wok-6.x annotate linux/receipt @ rev 15675

linux: add CVE-2013-2929 fix
author Pascal Bellard <pascal.bellard@slitaz.org>
date Thu Dec 19 11:31:06 2013 +0000 (2013-12-19)
parents 8580e54b5284
children 592ca2a6b454
rev   line source
pankso@3 1 # SliTaz package receipt.
pankso@3 2
pankso@3 3 PACKAGE="linux"
pascal@15670 4 VERSION="3.2.53"
pankso@12812 5 KBASEVER="${VERSION:0:3}"
pankso@3 6 CATEGORY="base-system"
pankso@3 7 SHORT_DESC="The Linux kernel and modules."
pankso@3864 8 MAINTAINER="devel@slitaz.org"
pascal@14657 9 LICENSE="GPL2"
pankso@12812 10 TARBALL="$PACKAGE-$KBASEVER.tar.xz"
pankso@3 11 WEB_SITE="http://www.kernel.org/"
pascal@14234 12 WGET_URL="ftp://ftp.kernel.org/pub/linux/kernel/v3.0/$TARBALL"
pankso@12803 13 HOST_ARCH="i486 arm x86_64"
pankso@12803 14
pankso@12812 15 DEPENDS="kmod"
pascal@14754 16 BUILD_DEPENDS="slitaz-toolchain perl git xz lzma patch \
pascal@14754 17 uclibc-cross-compiler-x86_64 busybox-boot"
pankso@12824 18
pankso@12824 19 # Use version patch so we dont dl full kernel source on each minor update
pascal@14351 20 [ "$KBASEVER" != "$VERSION" ] &&
pascal@14351 21 PATCH="$(dirname $WGET_URL)/patch-$VERSION.xz" &&
pascal@14351 22 EXTRA_SOURCE_FILES="$(basename $PATCH)"
pankso@12812 23
pankso@12803 24 # Aufs enable chroot
pascal@14223 25 AUFS_NOT_RAMFS="uclibc-cross-compiler-x86_64 is not compatible with aufs+tmpfs 8("
pankso@3 26
pankso@12824 27 # This will save/restore modules.dep but we want to regenerate it on
pankso@12824 28 # install or upgrade.
pankso@12803 29 #CONFIG_FILES="/lib/modules/$KBASEVER-slitaz/modules.dep"
pankso@12803 30
pankso@12824 31 # Handle multiarch compilation. Less bdeps when cross-compiling for ARM
pankso@12803 32 case "$ARCH" in
pankso@12824 33 arm) BUILD_DEPENDS="xz" TARBALL="$PACKAGE-$VERSION.tar.bz2" ;;
pankso@12824 34 x86_64) BUILD_DEPENDS="xz" ;;
pankso@12824 35 esac
pankso@12824 36
pankso@12824 37 # TODO: slitaz.conf provide SLITAZ_ARCH and must be handled by tazpkg/spk
pankso@12824 38 [ -f "$root/etc/slitaz/slitaz.conf" ] && . $root/etc/slitaz/slitaz.conf
pankso@12824 39
pankso@12824 40 # Handle multiarch installation. ARM use Busybox modutils, so avoid any
pankso@12824 41 # deps on kmod
pankso@12824 42 case "$SLITAZ_ARCH" in
pankso@12824 43 arm) DEPENDS="" ;;
pankso@12803 44 esac
pankso@9731 45
pankso@3 46 # Rules to configure and make the package.
pankso@3 47 compile_rules()
pankso@3 48 {
pankso@9731 49 cd $src
pascal@14754 50 cp /usr/share/boot/initrd initrd.cpio
pankso@12803 51
pascal@14179 52 if [ "$KBASEVER" != "$VERSION" ]; then
pascal@14179 53 [ -s $SRC/$(basename $PATCH) ] ||
pascal@14234 54 wget $PATCH -O $SRC/$(basename $PATCH)
pascal@14179 55 xzcat $SRC/$(basename $PATCH) | patch -Np1
pascal@14179 56 touch done.patch-$VERSION
pascal@14179 57 fi
pascal@14179 58
pankso@12803 59 case "$ARCH" in
pankso@12803 60 arm)
pankso@12803 61 echo "Compiling: ARM Kernel"
pascal@14178 62 if [ ! -s $SRC/$(basename $PATCH) ]; then
pascal@14234 63 wget $PATCH -O $SRC/$(basename $PATCH)
pankso@12812 64 fi
pankso@12824 65 make mrproper
pankso@12824 66 # Buggy: we got kernel panic about module not tinted 3.2.14
pankso@12824 67 #echo "Applying patch: $(basename $PATCH)"
pankso@12824 68 #xzcat $SRC/$(basename $PATCH) | patch -Np1 >/dev/null
pankso@12824 69 patch -Np1 < $stuff/$ARCH/linux-arm.patch || exit 1
pankso@12824 70 cp -f $stuff/$ARCH/linux-arm.config .config
pankso@12803 71 make ARCH=$ARCH CROSS_COMPILE=${HOST_SYSTEM}- bzImage &&
pankso@12803 72 make ARCH=$ARCH CROSS_COMPILE=${HOST_SYSTEM}- modules &&
pankso@12803 73 make ARCH=$ARCH CROSS_COMPILE=${HOST_SYSTEM}- \
pankso@12803 74 INSTALL_MOD_PATH=$DESTDIR modules_install &&
pankso@12803 75 mkdir -p $DESTDIR/boot &&
pankso@12824 76 cp -a arch/arm/boot/zImage \
pankso@12803 77 $DESTDIR/boot/linux-$VERSION-slitaz-$ARCH
pankso@12803 78 return 0 ;;
pankso@12803 79 x86_64)
pankso@12803 80 echo "TODO: Maybe use default ? But cross compile in x86_64 chroot"
pankso@12803 81 echo "so we can remove the 64 build by uclibc-cross-compiler-x86_64"
pankso@12803 82 return 0 ;;
pankso@12803 83 esac
pankso@12803 84
gokhlayeh@11395 85 [ ! -x /usr/bin/cook ] && report open-bloc
pankso@9731 86
pankso@9731 87 # Check for Aufs and cook it if unbuilt.
pankso@9731 88 echo "Checking for Aufs packages..."
pankso@12285 89 _AUFSVER=`grep ^VERSION= $WOK/aufs/receipt | cut -d "=" -f2 | sed -e 's/"//g'`
pankso@12285 90 if [ -x /usr/bin/cook ]; then
gokhlayeh@11395 91 # Give info an redirect to /dev/null since aufs got it own log.
gokhlayeh@11395 92 AUFSDIR=$WOK/aufs/source/aufs-${_AUFSVER}
pankso@12285 93 [ -d "$AUFSDIR" ] && rm -rf $AUFSDIR
pankso@12285 94 #echo "Cook: aufs $_AUFSVER"
pankso@12288 95 cook aufs --getsrc
pankso@12288 96 mkdir -p $WOK/aufs/source/
pankso@12289 97 tar xjf $SRC/aufs-${_AUFSVER}.tar.bz2 -C $WOK/aufs/source/
pankso@12285 98 elif [ -x /usr/bin/tazwok ]; then
pankso@12285 99 # we just need aufs source. Also cooking now is a bad idea since it
pankso@12285 100 # needs linux-module-headers. The one your cooking not the one from the web.
gokhlayeh@11395 101 AUFSDIR=$WOK/aufs/aufs-${_AUFSVER}
gokhlayeh@11395 102 [ -d "$AUFSDIR" ] && rm -rf $AUFSDIR
gokhlayeh@11395 103 tazwok get-src aufs --target=$AUFSDIR || { report close-bloc; return 1; }
pankso@9731 104 fi
pankso@12285 105 echo "cook:linux" > $command
pankso@12285 106
pankso@9731 107 echo "Copying Aufs files and patches..."
slaxemulator@7297 108 cp -a $AUFSDIR/Documentation $AUFSDIR/fs $AUFSDIR/include $src
pankso@12285 109 cp -a $AUFSDIR/aufs3-*.patch $stuff
pankso@12285 110
pankso@4251 111 # SliTaz db
pankso@12285 112 [ -d $WOK/$PACKAGE/source/slitaz ] && rm -rf $WOK/$PACKAGE/source/slitaz 2> /dev/null
pankso@12285 113 mkdir -p $WOK/$PACKAGE/source/slitaz
pankso@12290 114 echo "$WGET_URL" > $WOK/$PACKAGE/source/slitaz/url
pankso@12285 115 cp $stuff/gztazmod.sh $stuff/list_modules.sh $WOK/$PACKAGE/source/slitaz
pankso@12285 116 cp $stuff/bootloader.sh $WOK/$PACKAGE/source/slitaz
pankso@12803 117
pankso@5640 118 # Apply patches
pankso@9731 119 echo "Applying patches..."
pascal@521 120 while read patch_file; do
pankso@12285 121 echo "$patch_file" >> $WOK/$PACKAGE/source/slitaz/patches
pankso@12285 122 cp $stuff/$patch_file $WOK/$PACKAGE/source/slitaz
pascal@1442 123 if [ -f done.$patch_file ]; then
pascal@1442 124 echo "Skipping $patch_file"
pascal@1442 125 continue
pascal@1442 126 fi
pascal@521 127 echo "Apply $patch_file"
pankso@12285 128 if [ -x /usr/bin/cook ]; then
pankso@12285 129 patch -p1 < $WOK/$PACKAGE/source/slitaz/$patch_file || return 1
pankso@12285 130 elif [ -x /usr/bin/tazwok ]; then
pankso@12285 131 patch -p1 < $WOK/$PACKAGE/source/slitaz/$patch_file || { report close-bloc; return 1; }
pankso@12285 132 fi
pascal@1442 133 touch done.$patch_file
pascal@521 134 done <<EOT
pankso@12285 135 $PACKAGE-diff.u
pankso@12285 136 $PACKAGE-header.u
pankso@12285 137 $PACKAGE-freeinitrd.u
pascal@14759 138 $PACKAGE-subroot.u
pascal@15675 139 $PACKAGE-CVE-2013-2929.u
pankso@12285 140 aufs3-base.patch
pankso@12285 141 aufs3-standalone.patch
pankso@12285 142 aufs3-loopback.patch
pankso@12285 143 aufs3-proc_map.patch
pankso@12285 144 channel-negative-one-maxim.patch
pankso@12285 145 mac80211.compat08082009.wl_frag+ack_v1.patch
pascal@521 146 EOT
pankso@9731 147
pankso@12285 148 sed -i 's|SUBLEVEL =.*|SUBLEVEL =|g' Makefile
pankso@12285 149
gokhlayeh@11395 150 [ ! -x /usr/bin/cook ] && report step "Make kernel proper and then build lguest"
pankso@12294 151 [ -x /usr/bin/cook ] && echo "Make kernel proper and then build lguest"
pankso@3864 152 make mrproper
pankso@12285 153 cd Documentation/virtual/lguest
pankso@12285 154 if [ -x /usr/bin/cook ]; then
pankso@12285 155 make lguest || return 1
pankso@12285 156 elif [ -x /usr/bin/tazwok ]; then
pankso@12285 157 make lguest || { report close-bloc; return 1; }
pankso@12285 158 fi
slaxemulator@8681 159 cd $src
pankso@12803 160
pascal@12570 161 case "$opt" in
pascal@12570 162 *--no64*);;
pascal@12570 163 *)
pankso@12294 164 #
pankso@12294 165 # Arch x86_64
pankso@12294 166 #
pankso@12294 167 [ ! -x /usr/bin/cook ] && report step "Make bzImage64 without modules first"
pankso@12294 168 [ -x /usr/bin/cook ] && echo "Building x86_64 Kernel"
pankso@12803 169
pankso@12285 170 # Build bzImage64 without modules first
pascal@12293 171 cp -f $stuff/$PACKAGE-slitaz.config64 .config
pankso@12285 172 sed -i 's/CONFIG_MODULES=y/# CONFIG_MODULES is not set/' .config
pankso@12803 173
pankso@12803 174 # We can't keep every driver in staging
pankso@12285 175 sed -i -e 's/^CONFIG_RTL8192/#&/' \
pankso@12285 176 -e 's/^CONFIG_R8187SE/#&/' \
pankso@12285 177 -e 's/^CONFIG_RT2870/#&/' .config
pankso@12285 178 yes '' | make ARCH=x86_64 oldconfig
pankso@12285 179 if [ -x /usr/bin/cook ]; then
pankso@12285 180 make -j 4 ARCH=x86_64 CROSS_COMPILE=uclibc-x86_64- bzImage || exit 1
pankso@12285 181 elif [ -x /usr/bin/tazwok ]; then
pankso@12285 182 make -j 4 ARCH=x86_64 CROSS_COMPILE=uclibc-x86_64- bzImage || { report close-bloc; return 1; }
pankso@12285 183 fi
pascal@15602 184 [ -d $DESTDIR ] || mkdir -p $DESTDIR/linux64
pankso@12285 185 mv arch/x86/boot/bzImage $DESTDIR/linux64
pankso@12285 186 mv System.map System.map-without-modules64
pankso@12285 187
pankso@12285 188 [ ! -x /usr/bin/cook ] && report step "Now build bzImage64 with modules"
pankso@12803 189
pankso@12285 190 # Build bzImage64 with modules
pascal@12293 191 cp -f $stuff/$PACKAGE-slitaz.config64 .config
pankso@12285 192 #make ARCH=x86_64 oldconfig
pankso@12285 193 make -j 4 ARCH=x86_64 CROSS_COMPILE=uclibc-x86_64- bzImage &&
pankso@12285 194 make -j 4 ARCH=x86_64 CROSS_COMPILE=uclibc-x86_64- modules &&
pankso@12285 195 make ARCH=x86_64 INSTALL_MOD_PATH=$DESTDIR/linux64 modules_install &&
pankso@12285 196 make ARCH=x86_64 INSTALL_HDR_PATH=$DESTDIR/linux64/usr headers_install &&
pascal@14180 197 ln .config $WOK/$PACKAGE/source/slitaz/config64
pankso@12285 198 if [ -x /usr/bin/cook ]; then
pankso@12285 199 [ -s arch/x86/boot/bzImage ] || return 1
pankso@12285 200 elif [ -x /usr/bin/tazwok ]; then
pankso@12285 201 [ -s arch/x86/boot/bzImage ] || { report close-bloc; return 1; }
pankso@12285 202 fi
pankso@12285 203 mkdir -p $DESTDIR/linux64/boot 2> /dev/null
pankso@12285 204 mv arch/x86/boot/bzImage $DESTDIR/linux64/boot/vmlinuz-$VERSION-slitaz
pankso@12285 205 ln System.map System.map-modules64
pankso@12285 206 ln Module.symvers Module.symvers-modules64
pascal@12570 207 esac
pankso@12803 208
pankso@12294 209 #
pankso@12294 210 # Standard kernel
pankso@12294 211 #
pankso@12294 212 [ ! -x /usr/bin/cook ] && report step "Make bzImage without modules first"
pankso@12294 213 [ -x /usr/bin/cook ] && echo "Building standard kernel..."
pankso@12803 214
pankso@12294 215 # Build bzImage without modules first
pankso@12294 216 cp -f $stuff/$PACKAGE-slitaz.config .config
pankso@12294 217 sed -i 's/CONFIG_MODULES=y/# CONFIG_MODULES is not set/' .config
pankso@12803 218
pankso@12803 219 # We can't keep every driver in staging
pankso@12294 220 sed -i -e 's/^CONFIG_RTL8192/#&/' \
pankso@12294 221 -e 's/^CONFIG_R8187SE/#&/' \
pankso@12294 222 -e 's/^CONFIG_RT2870/#&/' .config
pascal@15670 223 yes '' | make ARCH=i386 oldconfig
pankso@12294 224 if [ -x /usr/bin/cook ]; then
pascal@15670 225 make ARCH=i386 -j 4 bzImage || exit 1
pankso@12294 226 elif [ -x /usr/bin/tazwok ]; then
pascal@15670 227 make ARCH=i386 -j 4 bzImage || { report close-bloc; return 1; }
pankso@12294 228 fi
pankso@12294 229 [ -d $DESTDIR ] || mkdir -p $DESTDIR
pankso@12294 230 mv arch/x86/boot/bzImage $DESTDIR
pankso@12294 231 mv System.map System.map-without-modules
pankso@12294 232
pankso@12294 233 [ ! -x /usr/bin/cook ] && report step "Now build bzImage with modules"
pankso@12803 234
pankso@12294 235 # Build bzImage with modules
pankso@12294 236 cp -f $stuff/$PACKAGE-slitaz.config .config
pascal@15670 237 #make ARCH=i386 oldconfig
pankso@12294 238 ln .config $WOK/$PACKAGE/source/slitaz/config
pascal@15670 239 make ARCH=i386 -j 4 bzImage &&
pascal@15670 240 make ARCH=i386 -j 4 modules &&
pascal@15670 241 make ARCH=i386 INSTALL_MOD_PATH=$DESTDIR modules_install &&
pascal@15670 242 make ARCH=i386 INSTALL_HDR_PATH=$DESTDIR/usr headers_install &&
pankso@12294 243 if [ -x /usr/bin/cook ]; then
pankso@12294 244 [ -s arch/x86/boot/bzImage ] || return 1
pankso@12294 245 elif [ -x /usr/bin/tazwok ]; then
pankso@12294 246 [ -s arch/x86/boot/bzImage ] || { report close-bloc; return 1; }
pankso@12294 247 fi
pankso@12294 248 mkdir -p $DESTDIR/boot 2> /dev/null
pankso@12294 249 mv arch/x86/boot/bzImage $DESTDIR/boot/vmlinuz-$VERSION-slitaz
pankso@12803 250
gokhlayeh@11395 251 [ ! -x /usr/bin/cook ] && report step "Compressing all modules"
pankso@12803 252
slaxemulator@6719 253 # Compress all modules.
pankso@12285 254 $stuff/gztazmod.sh $DESTDIR/lib/modules/$KBASEVER-slitaz
pankso@12285 255 $stuff/gztazmod.sh $DESTDIR/linux64/lib/modules/$KBASEVER-slitaz
pascal@7667 256 ln System.map System.map-modules
pascal@7667 257 ln Module.symvers Module.symvers-modules
pankso@12803 258
gokhlayeh@11395 259 if [ ! -x /usr/bin/cook ]; then
gokhlayeh@11395 260 report close-bloc
gokhlayeh@11395 261 fi
pankso@3864 262 }
erjo@253 263
pankso@3 264 # Rules to gen a SliTaz package suitable for Tazpkg.
pankso@3 265 genpkg_rules()
pankso@3 266 {
pankso@12803 267 case "$ARCH" in
pankso@12803 268 arm)
pankso@12803 269 echo "Packing: ARM Kernel"
pankso@12803 270 cp -a $install/* $fs
pankso@12803 271 rm -f $fs/lib/modules/*/build $fs/lib/modules/*/source
pankso@12803 272 return 0 ;;
pankso@12803 273 x86_64)
pankso@12803 274 echo "TODO: use default or custom x86_64 packing"
pankso@12803 275 return 0 ;;
pankso@12803 276 esac
pankso@12803 277
pascal@12300 278 export PACKAGE VERSION
pascal@521 279 local path
pascal@15603 280 cp -a $install/boot $fs
pankso@3 281 # Compress all modules.
pankso@12285 282 path=$fs/lib/modules/$KBASEVER-slitaz/kernel
pascal@521 283 mkdir -p $path
pascal@15603 284 cp -a $install/lib/modules/$KBASEVER-slitaz/mo* \
pankso@12285 285 $fs/lib/modules/$KBASEVER-slitaz
pascal@14003 286 [ "$KBASEVER" != "$VERSION" ] &&
pascal@14003 287 ln -s $KBASEVER-slitaz $fs/lib/modules/$VERSION-slitaz
pankso@5640 288 # Get the base modules
pascal@886 289 export src
pascal@886 290 export _pkg
pankso@12285 291 mkdir -p $WOK/$PACKAGE/source/tmp
pascal@13577 292 # Warning stuff/list_modules.sh must find the generated modules.list
slaxemulator@9701 293 $stuff/list_modules.sh \
pankso@12285 294 $(cat $stuff/modules.list) > $WOK/$PACKAGE/source/tmp/modules.list
pankso@3864 295 while read module; do
pascal@521 296 dir=$(dirname $module)
pankso@535 297 [ -d $path/$dir ] || mkdir -p $path/$dir
pascal@15603 298 cp -a $install/lib/modules/$KBASEVER-slitaz/kernel/$module $path/$dir
pankso@12285 299 done < $WOK/$PACKAGE/source/tmp/modules.list
pascal@397 300 # Remove unresolved links
pankso@12285 301 rm -f $fs/lib/modules/$KBASEVER-slitaz/build
pankso@12285 302 rm -f $fs/lib/modules/$KBASEVER-slitaz/source
pankso@12285 303 # Cook all packages with a kernel module
pascal@13937 304 for i in $(cd $WOK; grep -l 'cook linux$' */receipt)
pankso@12285 305 do
pascal@13937 306 echo cook ${i%/receipt}
pankso@12285 307 done
pankso@12285 308 # Fixed modules.dep to use right path
pankso@12285 309 # saves 100kb of space too
pankso@12285 310 sed -i "s|$_pkg||g" $fs/lib/modules/$KBASEVER-slitaz/modules.dep
pankso@12285 311 sed -i "s|99.98.$KBASEVER-slitaz|$KBASEVER-slitaz|g" $fs/lib/modules/$KBASEVER-slitaz/modules.dep
pankso@12803 312 # Check and echo any module in kernel .config that's not added to
pankso@5640 313 # one of linux-* pkgs
pankso@12803 314 $stuff/check_modules.sh
pankso@3 315 }
pankso@3 316
pankso@3 317 # Pre and post install commands for Tazpkg.
pankso@3 318 post_install()
pankso@3 319 {
pascal@521 320 echo "Processing post-install commands..."
pankso@12803 321 case "$ARCH" in
pankso@12803 322 arm)
pankso@12803 323 echo "Kernel : /boot/linux-$VERSION-slitaz-$ARCH"
pankso@12803 324 echo "Modules: /lib/modules/$VERSION-slitaz"
pankso@12803 325 return 0 ;;
pankso@12803 326 esac
pankso@12285 327 chroot "$1/" depmod -a $KBASEVER-slitaz
pankso@5640 328 # GRUB stuff.
pankso@1154 329 if [ -f "$1/boot/grub/menu.lst" ]; then
border@13797 330 root_dev="/dev/`lsblk | grep '/$'| grep -o '[a-z]d[a-z][0-9]*'`" # current root device
border@13797 331 grub_part="$(( `echo $root_dev | grep -o '[0-9]*$'`-1 ))"
border@13797 332 grub_dev="`grep $(echo $root_dev | grep -o '^/dev/.d.' ) $1/boot/grub/device.map |\
border@13797 333 cut -f1 | sed "s/)$/.$grub_part)/g"`" # use device.map to find grub device number
border@13797 334
border@13797 335 # Add and clean kernel entrys in case of upgrade for installed system.
border@13797 336 if ! grep -q vmlinuz-$VERSION-slitaz $1/boot/grub/menu.lst; then
border@13797 337
border@13797 338 #clean the old entry
border@13797 339 # TODO somewhere, the old vmlinuz file is removed.
border@13797 340 # but the entry is still there. this cause a grub error:15 when selected
border@13797 341 # see http://bugs.slitaz.org/?id=74
border@13797 342
border@13797 343 #add the new
border@13797 344 cat >> $1/boot/grub/menu.lst << EOT
pankso@4056 345
pankso@4056 346 title SliTaz GNU/Linux (Kernel $VERSION-slitaz)
border@13754 347 $grub_dev
border@13754 348 kernel /boot/vmlinuz-$VERSION-slitaz root=$root_dev quiet
pankso@4056 349 EOT
border@13754 350 # Make it the default entry
border@13754 351 last_entry=$(( $(grep -c '^title' $1/boot/grub/menu.lst)-1 ))
border@13754 352 sed -e "s/^default.*/default $last_entry/g" -i $1/boot/grub/menu.lst
pankso@4056 353 fi
pankso@4056 354 # Display information message.
border@13754 355 cat <<EOT
pankso@4056 356 ----
pankso@4056 357 GRUB is installed, these tree lines must be in your /boot/grub/menu.lst:
pankso@1154 358
pankso@1154 359 title SliTaz GNU/Linux (Kernel $VERSION-slitaz)
pankso@1154 360 $grub_dev
pankso@4056 361 kernel /boot/vmlinuz-$VERSION-slitaz root=$root_dev
pascal@886 362 ----
pascal@886 363 EOT
pankso@1154 364 fi
pankso@3 365 }