mirror of https://gitee.com/openkylin/ipxe.git
10 Commits
| Author | SHA1 | Message | Date |
|---|---|---|---|
Cong Liu
|
03f4f7e09f | update changelog | |
|
Cong Liu
|
6a0510bec5 | changed debian/source/format to native | |
|
Michael Brown
|
f7b78ba1e5 |
[PATCH] [efi] Raise TPL during driver entry point
As per commit c89a446 ("[efi] Run at TPL_CALLBACK to protect against
UEFI timers") we expect to run at TPL_CALLBACK almost all of the time.
Various code paths rely on this assumption. Code paths that need to
temporarily lower the TPL (e.g. for entropy gathering) will restore it
to TPL_CALLBACK.
The entropy gathering code will be run during DRBG initialisation,
which happens during the call to startup(). In the case of iPXE
compiled as an EFI application this code will run within the scope of
efi_snp_claim() and so will execute at TPL_CALLBACK as expected.
In the case of iPXE compiled as an EFI driver the code will
incorrectly run at TPL_APPLICATION since there is nothing within the
EFI driver entry point that raises (and restores) the TPL. The net
effect is that a build that includes the entropy-gathering code
(e.g. a build with HTTPS enabled) will return from the driver entry
point at TPL_CALLBACK, which causes a system lockup.
Fix by raising and restoring the TPL within the EFI driver entry
point.
Debugged-by: Ignat Korchagin <ignat@cloudflare.com>
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Origin: backport,
|
|
|
Ladi Prosek
|
ec7ca7fdea |
Strip 802.1Q VLAN 0 priority tags iPXE was unable to receive priority tagged packets specified in the 802.1Q standard and supported by all major networking stacks. This commit adds a new function net_pull_tags which is called by all consumers of incoming packets after stripping their link-layer headers.
Origin: vendor, https://git.centos.org/blob/rpms!ipxe.git/c7/SOURCES!0009-Strip-802.1Q-VLAN-0-priority-tags.patch Bug-Ubuntu: https://bugs.launchpad.net/bugs/1805920 Gbp-Pq: Name 0005-strip-802.1Q-VLAN-0-priority-tags.patch |
|
|
Blake Rouse
|
d427549178 |
iPXE fails to handle DHCPNACK's
Forwarded: https://github.com/ipxe/ipxe/pull/66 Bug: https://bugs.launchpad.net/bugs/1707999 Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/ipxe/+bug/1707999 iPXE does not handle DHCPNACK's. If iPXE gets a DHCPNACK it will not re-attempt to DHCPDISCOVER, which causes iPXE to fail to PXE boot on situations where there are multiple DHCP servers are offering an IP. Gbp-Pq: Name handle-dhcp-nack.patch |
|
|
James Page
|
2a350c5c40 |
enable https
Forwarded: no (downstream config option) Bug-Ubuntu: https://bugs.launchpad.net/bugs/1025239 Last-Update: 2012-11-14 Gbp-Pq: Name enable-https.patch |
|
|
Bastian Blank
|
9fdc19d812 |
Set _GNU_SOURCE in elf2efi
Patch-Name: util-elf2efi-GNU_SOURCE.patch Gbp-Pq: Name util-elf2efi-GNU_SOURCE.patch |
|
|
Bastian Blank
|
40483c0baa |
rom-change-banner-timeout.diff
Gbp-Pq: Name 0001-rom-change-banner-timeout.diff.patch |
|
|
Cong Liu
|
bda298a553 |
Import Debian changes 1.0.0+git-20190109.133f4c4-ok1
ipxe (1.0.0+git-20190109.133f4c4-ok1) yangtze; urgency=medium
.
* rebuild source for openKylin
.
ipxe (1.0.0+git-20190109.133f4c4-0ubuntu3.2) focal; urgency=medium
.
* Revert the changes of the non released version
1.0.0+git-20190109.133f4c4-0ubuntu3.1 as there is a less impactful
fix more suited for an SRU.
* d/p/lp-1882671-efi-Raise-TPL-during-driver-entry-point.patch: fix the
formerly avoided efi TPL issues (LP: #1882671)
.
ipxe (1.0.0+git-20190109.133f4c4-0ubuntu3.1) focal; urgency=medium
.
* only enable https on non EFI roms. This lets EFI/OVMF handle https
itself and avoids breakage in TPL manipulations (LP: 1882671)
- d/p/enable-https.patch: drop old global way to Enable HTTPS support
- d/rules: enable https on non EFI roms.
- d/util/check-rom-sizes: fix if size does exactly match
.
ipxe (1.0.0+git-20190109.133f4c4-0ubuntu3) focal; urgency=medium
.
[Alkis Georgopoulos]
* d/tree/ipxe/etc/grub.d/20_ipxe: Make grub-ipxe work under UEFI
(LP: #1811496)
- Use ipxe.efi under UEFI
- Save default entry when iPXE is selected
[Sharon Dagan]
- d/tree/ipxe/etc/grub.d/20_ipxe: Identify ipxe grub menu entry in
an easier way (LP: #1858374)
.
ipxe (1.0.0+git-20190109.133f4c4-0ubuntu2) disco; urgency=medium
.
* Add e1000e firmware for qemu. (closes: #884240)
- d/ipxe-qemu.install: install new rom
- d/util/check-rom-sizes: check new rom
.
ipxe (1.0.0+git-20190109.133f4c4-0ubuntu1) disco; urgency=medium
.
* Merge new upstream release 1.0.0+git-20190109.133f4c4
Remaining Changes:
- d/p/enable-https.patch: Enable HTTPS support.
- Split grub integration from ipxe->grub-ipxe.
- d/control: add package and adapt dependencies
- d/[grub-]ipxe.install: move some files to grub-ipxe
- rename d/ipxe.post* to d/grub-ipxe-post*
- Install ne.rom as pxe-ne2k_isa.rom
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
- d/ipxe-qemu.links: compat link for ne.rom
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu
to /usr/lib/ipxe/qemu.
- d/util/check-rom-sizes, d/rules: check sizes of generated roms to avoid
accidentially breaking KVM live migration on updates/fixes.
- handling of efi rom size changes in Bionic (LP 1713490)
- d/util/check-rom-sizes: bump efi rom sizes
- d/control: break older qemu versions to ensure the new sized roms
are only associated with new qemu versions.
- debian/patches/handle-dhcp-nack.patch: Handle DHCP NAK and send a
re-discover. (LP 1707999)
- updated debian/patches/util-elf2efi-GNU_SOURCE.patch to match latest
upstream.
- add new rom for vmxnet3 (LP 1737211)
- d/ipxe-qemu.install: install new rom
are only associated with new qemu versions.
- Build ROMs for QEMU with CONFIG=qemu (LP: 1789319)
- d/p/0005-strip-802.1Q-VLAN-0-priority-tags.patch: Strip 802.1Q VLAN 0
priority tags; Fixes PXE when VLAN tag is 0. (LP: 1805920)
- debian/copyright: update copyright information to satisfy lintian
dep5 checks (LP: 1747071)
* Dropped changes (upstream):
- debian/patches/fix-elf2efi-plt-relocation.diff: Cherry-pick fix from
ipxe devel mailing list to handle R_X86_64_PLT32 relocations.
.
ipxe (1.0.0+git-20180124.fbe8c52d-0ubuntu5) disco; urgency=medium
.
* d/p/0005-strip-802.1Q-VLAN-0-priority-tags.patch: Strip 802.1Q VLAN 0
priority tags; Fixes PXE when VLAN tag is 0. (LP: #1805920)
.
ipxe (1.0.0+git-20180124.fbe8c52d-0ubuntu4) cosmic; urgency=medium
.
* Build ROMs for QEMU with CONFIG=qemu (LP: #1789319)
.
ipxe (1.0.0+git-20180124.fbe8c52d-0ubuntu3) cosmic; urgency=medium
.
* debian/patches/fix-elf2efi-plt-relocation.diff: Cherry-pick fix from
ipxe devel mailing list to handle R_X86_64_PLT32 relocations.
.
ipxe (1.0.0+git-20180124.fbe8c52d-0ubuntu2) bionic; urgency=medium
.
* debian/copyright: update copyright information to satisfy lintian
dep5 checks (LP: #1747071)
* d/p/enable-https.patch: adding proper dep3 header
.
ipxe (1.0.0+git-20180124.fbe8c52d-0ubuntu1) bionic; urgency=medium
.
* Merge new upstream release 20180124.fbe8c52d with last "new"
Ubuntu packaging 1.0.0+git-20161027.b991c67-1ubuntu1 and the
fixes since 1.0.0+git-20161027.b991c67+really20150424.a25a16d-1ubuntu1
Remaining Changes:
- d/p/enable-https.patch: Enable HTTPS support.
- Split grub integration from ipxe->grub-ipxe.
- d/control: add package and adapt dependencies
- d/[grub-]ipxe.install: move some files to grub-ipxe
- rename d/ipxe.post* to d/grub-ipxe-post*
- Install ne.rom as pxe-ne2k_isa.rom
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
- d/ipxe-qemu.links: compat link for ne.rom
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu
to /usr/lib/ipxe/qemu.
- d/util/check-rom-sizes, d/rules: check sizes of generated roms to avoid
accidentially breaking KVM live migration on updates/fixes.
- debian/patches/handle-dhcp-nack.patch: Handle DHCP NAK and send a
re-discover. (LP 1707999)
* Dropped changes (upstream):
- d/p/0004-fix_no-pie_option.patch: correct -no-pie option
to build without pie
* Added Changes:
- updated debian/patches/util-elf2efi-GNU_SOURCE.patch to match latest
upstream.
- add new rom for vmxnet3 (LP: #1737211)
- d/ipxe-qemu.install: install new rom
- d/util/check-rom-sizes: check new rom as well
- handling of efi rom size changes (LP: #1713490)
- d/util/check-rom-sizes: bump efi rom sizes
- d/control: break older qemu versions to ensure the new sized roms
are only associated with new qemu versions.
- d/util/check-rom-sizes: update description
.
ipxe (1.0.0+git-20161027.b991c67+really20150424.a25a16d-1ubuntu2) artful; urgency=medium
.
* debian/patches/handle-dhcp-nack.patch: Handle DHCP NAK and send a
re-discover. (LP: #1707999)
.
ipxe (1.0.0+git-20161027.b991c67+really20150424.a25a16d-1ubuntu1) artful; urgency=medium
.
* Revert to the former git snapshot 20150424.a25a16d to fix changed
rom sizes that break cross release migrations (LP: #1713490).
This makes it effectively identical to 1.0.0+git-20150424.a25a16d-1ubuntu2
in regard to the upstream source, but keeps the changes to debian/*.
On next merge we need to either ensure that rom sizes don't change, or
that we can encapsulate that in qemu so that on forward migration it is
taken care off.
- This brings back debian/patches/0002-Don-t-use-libiberty.patch as needed
on the older source.
- Adapt d/p/0001-rom-change-banner-timeout.diff.patch to former state to
match old source.
- drop d/p/util-elf2efi-GNU_SOURCE.patch as it was not needed on old
source
* Fix FTBFS with newer perl versions (were dropped due to the revert above
but is needed to build in artful)
- d/p/0006-build-Fix-.ids.o-creation-for-drivers-not-in-the-all.patch
- d/p/0007-build-Remove-nested-my-declaration.patch
* d/util/check-rom-sizes, d/rules: check sizes of generated roms to avoid
accidentially breaking KVM live migration on updates/fixes.
.
ipxe (1.0.0+git-20161027.b991c67-1ubuntu1) artful; urgency=medium
.
* Merge from Debian stable. Remaining changes:
- d/p/enable-https.patch: Enable HTTPS support.
- Split grub integration from ipxe->grub-ipxe.
- d/control: add package and adapt dependencies
- d/[grub-]ipxe.install: move some files to grub-ipxe
- rename d/ipxe.post* to d/grub-ipxe-post*
- Install ne.rom as pxe-ne2k_isa.rom
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
- d/ipxe-qemu.links: compat link for ne.rom
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu
to /usr/lib/ipxe/qemu.
- d/p/0004-fix_no-pie_option.patch: correct -no-pie option
to build without pie
.
ipxe (1.0.0+git-20161027.b991c67-1) unstable; urgency=medium
.
* New snapshot. (closes: #799216)
* Use debhelper 10.
.
ipxe (1.0.0+git-20150424.a25a16d-1ubuntu2) yakkety; urgency=medium
.
* debian/patches/0004-fix_no-pie_option.patch: correct -no-pie
option to build without pie
.
ipxe (1.0.0+git-20150424.a25a16d-1ubuntu1) xenial; urgency=medium
.
* Merge from Debian unstable. Remaining changes:
- d/p/enable-https.patch: Enable HTTPS support.
- d/control,grub-ipxe*: Split grub integration from ipxe->grub-ipxe.
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu to
/usr/lib/ipxe/qemu.
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
.
ipxe (1.0.0+git-20150424.a25a16d-1) unstable; urgency=medium
.
* New snapshot.
* Build-depend on liblzma-dev.
* Update Standards-Version, no changes.
* Redo ISO generation:
- Fix isolinux location and build-deps. (closes: #783051)
- Include EFI image, build-depend on dosfstools and mtools.
- Use xorriso instead of genisoimage.
- Use isohybrid.
* Enable support for IPv6 and NFS. (closes: #746500)
.
ipxe (1.0.0+git-20141004.86285d1-1ubuntu3) vivid; urgency=medium
.
* ipxe.install: remove one more line which was supposed to be split out
into grub-ipxe.install.
.
ipxe (1.0.0+git-20141004.86285d1-1ubuntu2) vivid; urgency=medium
.
* ipxe.install: remove /boot/ipxe.efi and ipxe.lkrn which are split out
into grub-ipxe.install. (LP: #1418751)
.
ipxe (1.0.0+git-20141004.86285d1-1ubuntu1) vivid; urgency=medium
.
* Merge from Debian unstable. (LP: #1409057) Remaining changes:
- d/p/enable-https.patch: Enable HTTPS support.
- d/control,grub-ipxe*: Split grub integration from ipxe->grub-ipxe.
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu to
/usr/lib/ipxe/qemu.
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
* Dropped changes, alternative fix in Debian:
- d/control: Add libiberty-dev to BD's to fix FTBFS.
- drop isolinux from build-deps and patch to augment ISOLINUX_BIN
- Drop transitional kvm-ipxe package since we are past 14.04
.
ipxe (1.0.0+git-20141004.86285d1-1) unstable; urgency=medium
.
* New snapshot.
.
ipxe (1.0.0+git-20131111.c3d1e78-2.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Add missing export in d/rules.
* Change syslinux to syslinux-common in B-D. (Closes: #750349)
.
ipxe (1.0.0+git-20131111.c3d1e78-2ubuntu2) utopic; urgency=medium
.
* Fix FTBFS in utopic due to movement of isolinux.bin:
- add isolinux to build-deps
- add /usr/lib/ISOLINUX/isolinux.bin to ISOLINUX_BIN in
src/arch/i386/Makefile
.
ipxe (1.0.0+git-20131111.c3d1e78-2ubuntu1) trusty; urgency=low
.
* Merge from Debian unstable. Remaining changes:
- d/p/enable-https.patch: Enable HTTPS support.
- d/control,grub-ipxe*: Split grub integration from ipxe->grub-ipxe.
- d/control: Transition kvm-ipxe->ipxe-qemu for LTS->LTS upgrade.
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu to
/usr/lib/ipxe/qemu.
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
* Dropped changes, alternative fix in Debian:
- d/control: Add libiberty-dev to BD's to fix FTBFS.
.
ipxe (1.0.0+git-20131111.c3d1e78-2) unstable; urgency=medium
.
* Don't use libiberty. (closes: #730910)
.
ipxe (1.0.0+git-20131111.c3d1e78-1ubuntu1) trusty; urgency=low
.
* Merge from Debian unstable, remaining changes:
- d/p/enable-https.patch: Enable HTTPS support.
- d/control,grub-ipxe*: Split grub integration from ipxe->grub-ipxe.
- d/control: Transition kvm-ipxe->ipxe-qemu for LTS->LTS upgrade.
- d/ipxe-qemu.links: Add compat links from /usr/share/qemu to
/usr/lib/ipxe/qemu.
- d/ipxe-qemu.install: Install ne.rom as pxe-ne2k_isa.rom.
* All other changes dropped in preference to upstream Debian
packaging.
* d/control: Add libiberty-dev to BD's to fix FTBFS.
.
ipxe (1.0.0+git-20131111.c3d1e78-1) unstable; urgency=low
.
* New snapshot.
* Add undionly.kkpxe. (closes: #671340)
* Ignore result of update-grub invocation. (closes: #660459)
* Mark packages as multi-arch foreign. (closes: #728476)
* Use debhelper 9.
* Remove old breaks relations.
* Add 64-bit EFI images:
- Build-depend on binutils-dev, zlib1g-dev.
- Add combined EFI/legacy images for qemu.
- Properly clean build dir.
* Install images in ipxe-qemu to match names used by qemu:
- Add compatility symlink for e1000_82540.
- Use dh-exec to allow renames in dh_install.
.
ipxe (1.0.0+git-20130710.936134e-0ubuntu1) saucy; urgency=low
.
* New upstream snapshot:
- d/p/fix-bp-bug.patch: Dropped; included in snapshot.
- d/p/baseroms-target.diff: Dropped; no longer required.
- Refreshed all other patches.
* d/rules: Use date for snapshot prefix instead of increment.
* d/p/qemu-target-fix-names.diff: Consolidated into qemu-target.diff.
* d/p/*: Tidied redundant patches.
* d/control,rules: Move roms for use with qemu-kvm to ipxe-qemu, update
kvm-ipxe to be transitional.
* d/control: Drop Depends from grub-ipxe to ipxe as its not required.
.
ipxe (1.0.0+git-20120202.f6840ba-3) unstable; urgency=low
.
* Fix to break qemu-system instead of qemu. (closes: #658982)
* Make ipxe-qemu break and replace ipxe. (closes: #658684)
* Add link for ipxe.lkrn, so all images can be found in one location.
.
ipxe (1.0.0+git-20120202.f6840ba-2) unstable; urgency=low
.
* Fix grub setup and restrict entry by default. (closes: #658465)
* Install only combined images into ipxe package.
* Install rom images needed for qemu into ipxe-qemu package.
- Add breaks against qemu and qemu-kvm.
* Disable rom banner timeout. (closes: #638574)
.
ipxe (1.0.0+git-20120202.f6840ba-1) unstable; urgency=low
.
* New snapshot.
* Disable ath9k roms.
* Fix tg3 build.
* Create grub entry. (closes: #626238)
* Override version string with package version.
.
ipxe (1.0.0+git-4.d6b0b76-0ubuntu3) saucy; urgency=low
.
* debian/patches/fix-bp-bug.patch: fixes FTBFS (LP: #1194914)
.
ipxe (1.0.0+git-4.d6b0b76-0ubuntu2) raring; urgency=low
.
* d/control: Add ipxe-qemu virtual package for use with qemu.
.
ipxe (1.0.0+git-4.d6b0b76-0ubuntu1) raring; urgency=low
.
* New upstream snapshot:
- d/p/iscsi*.patch: Dropped - included in snapshot.
- Refreshed all other patches.
* d/p/enable-https.patch: Enable HTTPS support (LP: #1025239).
.
ipxe (1.0.0+git-3.55f6c88-0ubuntu5) quantal; urgency=low
.
* Fix input/output errors when using ipxe to boot from iSCSI storage
(LP: #1045923).
- d/p/iscsi-{report-reponse,send-padding-inline}.patch: Cherry picked
patches from upstream VCS which resolve two issues with iSCSI protocol
handling.
.
ipxe (1.0.0+git-3.55f6c88-0ubuntu4) quantal; urgency=low
.
* debian/ipxe.install: add ipxe.dsk and ipxe.usb (LP: #1014005)
.
ipxe (1.0.0+git-3.55f6c88-0ubuntu3) quantal; urgency=low
.
[ Serge Hallyn ]
* debian/patches/rom-set-banner-timeout-0.diff: set rom banner timeout
to 0. (LP: #921230)
.
[ Stefan Bader ]
* Modify the ROM names in of the allqemu target to use 8086100e instead
of e1000_82540 and ne instead of ne2k_isa (LP: #948323)
.
ipxe (1.0.0+git-3.55f6c88-0ubuntu2) quantal; urgency=low
.
* debian/grub.d/25_ipxe: removed the space after "Found iPXE image"
to match other grub-update script fragments (LP: #990378).
* debian/control: fixed some Lintian warnings.
- TODO: lots of missing Copyright information.
.
ipxe (1.0.0+git-3.55f6c88-0ubuntu1) precise; urgency=low
.
[ Marc Cluet ]
* New upstream snapshot.
* Added rules for automatic git branch refresh.
* Changed rom target from allbaseroms to allroms.
- recommended behaviour by upstream, building all full roms is neither
recommended nor a desired user experience
* Added new target allqemu for qemu package.
- created new build target to build full rom drivers just for qemu
package purposes
* Cleaned lintian errors from debian package
- Removed brace extension in ipxe.install
- Updated standards to 3.9.2
- Fixed copyright file not machine readable
.
[ James Page ]
* Updated get-orig-source target to generate git snapshots inline
with upstream version numbering being used by this package.
.
ipxe (1.0.0+git-2.149b50-1ubuntu4) precise; urgency=low
.
* Add missing Breaks/Replaces for kvm-ipxe split in
1.0.0+git-2.149b50-1ubuntu3 (LP: #905099).
.
ipxe (1.0.0+git-2.149b50-1ubuntu3) precise; urgency=low
.
* add new binary package, kvm-ipxe. The roms needed by kvm-ipxe are now only
provided by it, so
- make ipxe depend on kvm-ipxe.
- ipxe.links: reverse the links
.
ipxe (1.0.0+git-2.149b50-1ubuntu2) precise; urgency=low
.
* Provide a new binary package, grub-ipxe - for ipxe usage via grub.
- LP: #814038, Closes #626238
.
ipxe (1.0.0+git-2.149b50-1ubuntu1) oneiric; urgency=low
.
* Link Roms into /usr/share/qemu for consumption by
qemu-kvm.
.
ipxe (1.0.0+git-2.149b50-1) unstable; urgency=low
.
* New snapshot.
.
ipxe (1.0.0+git-1.293e34-2) unstable; urgency=low
.
* Add some missing copyrights and licenses to the copyright files.
.
ipxe (1.0.0+git-1.293e34-1) unstable; urgency=low
.
* Initial release (closes: #474034)
* Remove drivers with binary-only firmware:
- Remove bnx2 driver.
- Remove linda infiniband driver.
|
|
|
Cong Liu
|
fc58bff077 | Import Upstream version 1.0.0+git-20190109.133f4c4 |