Hello community,
here is the log from the commit of package ovmf for openSUSE:Factory checked in
at 2017-08-22 11:05:10
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ovmf (Old)
and /work/SRC/openSUSE:Factory/.ovmf.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ovmf"
Tue Aug 22 11:05:10 2017 rev:15 rq:517308 version:2017+git1502826981.a136bc3ccf
Changes:
--------
--- /work/SRC/openSUSE:Factory/ovmf/ovmf.changes 2017-06-17
10:19:09.768138196 +0200
+++ /work/SRC/openSUSE:Factory/.ovmf.new/ovmf.changes 2017-08-22
11:05:20.536595743 +0200
@@ -1,0 +2,361 @@
+Thu Aug 17 04:10:00 UTC 2017 - g...@suse.com
+
+- Update to 2017+git1502826981.a136bc3ccf
+ + OvmfPkg/Protocol/VirtioDevice: fix comment style
+ + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
+ + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
+ + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
+ + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
+ + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
+ DxeMpLib
+ + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
+ + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
+ memory types"
+ + MdeModulePkg DxeCore: Fix double free pages on LoadImage
+ failure path
+ + NetworkPkg/HttpBootDxe: Update device path node to include DNS
+ information
+ + MdeModulePkg/UefiBootManagerLib: Support DNS device path
+ description
+ + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
+ DevPathToTextDns libraries
+ + MdePkg/DevicePath.h: Add DNS Device Path definition
+ + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
+ HttpConfigData
+ + BaseTools: Support TabSpace between section tag in DEC file
+ + BaseTools: Don't need to add extra quotes when UI string from
+ file
+ + BaseTools/UPT: Support Multiple Installation
+ + BaseTools/Scripts: Add sample makefile for use with
+ RunMakefile.py
+ + BaseTools/Scripts: Add python script to run a makefile
+ + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
+ + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
+ configuration
+ + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
+ specific configuration
+ + ShellPkg/drivers: Fix GCC build failure
+ + BaseTools/edksetup.sh: fix invalid test for current working
+ directory
+ + ShellPkg/driver: Show "-" in non-SFO mode
+ + ShellPkg/drivers: Show Image Name in non-SFO mode
+ + MdeModulePkg: Variable: Fix typo in variable measure
+ + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
+ happens
+ + MdePkg/Nvme: Add NVME shutdown notification related macros
+ + NetworkPkg/HttpBootDxe: Refine the coding style.
+ + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
+ S3_CONTEXT
+ + MdeModulePkg SerialDxe: Process timeout consistently in
+ SerialRead
+ + UefiCpuPkg MtrrLib: Remove deprecated micro.
+ + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
+ + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
+ + BaseTools/Conf: apply nasmb, asm16 build rule order
+ + NetworkPkg/HttpDxe: Support HTTP Patch method
+ + OvmfPkg/PlatformPei: support >=1TB high RAM, and discontiguous
+ high RAM
+ + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
+ FW_CFG_DMA_ACCESS
+ + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
+ BusMasterCommonBuffer[64]
+ + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
+ failures
+ + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
+ Map/Unmap
+ + OvmfPkg/IoMmuDxe: rework setup of "MapInfo->PlainTextAddress"
+ in Map()
+ + OvmfPkg/IoMmuDxe: zero out pages before releasing them
+ + OvmfPkg/IoMmuDxe: clean up used library classes
+ + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
+ + OvmfPkg/IoMmuDxe: don't initialize local variables
+ + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
+ %Lx fmt spec
+ + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
+ MAP_INFO
+ + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
+ MAP_INFO
+ + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
+ + OvmfPkg/IoMmuDxe: Fix header guard macro
+ + MdeModulePkg/DisplayEngine: Fix incorrect display issue
+ + BaseTools/VfrCompile: Remove the MAX_PATH limitation
+ + BaseTools/VfrCompile: Fix segmentation fault issues
+ + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
+ keyword.
+ + UefiCpuPkg: Enable Processor Trace feature.
+ + UefiCpuPkg: Add Processor Trace feature definition.
+ + UefiCpuPkg: Add Pcds used by processor trace feature.
+ + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
+ + MdeModulePkg PeiCore: Install SEC HOB data
+ + MdePkg: Add definition for SecHobData PPI
+ + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
+ AP.
+ + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
+ + UefiCpuPkg: Add definition for LMCE feature.
+ + NetworkPkg: Display HTTP redirection info to the screen if need.
+ + ShellPkg/dblk: Honor the BlockIo alignment requirement.
+ + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
+ Descriptor
+ + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
+ Protocol
+ + UefiCpuPkg SecCore: Fix operands of different size in bitwise
+ operation
+ + MdePkg/Ftp4: Fix wrong function pointer declaration
+ + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
+ the HTTP child
+ + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
+ + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
+ issue
+ + Fix spelling typo in EFI_HTTP_STATUS_CODE
+ + NetworkPkg/HttpDxe: Refine the coding style.
+ + MdePkg/Http.h: Refine the coding style.
+ + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
+ + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
+ getting code
+ + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
+ + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&Size to be
+ 8byte aligned
+ + MdeModulePkg PeiCore: Handle notification PPI from SEC
+ + MdePkg PiPeiCis.h: Add description for notification PPI from
+ SEC
+ + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
+ assertion issue
+ + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
+ + BaseTools/EfiLdrImage: Fix a segmentation fault from
+ vfprintf()
+ + BaseTools/EfiRom: Fix a segmentation fault from
+ vsprintf()/vfprintf()
+ + BaseTools/GenFfs: Fix a segmentation fault from
+ vsprintf()/vfprintf()
+ + BaseTools/GenSec: Fix a segmentation fault in main()
+ + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
+ + BaseTools: Fix the bug to correctly check Pcd type that in FDF
+ file
+ + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
+ in top
+ + ShellPkg: Avoid buffer out-of-bound access
+ + ShellPkg/setvar: Check the duplicate flag
+ + ShellPkg/ShellLib: Remove unused macros
+ + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
+ ACPI Table
+ + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
+ ACPI Table
+ + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
+ UiApp
+ + MdeModulePkg/BMUiLib: Check reset requirement before exiting
+ UiApp
+ + MdeModulePkg/SetupBrowser: Record the reset status in all
+ SendForm
+ + ShellPkg/map: Recognize CDROM change
+ + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
+ + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
+ buffer
+ + MdePkg/ResetNotification: Rename to UnregisterResetNotify
+ + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
+ protocol.
+ + ShellPkg/ls: Display the file time in local time.
+ + BaseTools: Fix the bug that warn() function with only 1
+ argument
+ + BaseTools: add some comment for .PrebuildEnv file's usage
+ + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
+ PcdGetSize with UINTN
+ + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
+ it
+ + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
+ header format
+ + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
+ return status
+ + UefiCpuPkg: Remove deprecated CPU feature.
+ + MdeModulePkg SmmAccess: Update comments to follow PI spec.
+ + MdePkg SmmAccess2: Update comments to follow PI spec.
+ + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
+ + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
+ + MdePkg DxeHstiLib: Fix memory leak issue
+ + MdePkg Hsti.h: Update version info to 1.1a
+ + ArmPlatformPkg: Support different PL011 reg offset
+ + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
+ + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
+ + BaseTools/tools_def AARCH64: mark register x18 as reserved
+ + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
+ + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
+ error.
+ + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
+ + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
+ + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
+ + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
+ + OvmfPkg/QemuFwCfgLib: Add SEV support
+ + OvmfPkg: Add IoMmuDxe driver
+ + OvmfPkg: Add PlatformHasIoMmuLib
+ + OvmfPkg: Add AmdSevDxe driver
+ + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
+ enabled
+ + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
+ + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
+ + OvmfPkg/ResetVector: Set C-bit when building initial page table
+ + MdeModulePkg/XhciDxe: Make comments align with function
+ + MdeModulePkg/PartitionDxe: Add impl of Partition Information
+ Protocol
++++ 164 more lines (skipped)
++++ between /work/SRC/openSUSE:Factory/ovmf/ovmf.changes
++++ and /work/SRC/openSUSE:Factory/.ovmf.new/ovmf.changes
Old:
----
ovmf-2017+git1496630893.7ec69844b8.tar.xz
New:
----
ovmf-2017+git1502826981.a136bc3ccf.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ovmf.spec ++++++
--- /var/tmp/diff_new_pack.OxZfmA/_old 2017-08-22 11:05:22.612303391 +0200
+++ /var/tmp/diff_new_pack.OxZfmA/_new 2017-08-22 11:05:22.624301701 +0200
@@ -24,7 +24,7 @@
Summary: Open Virtual Machine Firmware
License: BSD-2-Clause
Group: System/Emulators/PC
-Version: 2017+git1496630893.7ec69844b8
+Version: 2017+git1502826981.a136bc3ccf
Release: 0
Source0: %{name}-%{version}.tar.xz
Source1:
https://www.openssl.org/source/openssl-%{openssl_version}.tar.gz
@@ -172,7 +172,7 @@
%build
-OVMF_FLAGS="-D SECURE_BOOT_ENABLE -D NETWORK_IP6_ENABLE -D HTTP_BOOT_ENABLE -D
ENABLE_TLS -D FD_SIZE_2MB"
+OVMF_FLAGS="-D SECURE_BOOT_ENABLE -D NETWORK_IP6_ENABLE -D HTTP_BOOT_ENABLE -D
ENABLE_TLS"
%if 0%{?suse_version} > 1320
TOOL_CHAIN_TAG=GCC5
@@ -182,6 +182,7 @@
%endif
%ifarch %ix86
+ OVMF_FLAGS="$OVMF_FLAGS -D FD_SIZE_2MB"
BUILD_OPTIONS="$OVMF_FLAGS -a IA32 -p OvmfPkg/OvmfPkgIa32.dsc -b DEBUG
-t $TOOL_CHAIN_TAG"
make -C BaseTools
%else
@@ -206,16 +207,19 @@
. ./edksetup.sh
+%ifarch %ix86
# Build the UEFI image
build $BUILD_OPTIONS
-%ifarch %ix86
cp Build/OvmfIa32/DEBUG_*/FV/OVMF.fd ovmf-ia32.bin
cp Build/OvmfIa32/DEBUG_*/FV/OVMF_CODE.fd ovmf-ia32-code.bin
cp Build/OvmfIa32/DEBUG_*/FV/OVMF_VARS.fd ovmf-ia32-vars.bin
%else
%ifarch x86_64
+# Build the 2MB UEFI image for the backward compatibility
+build $BUILD_OPTIONS -D FD_SIZE_2MB
+
collect_debug_files()
{
target="$1"
@@ -250,29 +254,42 @@
find $src_list \( -name "*.c" -o -name "*.h" \) -type f -exec cp --parents -a
{} source/ovmf-x86_64 \;
find source/ovmf-x86_64 -name *.c -type f -exec chmod 0644 {} \;
+# Build the 4MB UEFI image
+build $BUILD_OPTIONS -D FD_SIZE_4MB
+cp Build/OvmfX64/DEBUG_*/FV/OVMF.fd ovmf-x86_64-4m.bin
+cp Build/OvmfX64/DEBUG_*/FV/OVMF_CODE.fd ovmf-x86_64-4m-code.bin
+cp Build/OvmfX64/DEBUG_*/FV/OVMF_VARS.fd ovmf-x86_64-4m-vars.bin
+
+collect_debug_files ovmf-x86_64-4m
+
build_with_keys()
{
- suffix="$1"
+ suffix_base="$1"
xxd -i Default_PK > SecurityPkg/Library/AuthVariableLib/Default_PK.h
xxd -i Default_KEK > SecurityPkg/Library/AuthVariableLib/Default_KEK.h
xxd -i Default_DB > SecurityPkg/Library/AuthVariableLib/Default_DB.h
- if [ -e Default_DB_EX ]; then
xxd -i Default_DB_EX >
SecurityPkg/Library/AuthVariableLib/Default_DB_EX.h
- fi
- if [ -e Default_DBX ]; then
xxd -i Default_DBX >
SecurityPkg/Library/AuthVariableLib/Default_DBX.h
+
+ for suffix in $suffix_base $suffix_base-4m; do
+ if [ "$suffix" = "$suffix_base-4m" ]; then
+ build $BUILD_OPTIONS -D FD_SIZE_4MB
+ else
+ build $BUILD_OPTIONS -D FD_SIZE_2MB
fi
- build $BUILD_OPTIONS
cp Build/OvmfX64/DEBUG_*/FV/OVMF.fd ovmf-x86_64-$suffix.bin
cp Build/OvmfX64/DEBUG_*/FV/OVMF_CODE.fd ovmf-x86_64-$suffix-code.bin
cp Build/OvmfX64/DEBUG_*/FV/OVMF_VARS.fd ovmf-x86_64-$suffix-vars.bin
collect_debug_files ovmf-x86_64-$suffix
+ done
}
# OVMF with SUSE keys
openssl x509 -in %{SOURCE3} -outform DER > Default_PK
openssl x509 -in %{SOURCE3} -outform DER > Default_KEK
openssl x509 -in %{SOURCE4} -outform DER > Default_DB
+truncate -s 0 Default_DB_EX
+truncate -s 0 Default_DBX
build_with_keys suse
#unpack the UEFI revocation list
@@ -286,18 +303,21 @@
chmod 755 %{SOURCE12}
%{SOURCE12} dbxupdate.bin Default_DBX
build_with_keys ms
-rm -f Default_DBX
# OVMF with openSUSE keys
openssl x509 -in %{SOURCE7} -outform DER > Default_PK
openssl x509 -in %{SOURCE7} -outform DER > Default_KEK
openssl x509 -in %{SOURCE8} -outform DER > Default_DB
+truncate -s 0 Default_DB_EX
+truncate -s 0 Default_DBX
build_with_keys opensuse
# OVMF with openSUSE keys (4096 bit CA)
openssl x509 -in %{SOURCE9} -outform DER > Default_PK
openssl x509 -in %{SOURCE9} -outform DER > Default_KEK
openssl x509 -in %{SOURCE10} -outform DER > Default_DB
+truncate -s 0 Default_DB_EX
+truncate -s 0 Default_DBX
build_with_keys opensuse-4096
if [ -e %{_sourcedir}/_projectcert.crt ]; then
@@ -308,18 +328,28 @@
openssl x509 -in %{_sourcedir}/_projectcert.crt -outform DER >
Default_PK
openssl x509 -in %{_sourcedir}/_projectcert.crt -outform DER >
Default_KEK
openssl x509 -in %{_sourcedir}/_projectcert.crt -outform DER >
Default_DB
+ truncate -s 0 Default_DB_EX
+ truncate -s 0 Default_DBX
build_with_keys devel
fi
fi
%else
%ifarch aarch64
+
+# Build the UEFI image
+build $BUILD_OPTIONS
+
cp Build/ArmVirtQemu-AARCH64/DEBUG_GCC*/FV/QEMU_EFI.fd qemu-uefi-aarch64.bin
dd of="aavmf-aarch64-code.bin" if="/dev/zero" bs=1M count=64
dd of="aavmf-aarch64-code.bin" if="qemu-uefi-aarch64.bin" conv=notrunc
dd of="aavmf-aarch64-vars.bin" if="/dev/zero" bs=1M count=64
%else
%ifarch %arm
+
+# Build the UEFI image
+build $BUILD_OPTIONS
+
cp Build/ArmVirtQemu-ARM/RELEASE_GCC*/FV/QEMU_EFI.fd qemu-uefi-aarch32.bin
%endif #arm
%endif #aarch64
@@ -329,20 +359,21 @@
%install
rm -rf %{buildroot}
cp %{SOURCE2} README
-tr -d '\r' < FatPkg/License.txt > License-fat-driver.txt
+
+sed -i s/'\r'// License.txt
# Install BaseTools
install -d %{buildroot}/%{_bindir}
install -m 0755 --strip BaseTools/Source/C/bin/EfiRom %{buildroot}/%{_bindir}
%ifarch %ix86
-tr -d '\r' < OvmfPkg/License.txt > License.txt
+tr -d '\r' < OvmfPkg/License.txt > License-ovmf.txt
install -m 0644 -D ovmf-ia32.bin %{buildroot}/%{_datadir}/qemu/ovmf-ia32.bin
install -m 0644 -D ovmf-ia32-code.bin
%{buildroot}/%{_datadir}/qemu/ovmf-ia32-code.bin
install -m 0644 -D ovmf-ia32-vars.bin
%{buildroot}/%{_datadir}/qemu/ovmf-ia32-vars.bin
%else
%ifarch x86_64
-tr -d '\r' < OvmfPkg/License.txt > License.txt
+tr -d '\r' < OvmfPkg/License.txt > License-ovmf.txt
install -m 0644 -D ovmf-x86_64.bin
%{buildroot}/%{_datadir}/qemu/ovmf-x86_64.bin
install -m 0644 ovmf-x86_64-*.bin %{buildroot}/%{_datadir}/qemu/
%fdupes %{buildroot}/%{_datadir}/qemu/
@@ -357,13 +388,11 @@
%fdupes -s %{buildroot}/usr/src/debug/ovmf-x86_64
%else
%ifarch aarch64
-tr -d '\r' < ArmPlatformPkg/License.txt > License.txt
install -m 0644 -D qemu-uefi-aarch64.bin
%{buildroot}/%{_datadir}/qemu/qemu-uefi-aarch64.bin
install -m 0644 -D aavmf-aarch64-code.bin
%{buildroot}/%{_datadir}/qemu/aavmf-aarch64-code.bin
install -m 0644 -D aavmf-aarch64-vars.bin
%{buildroot}/%{_datadir}/qemu/aavmf-aarch64-vars.bin
%else
%ifarch %arm
-tr -d '\r' < ArmPlatformPkg/License.txt > License.txt
install -m 0644 -D qemu-uefi-aarch32.bin
%{buildroot}/%{_datadir}/qemu/qemu-uefi-aarch32.bin
%endif #arm
%endif #aarch64
@@ -382,7 +411,7 @@
%ifarch %ix86
%files -n qemu-ovmf-ia32
%defattr(-,root,root)
-%doc License.txt License-fat-driver.txt
+%doc License.txt License-ovmf.txt
%dir %{_datadir}/qemu/
%{_datadir}/qemu/ovmf-ia32*.bin
%endif
@@ -390,7 +419,7 @@
%ifarch x86_64
%files -n qemu-ovmf-x86_64
%defattr(-,root,root)
-%doc License.txt License-fat-driver.txt
+%doc License.txt License-ovmf.txt
%dir %{_datadir}/qemu/
%{_datadir}/qemu/ovmf-x86_64*.bin
@@ -406,7 +435,7 @@
%ifarch aarch64
%files -n qemu-uefi-aarch64
%defattr(-,root,root)
-%doc License.txt License-fat-driver.txt
+%doc License.txt
%dir %{_datadir}/qemu/
%{_datadir}/qemu/qemu-uefi-aarch64.bin
%{_datadir}/qemu/aavmf-aarch64-code.bin
@@ -416,7 +445,7 @@
%ifarch %arm
%files -n qemu-uefi-aarch32
%defattr(-,root,root)
-%doc License.txt License-fat-driver.txt
+%doc License.txt
%dir %{_datadir}/qemu/
%{_datadir}/qemu/qemu-uefi-aarch32.bin
%endif
++++++ README ++++++
--- /var/tmp/diff_new_pack.OxZfmA/_old 2017-08-22 11:05:22.812275226 +0200
+++ /var/tmp/diff_new_pack.OxZfmA/_new 2017-08-22 11:05:22.812275226 +0200
@@ -57,7 +57,8 @@
ovmf-x86_64-ms.bin
- PK: Microsoft Corporation KEK CA 2011
- KEK: Microsoft Corporation KEK CA 2011
-- db: Microsoft Corporation UEFI CA 2011
+- db: Microsoft Corporation UEFI CA 2011, Microsoft Windows Production PCA
2011
+- dbx: dbx hashes from uefi.org
ovmf-x86_64-opensuse.bin
- PK: openSUSE Secure Boot CA
@@ -72,6 +73,15 @@
Note that the preloaded key images are all 64 bit because openSUSE/SLE and
Windows only support Secure Boot in 64 bit mode.
+x86_64 4MB images
+-----------------
+
+The OVMF upstream decides to switch the default flash size to 4MB since
+the edk2 commit 1c47fcd465a496. It's mainly for Windows HCK which requests
+a larger variable store. To maintain the backward compatibility, the 4MB
+images are built separately. Only those images with 4m, e.g.
ovmf-x86_64-4m.bin,
+are the 4MB images. Otherwise, it's built with FD_SIZE_2MB, i.e. a 2MB image.
+
Creating Platform and Key Exchange keys
=======================================
++++++ ovmf-2017+git1496630893.7ec69844b8.tar.xz ->
ovmf-2017+git1502826981.a136bc3ccf.tar.xz ++++++
/work/SRC/openSUSE:Factory/ovmf/ovmf-2017+git1496630893.7ec69844b8.tar.xz
/work/SRC/openSUSE:Factory/.ovmf.new/ovmf-2017+git1502826981.a136bc3ccf.tar.xz
differ: char 27, line 1
++++++ ovmf-rpmlintrc ++++++
--- /var/tmp/diff_new_pack.OxZfmA/_old 2017-08-22 11:05:23.380195237 +0200
+++ /var/tmp/diff_new_pack.OxZfmA/_new 2017-08-22 11:05:23.384194674 +0200
@@ -1,3 +1,4 @@
addFilter("unstripped-binary-or-object /usr/lib/debug/*")
addFilter("statically-linked-binary /usr/lib/debug/*")
addFilter("executable-stack /usr/lib/debug/*")
+addFilter("position-independent-executable-suggested /usr/lib/debug/*")
