: * Optimise grub_memmove() with word-by-word copying, restore grub_memcpy() as an inline function, and add a memmove benchmark. (ace5fddc2, 2f0547739, c82f5c540) * Reduce disk cache slot thrashing. (63c601d8f) * Require SSE before enabling AVX and avoid duplicate enable/reset calls in the libgcrypt hardware feature detection. (4aa3a7995, 4cdb8b163, 3b17bc627, bb8d22837, 14e526983, 63c32fde3) * Installation and other utility improvements: * grub-install skips EFI registration when GRUB is already registered and passes GRUB_DISTRIBUTOR directly for the bootloader ID. (9f682bf19, ddb8f4c1f) * grub-editenv removes a stale env_block on unsupported filesystems. (a0476c1a3) * grub-mkstandalone warns on non-regular files. (7d3e803e3) * Force the device path for diskfilter and dmraid roots in 10_linux and 20_linux_xen. (928df0770) * Use findfs for UUID and PARTUUID device lookup in the templates. (26f82dc61) * Default gfxpayload=keep only when booting using EFI. (bcc760dc5) * Skip mount points in grub_find_device. (715c60967) * Support canonical paths not starting with / in render-label. (b4800d434) * Do not treat non-GPT partitions as an error in the bli command. (7b037605e) * Fix an rmmod underflow on autoloaded modules. (74fca99f2) * New grub_list_length() helper counting the elements of a list. (3e1ab0ee0) * ofpath robustness fixes: correct the path_size calculation, bound the fscanf string and read sizes in of_fc_port_name(), initialise nsid in of_path_get_nvme_nsid(), handle lstat errors and harden the strncpy() and strstr() calls. (b71ae6db2, 675d85810, 3b2aff5d4, 02efab276, c6f759f9c, 0ff251503, f81b844e9) * Check for NULL in add_multiple_nvme_bootdevices() and initialise sectors and nsec in grub-setup. (ddf942168, 79b76893c) * Save the str[r]chr() return values into const pointers in grub-probe and the device name resolver. (9f4a586f1, ce6f2b57f) * Skip .mo and .gmo directory entries in copy_locales(). (25e9f2154) * Memory and resource leak fixes across ofpath, getroot, platform, grub-mkrescue, efidisk, appendedsig and the configuration parser. (284aa65ef, fc9f05fe2, 0a1877cb1, e6e3ece5b, 28ee8ff77, d67dec8d2, 92eb0acb2, 7cafb2fa7, bb2c5c740, dd6cb6deb, 7115cf2ad, 52f113a86) * Testing and debugging: * New unit and functional tests: tpcm_unit_test, mfa_key_protector_test, rmmod_test, net_http_transfer_test, network protocol integration tests, loadenv unit and end-to-end tests, FDT and Image processing unit tests, MLDSA tests and a memmove benchmark. (558411534, 1ea9e4f86, 807a3f1d9, abfba8add, b74260f8c, 4379c4e02, feb0f7be5, 916327d56, dc74b43b5, 3394f6f9f, ef122da81, c82f5c540) * Run the libtasn1 coding-long-oid and Test_errors self-tests. (424b36804) * Serial tests enabled for arm*-efi and loongarch64-efi. (9e9efbe3c, 6d76ae440) * New partmap_test case for logical partitions without primaries. (2d9f8846b, df576cac8) * PGP signature tests against Sequoia-PGP generated keys and signatures. (5ef6337a2, 1d0b9fd17) * Fix a loop device race condition in the ext tests. (278263d39) * Fix the -f test on files served over TFTP and HTTP, and clarify what that test guarantees. (ffc05ec96, 83cc0e322) * Distribute the network test scripts. (02d4b7b7b) * Teach grub-fs-tester about luks2_test and remove the emu device.map in the grub-shell cleanup. (03fa65f1f, add20d17b) * Build system: * libgcrypt 1.12.2, including Dilithium/ML-DSA and support for verifying raw data larger than 65535 bytes. (9469e618d, d5ca1a78b, ce3ac8f2b, c33dadaac) * libtasn1 4.21.0. (7a30313dc, d21625937, 234bb2aaf, 49ef3593a) * Cygwin and mingw cross-compilation fixes: updated i386-cygwin linker script, stripped extra sections, a pei386 runtime relocator stub and correct PE relocation section flags. (7d0a4c07a, 3dce38eb1, 3a509d3b0, 6d32b5a87, 87fef5611, a23d4a235, 172a50f07, 747275485, 2e8c7b4c1, feb3115f7) * clang build fixes across x86_64, PowerPC IEEE 1275 and the tests, and llvm/lld link flag fixes for LoongArch, PowerPC, SPARC and MIPS. (047ee58ef, 990544b46, 0459424d3, e35f31246) * i386-pc kernel image generation reworked around --image-base rather than -Ttext. The 2.14 --image-base linker probe and the GNU Autoconf Archive requirement it brought in were reverted in favour of this approach. (ba2f35114, 86283bfd4, ab6f73517, 9922ed133, 1dc2986c7, 7b72d6cbd, 935e889ab) * Parallel build support and a parallel build failure fix. (304ba2637, c2a215245) * Fix a linker error on macOS hosts and a build failure with platform=emu and libzfs. (8a58da21a, 943ce33da) * Stop forcibly distributing all gnulib headers. (dc827846a) * Compiler warning cleanups across ofpath, bootp, platform, gnulib, grub-protect and the arm64 Xen boot loader. (6a7fb8f74, 23becbaaf, f2601de58, 1ae2a2cf3, 6a9d21eaf, 081347a87, cf8b48019) * Replace codecs.open() in util/import_gcry.py and drop the unused SHA1_DIGEST_SIZE definition. (89ce24a7b, c592a9d46) * Continuous integration: * GitLab CI introduced for GRUB, with builds and checks across multiple architectures, a powerpc64le-linux-gnu/ieee1275 job, clang jobs, scheduled Windows mingw builds, weekly Coverity scans, a Signed-off-by check and a release pipeline. (15c99a7a6, da0200d5a, 7bba0975e, ee4a4aa35, 4345af6d3, a3b64ccb1, 5fd3a91e7, b7c5ed972, addd5742c, f89af02ce, 1b9d412ba, a40d8f3fc, 1ab34666a, c1d8befec, e511c82bc) * CI coverage and turnaround improvements: wider clang platform coverage on x86_64, the bootnext functional tests added to the native and non-native test matrices, duplicate target/platform entries removed, failing checks re-run with debug information, bash xtrace enabled in the scripts, build artifacts always stored with a 30 day lifetime for check, and the pages job limited to index.html changes. (4482637b4, 4cdcb3dfa, ae199dfec, 920a440c3, edd057b5c, 206d331b8, c5aa88220, ae792be6b, 94a457f18, c7bf1d032, 4a1a96a8e) * Documentation and project infrastructure: * Documentation for the new commands and features: ML-DSA appended signatures, tpm_record_pcrs, lsefivar, the Btrfs commands, virtionet, net_dhcp6, access levels, the MFA key protector, password_argon2 and grub-mkpasswd-argon2, and device tree boot arguments. (19b933baa, 93aedcb21, f107c2ad7, e36337934, 65bb6c229, 42bff9bdb, ed5fbe400, 9ca263d81, ccc3620a0, 32a720f36, 7272ed9ec) * Document the serial port restrictions under lockdown, add the missing connectefi entry to the command-line command list, note that cryptomount now supports Argon2 and fix assorted typos in the comments and the documentation. (92a2f034e, 4e284ff4d, 53fae3e8a, c160b5861) * The 'Authentication and Authorisation' section was renamed and access level documentation added. (abf868b1b, ed5fbe400) * CONTRIBUTING and a Code of Conduct were added, and MAINTAINERS and the SECURITY policy were updated. (754a3d867, 9b74ffa69, da3675583, 14949bbd1, b07cc37ca, 342661cb8) Tested-by: Adolf Berlka Signed-off-by: Adolf Belka --- config/rootfiles/common/aarch64/grub | 23 ++++++++ config/rootfiles/common/loongarch64/grub | 23 ++++++++ config/rootfiles/common/riscv64/grub | 23 ++++++++ config/rootfiles/common/x86_64/grub | 47 +++++++++++++++- lfs/grub | 8 ++- ...heck_linker_for_--image-base_support.patch | 53 ------------------- ...if_autoconf-archive_is_not_installed.patch | 15 ------ ...ny-instead-of-large-model-for-RISCV.patch} | 24 +++------ 8 files changed, 123 insertions(+), 93 deletions(-) delete mode 100644 src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch delete mode 100644 src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch rename src/patches/grub/{grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch => grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch} (50%) diff --git a/config/rootfiles/common/aarch64/grub b/config/rootfiles/common/aarch64/grub index 83166a61c..c62eadee7 100644 --- a/config/rootfiles/common/aarch64/grub +++ b/config/rootfiles/common/aarch64/grub @@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen etc/grub.d/25_bli etc/grub.d/30_os-prober etc/grub.d/30_uefi-firmware +etc/grub.d/31_efi_bootnext etc/grub.d/40_custom etc/grub.d/41_custom #etc/grub.d/README @@ -23,6 +24,7 @@ usr/bin/grub-mkfont usr/bin/grub-mkimage usr/bin/grub-mklayout usr/bin/grub-mknetdir +usr/bin/grub-mkpasswd-argon2 usr/bin/grub-mkpasswd-pbkdf2 usr/bin/grub-mkrelpath usr/bin/grub-mkrescue @@ -89,6 +91,8 @@ usr/lib/grub/arm64-efi/command.lst usr/lib/grub/arm64-efi/config.h usr/lib/grub/arm64-efi/configfile.mod usr/lib/grub/arm64-efi/configfile.module +usr/lib/grub/arm64-efi/connectefi.mod +usr/lib/grub/arm64-efi/connectefi.module usr/lib/grub/arm64-efi/cpio.mod usr/lib/grub/arm64-efi/cpio.module usr/lib/grub/arm64-efi/cpio_be.mod @@ -126,6 +130,8 @@ usr/lib/grub/arm64-efi/echo.mod usr/lib/grub/arm64-efi/echo.module usr/lib/grub/arm64-efi/efi_gop.mod usr/lib/grub/arm64-efi/efi_gop.module +usr/lib/grub/arm64-efi/efibootnext.mod +usr/lib/grub/arm64-efi/efibootnext.module usr/lib/grub/arm64-efi/efifwsetup.mod usr/lib/grub/arm64-efi/efifwsetup.module usr/lib/grub/arm64-efi/efinet.mod @@ -196,6 +202,8 @@ usr/lib/grub/arm64-efi/gcry_md4.mod usr/lib/grub/arm64-efi/gcry_md4.module usr/lib/grub/arm64-efi/gcry_md5.mod usr/lib/grub/arm64-efi/gcry_md5.module +usr/lib/grub/arm64-efi/gcry_pubkey_dilithium.mod +usr/lib/grub/arm64-efi/gcry_pubkey_dilithium.module usr/lib/grub/arm64-efi/gcry_rfc2268.mod usr/lib/grub/arm64-efi/gcry_rfc2268.module usr/lib/grub/arm64-efi/gcry_rijndael.mod @@ -294,6 +302,8 @@ usr/lib/grub/arm64-efi/lsefimmap.mod usr/lib/grub/arm64-efi/lsefimmap.module usr/lib/grub/arm64-efi/lsefisystab.mod usr/lib/grub/arm64-efi/lsefisystab.module +usr/lib/grub/arm64-efi/lsefivar.mod +usr/lib/grub/arm64-efi/lsefivar.module usr/lib/grub/arm64-efi/lsmmap.mod usr/lib/grub/arm64-efi/lsmmap.module usr/lib/grub/arm64-efi/lssal.mod @@ -318,8 +328,12 @@ usr/lib/grub/arm64-efi/mdraid1x.mod usr/lib/grub/arm64-efi/mdraid1x.module usr/lib/grub/arm64-efi/memdisk.mod usr/lib/grub/arm64-efi/memdisk.module +usr/lib/grub/arm64-efi/memmove_bench.mod +usr/lib/grub/arm64-efi/memmove_bench.module usr/lib/grub/arm64-efi/memrw.mod usr/lib/grub/arm64-efi/memrw.module +usr/lib/grub/arm64-efi/mfa.mod +usr/lib/grub/arm64-efi/mfa.module usr/lib/grub/arm64-efi/minicmd.mod usr/lib/grub/arm64-efi/minicmd.module usr/lib/grub/arm64-efi/minix.mod @@ -334,6 +348,8 @@ usr/lib/grub/arm64-efi/minix3_be.mod usr/lib/grub/arm64-efi/minix3_be.module usr/lib/grub/arm64-efi/minix_be.mod usr/lib/grub/arm64-efi/minix_be.module +usr/lib/grub/arm64-efi/mldsa_test.mod +usr/lib/grub/arm64-efi/mldsa_test.module usr/lib/grub/arm64-efi/mmap.mod usr/lib/grub/arm64-efi/mmap.module usr/lib/grub/arm64-efi/moddep.lst @@ -388,6 +404,8 @@ usr/lib/grub/arm64-efi/parttool.mod usr/lib/grub/arm64-efi/parttool.module usr/lib/grub/arm64-efi/password.mod usr/lib/grub/arm64-efi/password.module +usr/lib/grub/arm64-efi/password_argon2.mod +usr/lib/grub/arm64-efi/password_argon2.module usr/lib/grub/arm64-efi/password_pbkdf2.mod usr/lib/grub/arm64-efi/password_pbkdf2.module usr/lib/grub/arm64-efi/pbkdf2.mod @@ -426,6 +444,7 @@ usr/lib/grub/arm64-efi/romfs.mod usr/lib/grub/arm64-efi/romfs.module usr/lib/grub/arm64-efi/rsa_sexp_test.mod usr/lib/grub/arm64-efi/rsa_sexp_test.module +usr/lib/grub/arm64-efi/sbat.csv usr/lib/grub/arm64-efi/scsi.mod usr/lib/grub/arm64-efi/scsi.module usr/lib/grub/arm64-efi/search.mod @@ -485,6 +504,8 @@ usr/lib/grub/arm64-efi/tpm.mod usr/lib/grub/arm64-efi/tpm.module usr/lib/grub/arm64-efi/tpm2_key_protector.mod usr/lib/grub/arm64-efi/tpm2_key_protector.module +usr/lib/grub/arm64-efi/tpm_record_pcrs.mod +usr/lib/grub/arm64-efi/tpm_record_pcrs.module usr/lib/grub/arm64-efi/tr.mod usr/lib/grub/arm64-efi/tr.module usr/lib/grub/arm64-efi/trig.mod @@ -607,6 +628,7 @@ usr/share/grub/unicode.pf2 #usr/share/locale/ko/LC_MESSAGES/grub.mo #usr/share/locale/lg/LC_MESSAGES/grub.mo #usr/share/locale/lt/LC_MESSAGES/grub.mo +#usr/share/locale/lv/LC_MESSAGES/grub.mo #usr/share/locale/nb/LC_MESSAGES/grub.mo #usr/share/locale/nl/LC_MESSAGES/grub.mo #usr/share/locale/pa/LC_MESSAGES/grub.mo @@ -633,6 +655,7 @@ usr/share/grub/unicode.pf2 #usr/share/man/man1/grub-mkimage.1 #usr/share/man/man1/grub-mklayout.1 #usr/share/man/man1/grub-mknetdir.1 +#usr/share/man/man1/grub-mkpasswd-argon2.1 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1 #usr/share/man/man1/grub-mkrelpath.1 #usr/share/man/man1/grub-mkrescue.1 diff --git a/config/rootfiles/common/loongarch64/grub b/config/rootfiles/common/loongarch64/grub index a8ae2a2e1..c9d704578 100644 --- a/config/rootfiles/common/loongarch64/grub +++ b/config/rootfiles/common/loongarch64/grub @@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen etc/grub.d/25_bli etc/grub.d/30_os-prober etc/grub.d/30_uefi-firmware +etc/grub.d/31_efi_bootnext etc/grub.d/40_custom etc/grub.d/41_custom #etc/grub.d/README @@ -23,6 +24,7 @@ usr/bin/grub-mkfont usr/bin/grub-mkimage usr/bin/grub-mklayout usr/bin/grub-mknetdir +usr/bin/grub-mkpasswd-argon2 usr/bin/grub-mkpasswd-pbkdf2 usr/bin/grub-mkrelpath usr/bin/grub-mkrescue @@ -89,6 +91,8 @@ usr/lib/grub/loongarch64-efi/command.lst usr/lib/grub/loongarch64-efi/config.h usr/lib/grub/loongarch64-efi/configfile.mod usr/lib/grub/loongarch64-efi/configfile.module +usr/lib/grub/loongarch64-efi/connectefi.mod +usr/lib/grub/loongarch64-efi/connectefi.module usr/lib/grub/loongarch64-efi/cpio.mod usr/lib/grub/loongarch64-efi/cpio.module usr/lib/grub/loongarch64-efi/cpio_be.mod @@ -126,6 +130,8 @@ usr/lib/grub/loongarch64-efi/echo.mod usr/lib/grub/loongarch64-efi/echo.module usr/lib/grub/loongarch64-efi/efi_gop.mod usr/lib/grub/loongarch64-efi/efi_gop.module +usr/lib/grub/loongarch64-efi/efibootnext.mod +usr/lib/grub/loongarch64-efi/efibootnext.module usr/lib/grub/loongarch64-efi/efifwsetup.mod usr/lib/grub/loongarch64-efi/efifwsetup.module usr/lib/grub/loongarch64-efi/efinet.mod @@ -196,6 +202,8 @@ usr/lib/grub/loongarch64-efi/gcry_md4.mod usr/lib/grub/loongarch64-efi/gcry_md4.module usr/lib/grub/loongarch64-efi/gcry_md5.mod usr/lib/grub/loongarch64-efi/gcry_md5.module +usr/lib/grub/loongarch64-efi/gcry_pubkey_dilithium.mod +usr/lib/grub/loongarch64-efi/gcry_pubkey_dilithium.module usr/lib/grub/loongarch64-efi/gcry_rfc2268.mod usr/lib/grub/loongarch64-efi/gcry_rfc2268.module usr/lib/grub/loongarch64-efi/gcry_rijndael.mod @@ -294,6 +302,8 @@ usr/lib/grub/loongarch64-efi/lsefimmap.mod usr/lib/grub/loongarch64-efi/lsefimmap.module usr/lib/grub/loongarch64-efi/lsefisystab.mod usr/lib/grub/loongarch64-efi/lsefisystab.module +usr/lib/grub/loongarch64-efi/lsefivar.mod +usr/lib/grub/loongarch64-efi/lsefivar.module usr/lib/grub/loongarch64-efi/lsmmap.mod usr/lib/grub/loongarch64-efi/lsmmap.module usr/lib/grub/loongarch64-efi/lssal.mod @@ -318,8 +328,12 @@ usr/lib/grub/loongarch64-efi/mdraid1x.mod usr/lib/grub/loongarch64-efi/mdraid1x.module usr/lib/grub/loongarch64-efi/memdisk.mod usr/lib/grub/loongarch64-efi/memdisk.module +usr/lib/grub/loongarch64-efi/memmove_bench.mod +usr/lib/grub/loongarch64-efi/memmove_bench.module usr/lib/grub/loongarch64-efi/memrw.mod usr/lib/grub/loongarch64-efi/memrw.module +usr/lib/grub/loongarch64-efi/mfa.mod +usr/lib/grub/loongarch64-efi/mfa.module usr/lib/grub/loongarch64-efi/minicmd.mod usr/lib/grub/loongarch64-efi/minicmd.module usr/lib/grub/loongarch64-efi/minix.mod @@ -334,6 +348,8 @@ usr/lib/grub/loongarch64-efi/minix3_be.mod usr/lib/grub/loongarch64-efi/minix3_be.module usr/lib/grub/loongarch64-efi/minix_be.mod usr/lib/grub/loongarch64-efi/minix_be.module +usr/lib/grub/loongarch64-efi/mldsa_test.mod +usr/lib/grub/loongarch64-efi/mldsa_test.module usr/lib/grub/loongarch64-efi/mmap.mod usr/lib/grub/loongarch64-efi/mmap.module usr/lib/grub/loongarch64-efi/moddep.lst @@ -388,6 +404,8 @@ usr/lib/grub/loongarch64-efi/parttool.mod usr/lib/grub/loongarch64-efi/parttool.module usr/lib/grub/loongarch64-efi/password.mod usr/lib/grub/loongarch64-efi/password.module +usr/lib/grub/loongarch64-efi/password_argon2.mod +usr/lib/grub/loongarch64-efi/password_argon2.module usr/lib/grub/loongarch64-efi/password_pbkdf2.mod usr/lib/grub/loongarch64-efi/password_pbkdf2.module usr/lib/grub/loongarch64-efi/pbkdf2.mod @@ -426,6 +444,7 @@ usr/lib/grub/loongarch64-efi/romfs.mod usr/lib/grub/loongarch64-efi/romfs.module usr/lib/grub/loongarch64-efi/rsa_sexp_test.mod usr/lib/grub/loongarch64-efi/rsa_sexp_test.module +usr/lib/grub/loongarch64-efi/sbat.csv usr/lib/grub/loongarch64-efi/scsi.mod usr/lib/grub/loongarch64-efi/scsi.module usr/lib/grub/loongarch64-efi/search.mod @@ -485,6 +504,8 @@ usr/lib/grub/loongarch64-efi/tpm.mod usr/lib/grub/loongarch64-efi/tpm.module usr/lib/grub/loongarch64-efi/tpm2_key_protector.mod usr/lib/grub/loongarch64-efi/tpm2_key_protector.module +usr/lib/grub/loongarch64-efi/tpm_record_pcrs.mod +usr/lib/grub/loongarch64-efi/tpm_record_pcrs.module usr/lib/grub/loongarch64-efi/tr.mod usr/lib/grub/loongarch64-efi/tr.module usr/lib/grub/loongarch64-efi/trig.mod @@ -605,6 +626,7 @@ usr/share/grub/unicode.pf2 #usr/share/locale/ko/LC_MESSAGES/grub.mo #usr/share/locale/lg/LC_MESSAGES/grub.mo #usr/share/locale/lt/LC_MESSAGES/grub.mo +#usr/share/locale/lv/LC_MESSAGES/grub.mo #usr/share/locale/nb/LC_MESSAGES/grub.mo #usr/share/locale/nl/LC_MESSAGES/grub.mo #usr/share/locale/pa/LC_MESSAGES/grub.mo @@ -631,6 +653,7 @@ usr/share/grub/unicode.pf2 #usr/share/man/man1/grub-mkimage.1 #usr/share/man/man1/grub-mklayout.1 #usr/share/man/man1/grub-mknetdir.1 +#usr/share/man/man1/grub-mkpasswd-argon2.1 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1 #usr/share/man/man1/grub-mkrelpath.1 #usr/share/man/man1/grub-mkrescue.1 diff --git a/config/rootfiles/common/riscv64/grub b/config/rootfiles/common/riscv64/grub index f9b981db9..5709ba46f 100644 --- a/config/rootfiles/common/riscv64/grub +++ b/config/rootfiles/common/riscv64/grub @@ -10,6 +10,7 @@ etc/grub.d/20_linux_xen etc/grub.d/25_bli etc/grub.d/30_os-prober etc/grub.d/30_uefi-firmware +etc/grub.d/31_efi_bootnext etc/grub.d/40_custom etc/grub.d/41_custom #etc/grub.d/README @@ -23,6 +24,7 @@ usr/bin/grub-mkfont usr/bin/grub-mkimage usr/bin/grub-mklayout usr/bin/grub-mknetdir +usr/bin/grub-mkpasswd-argon2 usr/bin/grub-mkpasswd-pbkdf2 usr/bin/grub-mkrelpath usr/bin/grub-mkrescue @@ -89,6 +91,8 @@ usr/lib/grub/riscv64-efi/command.lst usr/lib/grub/riscv64-efi/config.h usr/lib/grub/riscv64-efi/configfile.mod usr/lib/grub/riscv64-efi/configfile.module +usr/lib/grub/riscv64-efi/connectefi.mod +usr/lib/grub/riscv64-efi/connectefi.module usr/lib/grub/riscv64-efi/cpio.mod usr/lib/grub/riscv64-efi/cpio.module usr/lib/grub/riscv64-efi/cpio_be.mod @@ -126,6 +130,8 @@ usr/lib/grub/riscv64-efi/echo.mod usr/lib/grub/riscv64-efi/echo.module usr/lib/grub/riscv64-efi/efi_gop.mod usr/lib/grub/riscv64-efi/efi_gop.module +usr/lib/grub/riscv64-efi/efibootnext.mod +usr/lib/grub/riscv64-efi/efibootnext.module usr/lib/grub/riscv64-efi/efifwsetup.mod usr/lib/grub/riscv64-efi/efifwsetup.module usr/lib/grub/riscv64-efi/efinet.mod @@ -196,6 +202,8 @@ usr/lib/grub/riscv64-efi/gcry_md4.mod usr/lib/grub/riscv64-efi/gcry_md4.module usr/lib/grub/riscv64-efi/gcry_md5.mod usr/lib/grub/riscv64-efi/gcry_md5.module +usr/lib/grub/riscv64-efi/gcry_pubkey_dilithium.mod +usr/lib/grub/riscv64-efi/gcry_pubkey_dilithium.module usr/lib/grub/riscv64-efi/gcry_rfc2268.mod usr/lib/grub/riscv64-efi/gcry_rfc2268.module usr/lib/grub/riscv64-efi/gcry_rijndael.mod @@ -294,6 +302,8 @@ usr/lib/grub/riscv64-efi/lsefimmap.mod usr/lib/grub/riscv64-efi/lsefimmap.module usr/lib/grub/riscv64-efi/lsefisystab.mod usr/lib/grub/riscv64-efi/lsefisystab.module +usr/lib/grub/riscv64-efi/lsefivar.mod +usr/lib/grub/riscv64-efi/lsefivar.module usr/lib/grub/riscv64-efi/lsmmap.mod usr/lib/grub/riscv64-efi/lsmmap.module usr/lib/grub/riscv64-efi/lssal.mod @@ -318,8 +328,12 @@ usr/lib/grub/riscv64-efi/mdraid1x.mod usr/lib/grub/riscv64-efi/mdraid1x.module usr/lib/grub/riscv64-efi/memdisk.mod usr/lib/grub/riscv64-efi/memdisk.module +usr/lib/grub/riscv64-efi/memmove_bench.mod +usr/lib/grub/riscv64-efi/memmove_bench.module usr/lib/grub/riscv64-efi/memrw.mod usr/lib/grub/riscv64-efi/memrw.module +usr/lib/grub/riscv64-efi/mfa.mod +usr/lib/grub/riscv64-efi/mfa.module usr/lib/grub/riscv64-efi/minicmd.mod usr/lib/grub/riscv64-efi/minicmd.module usr/lib/grub/riscv64-efi/minix.mod @@ -334,6 +348,8 @@ usr/lib/grub/riscv64-efi/minix3_be.mod usr/lib/grub/riscv64-efi/minix3_be.module usr/lib/grub/riscv64-efi/minix_be.mod usr/lib/grub/riscv64-efi/minix_be.module +usr/lib/grub/riscv64-efi/mldsa_test.mod +usr/lib/grub/riscv64-efi/mldsa_test.module usr/lib/grub/riscv64-efi/mmap.mod usr/lib/grub/riscv64-efi/mmap.module usr/lib/grub/riscv64-efi/moddep.lst @@ -388,6 +404,8 @@ usr/lib/grub/riscv64-efi/parttool.mod usr/lib/grub/riscv64-efi/parttool.module usr/lib/grub/riscv64-efi/password.mod usr/lib/grub/riscv64-efi/password.module +usr/lib/grub/riscv64-efi/password_argon2.mod +usr/lib/grub/riscv64-efi/password_argon2.module usr/lib/grub/riscv64-efi/password_pbkdf2.mod usr/lib/grub/riscv64-efi/password_pbkdf2.module usr/lib/grub/riscv64-efi/pbkdf2.mod @@ -426,6 +444,7 @@ usr/lib/grub/riscv64-efi/romfs.mod usr/lib/grub/riscv64-efi/romfs.module usr/lib/grub/riscv64-efi/rsa_sexp_test.mod usr/lib/grub/riscv64-efi/rsa_sexp_test.module +usr/lib/grub/riscv64-efi/sbat.csv usr/lib/grub/riscv64-efi/scsi.mod usr/lib/grub/riscv64-efi/scsi.module usr/lib/grub/riscv64-efi/search.mod @@ -485,6 +504,8 @@ usr/lib/grub/riscv64-efi/tpm.mod usr/lib/grub/riscv64-efi/tpm.module usr/lib/grub/riscv64-efi/tpm2_key_protector.mod usr/lib/grub/riscv64-efi/tpm2_key_protector.module +usr/lib/grub/riscv64-efi/tpm_record_pcrs.mod +usr/lib/grub/riscv64-efi/tpm_record_pcrs.module usr/lib/grub/riscv64-efi/tr.mod usr/lib/grub/riscv64-efi/tr.module usr/lib/grub/riscv64-efi/trig.mod @@ -605,6 +626,7 @@ usr/share/grub/unicode.pf2 #usr/share/locale/ko/LC_MESSAGES/grub.mo #usr/share/locale/lg/LC_MESSAGES/grub.mo #usr/share/locale/lt/LC_MESSAGES/grub.mo +#usr/share/locale/lv/LC_MESSAGES/grub.mo #usr/share/locale/nb/LC_MESSAGES/grub.mo #usr/share/locale/nl/LC_MESSAGES/grub.mo #usr/share/locale/pa/LC_MESSAGES/grub.mo @@ -631,6 +653,7 @@ usr/share/grub/unicode.pf2 #usr/share/man/man1/grub-mkimage.1 #usr/share/man/man1/grub-mklayout.1 #usr/share/man/man1/grub-mknetdir.1 +#usr/share/man/man1/grub-mkpasswd-argon2.1 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1 #usr/share/man/man1/grub-mkrelpath.1 #usr/share/man/man1/grub-mkrescue.1 diff --git a/config/rootfiles/common/x86_64/grub b/config/rootfiles/common/x86_64/grub index b6ddd5709..0d56c2fa5 100644 --- a/config/rootfiles/common/x86_64/grub +++ b/config/rootfiles/common/x86_64/grub @@ -11,6 +11,7 @@ etc/grub.d/20_linux_xen etc/grub.d/25_bli etc/grub.d/30_os-prober etc/grub.d/30_uefi-firmware +etc/grub.d/31_efi_bootnext etc/grub.d/40_custom etc/grub.d/41_custom #etc/grub.d/README @@ -24,6 +25,7 @@ usr/bin/grub-mkfont usr/bin/grub-mkimage usr/bin/grub-mklayout usr/bin/grub-mknetdir +usr/bin/grub-mkpasswd-argon2 usr/bin/grub-mkpasswd-pbkdf2 usr/bin/grub-mkrelpath usr/bin/grub-mkrescue @@ -231,6 +233,8 @@ usr/lib/grub/i386-pc/gcry_md4.mod usr/lib/grub/i386-pc/gcry_md4.module usr/lib/grub/i386-pc/gcry_md5.mod usr/lib/grub/i386-pc/gcry_md5.module +usr/lib/grub/i386-pc/gcry_pubkey_dilithium.mod +usr/lib/grub/i386-pc/gcry_pubkey_dilithium.module usr/lib/grub/i386-pc/gcry_rfc2268.mod usr/lib/grub/i386-pc/gcry_rfc2268.module usr/lib/grub/i386-pc/gcry_rijndael.mod @@ -369,8 +373,12 @@ usr/lib/grub/i386-pc/mdraid1x.mod usr/lib/grub/i386-pc/mdraid1x.module usr/lib/grub/i386-pc/memdisk.mod usr/lib/grub/i386-pc/memdisk.module +usr/lib/grub/i386-pc/memmove_bench.mod +usr/lib/grub/i386-pc/memmove_bench.module usr/lib/grub/i386-pc/memrw.mod usr/lib/grub/i386-pc/memrw.module +usr/lib/grub/i386-pc/mfa.mod +usr/lib/grub/i386-pc/mfa.module usr/lib/grub/i386-pc/minicmd.mod usr/lib/grub/i386-pc/minicmd.module usr/lib/grub/i386-pc/minix.mod @@ -385,6 +393,8 @@ usr/lib/grub/i386-pc/minix3_be.mod usr/lib/grub/i386-pc/minix3_be.module usr/lib/grub/i386-pc/minix_be.mod usr/lib/grub/i386-pc/minix_be.module +usr/lib/grub/i386-pc/mldsa_test.mod +usr/lib/grub/i386-pc/mldsa_test.module usr/lib/grub/i386-pc/mmap.mod usr/lib/grub/i386-pc/mmap.module usr/lib/grub/i386-pc/moddep.lst @@ -417,6 +427,8 @@ usr/lib/grub/i386-pc/ntfscomp.mod usr/lib/grub/i386-pc/ntfscomp.module usr/lib/grub/i386-pc/ntldr.mod usr/lib/grub/i386-pc/ntldr.module +usr/lib/grub/i386-pc/nvme.mod +usr/lib/grub/i386-pc/nvme.module usr/lib/grub/i386-pc/odc.mod usr/lib/grub/i386-pc/odc.module usr/lib/grub/i386-pc/offsetio.mod @@ -451,6 +463,8 @@ usr/lib/grub/i386-pc/parttool.mod usr/lib/grub/i386-pc/parttool.module usr/lib/grub/i386-pc/password.mod usr/lib/grub/i386-pc/password.module +usr/lib/grub/i386-pc/password_argon2.mod +usr/lib/grub/i386-pc/password_argon2.module usr/lib/grub/i386-pc/password_pbkdf2.mod usr/lib/grub/i386-pc/password_pbkdf2.module usr/lib/grub/i386-pc/pata.mod @@ -629,6 +643,8 @@ usr/lib/grub/i386-pc/videotest.mod usr/lib/grub/i386-pc/videotest.module usr/lib/grub/i386-pc/videotest_checksum.mod usr/lib/grub/i386-pc/videotest_checksum.module +usr/lib/grub/i386-pc/virtionet.mod +usr/lib/grub/i386-pc/virtionet.module usr/lib/grub/i386-pc/wrmsr.mod usr/lib/grub/i386-pc/wrmsr.module usr/lib/grub/i386-pc/xfs.mod @@ -734,6 +750,8 @@ usr/lib/grub/x86_64-efi/command.lst usr/lib/grub/x86_64-efi/config.h usr/lib/grub/x86_64-efi/configfile.mod usr/lib/grub/x86_64-efi/configfile.module +usr/lib/grub/x86_64-efi/connectefi.mod +usr/lib/grub/x86_64-efi/connectefi.module usr/lib/grub/x86_64-efi/cpio.mod usr/lib/grub/x86_64-efi/cpio.module usr/lib/grub/x86_64-efi/cpio_be.mod @@ -775,8 +793,8 @@ usr/lib/grub/x86_64-efi/echo.mod usr/lib/grub/x86_64-efi/echo.module usr/lib/grub/x86_64-efi/efi_gop.mod usr/lib/grub/x86_64-efi/efi_gop.module -usr/lib/grub/x86_64-efi/efi_uga.mod -usr/lib/grub/x86_64-efi/efi_uga.module +usr/lib/grub/x86_64-efi/efibootnext.mod +usr/lib/grub/x86_64-efi/efibootnext.module usr/lib/grub/x86_64-efi/efifwsetup.mod usr/lib/grub/x86_64-efi/efifwsetup.module usr/lib/grub/x86_64-efi/efinet.mod @@ -849,6 +867,8 @@ usr/lib/grub/x86_64-efi/gcry_md4.mod usr/lib/grub/x86_64-efi/gcry_md4.module usr/lib/grub/x86_64-efi/gcry_md5.mod usr/lib/grub/x86_64-efi/gcry_md5.module +usr/lib/grub/x86_64-efi/gcry_pubkey_dilithium.mod +usr/lib/grub/x86_64-efi/gcry_pubkey_dilithium.module usr/lib/grub/x86_64-efi/gcry_rfc2268.mod usr/lib/grub/x86_64-efi/gcry_rfc2268.module usr/lib/grub/x86_64-efi/gcry_rijndael.mod @@ -961,6 +981,8 @@ usr/lib/grub/x86_64-efi/lsefimmap.mod usr/lib/grub/x86_64-efi/lsefimmap.module usr/lib/grub/x86_64-efi/lsefisystab.mod usr/lib/grub/x86_64-efi/lsefisystab.module +usr/lib/grub/x86_64-efi/lsefivar.mod +usr/lib/grub/x86_64-efi/lsefivar.module usr/lib/grub/x86_64-efi/lsmmap.mod usr/lib/grub/x86_64-efi/lsmmap.module usr/lib/grub/x86_64-efi/lspci.mod @@ -987,8 +1009,12 @@ usr/lib/grub/x86_64-efi/mdraid1x.mod usr/lib/grub/x86_64-efi/mdraid1x.module usr/lib/grub/x86_64-efi/memdisk.mod usr/lib/grub/x86_64-efi/memdisk.module +usr/lib/grub/x86_64-efi/memmove_bench.mod +usr/lib/grub/x86_64-efi/memmove_bench.module usr/lib/grub/x86_64-efi/memrw.mod usr/lib/grub/x86_64-efi/memrw.module +usr/lib/grub/x86_64-efi/mfa.mod +usr/lib/grub/x86_64-efi/mfa.module usr/lib/grub/x86_64-efi/minicmd.mod usr/lib/grub/x86_64-efi/minicmd.module usr/lib/grub/x86_64-efi/minix.mod @@ -1003,6 +1029,8 @@ usr/lib/grub/x86_64-efi/minix3_be.mod usr/lib/grub/x86_64-efi/minix3_be.module usr/lib/grub/x86_64-efi/minix_be.mod usr/lib/grub/x86_64-efi/minix_be.module +usr/lib/grub/x86_64-efi/mldsa_test.mod +usr/lib/grub/x86_64-efi/mldsa_test.module usr/lib/grub/x86_64-efi/mmap.mod usr/lib/grub/x86_64-efi/mmap.module usr/lib/grub/x86_64-efi/moddep.lst @@ -1033,6 +1061,8 @@ usr/lib/grub/x86_64-efi/ntfs.mod usr/lib/grub/x86_64-efi/ntfs.module usr/lib/grub/x86_64-efi/ntfscomp.mod usr/lib/grub/x86_64-efi/ntfscomp.module +usr/lib/grub/x86_64-efi/nvme.mod +usr/lib/grub/x86_64-efi/nvme.module usr/lib/grub/x86_64-efi/odc.mod usr/lib/grub/x86_64-efi/odc.module usr/lib/grub/x86_64-efi/offsetio.mod @@ -1067,6 +1097,8 @@ usr/lib/grub/x86_64-efi/parttool.mod usr/lib/grub/x86_64-efi/parttool.module usr/lib/grub/x86_64-efi/password.mod usr/lib/grub/x86_64-efi/password.module +usr/lib/grub/x86_64-efi/password_argon2.mod +usr/lib/grub/x86_64-efi/password_argon2.module usr/lib/grub/x86_64-efi/password_pbkdf2.mod usr/lib/grub/x86_64-efi/password_pbkdf2.module usr/lib/grub/x86_64-efi/pata.mod @@ -1117,6 +1149,7 @@ usr/lib/grub/x86_64-efi/romfs.mod usr/lib/grub/x86_64-efi/romfs.module usr/lib/grub/x86_64-efi/rsa_sexp_test.mod usr/lib/grub/x86_64-efi/rsa_sexp_test.module +usr/lib/grub/x86_64-efi/sbat.csv usr/lib/grub/x86_64-efi/scsi.mod usr/lib/grub/x86_64-efi/scsi.module usr/lib/grub/x86_64-efi/search.mod @@ -1176,10 +1209,14 @@ usr/lib/grub/x86_64-efi/tga.mod usr/lib/grub/x86_64-efi/tga.module usr/lib/grub/x86_64-efi/time.mod usr/lib/grub/x86_64-efi/time.module +usr/lib/grub/x86_64-efi/tpcm.mod +usr/lib/grub/x86_64-efi/tpcm.module usr/lib/grub/x86_64-efi/tpm.mod usr/lib/grub/x86_64-efi/tpm.module usr/lib/grub/x86_64-efi/tpm2_key_protector.mod usr/lib/grub/x86_64-efi/tpm2_key_protector.module +usr/lib/grub/x86_64-efi/tpm_record_pcrs.mod +usr/lib/grub/x86_64-efi/tpm_record_pcrs.module usr/lib/grub/x86_64-efi/tr.mod usr/lib/grub/x86_64-efi/tr.module usr/lib/grub/x86_64-efi/trig.mod @@ -1231,8 +1268,12 @@ usr/lib/grub/x86_64-efi/videotest.mod usr/lib/grub/x86_64-efi/videotest.module usr/lib/grub/x86_64-efi/videotest_checksum.mod usr/lib/grub/x86_64-efi/videotest_checksum.module +usr/lib/grub/x86_64-efi/virtionet.mod +usr/lib/grub/x86_64-efi/virtionet.module usr/lib/grub/x86_64-efi/wrmsr.mod usr/lib/grub/x86_64-efi/wrmsr.module +usr/lib/grub/x86_64-efi/xen_boot.mod +usr/lib/grub/x86_64-efi/xen_boot.module usr/lib/grub/x86_64-efi/xfs.mod usr/lib/grub/x86_64-efi/xfs.module usr/lib/grub/x86_64-efi/xnu.mod @@ -1326,6 +1367,7 @@ usr/share/grub/unicode.pf2 #usr/share/locale/ko/LC_MESSAGES/grub.mo #usr/share/locale/lg/LC_MESSAGES/grub.mo #usr/share/locale/lt/LC_MESSAGES/grub.mo +#usr/share/locale/lv/LC_MESSAGES/grub.mo #usr/share/locale/nb/LC_MESSAGES/grub.mo #usr/share/locale/nl/LC_MESSAGES/grub.mo #usr/share/locale/pa/LC_MESSAGES/grub.mo @@ -1352,6 +1394,7 @@ usr/share/grub/unicode.pf2 #usr/share/man/man1/grub-mkimage.1 #usr/share/man/man1/grub-mklayout.1 #usr/share/man/man1/grub-mknetdir.1 +#usr/share/man/man1/grub-mkpasswd-argon2.1 #usr/share/man/man1/grub-mkpasswd-pbkdf2.1 #usr/share/man/man1/grub-mkrelpath.1 #usr/share/man/man1/grub-mkrescue.1 diff --git a/lfs/grub b/lfs/grub index 226775c63..6bfa7e964 100644 --- a/lfs/grub +++ b/lfs/grub @@ -24,7 +24,7 @@ include Config -VER = 2.14 +VER = 2.16 THISAPP = grub-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -61,7 +61,7 @@ objects = $(DL_FILE) \ $(DL_FILE) = $(DL_FROM)/$(DL_FILE) unifont-7.0.03.pcf.gz = $(DL_FROM)/unifont-7.0.03.pcf.gz -$(DL_FILE)_BLAKE2 = 724bb430d8824bec39e6a025cf354a780b79260684c7c4e3d28beb08c8bee10d082a089fcb799f8f5eb6e83abcf8675fb7c5f5ddf443c5c0e61d6f180ee341af +$(DL_FILE)_BLAKE2 = 74437966a70854ec29f3d80715ac3436f4340e6f69ccd084b8762dd36f80a30e707333d2102639372ce421b79179a1fa043cbb6a2d25e568d035b916b228fca1 unifont-7.0.03.pcf.gz_BLAKE2 = fb96c1786fcc8c77796c90ce30a2b7d544013bd62cedbf7b027e1894fe75cdbd2044717796cb0e3150db1457fcb58076491d9c0b855621b652fb9a52c0793469 install : $(TARGET) @@ -94,9 +94,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) $(DIR_APP_EFI) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.06-remove_os_prober_disabled_warning.patch cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.02_disable_vga_fallback.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch cd $(DIR_APP) && [ ! -e grub-core/extra_deps.lst ] && echo 'depends bli part_gpt' > grub-core/extra_deps.lst cd $(DIR_APP) && autoreconf -vfi diff --git a/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch b/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch deleted file mode 100644 index 33013e46b..000000000 --- a/src/patches/grub/grub-2.14-Revert-configure:_Check_linker_for_--image-base_support.patch +++ /dev/null @@ -1,53 +0,0 @@ -diff -Naur grub-2.14.orig/acinclude.m4 grub-2.14/acinclude.m4 ---- grub-2.14.orig/acinclude.m4 2025-11-20 17:02:39.000000000 +0100 -+++ grub-2.14/acinclude.m4 2026-05-05 17:11:21.117127788 +0200 -@@ -79,11 +79,6 @@ - [AC_MSG_CHECKING([whether ${TARGET_OBJCOPY} works for absolute addresses]) - AC_CACHE_VAL(grub_cv_prog_objcopy_absolute, - [cat > conftest.c <<\EOF --asm ( -- ".globl start, _start, __start\n" -- ".ifdef cmain; .set start = _start = __start = cmain\n.endif\n" -- ".ifdef _cmain; .set start = _start = __start = _cmain\n.endif\n" --); - void cmain (void); - void - cmain (void) -diff -Naur grub-2.14.orig/configure.ac grub-2.14/configure.ac ---- grub-2.14.orig/configure.ac 2026-01-14 15:30:04.000000000 +0100 -+++ grub-2.14/configure.ac 2026-05-05 17:09:38.251922592 +0200 -@@ -1461,6 +1461,7 @@ - TARGET_IMG_LDSCRIPT='$(top_srcdir)'"/conf/i386-cygwin-img-ld.sc" - TARGET_IMG_LDFLAGS="-Wl,-T${TARGET_IMG_LDSCRIPT}" - TARGET_IMG_LDFLAGS_AC="-Wl,-T${srcdir}/conf/i386-cygwin-img-ld.sc" -+ TARGET_IMG_BASE_LDOPT="-Wl,-Ttext" - TARGET_IMG_CFLAGS= - else - TARGET_APPLE_LINKER=0 -@@ -1468,6 +1469,7 @@ - TARGET_IMG_LDSCRIPT= - TARGET_IMG_LDFLAGS='-Wl,-N' - TARGET_IMG_LDFLAGS_AC='-Wl,-N' -+ TARGET_IMG_BASE_LDOPT="-Wl,-Ttext" - TARGET_IMG_CFLAGS= - fi - -@@ -1798,18 +1800,6 @@ - m4_ifndef([AX_CHECK_LINK_FLAG], [m4_fatal([autoconf-archive is missing. You must install it to generate the configure script.])]) - - if test "x$TARGET_APPLE_LINKER" != x1 ; then --AX_CHECK_LINK_FLAG([-Wl,--image-base,0x400000], -- [TARGET_IMG_BASE_LDOPT="-Wl,--image-base"], -- [TARGET_IMG_BASE_LDOPT="-Wl,-Ttext"], -- [], -- [AC_LANG_SOURCE([ --asm (".globl start; start:"); --asm (".globl _start; _start:"); --asm (".globl __start; __start:"); --void __main (void); --void __main (void) {} --int main (void); -- ])]) - grub_PROG_OBJCOPY_ABSOLUTE - fi - grub_PROG_LD_BUILD_ID_NONE diff --git a/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch b/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch deleted file mode 100644 index 5bde9e56c..000000000 --- a/src/patches/grub/grub-2.14-Revert-configure:_Print_a_more_helpful_error_if_autoconf-archive_is_not_installed.patch +++ /dev/null @@ -1,15 +0,0 @@ -diff -Naur grub-2.14.orig/configure.ac grub-2.14/configure.ac ---- grub-2.14.orig/configure.ac 2026-05-05 17:09:38.251922592 +0200 -+++ grub-2.14/configure.ac 2026-05-05 17:32:27.405733625 +0200 -@@ -1794,11 +1794,6 @@ - # Defined in acinclude.m4. - grub_ASM_USCORE - grub_PROG_TARGET_CC -- --# The error message produced by autoconf if autoconf-archive is not installed is --# quite misleading and not very helpful. So, try point people in the right direction. --m4_ifndef([AX_CHECK_LINK_FLAG], [m4_fatal([autoconf-archive is missing. You must install it to generate the configure script.])]) -- - if test "x$TARGET_APPLE_LINKER" != x1 ; then - grub_PROG_OBJCOPY_ABSOLUTE - fi diff --git a/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch b/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch similarity index 50% rename from src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch rename to src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch index 4bfd46856..0416d9af4 100644 --- a/src/patches/grub/grub-2.12-Use-medany-instead-of-large-model-for-RISCV.patch +++ b/src/patches/grub/grub-2.16-Use-medany-instead-of-large-model-for-RISCV.patch @@ -1,27 +1,15 @@ -From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001 -From: Jason Montleon -Date: Fri, 3 May 2024 13:18:37 -0400 -Subject: [PATCH] Use medany instead of large model for RISCV - -Signed-off-by: Jason Montleon ---- - configure.ac | 6 ++++-- - 1 file changed, 4 insertions(+), 2 deletions(-) - -diff --git a/configure.ac b/configure.ac -index d223fe3ef6e..6a6688e362a 100644 ---- a/configure.ac -+++ b/configure.ac -@@ -1313,7 +1313,7 @@ AC_SUBST(TARGET_LDFLAGS_OLDMAGIC) +--- grub-2.16/configure.ac.orig 2026-10-05 23:16:28.087549369 +0200 ++++ grub-2.16/configure.ac 2026-10-05 23:23:51.374295457 +0200 +@@ -1712,7 +1712,7 @@ - LDFLAGS="$TARGET_LDFLAGS" + CFLAGS="$TARGET_CFLAGS" -if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 || test "$target_cpu" = riscv64 ; then +if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 ; then # Use large model to support 4G memory AC_CACHE_CHECK([whether option -mcmodel=large works], grub_cv_cc_mcmodel, [ CFLAGS="$TARGET_CFLAGS -mcmodel=large" -@@ -1323,9 +1323,11 @@ if test "$target_cpu" = x86_64 || test "$target_cpu" = sparc64 || test "$target_ +@@ -1722,9 +1722,11 @@ ]) if test "x$grub_cv_cc_mcmodel" = xyes; then TARGET_CFLAGS="$TARGET_CFLAGS -mcmodel=large" @@ -33,4 +21,4 @@ index d223fe3ef6e..6a6688e362a 100644 + TARGET_CFLAGS="$TARGET_CFLAGS -mcmodel=medany" fi - if test "$target_cpu"-"$platform" = x86_64-efi; then + # Stack smashing protector.