#

# spec file for package kernel-lpae

#

# Copyright (c) 2023 SUSE LLC

#

# All modifications and additions to the file contributed by third parties

# remain the property of their copyright owners, unless otherwise agreed

# upon. The license for this file, and modifications and additions to the

# file, is the same license as for the pristine package itself (unless the

# license for the pristine package is not an Open Source License, in which

# case the license is the MIT License). An "Open Source License" is a

# license that conforms to the Open Source Definition (Version 1.9)

# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/

#

# needssslcertforbuild

%define srcversion 6.1

%define patchversion 6.1.8

%define variant %{nil}

%define vanilla_only 0

%define compress_modules zstd

%define compress_vmlinux xz

%define livepatch livepatch%{nil}

%define livepatch_rt %{nil}

%include %_sourcedir/kernel-spec-macros

%define build_flavor	lpae

%define build_default	("%build_flavor" == "default")

%define build_vanilla	("%build_flavor" == "vanilla")

%if ! %build_vanilla

%define src_install_dir /usr/src/linux-%kernelrelease%variant

%else

%define src_install_dir /usr/src/linux-%kernelrelease-vanilla

%endif

%define obj_install_dir /usr/src/linux-%kernelrelease%variant-obj

%define rpm_install_dir %buildroot%obj_install_dir

%define kernel_build_dir %my_builddir/linux-%srcversion/linux-obj

%if 0%{?_project:1} && ( %(echo %_project | grep -Ex -f %_sourcedir/release-projects | grep -v ^PTF | grep -vc openSUSE) || %(echo %_project | grep -Ec "^(Devel:)?Kernel:") )

	%define klp_symbols 1

%endif

%(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})

%global cpu_arch %(%_sourcedir/arch-symbols %_target_cpu)

%define cpu_arch_flavor %cpu_arch/%build_flavor

%global certs %( for f in %_sourcedir/*.crt; do                                                         \

    if ! test -e "$f"; then                                                                             \

        continue                                                                                        \

    fi                                                                                                  \

    h=$(openssl x509 -inform PEM -fingerprint -noout -in "$f")                                          \

    if [ -z "$h" ] ; then                                                                               \

        echo Cannot parse "$f" >&2                                                                      \

        confinue                                                                                        \

    fi                                                                                                  \

    cert=$(echo "$h" | sed -rn 's/^SHA1 Fingerprint=//; T; s/://g; s/(.{8}).*/\\1/p')                   \

    echo Found signing certificate "$f" "($cert)" >&2                                                   \

    cat "$f" >>%_sourcedir/.kernel_signing_key.pem                                                      \

    mkdir -p %_sourcedir/.kernel_signing_certs                                                          \

    openssl x509 -inform PEM -in "$f" -outform DER -out %_sourcedir/.kernel_signing_certs/"$cert".crt   \

    echo -n "$cert" ""                                                                                  \

done )

%ifarch %ix86 x86_64

%define image vmlinuz

%endif

%ifarch ppc ppc64 ppc64le

%define image vmlinux

%endif

%ifarch s390 s390x

%define image image

%endif

%ifarch %arm

%define image zImage

%endif

%ifarch aarch64 riscv64

%define image Image

%endif

# Define some CONFIG variables as rpm macros as well. (rpm cannot handle

# defining them all at once.)

%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_MODULE_SIG_HASH CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES CONFIG_DEBUG_INFO_BTF_MODULES

%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}

%define split_extra ("%CONFIG_MODULES" == "y" && "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y")

# Split Leap-only modules to kernel-*-optional subpackage?

%define split_optional	0

%if "%CONFIG_MODULES" != "y"

	%define klp_symbols 0

%endif

%ifarch %ix86 x86_64

%define install_vdso 1

%if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150500

%define separate_vdso 1

%endif

%else

%define install_vdso 0

%endif

%define modules_dir %kernel_module_directory/%kernelrelease-%build_flavor

Name:           kernel-lpae

Summary:        Kernel for LPAE enabled systems

License:        GPL-2.0-only

Group:          System/Kernel

Version:        6.1.8

%if 0%{?is_kotd}

Release:        <RELEASE>.gbaebfe0

%else

Release:        0

%endif

URL:            https://www.kernel.org/

%if 0%{?suse_version} > 1500 || 0%{?sle_version} > 150300

BuildRequires:  bash-sh

%endif

BuildRequires:  bc

BuildRequires:  bison

BuildRequires:  coreutils

BuildRequires:  fdupes

BuildRequires:  flex

# Cannot test %%CONFIG_GCC_PLUGINS here because the buildservice parser

# does not expand %%(...)

%if "%build_flavor" == "syzkaller"

# Needed by scripts/gcc-plugin.sh

BuildRequires:  gcc-c++

BuildRequires:  gcc-devel

%endif

%if 0%{?suse_version} > 1310

BuildRequires:  hmaccalc

%endif

BuildRequires:  libopenssl-devel

BuildRequires:  modutils

# Used to sign the kernel in the buildservice

BuildRequires:  openssl

BuildRequires:  pesign-obs-integration

%if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150300

# pahole for CONFIG_DEBUG_INFO_BTF

BuildRequires:  dwarves >= 1.22

%endif

# for objtool

BuildRequires:  libelf-devel

# required for 50-check-kernel-build-id rpm check

BuildRequires:  elfutils

%if "%{compress_modules}" == "zstd"

BuildRequires:  zstd

# Make sure kmod supports zstd compressed modules

Requires(post): kmod-zstd

%endif

Provides:       %name = %version-%source_rel

# bnc#901925

Provides:       %name-%version-%source_rel

Provides:       %{name}_%_target_cpu = %version-%source_rel

Provides:       kernel-base = %version-%source_rel

Provides:       multiversion(kernel)

# In SLE11, kernel-$flavor complemented kernel-$flavor-base. With SLE12,

# kernel-$flavor itself contains all the needed files and kernel-$flavor-base

# is a subset that can replace kernel-$flavor in some scenarios. We need to

# obsolete the -base subpackage from SLE11, so that the base files are not

# owned by multiple packages now. The dependency is not correct wrt openSUSE

# 11.2 - 11.4, but we primarily care about the supported upgrade path.

Obsoletes:      %name-base < 3.1

%if ("%build_flavor" != "kvmsmall") && ("%build_flavor" != "azure")

Recommends: kernel-firmware

%endif

# The following is copied to the -base subpackage as well

# BEGIN COMMON DEPS

Requires(pre):  suse-kernel-rpm-scriptlets

Requires(postun): suse-kernel-rpm-scriptlets

Requires(pre):  coreutils awk

# For /usr/lib/module-init-tools/weak-modules2

Requires(post): suse-module-tools

# For depmod (modutils is a dependency provided by both module-init-tools and

# kmod-compat)

Requires(post): modutils

# This Requires is wrong, because the post/postun scripts have a

# test -x update-bootloader, having perl-Bootloader is not a hard requirement.

# But, there is no way to tell rpm or yast to schedule the installation

# of perl-Bootloader before kernel-binary.rpm if both are in the list of

# packages to install/update. Likewise, this is true for mkinitrd.

# Need a perl-Bootloader with /usr/lib/bootloader/bootloader_entry

Requires(post): perl-Bootloader >= 0.4.15

%if %build_vanilla

Requires(post): mkinitrd

%else

# Require a mkinitrd that can handle usbhid/hid-generic built-in (bnc#773559)

Requires(post): mkinitrd >= 2.7.1

%endif

# Install the package providing /etc/SuSE-release early enough, so that

# the grub entry has correct title (bnc#757565)

Requires(post): distribution-release

# Do not install p-b and mkinitrd for the install check, the %post script is

# able to handle this

#!BuildIgnore: perl-Bootloader mkinitrd distribution-release

# Remove some packages that are installed automatically by the build system,

# but are not needed to build the kernel

#!BuildIgnore: autoconf automake gettext-runtime libtool cvs gettext-tools udev insserv

%ifarch s390 s390x

%if %build_vanilla && 0%{?suse_version} < 1130

BuildRequires:  dwarfextract

%endif

%endif

%ifarch %arm

BuildRequires:  u-boot-tools

%endif

%if 0%{?usrmerged}

# make sure we have a post-usrmerge system

Conflicts:      filesystem < 16

%endif

Obsoletes:      microcode_ctl < 1.18

# Force bzip2 instead of lzma compression to

# 1) allow install on older dist versions, and

# 2) decrease build times (bsc#962356 boo#1175882)

%define _binary_payload w9.bzdio

# Do not recompute the build-id of vmlinux in find-debuginfo.sh (bsc#964063)

%undefine _unique_build_ids

%define _no_recompute_build_ids 1

# prevent usr/lib/debug/boot/vmlinux-4.12.14-11.10-default-4.12.14-11.10.ppc64le.debug

%undefine _unique_debug_names

# dead network if installed on SLES10, otherwise it will work (mostly)

Conflicts:      sysfsutils < 2.0

Conflicts:      apparmor-profiles <= 2.1

Conflicts:      apparmor-parser < 2.3

# root-lvm only works with newer udevs

Conflicts:      udev < 118

Conflicts:      lvm2 < 2.02.33

# Interface to hv_kvp_daemon changed

Conflicts:      hyper-v < 4

%ifarch %ix86

Conflicts:      libc.so.6()(64bit)

%endif

Provides:       kernel = %version-%source_rel

Provides:       kernel-%build_flavor-base-srchash-baebfe0ef3d47efabc570a82bd54611798a920a9

Provides:       kernel-srchash-baebfe0ef3d47efabc570a82bd54611798a920a9

# END COMMON DEPS

Provides:       %name-srchash-baebfe0ef3d47efabc570a82bd54611798a920a9

%obsolete_rebuilds %name

Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz

Source3:        kernel-source.rpmlintrc

Source14:       series.conf

Source16:       guards

Source17:       apply-patches

Source21:       config.conf

Source23:       supported.conf

Source33:       check-for-config-changes

Source35:       group-source-files.pl

Source36:       README.PATCH-POLICY.SUSE

Source37:       README.SUSE

Source38:       README.KSYMS

Source39:       config-options.changes.txt

Source40:       source-timestamp

Source46:       split-modules

Source47:       modversions

Source48:       macros.kernel-source

Source49:       kernel-module-subpackage

Source50:       kabi.pl

Source51:       mkspec

Source52:       kernel-source%variant.changes

Source53:       kernel-source.spec.in

Source54:       kernel-binary.spec.in

Source55:       kernel-syms.spec.in

Source56:       kernel-docs.spec.in

Source57:       kernel-cert-subpackage

Source58:       constraints.in

Source60:       config.sh

Source61:       compute-PATCHVERSION.sh

Source62:       old-flavors

Source63:       arch-symbols

Source64:       package-descriptions

Source65:       kernel-spec-macros

Source67:       log.sh

Source68:       host-memcpy-hack.h

Source69:       try-disable-staging-driver

Source70:       kernel-obs-build.spec.in

Source71:       kernel-obs-qa.spec.in

Source72:       compress-vmlinux.sh

Source73:       dtb.spec.in.in

Source74:       mkspec-dtb

Source75:       release-projects

Source76:       check-module-license

Source77:       klp-symbols

Source78:       modules.fips

Source79:       splitflist

Source80:       mergedep

Source81:       moddep

Source82:       modflist

Source83:       kernel-subpackage-build

Source84:       kernel-subpackage-spec

Source85:       kernel-default-base.spec.txt

Source100:      config.tar.bz2

Source101:      config.addon.tar.bz2

Source102:      patches.arch.tar.bz2

Source103:      patches.drivers.tar.bz2

Source104:      patches.fixes.tar.bz2

Source105:      patches.rpmify.tar.bz2

Source106:      patches.suse.tar.bz2

Source108:      patches.addon.tar.bz2

Source109:      patches.kernel.org.tar.bz2

Source110:      patches.apparmor.tar.bz2

Source111:      patches.rt.tar.bz2

Source113:      patches.kabi.tar.bz2

Source120:      kabi.tar.bz2

Source121:      sysctl.tar.bz2

# These files are found in the kernel-source package:

NoSource:       0

NoSource:       3

NoSource:       14

NoSource:       16

NoSource:       17

NoSource:       21

NoSource:       23

NoSource:       33

NoSource:       35

NoSource:       36

NoSource:       37

NoSource:       38

NoSource:       39

NoSource:       40

NoSource:       46

NoSource:       47

NoSource:       48

NoSource:       49

NoSource:       50

NoSource:       51

NoSource:       52

NoSource:       53

NoSource:       54

NoSource:       55

NoSource:       56

NoSource:       57

NoSource:       58

NoSource:       60

NoSource:       61

NoSource:       62

NoSource:       63

NoSource:       64

NoSource:       65

NoSource:       67

NoSource:       68

NoSource:       69

NoSource:       70

NoSource:       71

NoSource:       72

NoSource:       73

NoSource:       74

NoSource:       75

NoSource:       76

NoSource:       77

NoSource:       78

NoSource:       79

NoSource:       80

NoSource:       81

NoSource:       82

NoSource:       83

NoSource:       84

NoSource:       85

NoSource:       100

NoSource:       101

NoSource:       102

NoSource:       103

NoSource:       104

NoSource:       105

NoSource:       106

NoSource:       108

NoSource:       109

NoSource:       110

NoSource:       111

NoSource:       113

NoSource:       120

NoSource:       121

BuildRoot:      %{_tmppath}/%{name}-%{version}-build

ExclusiveArch:  armv7hl

%define kmp_target_cpu %_target_cpu

%ifarch %ix86

# Only i386/default supports i586, mark other flavors' packages as i686

%if ! %build_default

BuildArch:      i686

# KMPs are always built as i586, because rpm does not allow to build

# subpackages for different architectures. Therefore, we change the

# /usr/src/linux-obj/<arch> symlink to i586.

%define kmp_target_cpu i586

%endif

%endif

# Will modules not listed in supported.conf abort the kernel build (0/1)?

%define supported_modules_check 0

%description

The kernel for all 32-bit ARM platforms that support LPAE. This includes all

Cortex A15 based SoCs, like the Exynos5, OMAP5 or Calxeda ECX-2000.

%source_timestamp

%prep

if ! [ -e %{S:0} ]; then

    echo "The %name-%version.nosrc.rpm package does not contain the" \

	 "complete sources. Please install kernel-source-%version.src.rpm."

    exit 1

fi

SYMBOLS=

if test -e %_sourcedir/extra-symbols; then

	SYMBOLS=$(cat %_sourcedir/extra-symbols)

	echo "extra symbol(s):" $SYMBOLS

fi

# Unpack all sources and patches

%setup -q -c -T -a 0 -a 100 -a 101 -a 102 -a 103 -a 104 -a 105 -a 106 -a 108 -a 109 -a 110 -a 111 -a 113 -a 120 -a 121

mkdir -p %kernel_build_dir

# Generate a list of modules with their support status marking

# The first marker is supposed to be either "+external", "-" or "-!optional",

# where "+external" is for an externally supported module, "-" is for an

# unsuppored module, "-!optional" is for Leap-only unsupported module.

# There can be an optional arch-specific second marker with "+arch" (e.g.

# +arm64), which enforces the module to be supported on the specific arch.

%_sourcedir/guards --list --with-guards <%_sourcedir/supported.conf | \

awk '{

    t = "";

    for (i = 1; i < NF; i++) {

	if ($i == "+external") {

		t = " external";

	} else if ($i == "+'%cpu_arch'") {

		t = "";

	} else if ($i ~ "^-") {

		t = " no";

	}

    }

    print $(NF) t;

}' >%kernel_build_dir/Module.supported

subpackages=(

	base

%if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y"

	cluster-md-kmp dlm-kmp gfs2-kmp kselftests-kmp ocfs2-kmp reiserfs-kmp

%endif

)

for package in "${subpackages[@]}"; do

	%_sourcedir/guards --default=0 "$package" \

		<%_sourcedir/supported.conf | sed 's,.*/,,; s,\.ko$,,' | \

		sort -u >%kernel_build_dir/Module."$package"

done

%if %split_extra && %split_optional

# Module.optional is in a special form, containing guard markers for

# both extra and optional modules, which is processed by split-modules

%_sourcedir/guards --list --with-guards <%_sourcedir/supported.conf | \

awk '{

    t = "";

    for (i = 1; i < NF; i++) {

	if ($i == "+'%cpu_arch'") {

		t = "";

	} else if ($i ~ "^-") {

		t = $i

	}

    }

    if (t != "") {print t,$(NF);}

}' >%kernel_build_dir/Module.optional

%endif

cd linux-%srcversion

%_sourcedir/apply-patches \

%if %{build_vanilla}

	--vanilla \

%endif

	%_sourcedir/series.conf .. $SYMBOLS

cd %kernel_build_dir

# Override the timestamp 'uname -v' reports with the source timestamp and

# the commit hash.

date=$(head -n 1 %_sourcedir/source-timestamp)

commit=$(sed -n 's/GIT Revision: //p' %_sourcedir/source-timestamp)

cat > .kernel-binary.spec.buildenv <

export KBUILD_BUILD_TIMESTAMP="$(LANG=C date -d "$date") (${commit:0:7})"

export KBUILD_VERBOSE=0

export KBUILD_SYMTYPES=1

export KBUILD_OVERRIDE=1

export KBUILD_BUILD_USER=geeko

export KBUILD_BUILD_HOST=buildhost

export HOST_EXTRACFLAGS="-include %_sourcedir/host-memcpy-hack.h"

EOF

source .kernel-binary.spec.buildenv

if [ -f %_sourcedir/localversion ] ; then

    cat %_sourcedir/localversion > localversion

fi

config_base="default"

%ifarch %ix86

config_base="pae"

%endif

if ! [ -f %my_builddir/config/%cpu_arch/$config_base ] ; then

    config_base=%variant

    config_base=${config_base#-}

fi

if ! grep -q CONFIG_MMU= "%my_builddir/config/%cpu_arch_flavor"; then

cp "%my_builddir/config/%cpu_arch/$config_base" .config

../scripts/kconfig/merge_config.sh -m .config \

                                   %my_builddir/config/%cpu_arch_flavor

else

cp %my_builddir/config/%cpu_arch_flavor .config

fi

if test -e %my_builddir/config.addon/%cpu_arch_flavor; then

	# FIXME: config.addon doesn't affect the %CONFIG_ macros defined at

	# the top of the specfile

	../scripts/kconfig/merge_config.sh -m .config %my_builddir/config.addon/%cpu_arch_flavor

fi

CONFIG_SUSE_KERNEL_RELEASED="--disable CONFIG_SUSE_KERNEL_RELEASED"

%if 0%{?_project:1}

if echo %_project | grep -Eqx -f %_sourcedir/release-projects; then

	CONFIG_SUSE_KERNEL_RELEASED="--enable CONFIG_SUSE_KERNEL_RELEASED"

fi

%endif

DEBUG_INFO_TYPE="$(grep "CONFIG_DEBUG_INFO_DWARF.*=y" .config)"

DEBUG_INFO_TYPE="${DEBUG_INFO_TYPE%%=y}"

DEBUG_INFO_TYPE="${DEBUG_INFO_TYPE##CONFIG_DEBUG_INFO_}"

echo "Kernel debuginfo type: ${DEBUG_INFO_TYPE}"

../scripts/config \

	--set-str CONFIG_LOCALVERSION -%source_rel-%build_flavor \

	--enable  CONFIG_SUSE_KERNEL \

	$CONFIG_SUSE_KERNEL_RELEASED \

%if 0%{?__debug_package:1}

	--enable  CONFIG_DEBUG_INFO

%else

	--disable CONFIG_DEBUG_INFO \

	--disable CONFIG_DEBUG_INFO_"${DEBUG_INFO_TYPE}" \

	--enable  CONFIG_DEBUG_INFO_NONE

%endif

if [ %CONFIG_MODULE_SIG = "y" ]; then

	if [ -n "%certs" ] ; then

		ln -s %_sourcedir/.kernel_signing_key.pem .

	else

		if ! [ -f .kernel.genkey ] ; then

			cat > .kernel.genkey <

[ req ]

default_bits = 4096

distinguished_name = req_distinguished_name

prompt = no

string_mask = utf8only

x509_extensions = myexts

[ req_distinguished_name ]

CN = Build time autogenerated kernel key

[ myexts ]

basicConstraints=critical,CA:FALSE

keyUsage=digitalSignature

subjectKeyIdentifier=hash

authorityKeyIdentifier=keyid

extendedKeyUsage=codeSigning

EOF

		fi

		openssl req -new -nodes -utf8 -%CONFIG_MODULE_SIG_HASH -days 36500 \

			-batch -x509 -config .kernel.genkey \

			-outform PEM -out .kernel_signing_key.pem \

			-keyout .kernel_signing_key.pem

	fi

	../scripts/config --set-str CONFIG_MODULE_SIG_KEY ".kernel_signing_key.pem"

fi

case %cpu_arch in

    x86_64 | i386)

        MAKE_ARGS="$MAKE_ARGS ARCH=x86"

        ;;

    ppc*)

        MAKE_ARGS="$MAKE_ARGS ARCH=powerpc"

        ;;

    s390x)

        MAKE_ARGS="$MAKE_ARGS ARCH=s390"

        ;;

    arm64)

        MAKE_ARGS="$MAKE_ARGS ARCH=arm64"

        ;;

    armv*)

        MAKE_ARGS="$MAKE_ARGS ARCH=arm"

        ;;

    riscv*)

        MAKE_ARGS="$MAKE_ARGS ARCH=riscv"

        ;;

    *)

        MAKE_ARGS="$MAKE_ARGS ARCH=%cpu_arch"

        ;;

esac

makeoutputsync=

if make --output-sync --help >/dev/null 2>&1 ; then

        makeoutputsync=--output-sync

else

        echo make does not support --output-sync flag. Build messages may be mangled. 1>&2

fi

MAKE_ARGS="$MAKE_ARGS $makeoutputsync %{?_smp_mflags}"

echo export MAKE_ARGS=\""$MAKE_ARGS"\" >> .kernel-binary.spec.buildenv

KERN_DIRS="-C .. O=$PWD"

if test -e %_sourcedir/TOLERATE-UNKNOWN-NEW-CONFIG-OPTIONS; then

    yes '' | make oldconfig $MAKE_ARGS $KERN_DIRS

else

    cp .config .config.orig

    if test -f ../scripts/kconfig/Makefile && \

       grep -q syncconfig ../scripts/kconfig/Makefile; then

        syncconfig="syncconfig"

    else

        syncconfig="silentoldconfig"

    fi

    make $syncconfig $MAKE_ARGS $KERN_DIRS < /dev/null

    %_sourcedir/check-for-config-changes .config.orig .config

    rm .config.orig

fi

make prepare $MAKE_ARGS

make scripts $MAKE_ARGS

krel=$(make -s kernelrelease $MAKE_ARGS)

if [ "$krel" != "%kernelrelease-%build_flavor" ]; then

    echo "Kernel release mismatch: $krel != %kernelrelease-%build_flavor" >&2

    exit 1

fi

make clean $MAKE_ARGS

rm -f source

find . ! -type d ! -name 'Module.base' ! -name 'Module.*-kmp' ! -name 'Module.optional' -printf '%%P\n' \

	> %my_builddir/obj-files

%build

cd %kernel_build_dir

source .kernel-binary.spec.buildenv

# create *.symref files in the tree

if test -e %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor; then

    %_sourcedir/modversions --unpack . < $_

fi

%if "%CONFIG_KMSG_IDS" == "y"

    chmod +x ../scripts/kmsg-doc

    MAKE_ARGS="$MAKE_ARGS D=2"

%endif

mkdir -p %_topdir/OTHER

log=%_topdir/OTHER/make-stderr.log

while true; do

    make all $MAKE_ARGS 2> >(tee "$log")

    if test "${PIPESTATUS[0]}" -eq 0; then

        break

    fi

    # In the linux-next and vanilla branches, we try harder to build a

    # package.

    if test 0%vanilla_only -gt 0 &&

			%_sourcedir/try-disable-staging-driver "$log"; then

        echo "Retrying make"

    else

        exit 1

    fi

done

# Generate list of symbols that are used to create kernel livepatches

%if 0%{?klp_symbols}

	%_sourcedir/klp-symbols . Symbols.list

%endif

%install

%if 0%{?usrmerged}

# add symlink for usrmerge so install scripts will just follow the

# link and end up placing files in /usr/lib. The link will be

# removed later and is not packaged here.

mkdir -p %{buildroot}/usr/lib

ln -s usr/lib %{buildroot}/lib

%endif

# get rid of /usr/lib/rpm/brp-strip-debug

# strip removes too much from the vmlinux ELF binary

export NO_BRP_STRIP_DEBUG=true

export STRIP_KEEP_SYMTAB='*/vmlinux*'

# /lib/modules/%kernelrelease-%build_flavor/source points to the source

# directory installed by kernel-devel. The kernel-%build_flavor-devel package

# has a correct dependency on kernel-devel, but the brp check does not see

# kernel-devel during build.

export NO_BRP_STALE_LINK_ERROR=yes

cd %kernel_build_dir

source .kernel-binary.spec.buildenv

mkdir -p %buildroot/boot

# (Could strip out non-public symbols.)

cp -p System.map %buildroot/boot/System.map-%kernelrelease-%build_flavor

add_vmlinux()

{

    local vmlinux=boot/vmlinux-%kernelrelease-%build_flavor

    cp vmlinux %buildroot/$vmlinux

    # make sure that find-debuginfo.sh picks it up. In the filelist, we

    # mark the file 0644 again

    chmod +x %buildroot/$vmlinux

    if test $1 == "--compressed"; then

        # avoid using the gzip -n option to make kdump happy (bnc#880848#c20)

        ts="$(head -n1 %_sourcedir/source-timestamp)"

        touch -d "$ts" %buildroot/$vmlinux

        touch %buildroot/$vmlinux.%{compress_vmlinux}

%if 0%{?__debug_package:1}

        # compress the vmlinux image after find-debuginfo.sh has processed it

%global __debug_install_post %__debug_install_post \

%_sourcedir/compress-vmlinux.sh %buildroot/boot/vmlinux-%kernelrelease-%build_flavor

%else

        %_sourcedir/compress-vmlinux.sh %buildroot/$vmlinux

%endif

        ghost_vmlinux=true

    else

        ghost_vmlinux=false

    fi

}

# architecture specifics

%ifarch %ix86 x86_64

    add_vmlinux --compressed

    cp -p arch/x86/boot/bzImage %buildroot/boot/%image-%kernelrelease-%build_flavor

%endif

%ifarch ppc ppc64 ppc64le

    add_vmlinux

%endif

%ifarch s390 s390x

    add_vmlinux --compressed

    image=image

    if test ! -f arch/s390/boot/$image; then

        image=bzImage

    fi

    cp -p arch/s390/boot/$image %buildroot/boot/%image-%kernelrelease-%build_flavor

    if test -e arch/s390/boot/kerntypes.o; then

        cp -p arch/s390/boot/kerntypes.o %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor

    elif test -x "$(which dwarfextract 2>/dev/null)"; then

	dwarfextract vmlinux %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor || echo "dwarfextract failed ($?)"

    fi

%if "%CONFIG_KMSG_IDS" == "y"

    mkdir -p %buildroot/usr/share/man/man9

    find man -name '*.9' -exec install -m 644 -D '{}' %buildroot/usr/share/man/man9/ ';'

%endif

%if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150300

    s390x_vmlinux=arch/s390/boot/compressed/vmlinux

    if [ ! -f "$s390x_vmlinux" ]; then

        s390x_vmlinux=arch/s390/boot/vmlinux

    fi

    objcopy -R .rodata.compressed "$s390x_vmlinux" %buildroot/boot/zdebug-%kernelrelease-%build_flavor

%endif

%endif

%ifarch %arm

    add_vmlinux --compressed

    cp -p arch/arm/boot/%image %buildroot/boot/%image-%kernelrelease-%build_flavor

%endif

%ifarch aarch64

    add_vmlinux --compressed

    cp -p arch/arm64/boot/%image %buildroot/boot/%image-%kernelrelease-%build_flavor

%endif

%ifarch riscv64

    add_vmlinux --compressed

    cp -p arch/riscv/boot/%image %buildroot/boot/%image-%kernelrelease-%build_flavor

%endif

# sign the modules, firmware and possibly the kernel in the buildservice

BRP_PESIGN_FILES=""

%if "%CONFIG_EFI_STUB" == "y"

%if 0%{?usrmerged}

BRP_PESIGN_FILES="%modules_dir/%image"

%else

BRP_PESIGN_FILES="/boot/%image-%kernelrelease-%build_flavor"

%endif

%endif

%ifarch s390x ppc64 ppc64le

%if 0%{?usrmerged}

BRP_PESIGN_FILES="%modules_dir/%image"

%else

BRP_PESIGN_FILES="/boot/%image-%kernelrelease-%build_flavor"

%endif

%endif

%if "%CONFIG_MODULE_SIG" == "y"

BRP_PESIGN_FILES="$BRP_PESIGN_FILES *.ko"

%endif

%ifarch %ix86

# XXX: do not sign on x86, as the repackaging changes kernel-pae

# from i686 to i586

BRP_PESIGN_FILES=""

%endif

export BRP_PESIGN_FILES

%if "%{compress_modules}" != "none"

export BRP_PESIGN_COMPRESS_MODULE=%{compress_modules}

%endif

if test -x /usr/lib/rpm/pesign/gen-hmac; then

	$_ -r %buildroot /boot/%image-%kernelrelease-%build_flavor

fi

# Package the compiled-in certificates as DER files in /etc/uefi/certs

# and have mokutil enroll them when the kernel is installed

echo Signing certificates "%certs"

if test %CONFIG_MODULE_SIG = "y" -a -d %_sourcedir/.kernel_signing_certs ; then

    for f in %_sourcedir/.kernel_signing_certs/*.crt; do

            mkdir -p %buildroot/etc/uefi/certs

            cp -v $f %buildroot/etc/uefi/certs

    done

fi

cp -p .config %buildroot/boot/config-%kernelrelease-%build_flavor

sysctl_file=%buildroot/boot/sysctl.conf-%kernelrelease-%build_flavor

for file in %my_builddir/sysctl/{defaults,%cpu_arch/arch-defaults,%cpu_arch_flavor}; do

	if [ -f "$file" ]; then

		cat "$file"

	fi

done | sed '1i # Generated file - do not edit.' >$sysctl_file

if [ ! -s $sysctl_file ]; then

	rm $sysctl_file

fi

%if %install_vdso

# Install the unstripped vdso's that are linked in the kernel image

make vdso_install $MAKE_ARGS INSTALL_MOD_PATH=%buildroot

rm -rf %buildroot/lib/modules/%kernelrelease-%build_flavor/vdso/.build-id

%endif

# Create a dummy initrd with roughly the size the real one will have.

# That way, YaST will know that this package requires some additional

# space in /boot.

dd if=/dev/zero of=%buildroot/boot/initrd-%kernelrelease-%build_flavor \

	bs=1024 seek=2047 count=1

# Also reserve some space for the kdump initrd

cp %buildroot/boot/initrd-%kernelrelease-%build_flavor{,-kdump}

%if 0%{?suse_version} >= 1500

# Use same permissions as dracut

chmod 0600 %buildroot/boot/initrd-%kernelrelease-%build_flavor{,-kdump}

%endif

if [ %CONFIG_MODULES = y ]; then

    mkdir -p %rpm_install_dir/%cpu_arch_flavor

    mkdir -p %buildroot/usr/src/linux-obj/%cpu_arch

    install -m 755 -D -t %rpm_install_dir/%cpu_arch_flavor/scripts/mod/ scripts/mod/ksym-provides

    gzip -n -c9 < Module.symvers > %buildroot/boot/symvers-%kernelrelease-%build_flavor.gz

    make modules_install $MAKE_ARGS INSTALL_MOD_PATH=%buildroot

%ifarch s390 s390x

    if test -e arch/s390/boot/kerntypes.o; then

        :

    elif test -x "$(which dwarfextract 2>/dev/null)" -a \

	-f %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor; then

	find %buildroot -name "*.ko" > kofiles.list

	dwarfextract %buildroot/boot/Kerntypes-%kernelrelease-%build_flavor -C kofiles.list || echo "dwarfextract failed ($?)"

    fi

%endif

    # Also put the resulting file in %rpm_install_dir/%cpu_arch/%build_flavor

    # so that kernel-devel + kernel-%build_flavor is sufficient for building

    # modules that have modversions as well.

    mkdir -p %rpm_install_dir/%cpu_arch/%build_flavor

    cp Module.symvers %rpm_install_dir/%cpu_arch/%build_flavor

    # List of symbols that are used to generate kernel livepatches

    %if 0%{?klp_symbols}

        cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor

        echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir

        %if "%CONFIG_LIVEPATCH_IPA_CLONES" == "y"

            find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' | sort > ipa-clones.list

            cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor

            echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir