2018-05-28 21:12:29 +02:00
|
|
|
#!/bin/sh
|
|
|
|
|
2023-12-11 23:18:13 +01:00
|
|
|
# Copyright 2018, 2021, 2022, 2023 Patrick J. Volkerding, Sebeka, Minnesota, USA
|
2018-05-28 21:12:29 +02:00
|
|
|
# All rights reserved.
|
|
|
|
#
|
|
|
|
# Redistribution and use of this script, with or without modification, is
|
|
|
|
# permitted provided that the following conditions are met:
|
|
|
|
#
|
|
|
|
# 1. Redistributions of this script must retain the above copyright
|
|
|
|
# notice, this list of conditions and the following disclaimer.
|
|
|
|
#
|
|
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
|
|
|
|
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
|
|
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
|
|
|
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
|
|
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
|
|
|
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
|
|
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
|
|
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
|
|
|
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
|
|
|
|
# This script uses the SlackBuild scripts present here to build a
|
|
|
|
# complete set of kernel packages for the currently running architecture.
|
|
|
|
# It needs to be run once on 64-bit (uname -m = x86_64) and once on IA32
|
|
|
|
# (uname -m = i586 or i686).
|
|
|
|
|
|
|
|
cd $(dirname $0) ; CWD=$(pwd)
|
|
|
|
|
Thu May 16 02:31:40 UTC 2024
a/bcachefs-tools-1.7.0-x86_64-1.txz: Added.
a/kernel-generic-6.9.0-x86_64-2.txz: Upgraded.
a/kernel-huge-6.9.0-x86_64-2.txz: Upgraded.
a/kernel-modules-6.9.0-x86_64-2.txz: Upgraded.
d/git-2.45.1-x86_64-1.txz: Upgraded.
This update fixes security issues:
Recursive clones on case-insensitive filesystems that support symbolic
links are susceptible to case confusion that can be exploited to
execute just-cloned code during the clone operation.
Repositories can be configured to execute arbitrary code during local
clones. To address this, the ownership checks introduced in v2.30.3
are now extended to cover cloning local repositories.
Local clones may end up hardlinking files into the target repository's
object database when source and target repository reside on the same
disk. If the source repository is owned by a different user, then
those hardlinked files may be rewritten at any point in time by the
untrusted user.
When cloning a local source repository that contains symlinks via the
filesystem, Git may create hardlinks to arbitrary user-readable files
on the same filesystem as the target repository in the objects/
directory.
It is supposed to be safe to clone untrusted repositories, even those
unpacked from zip archives or tarballs originating from untrusted
sources, but Git can be tricked to run arbitrary code as part of the
clone.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-32002
https://www.cve.org/CVERecord?id=CVE-2024-32004
https://www.cve.org/CVERecord?id=CVE-2024-32020
https://www.cve.org/CVERecord?id=CVE-2024-32021
https://www.cve.org/CVERecord?id=CVE-2024-32465
(* Security fix *)
d/kernel-headers-6.9.0-x86-2.txz: Upgraded.
d/strace-6.9-x86_64-1.txz: Upgraded.
k/kernel-source-6.9.0-noarch-2.txz: Upgraded.
BCACHEFS_FS m -> y
CRYPTO_CHACHA20 m -> y
CRYPTO_LIB_CHACHA_GENERIC m -> y
CRYPTO_LIB_POLY1305_GENERIC m -> y
CRYPTO_POLY1305 m -> y
MITIGATION_GDS_FORCE y -> n
kde/wcslib-8.3-x86_64-1.txz: Upgraded.
l/gdk-pixbuf2-2.42.12-x86_64-1.txz: Upgraded.
ani: Reject files with multiple INA or IART chunks.
ani: Reject files with multiple anih chunks.
ani: validate chunk size.
Thanks to 0xvhp, pedrib, and Benjamin Gilbert.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-48622
(* Security fix *)
l/gtk+3-3.24.42-x86_64-1.txz: Upgraded.
n/bind-9.18.27-x86_64-1.txz: Upgraded.
This is a bugfix release.
n/popa3d-1.0.3-x86_64-8.txz: Rebuilt.
This is a bugfix release:
Build with AUTH_PAM, not AUTH_SHADOW.
Thanks to jayjwa.
x/xorg-server-xwayland-23.2.7-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
2024-05-16 04:31:40 +02:00
|
|
|
BUILD=${BUILD:-2}
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ -z "$VERSION" ]; then
|
2019-11-06 22:14:40 +01:00
|
|
|
# Get the filename of the newest kernel tarball:
|
|
|
|
KERNEL_SOURCE_FILE="$(/bin/ls -t linux-*.tar.?z | head -n 1 )"
|
|
|
|
if echo $KERNEL_SOURCE_FILE | grep -q rc ; then # need to get rc versions a bit differently
|
|
|
|
VERSION=$(/bin/ls -t linux-*.tar.?z | head -n 1 | rev | cut -f 3- -d . | cut -f 1,2 -d - | rev)
|
|
|
|
else # normal release version
|
|
|
|
VERSION=$(/bin/ls -t linux-*.tar.?z | head -n 1 | rev | cut -f 3- -d . | cut -f 1 -d - | rev)
|
|
|
|
fi
|
2018-05-28 21:12:29 +02:00
|
|
|
fi
|
|
|
|
TMP=${TMP:-/tmp}
|
|
|
|
|
|
|
|
# By default, install the packages as we build them and update the initrd.
|
|
|
|
INSTALL_PACKAGES=${INSTALL_PACKAGES:-YES}
|
|
|
|
|
2019-11-06 22:14:40 +01:00
|
|
|
# Clean kernels before building them. Not doing so quit working some time
|
|
|
|
# after 4.19.x.
|
|
|
|
export KERNEL_CLEAN=YES
|
|
|
|
|
2018-05-28 21:12:29 +02:00
|
|
|
# A list of recipes for build may be passed in the $RECIPES variable, otherwise
|
|
|
|
# we have defaults based on uname -m:
|
|
|
|
if [ -z "$RECIPES" ]; then
|
|
|
|
if uname -m | grep -wq x86_64 ; then
|
|
|
|
RECIPES="x86_64"
|
|
|
|
elif uname -m | grep -wq i.86 ; then
|
2023-12-11 23:18:13 +01:00
|
|
|
RECIPES="IA32"
|
2018-05-28 21:12:29 +02:00
|
|
|
else
|
|
|
|
echo "Error: no build recipes available for $(uname -m)"
|
|
|
|
exit 1
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Main build loop:
|
|
|
|
for recipe in $RECIPES ; do
|
|
|
|
|
|
|
|
# Build recipes are defined here. These will select the appropriate .config
|
|
|
|
# files and package naming scheme, and define the output location.
|
|
|
|
if [ "$recipe" = "x86_64" ]; then
|
|
|
|
# Recipe for x86_64:
|
2022-10-22 20:40:34 +02:00
|
|
|
export CONFIG_SUFFIX=".x64"
|
2018-05-28 21:12:29 +02:00
|
|
|
unset LOCALVERSION
|
|
|
|
OUTPUT=${OUTPUT:-${TMP}/output-x86_64-${VERSION}}
|
2023-12-11 23:18:13 +01:00
|
|
|
elif [ "$recipe" = "IA32" ]; then
|
|
|
|
# Recipe for IA32:
|
2018-05-28 21:12:29 +02:00
|
|
|
unset CONFIG_SUFFIX
|
|
|
|
unset LOCALVERSION
|
|
|
|
OUTPUT=${OUTPUT:-${TMP}/output-ia32-${VERSION}}
|
|
|
|
else
|
|
|
|
echo "Error: recipe ${recipe} not implemented"
|
|
|
|
exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo
|
|
|
|
echo "*************************************************"
|
|
|
|
echo "* Building kernels for recipe ${recipe}..."
|
|
|
|
echo "*************************************************"
|
|
|
|
echo
|
|
|
|
|
|
|
|
# Build kernel-source package:
|
|
|
|
KERNEL_SOURCE_PACKAGE_NAME=$(PRINT_PACKAGE_NAME=YES KERNEL_CONFIG="config-generic${LOCALVERSION}-${VERSION}${LOCALVERSION}${CONFIG_SUFFIX}" VERSION=$VERSION BUILD=$BUILD ./kernel-source.SlackBuild)
|
|
|
|
KERNEL_CONFIG="config-generic${LOCALVERSION}-${VERSION}${LOCALVERSION}${CONFIG_SUFFIX}" VERSION=$VERSION BUILD=$BUILD ./kernel-source.SlackBuild
|
|
|
|
mkdir -p $OUTPUT
|
|
|
|
mv ${TMP}/${KERNEL_SOURCE_PACKAGE_NAME} $OUTPUT || exit 1
|
|
|
|
if [ "${INSTALL_PACKAGES}" = "YES" ]; then
|
|
|
|
installpkg ${OUTPUT}/${KERNEL_SOURCE_PACKAGE_NAME} || exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Build kernel-huge package:
|
|
|
|
# We will build in the just-built kernel tree. First, let's put back the
|
|
|
|
# symlinks:
|
|
|
|
( cd $TMP/package-kernel-source
|
|
|
|
sh install/doinst.sh
|
|
|
|
)
|
|
|
|
KERNEL_HUGE_PACKAGE_NAME=$(PRINT_PACKAGE_NAME=YES KERNEL_NAME=huge KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux KERNEL_CONFIG=./kernel-configs/config-huge${LOCALVERSION}-${VERSION}${LOCALVERSION}${CONFIG_SUFFIX} CONFIG_SUFFIX=${CONFIG_SUFFIX} KERNEL_OUTPUT_DIRECTORY=$OUTPUT/kernels/huge$(echo ${LOCALVERSION} | tr -d -).s BUILD=$BUILD ./kernel-generic.SlackBuild)
|
|
|
|
KERNEL_NAME=huge KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux KERNEL_CONFIG=./kernel-configs/config-huge${LOCALVERSION}-${VERSION}${LOCALVERSION}${CONFIG_SUFFIX} CONFIG_SUFFIX=${CONFIG_SUFFIX} KERNEL_OUTPUT_DIRECTORY=$OUTPUT/kernels/huge$(echo ${LOCALVERSION} | tr -d -).s BUILD=$BUILD ./kernel-generic.SlackBuild
|
2021-02-20 22:04:15 +01:00
|
|
|
if [ -r ${TMP}/${KERNEL_HUGE_PACKAGE_NAME} ]; then
|
|
|
|
mv ${TMP}/${KERNEL_HUGE_PACKAGE_NAME} $OUTPUT
|
|
|
|
else
|
|
|
|
echo "kernel-source build failed."
|
|
|
|
exit 1
|
|
|
|
fi
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ "${INSTALL_PACKAGES}" = "YES" ]; then
|
|
|
|
installpkg ${OUTPUT}/${KERNEL_HUGE_PACKAGE_NAME} || exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Build kernel-generic package:
|
|
|
|
KERNEL_GENERIC_PACKAGE_NAME=$(PRINT_PACKAGE_NAME=YES KERNEL_NAME=generic KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux KERNEL_CONFIG=./kernel-configs/config-generic${LOCALVERSION}-${VERSION}${LOCALVERSION}${CONFIG_SUFFIX} CONFIG_SUFFIX=${CONFIG_SUFFIX} KERNEL_OUTPUT_DIRECTORY=$OUTPUT/kernels/generic$(echo ${LOCALVERSION} | tr -d -).s BUILD=$BUILD ./kernel-generic.SlackBuild)
|
|
|
|
KERNEL_NAME=generic KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux KERNEL_CONFIG=./kernel-configs/config-generic${LOCALVERSION}-${VERSION}${LOCALVERSION}${CONFIG_SUFFIX} CONFIG_SUFFIX=${CONFIG_SUFFIX} KERNEL_OUTPUT_DIRECTORY=$OUTPUT/kernels/generic$(echo ${LOCALVERSION} | tr -d -).s BUILD=$BUILD ./kernel-generic.SlackBuild
|
2021-02-20 22:04:15 +01:00
|
|
|
if [ -r ${TMP}/${KERNEL_GENERIC_PACKAGE_NAME} ]; then
|
|
|
|
mv ${TMP}/${KERNEL_GENERIC_PACKAGE_NAME} $OUTPUT
|
|
|
|
else
|
|
|
|
echo "kernel-generic build failed."
|
|
|
|
exit 1
|
|
|
|
fi
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ "${INSTALL_PACKAGES}" = "YES" ]; then
|
|
|
|
installpkg ${OUTPUT}/${KERNEL_GENERIC_PACKAGE_NAME} || exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Build kernel-modules (for the just built generic kernel, but most of them
|
|
|
|
# will also work with the huge kernel):
|
|
|
|
KERNEL_MODULES_PACKAGE_NAME=$(PRINT_PACKAGE_NAME=YES KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux KERNEL_CONFIG=$TMP/package-kernel-source/usr/src/linux/.config BUILD=$BUILD ./kernel-modules.SlackBuild)
|
|
|
|
KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux KERNEL_CONFIG=$TMP/package-kernel-source/usr/src/linux/.config BUILD=$BUILD ./kernel-modules.SlackBuild
|
2021-02-20 22:04:15 +01:00
|
|
|
if [ -r ${TMP}/${KERNEL_MODULES_PACKAGE_NAME} ]; then
|
|
|
|
mv ${TMP}/${KERNEL_MODULES_PACKAGE_NAME} $OUTPUT
|
|
|
|
else
|
|
|
|
echo "kernel-modules build failed."
|
|
|
|
exit 1
|
|
|
|
fi
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ "${INSTALL_PACKAGES}" = "YES" ]; then
|
|
|
|
installpkg ${OUTPUT}/${KERNEL_MODULES_PACKAGE_NAME} || exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Build kernel-headers:
|
|
|
|
KERNEL_HEADERS_PACKAGE_NAME=$(PRINT_PACKAGE_NAME=YES KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux BUILD=$BUILD ./kernel-headers.SlackBuild)
|
|
|
|
KERNEL_SOURCE=$TMP/package-kernel-source/usr/src/linux BUILD=$BUILD ./kernel-headers.SlackBuild
|
2021-02-20 22:04:15 +01:00
|
|
|
if [ -r ${TMP}/${KERNEL_HEADERS_PACKAGE_NAME} ]; then
|
|
|
|
mv ${TMP}/${KERNEL_HEADERS_PACKAGE_NAME} $OUTPUT
|
|
|
|
else
|
|
|
|
echo "kernel-headers build failed."
|
|
|
|
exit 1
|
|
|
|
fi
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ "${INSTALL_PACKAGES}" = "YES" ]; then
|
|
|
|
upgradepkg --reinstall --install-new ${OUTPUT}/${KERNEL_HEADERS_PACKAGE_NAME} || exit 1
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Update initrd:
|
|
|
|
if [ "${INSTALL_PACKAGES}" = "YES" ]; then
|
2019-11-06 22:14:40 +01:00
|
|
|
INITRD_VERSION="$(grep "Kernel Configuration" $TMP/package-kernel-source/usr/src/linux/.config | cut -f 3 -d ' ')"
|
|
|
|
INITRD_LOCALVERSION="$(cat $TMP/package-kernel-source/usr/src/linux/.config 2> /dev/null | grep CONFIG_LOCALVERSION= | cut -f 2 -d = | tr -d \")"
|
2018-05-28 21:12:29 +02:00
|
|
|
if [ -r /etc/mkinitrd.conf ]; then
|
2019-11-06 22:14:40 +01:00
|
|
|
mkinitrd -F /etc/mkinitrd.conf -k ${INITRD_VERSION}${INITRD_LOCALVERSION}
|
2018-05-28 21:12:29 +02:00
|
|
|
else # try this?
|
2019-11-06 22:14:40 +01:00
|
|
|
sh /usr/share/mkinitrd/mkinitrd_command_generator.sh -k ${INITRD_VERSION}${INITRD_LOCALVERSION} | sed "s/-c -k/-k/g" | bash
|
2018-05-28 21:12:29 +02:00
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
|
|
|
echo
|
|
|
|
echo "${recipe} kernel packages done!"
|
|
|
|
echo
|
|
|
|
|
|
|
|
done
|