grub2.mk 7.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212
  1. ################################################################################
  2. #
  3. # grub2
  4. #
  5. ################################################################################
  6. GRUB2_VERSION = 2.04
  7. GRUB2_SITE = http://ftp.gnu.org/gnu/grub
  8. GRUB2_SOURCE = grub-$(GRUB2_VERSION).tar.xz
  9. GRUB2_LICENSE = GPL-3.0+
  10. GRUB2_LICENSE_FILES = COPYING
  11. GRUB2_DEPENDENCIES = host-bison host-flex host-grub2
  12. HOST_GRUB2_DEPENDENCIES = host-bison host-flex
  13. GRUB2_INSTALL_IMAGES = YES
  14. # 0001-build-Fix-GRUB-i386-pc-build-with-Ubuntu-gcc.patch and 2021/03/02
  15. # security fixes (patches 0029-0149)
  16. define GRUB2_AVOID_AUTORECONF
  17. $(Q)touch $(@D)/Makefile.util.am
  18. $(Q)touch $(@D)/aclocal.m4
  19. $(Q)touch $(@D)/Makefile.in
  20. $(Q)touch $(@D)/configure
  21. endef
  22. GRUB2_POST_PATCH_HOOKS += GRUB2_AVOID_AUTORECONF
  23. HOST_GRUB2_POST_PATCH_HOOKS += GRUB2_AVOID_AUTORECONF
  24. # 0002-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
  25. GRUB2_IGNORE_CVES += CVE-2020-10713
  26. # 0005-calloc-Use-calloc-at-most-places.patch
  27. GRUB2_IGNORE_CVES += CVE-2020-14308
  28. # 0006-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  29. GRUB2_IGNORE_CVES += CVE-2020-14309 CVE-2020-14310 CVE-2020-14311
  30. # 0019-script-Avoid-a-use-after-free-when-redefining-a-func.patch
  31. GRUB2_IGNORE_CVES += CVE-2020-15706
  32. # 0028-linux-Fix-integer-overflows-in-initrd-size-handling.patch
  33. GRUB2_IGNORE_CVES += CVE-2020-15707
  34. # 2021/03/02 security fixes - patches 0029-0149
  35. GRUB2_IGNORE_CVES += CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 \
  36. CVE-2020-27779 CVE-2021-3418 CVE-2021-20225 CVE-2021-20233
  37. # 0039-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  38. GRUB2_IGNORE_CVES += CVE-2020-14372
  39. # CVE-2019-14865 is about a flaw in the grub2-set-bootflag tool, which
  40. # doesn't exist upstream, but is added by the Redhat/Fedora
  41. # packaging. Not applicable to Buildroot.
  42. GRUB2_IGNORE_CVES += CVE-2019-14865
  43. # CVE-2020-15705 is related to a flaw in the use of the
  44. # grub_linuxefi_secure_validate(), which was added by Debian/Ubuntu
  45. # patches. The issue doesn't affect upstream Grub, and
  46. # grub_linuxefi_secure_validate() is not implemented in the grub2
  47. # version available in Buildroot.
  48. GRUB2_IGNORE_CVES += CVE-2020-15705
  49. ifeq ($(BR2_TARGET_GRUB2_INSTALL_TOOLS),y)
  50. GRUB2_INSTALL_TARGET = YES
  51. else
  52. GRUB2_INSTALL_TARGET = NO
  53. endif
  54. GRUB2_CPE_ID_VENDOR = gnu
  55. GRUB2_BUILTIN_MODULES_PC = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_MODULES_PC))
  56. GRUB2_BUILTIN_MODULES_EFI = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_MODULES_EFI))
  57. GRUB2_BUILTIN_CONFIG_PC = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_CONFIG_PC))
  58. GRUB2_BUILTIN_CONFIG_EFI = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_CONFIG_EFI))
  59. GRUB2_BOOT_PARTITION = $(call qstrip,$(BR2_TARGET_GRUB2_BOOT_PARTITION))
  60. GRUB2_IMAGE_i386-pc = $(BINARIES_DIR)/grub.img
  61. GRUB2_CFG_i386-pc = $(TARGET_DIR)/boot/grub/grub.cfg
  62. GRUB2_PREFIX_i386-pc = ($(GRUB2_BOOT_PARTITION))/boot/grub
  63. GRUB2_TARGET_i386-pc = i386
  64. GRUB2_PLATFORM_i386-pc = pc
  65. GRUB2_BUILTIN_CONFIG_i386-pc = $(GRUB2_BUILTIN_CONFIG_PC)
  66. GRUB2_BUILTIN_MODULES_i386-pc = $(GRUB2_BUILTIN_MODULES_PC)
  67. GRUB2_TUPLES-$(BR2_TARGET_GRUB2_I386_PC) += i386-pc
  68. GRUB2_IMAGE_i386-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootia32.efi
  69. GRUB2_CFG_i386-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
  70. GRUB2_PREFIX_i386-efi = /EFI/BOOT
  71. GRUB2_TARGET_i386-efi = i386
  72. GRUB2_PLATFORM_i386-efi = efi
  73. GRUB2_BUILTIN_CONFIG_i386-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
  74. GRUB2_BUILTIN_MODULES_i386-efi = $(GRUB2_BUILTIN_MODULES_EFI)
  75. GRUB2_TUPLES-$(BR2_TARGET_GRUB2_I386_EFI) += i386-efi
  76. GRUB2_IMAGE_x86_64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootx64.efi
  77. GRUB2_CFG_x86_64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
  78. GRUB2_PREFIX_x86_64-efi = /EFI/BOOT
  79. GRUB2_TARGET_x86_64-efi = x86_64
  80. GRUB2_PLATFORM_x86_64-efi = efi
  81. GRUB2_BUILTIN_CONFIG_x86_64-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
  82. GRUB2_BUILTIN_MODULES_x86_64-efi = $(GRUB2_BUILTIN_MODULES_EFI)
  83. GRUB2_TUPLES-$(BR2_TARGET_GRUB2_X86_64_EFI) += x86_64-efi
  84. GRUB2_IMAGE_arm-uboot = $(BINARIES_DIR)/boot-part/grub/grub.img
  85. GRUB2_CFG_arm-uboot = $(BINARIES_DIR)/boot-part/grub/grub.cfg
  86. GRUB2_PREFIX_arm-uboot = ($(GRUB2_BOOT_PARTITION))/boot/grub
  87. GRUB2_TARGET_arm-uboot = arm
  88. GRUB2_PLATFORM_arm-uboot = uboot
  89. GRUB2_BUILTIN_CONFIG_arm-uboot = $(GRUB2_BUILTIN_CONFIG_PC)
  90. GRUB2_BUILTIN_MODULES_arm-uboot = $(GRUB2_BUILTIN_MODULES_PC)
  91. GRUB2_TUPLES-$(BR2_TARGET_GRUB2_ARM_UBOOT) += arm-uboot
  92. GRUB2_IMAGE_arm-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootarm.efi
  93. GRUB2_CFG_arm-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
  94. GRUB2_PREFIX_arm-efi = /EFI/BOOT
  95. GRUB2_TARGET_arm-efi = arm
  96. GRUB2_PLATFORM_arm-efi = efi
  97. GRUB2_BUILTIN_CONFIG_arm-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
  98. GRUB2_BUILTIN_MODULES_arm-efi = $(GRUB2_BUILTIN_MODULES_EFI)
  99. GRUB2_TUPLES-$(BR2_TARGET_GRUB2_ARM_EFI) += arm-efi
  100. GRUB2_IMAGE_arm64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootaa64.efi
  101. GRUB2_CFG_arm64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
  102. GRUB2_PREFIX_arm64-efi = /EFI/BOOT
  103. GRUB2_TARGET_arm64-efi = aarch64
  104. GRUB2_PLATFORM_arm64-efi = efi
  105. GRUB2_BUILTIN_CONFIG_arm64-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
  106. GRUB2_BUILTIN_MODULES_arm64-efi = $(GRUB2_BUILTIN_MODULES_EFI)
  107. GRUB2_TUPLES-$(BR2_TARGET_GRUB2_ARM64_EFI) += arm64-efi
  108. # Grub2 is kind of special: it considers CC, LD and so on to be the
  109. # tools to build the host programs and uses TARGET_CC, TARGET_CFLAGS,
  110. # TARGET_CPPFLAGS, TARGET_LDFLAGS to build the bootloader itself.
  111. #
  112. # NOTE: TARGET_STRIP is overridden by !BR2_STRIP_strip, so always
  113. # use the cross compile variant to ensure grub2 builds
  114. HOST_GRUB2_CONF_ENV = \
  115. CPP="$(HOSTCC) -E"
  116. GRUB2_CONF_ENV = \
  117. CPP="$(TARGET_CC) -E" \
  118. TARGET_CC="$(TARGET_CC)" \
  119. CFLAGS="$(TARGET_CFLAGS) -Os" \
  120. TARGET_CFLAGS="$(TARGET_CFLAGS) -Os" \
  121. CPPFLAGS="$(TARGET_CPPFLAGS) -Os -fno-stack-protector" \
  122. TARGET_CPPFLAGS="$(TARGET_CPPFLAGS) -Os -fno-stack-protector" \
  123. TARGET_LDFLAGS="$(TARGET_LDFLAGS) -Os" \
  124. TARGET_NM="$(TARGET_NM)" \
  125. TARGET_OBJCOPY="$(TARGET_OBJCOPY)" \
  126. TARGET_STRIP="$(TARGET_CROSS)strip"
  127. HOST_GRUB2_CONF_OPTS = \
  128. --with-platform=none \
  129. --disable-grub-mkfont \
  130. --enable-efiemu=no \
  131. ac_cv_lib_lzma_lzma_code=no \
  132. --enable-device-mapper=no \
  133. --enable-libzfs=no \
  134. --disable-werror
  135. define GRUB2_CONFIGURE_CMDS
  136. $(foreach tuple, $(GRUB2_TUPLES-y), \
  137. @$(call MESSAGE,Configuring $(tuple))
  138. mkdir -p $(@D)/build-$(tuple)
  139. cd $(@D)/build-$(tuple) && \
  140. $(TARGET_CONFIGURE_OPTS) \
  141. $(TARGET_CONFIGURE_ARGS) \
  142. $(GRUB2_CONF_ENV) \
  143. ../configure \
  144. --target=$(GRUB2_TARGET_$(tuple)) \
  145. --with-platform=$(GRUB2_PLATFORM_$(tuple)) \
  146. --host=$(GNU_TARGET_NAME) \
  147. --build=$(GNU_HOST_NAME) \
  148. --prefix=/ \
  149. --exec-prefix=/ \
  150. --disable-grub-mkfont \
  151. --enable-efiemu=no \
  152. ac_cv_lib_lzma_lzma_code=no \
  153. --enable-device-mapper=no \
  154. --enable-libzfs=no \
  155. --disable-werror
  156. )
  157. endef
  158. define GRUB2_BUILD_CMDS
  159. $(foreach tuple, $(GRUB2_TUPLES-y), \
  160. @$(call MESSAGE,Building $(tuple))
  161. $(TARGET_MAKE_ENV) $(MAKE) -C $(@D)/build-$(tuple)
  162. )
  163. endef
  164. define GRUB2_INSTALL_IMAGES_CMDS
  165. $(foreach tuple, $(GRUB2_TUPLES-y), \
  166. @$(call MESSAGE,Installing $(tuple) to images directory)
  167. mkdir -p $(dir $(GRUB2_IMAGE_$(tuple)))
  168. $(HOST_DIR)/usr/bin/grub-mkimage \
  169. -d $(@D)/build-$(tuple)/grub-core/ \
  170. -O $(tuple) \
  171. -o $(GRUB2_IMAGE_$(tuple)) \
  172. -p "$(GRUB2_PREFIX_$(tuple))" \
  173. $(if $(GRUB2_BUILTIN_CONFIG_$(tuple)), \
  174. -c $(GRUB2_BUILTIN_CONFIG_$(tuple))) \
  175. $(GRUB2_BUILTIN_MODULES_$(tuple))
  176. $(INSTALL) -D -m 0644 boot/grub2/grub.cfg $(GRUB2_CFG_$(tuple))
  177. $(if $(findstring $(GRUB2_PLATFORM_$(tuple)), pc), \
  178. cat $(@D)/build-$(tuple)/grub-core/cdboot.img $(GRUB2_IMAGE_$(tuple)) > \
  179. $(BINARIES_DIR)/grub-eltorito.img
  180. ) \
  181. )
  182. endef
  183. ifeq ($(BR2_TARGET_GRUB2_INSTALL_TOOLS),y)
  184. define GRUB2_INSTALL_TARGET_CMDS
  185. $(foreach tuple, $(GRUB2_TUPLES-y), \
  186. @$(call MESSAGE,Installing $(tuple) to target directory)
  187. $(TARGET_MAKE_ENV) $(MAKE) -C $(@D)/build-$(tuple) DESTDIR=$(TARGET_DIR) install
  188. )
  189. endef
  190. endif
  191. $(eval $(generic-package))
  192. $(eval $(host-autotools-package))