NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9696463396
kumquat-buildroot/package/xen/xen.mk

64 lines
1.7 KiB
Makefile
Raw Normal View History

xen: new package Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-13 00:13:01 +02:00
################################################################################
#
# Xen
#
################################################################################
package/xen: security bump to version 4.12.2 The 4.12.2 release brings a large number of fixes: https://xenproject.org/downloads/xen-project-archives/xen-project-4-12-series/xen-project-4-12-2/ Including a number of security fixes: XSA-296: VCPUOP_initialise DoS (CVE-2019-18420) XSA-298: missing descriptor table limit checking in x86 PV emulation (CVE-2019-18425) XSA-299: Issues with restartable PV type change operations (CVE-2019-18421) XSA-301: add-to-physmap can be abused to DoS Arm hosts (CVE-2019-18423) XSA-302: passed through PCI devices may corrupt host memory after deassignment (CVE-2019-18424) XSA-303: ARM: Interrupts are unconditionally unmasked in exception handlers (CVE-2019-18422) XSA-304: x86: Machine Check Error on Page Size Change DoS (CVE-2018-12207) XSA-305: TSX Asynchronous Abort speculative side channel (CVE-2019-11135) XSA-306: Device quarantine for alternate pci assignment methods (CVE-2019-19579) XSA-307: find_next_bit() issues (CVE-2019-19581 CVE-2019-19582) XSA-308: VMX: VMentry failure with debug exceptions and blocked states (CVE-2019-19583) XSA-309: Linear pagetable use / entry miscounts (CVE-2019-19578) XSA-310: Further issues with restartable PV type change operations (CVE-2019-19580) XSA-311: Bugs in dynamic height handling for AMD IOMMU pagetables (CVE-2019-19577) Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Reviewed-by: Alistair Francis <alistair.francis@wdc.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-19 18:03:57 +01:00
XEN_VERSION = 4.12.2
package/xen: bump to version 4.9.0 Upgrade the Xen package to Xen 4.9.0. This also means we can remove almost all of the patches we were previously carrying. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-06-30 01:32:47 +02:00
XEN_SITE = https://downloads.xenproject.org/release/xen/$(XEN_VERSION)
package/xen: add upstream security fix for XSA-312 Fixes the following security issue: XSA-312: arm: a CPU may speculate past the ERET instruction For further details, see the advisory: https://xenbits.xenproject.org/xsa/advisory-312.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Reviewed-by: Alistair Francis <alistair.francis@wdc.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-19 18:03:58 +01:00
XEN_PATCH = \
https://xenbits.xenproject.org/xsa/xsa312.patch
boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+ We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:32 +02:00
XEN_LICENSE = GPL-2.0
xen: new package Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-13 00:13:01 +02:00
XEN_LICENSE_FILES = COPYING
package/xen: add dependency on host-acpica This commit adds a dependency on the host ACPICA package as Xen tools require iasl to build. Fixes: http://autobuild.buildroot.net/results/afa199864d6b546fe759bb582a9c10702ea7fa78/ Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Acked-by: Erico Nunes <nunes.erico@gmail.com> [Thomas: tweak commit log, add autobuilder reference.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-05-24 22:30:30 +02:00
XEN_DEPENDENCIES = host-acpica host-python
xen: new package Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-13 00:13:01 +02:00
# Calculate XEN_ARCH
ifeq ($(ARCH),aarch64)
XEN_ARCH = arm64
else ifeq ($(ARCH),arm)
XEN_ARCH = arm32
endif
package/xen: force location of init scripts The Xen configure scripts looks at the build host to decide where to install the Sys-V startup scripts, and that location differs between various distros. Force the location. Fixes: http://autobuild.buildroot.org/results/869/869829ab086e824d164c5c5ec7f087ed83993be6/ http://autobuild.buildroot.org/results/336/3360e5a9e3d007b4ed77345b5fe93b2dacb6ad49/ http://autobuild.buildroot.org/results/29e/29e308ce3cc9c83497ba1c1f98fcda3f48fd03c4/ Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Cc: Alistair Francis <alistair@alistair23.me> Reviewed-by: Alistair Francis <alistair@alistair23.me> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-05-13 18:59:23 +02:00
XEN_CONF_OPTS = \
--disable-ocamltools \
--with-initddir=/etc/init.d
xen: Ensure host Python2 is used To avoid Xen build issues ensure that host Python 2 is used. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Tested-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-08-13 00:30:05 +02:00
Globally replace $(HOST_DIR)/usr/bin with $(HOST_DIR)/bin Since things are no longer installed in $(HOST_DIR)/usr, the callers should also not refer to it. This is a mechanical change with git grep -l '$(HOST_DIR)/usr/bin' | xargs sed -i 's%$(HOST_DIR)/usr/bin%$(HOST_DIR)/bin%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-07-05 13:14:19 +02:00
XEN_CONF_ENV = PYTHON=$(HOST_DIR)/bin/python2
xen: new package Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-13 00:13:01 +02:00
XEN_MAKE_ENV = \
XEN_TARGET_ARCH=$(XEN_ARCH) \
CROSS_COMPILE=$(TARGET_CROSS) \
package/xen: Update to version 4.8.1 Update Xen to version 4.8.1 and update the patches to allow Xen hypervisor and Xen tools to build. The patches applied were re-aranged a little bit. Patches 2, 3 and 4 have been accepted by upstream Xen and won't be required in future releases. Patch 1 (previously patch 2) is still required and was moved to patch 1 to better reflect it's status. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-04-12 16:54:13 +02:00
HOST_EXTRACFLAGS="-Wno-error" \
package/xen: explicitly disable checkpolicy logic Fixes: http://autobuild.buildroot.net/results/14af2dc3219847a92c6ec2db14ba387159b61fde The Xen build system builds and embeds a default XSM FLASK (Flux Advanced Security Kernel) security policy if it detects SELinux checkpolicy on the build machine. If enabled, a gen-policy.py python script is used to convert the binary FLASK policy to a C array initialization list to embed it in the Xen binary. Depending on the python version and locale available on the host, this fails with byte values outside the 0..255 range: policy.c:7:10: error: unsigned conversion from 'int' to 'unsigned char' changes value from '56575' to '255' [-Werror=overflow] 0xdc8c, 0xdcff, 0x7c, 0xdcf9, 0x08, 0x00, 0x00, 0x00, 0x58, 0x65, 0x6e, 0x46, 0x6c, To fix this and ensure a consistent build, pass XEN_HAS_CHECKPOLICY=n to disable the checkpolicy detection. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Reviewed-by: Alistair Francis <alistair.francis@wdc.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-19 18:03:56 +01:00
XEN_HAS_CHECKPOLICY=n \
xen: new package Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-13 00:13:01 +02:00
$(TARGET_CONFIGURE_OPTS)
ifeq ($(BR2_PACKAGE_XEN_HYPERVISOR),y)
XEN_MAKE_OPTS += dist-xen
XEN_INSTALL_IMAGES = YES
define XEN_INSTALL_IMAGES_CMDS
cp $(@D)/xen/xen $(BINARIES_DIR)
endef
else
XEN_CONF_OPTS += --disable-xen
endif
ifeq ($(BR2_PACKAGE_XEN_TOOLS),y)
XEN_DEPENDENCIES += dtc libaio libglib2 ncurses openssl pixman util-linux yajl
ifeq ($(BR2_PACKAGE_ARGP_STANDALONE),y)
XEN_DEPENDENCIES += argp-standalone
endif
XEN_INSTALL_TARGET_OPTS += DESTDIR=$(TARGET_DIR) install-tools
XEN_MAKE_OPTS += dist-tools
package/xen: disable tools/qemu-xen/ opengl Resolves: http://autobuild.buildroot.net/results/a7f2bf387458c2f0db6a4b555c51004f321f9320 Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-09-04 21:13:47 +02:00
XEN_CONF_OPTS += --with-extra-qemuu-configure-args="--disable-sdl --disable-opengl"
xen: new package Add support to compile Xen 4.6 and Xen tools for arm32 and arm64 targets. Signed-off-by: Alistair Francis <alistair.francis@xilinx.com> [Thomas: - Remove all "select" from the main Xen option, since the hypervisor can build fine without any additional library. The dependencies have been moved to the "tools" sub-option. - Make sure that at least one of the sub-option is enabled by selecting the hypervisor sub-option if the tools sub-option is not enabled. - Add a Config.in comment about the dependencies of the Xen tools. - Add missing dependency on argp-standalone in the .mk file. - Simplify the handling of XEN_INSTALL_TARGET_OPTS.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-13 00:13:01 +02:00
define XEN_INSTALL_INIT_SYSV
mv $(TARGET_DIR)/etc/init.d/xencommons $(TARGET_DIR)/etc/init.d/S50xencommons
mv $(TARGET_DIR)/etc/init.d/xen-watchdog $(TARGET_DIR)/etc/init.d/S50xen-watchdog
mv $(TARGET_DIR)/etc/init.d/xendomains $(TARGET_DIR)/etc/init.d/S60xendomains
endef
else
XEN_INSTALL_TARGET = NO
XEN_CONF_OPTS += --disable-tools
endif
$(eval $(autotools-package))
Reference in New Issue Copy Permalink