commit
3a6264113e
GPG Key ID:
1EC08A25C9DB2503
@ -0,0 +1,8 @@
|
||||
# Also see:
|
||||
# https://fedoraproject.org/wiki/Starting_services_by_default
|
||||
|
||||
# Installing presets is not the preferred solution but until another one
|
||||
# presents itself:
|
||||
# https://bugzilla.rpmfusion.org/show_bug.cgi?id=3713
|
||||
enable akmods.service
|
||||
#enable akmods-shutdown.service
|
||||
@ -0,0 +1,65 @@
|
||||
#!/bin/bash -
|
||||
#
|
||||
# 95-akmodposttrans.install - Calls akmods for newly installed kernels
|
||||
#
|
||||
# Copyright (c) 2019 Nicolas Viéville <nicolas.vieville@uphf.fr>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
|
||||
COMMAND="$1"
|
||||
KERNEL_VERSION="$2"
|
||||
BOOT_DIR_ABS="$3"
|
||||
KERNEL_IMAGE="$4"
|
||||
|
||||
# just check in case a user calls this directly
|
||||
if [[ ! -w /var ]] ; then
|
||||
echo "Needs to run as root to be able to install rpms." >&2
|
||||
exit 4
|
||||
fi
|
||||
|
||||
if [[ ! -n "${KERNEL_VERSION}" ]] ; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case "${COMMAND}" in
|
||||
add)
|
||||
# needs to run in background as rpmdb might be locked otherwise
|
||||
if [ -e /bin/systemctl ] ; then
|
||||
# Exit early if system-update.target is active - rhbz#1518401
|
||||
/bin/systemctl is-active system-update.target &>/dev/null
|
||||
RET=$?
|
||||
|
||||
[ $RET == 0 ] && exit 0
|
||||
|
||||
/bin/systemctl restart akmods@${KERNEL_VERSION}.service --no-block >/dev/null 2>&1
|
||||
else
|
||||
nohup /usr/sbin/akmods --from-kernel-posttrans --kernels ${KERNEL_VERSION} > /dev/null 2>&1 &
|
||||
fi
|
||||
exit 0
|
||||
;;
|
||||
remove)
|
||||
# Nothing to do
|
||||
;;
|
||||
*)
|
||||
;;
|
||||
esac
|
||||
|
||||
exit 0
|
||||
@ -0,0 +1,18 @@
|
||||
Permission is hereby granted, free of charge, to any person obtaining
|
||||
a copy of this software and associated documentation files (the
|
||||
"Software"), to deal in the Software without restriction, including
|
||||
without limitation the rights to use, copy, modify, merge, publish,
|
||||
distribute, sublicense, and/or sell copies of the Software, and to
|
||||
permit persons to whom the Software is furnished to do so, subject to
|
||||
the following conditions:
|
||||
|
||||
The above copyright notice and this permission notice shall be
|
||||
included in all copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
@ -0,0 +1,12 @@
|
||||
Akmods startup script will rebuild akmod packages during system
|
||||
boot, while its background daemon will build them for kernels right
|
||||
after they were installed.
|
||||
|
||||
The akmods systemd service provides both, and is enabled by default.
|
||||
|
||||
The akmods-shutdown service is disabled by default but can, in some
|
||||
circumstances, provide an additional chance to build and install a kernel
|
||||
module. Users who would prefer longer shutdowns over delayed startups
|
||||
may wish to consider enabling it with the following command:
|
||||
|
||||
sudo systemctl enable --now akmods-shutdown.service
|
||||
@ -0,0 +1,51 @@
|
||||
Secure boot is a setup using UEFI firmware to check cryptographic
|
||||
signatures on the bootloader and associated OS kernel to ensure they
|
||||
have not been tampered with or bypassed in the boot process.
|
||||
|
||||
This verification can be extended to Kernel and its modules.
|
||||
It's default case in Fedora with UEFI and Secure boot enabled.
|
||||
|
||||
Fedora Project have signed kernels and also main modules with Fedora
|
||||
Key, but 3rd party modules as NVidia, VirtualBox, etc. need to be signed
|
||||
to load.
|
||||
|
||||
Akmods provides an enroll process to sign third party modules with your
|
||||
own keypair.
|
||||
|
||||
At the first run of the akmods.service, certificate and keypair will be
|
||||
created with default value using the '/usr/sbin/kmodgenca' script.
|
||||
|
||||
You may also wish to manually create your own certificate and keypair
|
||||
with `/usr/sbin/kmodgenca` command.
|
||||
If '/usr/sbin/kmodgenca' is launched with the '-a' parameter, it will
|
||||
use default values to complete the cacert.config file, and to generate
|
||||
automatically the cert and the private key.
|
||||
If '/usr/sbin/kmodgenca' is launched without parameters, user will be
|
||||
prompted to complete manually the cacert.config file, then the cert and
|
||||
the private key will be automatically generated.
|
||||
If the cert and the private key files already exist,
|
||||
'/usr/sbin/kmodgenca' will exit unless the '-f' parameter is used.
|
||||
|
||||
The cert and the private key are stored respectively in
|
||||
/etc/pki/akmods/certs and /etc/pki/akmods/private/ directories.
|
||||
|
||||
Now you need to enroll the public key in MOK, this process is described
|
||||
below.
|
||||
- Ask MOK to enroll new keypair with certificate with the command
|
||||
`mokutil --import /etc/pki/akmods/certs/public_key.der`.
|
||||
- mokutil asks to generate a password to enroll the public key.
|
||||
- Rebooting the system is needed for MOK to enroll the new public key.
|
||||
- On next boot MOK Management is launched and you have to choose
|
||||
"Enroll MOK".
|
||||
- Choose "Continue" to enroll the key or "View key 0" to show the keys
|
||||
already enrolled.
|
||||
- Confirm enrollment by selecting "Yes".
|
||||
- You will be invited to enter the password generated above.
|
||||
WARNING: keyboard is mapped to QWERTY!
|
||||
- The new key is enrolled, and system ask you to reboot.
|
||||
|
||||
You can confirm the enrollment of the new keypair once the system
|
||||
rebooted with:
|
||||
`mokutil --list-enrolled | grep Issuer`
|
||||
or with:
|
||||
`mokutil --test-key /etc/pki/akmods/certs/public_key.der`
|
||||
@ -0,0 +1,575 @@
|
||||
#!/bin/bash -
|
||||
########################################################################
|
||||
#
|
||||
# akmods - Rebuilds and install akmod RPMs
|
||||
# Copyright (c) 2007, 2008 Thorsten Leemhuis <fedora@leemhuis.info>
|
||||
# Copyright (c) 2018 Nicolas Chauvet <kwizart@gmail.com>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
########################################################################
|
||||
#
|
||||
# ToDo:
|
||||
# - use yum/dnf to install required kernel-devel packages?
|
||||
# - better way to detect if a earlier build failed or succeeded
|
||||
# - special kernel "all" (all that are installed with a matching -devel package; could be called from posttrans in akmods packages)
|
||||
# - manpage
|
||||
# - make it configurable if kmod building is done with nohup
|
||||
# - check on shutdown if akmods is still running and let it finish before continuing
|
||||
# - make it configurable if kmods from the repo replace local ones
|
||||
|
||||
# global vars
|
||||
myprog="akmods"
|
||||
myver="0.5.7"
|
||||
kmodlogfile=
|
||||
continue_line=""
|
||||
tmpdir=
|
||||
kernels=
|
||||
verboselevel=2
|
||||
# We cannot differenciate from a code failure to shutdown kill9 oom etc
|
||||
# So we always retry anyway
|
||||
alwaystry=1
|
||||
|
||||
akmods_echo()
|
||||
{
|
||||
# where to output
|
||||
local this_fd=${1}
|
||||
shift
|
||||
|
||||
# verboselevel
|
||||
local this_verbose=${1}
|
||||
shift
|
||||
|
||||
# output to console
|
||||
if (( ${verboselevel} >= ${this_verbose} )) ; then
|
||||
if [[ "${1}" == "--success" ]] ; then
|
||||
echo_success
|
||||
continue_line=""
|
||||
echo
|
||||
return 0
|
||||
elif [[ "${1}" == "--failure" ]] ; then
|
||||
echo_failure
|
||||
echo
|
||||
continue_line=""
|
||||
return 0
|
||||
elif [[ "${1}" == "--warning" ]] ; then
|
||||
echo_warning
|
||||
echo
|
||||
continue_line=""
|
||||
return 0
|
||||
elif [[ "${1}" == "-n" ]] ; then
|
||||
continue_line="true"
|
||||
fi
|
||||
echo "$@" >&${this_fd}
|
||||
fi
|
||||
|
||||
# no need to print the status flags in the logs
|
||||
if [[ "${1}" == "--success" ]] || [[ "${1}" == "--failure" ]] || [[ "${1}" == "--warning" ]] ; then
|
||||
return 0
|
||||
fi
|
||||
|
||||
# no need to continues in the log
|
||||
if [[ "${1}" == "-n" ]] ; then
|
||||
shift
|
||||
fi
|
||||
|
||||
# global logfile
|
||||
echo "$(date +%Y/%m/%d\ %H:%M:%S) akmods: $@" >> "/var/log/akmods/akmods.log"
|
||||
|
||||
# the kmods logfile as well, if we work on a kmod
|
||||
if [[ -n "${kmodlogfile}" ]] ; then
|
||||
echo "$(date +%Y/%m/%d\ %H:%M:%S) akmods: $@" >> "${kmodlogfile}"
|
||||
fi
|
||||
}
|
||||
|
||||
finally()
|
||||
{
|
||||
# remove tmpfiles
|
||||
remove_tmpdir
|
||||
|
||||
# remove lockfile
|
||||
rm -f /var/cache/akmods/.lockfile
|
||||
|
||||
exit ${1:-128}
|
||||
}
|
||||
|
||||
# Make sure finally() is run regardless of reason for exiting.
|
||||
trap "finally" ABRT HUP INT QUIT
|
||||
|
||||
create_tmpdir()
|
||||
{
|
||||
if ! tmpdir="$(mktemp -d -p /tmp ${myprog}.XXXXXXXX)/" ; then
|
||||
akmods_echo 2 1 "ERROR: failed to create tmpdir."
|
||||
akmods_echo 2 1 --failure ; return 1
|
||||
fi
|
||||
if ! mkdir "${tmpdir}"results ; then
|
||||
akmods_echo 2 1 "ERROR: failed to create result tmpdir."
|
||||
akmods_echo 2 1 --failure ; return 1
|
||||
fi
|
||||
}
|
||||
|
||||
remove_tmpdir()
|
||||
{
|
||||
# remove tmpfiles
|
||||
if [[ -n "${tmpdir}" ]] && [[ -d "${tmpdir}" ]] ; then
|
||||
rm -f "${tmpdir}"results/* "${tmpdir}"*.log
|
||||
rmdir "${tmpdir}"results/ "${tmpdir}"
|
||||
fi
|
||||
}
|
||||
|
||||
cleanup_cachedir ()
|
||||
{
|
||||
for one_file in $(ls /var/cache/akmods/*/* 2>/dev/null | \
|
||||
grep -v "$(ls -I "*rescue*" /boot/vmlinuz-* | \
|
||||
sed 's%.*vmlinuz-%%g')") ; do
|
||||
if $(grep -qE ".*\.rpm$" <<< "${one_file}") ; then
|
||||
if ! $(rpm -q "$(basename ${one_file%.rpm})" >/dev/null) ; then
|
||||
rm -f "${one_file}"
|
||||
fi
|
||||
else
|
||||
rm -f "${one_file}"
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
init ()
|
||||
{
|
||||
# some security provisions
|
||||
\export PATH='/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin'
|
||||
\unalias -a
|
||||
hash -r
|
||||
# https://bugzilla.rpmfusion.org/show_bug.cgi?id=4023
|
||||
#ulimit -H -c 0 --
|
||||
IFS=$' \t\n'
|
||||
UMASK=022
|
||||
umask ${UMASK}
|
||||
|
||||
# fall back to current kernel if user didn't provide one
|
||||
if [[ ! -n "${kernels}" ]] ; then
|
||||
kernels="$(uname -r)"
|
||||
fi
|
||||
# ensure to build for grub default kernel
|
||||
default_kernel=$(grubby --default-kernel | sed -e 's/^.*vmlinuz-//')
|
||||
if ! $(echo "${kernels}" | grep -q "${default_kernel}") ; then
|
||||
kernels="${kernels} ${default_kernel}"
|
||||
fi
|
||||
|
||||
# we get the echo_{success,failure} stuff from there
|
||||
if [[ -r /etc/rc.d/init.d/functions ]] ; then
|
||||
source /etc/rc.d/init.d/functions
|
||||
else
|
||||
# Use our own simple replacements
|
||||
echo_success() {
|
||||
echo -ne " [ OK ]\r"
|
||||
return 0
|
||||
}
|
||||
echo_failure() {
|
||||
echo -ne " [FAILED]\r"
|
||||
return 1
|
||||
}
|
||||
echo_warning() {
|
||||
echo -ne " [WARNING]\r"
|
||||
return 1
|
||||
}
|
||||
fi
|
||||
|
||||
# needs root permissions
|
||||
if [[ ! -w /var ]] ; then
|
||||
echo -n "Needs to run as root to be able to install rpms." >&2
|
||||
echo_failure ; echo ; exit 1
|
||||
fi
|
||||
|
||||
# no akmods
|
||||
if [[ ! -d "/usr/src/akmods/" ]] ; then
|
||||
echo -n "/usr/src/akmods/ not found." >&2
|
||||
echo_failure ; echo ; exit 1
|
||||
fi
|
||||
|
||||
# if there are no akmod packages installed there is nothing to do for us
|
||||
if ! ls /usr/src/akmods/*-kmod.latest &> /dev/null ; then
|
||||
echo -n "No akmod packages found, nothing to do." >&2
|
||||
echo_success ; echo ; exit 0
|
||||
fi
|
||||
|
||||
|
||||
# now that we know that we're root make sure our dir for logging and results is available
|
||||
if [[ ! -d "/var/cache/akmods/" ]] ; then
|
||||
if ! mkdir -p "/var/cache/akmods/" ; then
|
||||
echo -n "/var/cache/akmods/ not found and could not be created" >&2
|
||||
echo_failure ; echo ; exit 1
|
||||
fi
|
||||
fi
|
||||
if [[ ! -w "/var/cache/akmods/" ]] ; then
|
||||
echo -n "/var/cache/akmods/ not writable" >&2
|
||||
echo_failure ; echo ; exit 1
|
||||
fi
|
||||
|
||||
# tools needed
|
||||
for tool in akmodsbuild chown flock sed rpmdev-vercmp ; do
|
||||
if ! which "${tool}" &> /dev/null ; then
|
||||
echo -n "${tool} not found" >&2
|
||||
echo_failure ; echo ; exit 1
|
||||
fi
|
||||
done
|
||||
|
||||
# create lockfile and wait till we get it
|
||||
exec 99>/run/akmods/akmods.lock
|
||||
flock -w 900 99
|
||||
}
|
||||
|
||||
buildinstall_kmod()
|
||||
{
|
||||
local this_kernelver=${1}
|
||||
local this_kmodname=${2}
|
||||
local this_kmodsrpm=${3}
|
||||
local this_kmodverrel=${4}
|
||||
|
||||
if [[ ! -r "${this_kmodsrpm}" ]] ; then
|
||||
akmods_echo 2 1 "ERROR: ${this_kmodsrpm} not found."
|
||||
akmods_echo 2 1 --failure ; return 1
|
||||
fi
|
||||
|
||||
|
||||
# result and logdir
|
||||
if [[ ! -d "/var/cache/akmods/${this_kmodname}" ]] ; then
|
||||
if ! mkdir "/var/cache/akmods/${this_kmodname}" ; then
|
||||
akmods_echo 2 1 "ERROR: could not create /var/cache/akmods/${this_kmodname}."
|
||||
akmods_echo 2 1 --failure ; return 1
|
||||
fi
|
||||
fi
|
||||
|
||||
## preparations
|
||||
# tmpdir
|
||||
create_tmpdir
|
||||
|
||||
# akmods needs to write there (and nobody else, but mktemp takes care of that!)
|
||||
chown akmods "${tmpdir}" "${tmpdir}"results
|
||||
|
||||
# remove old logfiles if they exist
|
||||
rm -f "/var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}.log" "/var/cache/akmods/${this_kmodname}/.last.log"
|
||||
|
||||
# create a per kmod logfile
|
||||
if ! touch "/var/cache/akmods/${this_kmodname}/.last.log" ; then
|
||||
akmods_echo 2 1 "ERROR: failed to create kmod specific logfile."
|
||||
return 1
|
||||
fi
|
||||
|
||||
# akmods_echo will log to this file from now on as well
|
||||
kmodlogfile="/var/cache/akmods/${this_kmodname}/.last.log"
|
||||
|
||||
# Unset TMPDIR since it is misused by "runuser"
|
||||
# https://bugzilla.rpmfusion.org/show_bug.cgi?id=2596
|
||||
unset TMPDIR
|
||||
|
||||
# build module using akmod
|
||||
akmods_echo 1 4 "Building RPM using the command '$(which akmodsbuild) --kernels ${this_kernelver} ${this_kmodsrpm}'"
|
||||
/sbin/runuser -s /bin/bash -c "$(which akmodsbuild) --quiet --kernels ${this_kernelver} --outputdir ${tmpdir}results --logfile ${tmpdir}/akmodsbuild.log ${this_kmodsrpm}" akmods >> "${kmodlogfile}" 2>&1
|
||||
local returncode=$?
|
||||
|
||||
# copy rpmbuild log to kmod specific logfile
|
||||
if [[ -s "${tmpdir}"/akmodsbuild.log ]] ; then
|
||||
while read line ; do
|
||||
echo "$(date +%Y/%m/%d\ %H:%M:%S) akmodsbuild: ${line}" >> "${kmodlogfile}"
|
||||
done < "${tmpdir}"/akmodsbuild.log
|
||||
fi
|
||||
|
||||
# result
|
||||
if (( ! ${returncode} == 0 )) ; then
|
||||
if [[ -n "${continue_line}" ]] ; then
|
||||
akmods_echo 1 2 --failure
|
||||
fi
|
||||
akmods_echo 2 1 "Building rpms failed; see /var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}.failed.log for details"
|
||||
cp -fl "${kmodlogfile}" "/var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}.failed.log"
|
||||
kmodlogfile=""
|
||||
remove_tmpdir
|
||||
return 4
|
||||
fi
|
||||
|
||||
# dnf/yum install - repository disabled on purpose see rfbz#3350
|
||||
akmods_echo 1 4 "Installing newly built rpms"
|
||||
if [[ -f /usr/bin/dnf ]] ; then
|
||||
akmods_echo 1 4 "DNF detected"
|
||||
dnf -y install --disablerepo='*' $(find "${tmpdir}results" -type f -name '*.rpm' | grep -v debuginfo) >> "${kmodlogfile}" 2>&1
|
||||
else
|
||||
akmods_echo 1 4 "DNF not found, using YUM instead."
|
||||
yum -y install --disablerepo='*' $(find "${tmpdir}results" -type f -name '*.rpm' | grep -v debuginfo) >> "${kmodlogfile}" 2>&1
|
||||
fi
|
||||
local returncode=$?
|
||||
|
||||
# place the newly built rpms where user expects them
|
||||
cp "${tmpdir}results/"* "/var/cache/akmods/${this_kmodname}/"
|
||||
|
||||
# everything fine?
|
||||
if (( ${returncode} != 0 )) ; then
|
||||
if [[ -n "${continue_line}" ]] ; then
|
||||
akmods_echo 1 2 --failure
|
||||
fi
|
||||
akmods_echo 2 1 "Could not install newly built RPMs. You can find them and the logfile in:"
|
||||
akmods_echo 2 1 "/var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}.failed.log"
|
||||
cp -fl "${kmodlogfile}" "/var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}.failed.log"
|
||||
kmodlogfile=""
|
||||
remove_tmpdir
|
||||
return 8
|
||||
fi
|
||||
|
||||
# finish
|
||||
akmods_echo 1 4 "Successful."
|
||||
cp -fl "${kmodlogfile}" "/var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}.log"
|
||||
kmodlogfile=""
|
||||
remove_tmpdir
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
check_kmod_up2date()
|
||||
{
|
||||
local this_kernelver=${1}
|
||||
local this_kmodname=${2}
|
||||
local kmodpackage_file="$(modinfo ${this_kmodname} -k ${this_kernelver} -n 2>/dev/null)"
|
||||
|
||||
# kmod present, even with weak-modules?
|
||||
if [[ ! -n "${kmodpackage_file}" ]] && [[ ! -d /lib/modules/${this_kernelver}/extra/${this_kmodname}/ ]] ; then
|
||||
# build it
|
||||
return 1
|
||||
fi
|
||||
|
||||
# kmod up2date?
|
||||
# Weak module symlink case
|
||||
if [ -n "${kmodpackage_file}" ] && [ -h "${kmodpackage_file}" ] && $(echo "${kmodpackage_file}" | grep -q "weak-updates") ; then
|
||||
local kmodpackage="$(rpm -qf $(readlink -e ${kmodpackage_file}) 2> /dev/null)"
|
||||
# Regular module file case
|
||||
else
|
||||
local kmodpackage="$(rpm -qf /lib/modules/${this_kernelver}/extra/${this_kmodname}/ 2> /dev/null)"
|
||||
fi
|
||||
if [[ ! -n "${kmodpackage}" ]] ; then
|
||||
# seems we didn't get what we wanted
|
||||
# well, better to do nothing in this case
|
||||
akmods_echo 1 2 -n "Warning: Could not determine what package owns /lib/modules/${this_kernelver}/extra/${this_kmodname}/"
|
||||
return 0
|
||||
fi
|
||||
local kmodver=$(rpm -q --qf '%{EPOCH}:%{VERSION}-%{RELEASE}\n' "${kmodpackage}" | sed 's|(none)|0|; s!\.\(fc\|el\|lvn\)[0-9]*!!g')
|
||||
local akmodver=$(rpm -qp --qf '%{EPOCH}:%{VERSION}-%{RELEASE}\n' /usr/src/akmods/"${this_kmodname}"-kmod.latest | sed 's|(none)|0|; s!\.\(fc\|el\|lvn\)[0-9]*!!g')
|
||||
|
||||
rpmdev-vercmp "${kmodver}" "${akmodver}" &>/dev/null
|
||||
local retvalue=$?
|
||||
if [[ "$retvalue" == 0 ]] ; then
|
||||
# Versions are the same. Nothing to do.
|
||||
return 0
|
||||
elif [[ "$retvalue" == 11 ]] ; then
|
||||
# kmod is newer, nothing to do.
|
||||
return 0
|
||||
elif [[ "$retvalue" == 12 ]] ; then
|
||||
# akmod is newer, need to build kmod.
|
||||
return 1
|
||||
else
|
||||
# Something went wrong
|
||||
akmods_echo 1 2 -n "Error: Could not determine if akmod is newer than the installed kmod"
|
||||
akmods_echo 1 2 --failure
|
||||
return 0
|
||||
fi
|
||||
}
|
||||
|
||||
check_kmods()
|
||||
{
|
||||
local this_kernelver="${1}"
|
||||
|
||||
akmods_echo 1 2 -n "Checking kmods exist for ${this_kernelver}"
|
||||
for akmods_kmodfile in /usr/src/akmods/*-kmod.latest ; do
|
||||
local this_kmodname="$(basename ${akmods_kmodfile%%-kmod.latest})"
|
||||
|
||||
# actually check this akmod?
|
||||
if [[ -n "${akmods}" ]] ; then
|
||||
for akmod in ${akmods} ; do
|
||||
if [[ "${this_kmodname}" != "${akmod}" ]] ; then
|
||||
# ignore this one
|
||||
continue 2
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
# go
|
||||
if ! check_kmod_up2date ${this_kernelver} ${this_kmodname} ; then
|
||||
# okay, kmod wasn't found or is not up2date
|
||||
if [[ -n "${continue_line}" ]] ; then
|
||||
akmods_echo 1 2 --success
|
||||
# if the files for building modules are not available don't even try to build modules
|
||||
if [[ ! -r /usr/src/kernels/"${this_kernelver}"/Makefile ]] && \
|
||||
[[ ! -r /lib/modules/"${this_kernelver}"/build/Makefile ]] ; then
|
||||
akmods_echo 1 2 "Files needed for building modules against kernel"
|
||||
akmods_echo 1 2 "${this_kernelver} could not be found as the following"
|
||||
akmods_echo 1 2 "directories are missing:"
|
||||
akmods_echo 1 2 "/usr/src/kernels/${this_kernelver}/"
|
||||
akmods_echo 1 2 -n "/lib/modules/${this_kernelver}/build/"
|
||||
akmods_echo 1 2 -n "Is the correct kernel-devel package installed?"
|
||||
akmods_echo 1 2 --failure
|
||||
return 1
|
||||
fi
|
||||
fi
|
||||
|
||||
local this_kmodverrel="$(rpm -qp --qf '%{VERSION}-%{RELEASE}' "${akmods_kmodfile}" | sed 's!\.\(fc\|el\|lvn\)[0-9]*!!g' )"
|
||||
if [[ ! -n "${alwaystry}" ]] && [[ -e "/var/cache/akmods/${this_kmodname}/${this_kmodverrel}-for-${this_kernelver}".failed.log ]] ; then
|
||||
akmods_echo 1 2 -n "Ignoring ${this_kmodname}-kmod as it failed earlier"
|
||||
akmods_echo 1 2 --warning
|
||||
local someignored="true"
|
||||
else
|
||||
akmods_echo 1 2 -n "Building and installing ${this_kmodname}-kmod"
|
||||
buildinstall_kmod ${this_kernelver} ${this_kmodname} ${akmods_kmodfile} ${this_kmodverrel}
|
||||
local returncode=$?
|
||||
if [[ "$returncode" == "0" ]] ; then
|
||||
akmods_echo 1 2 --success
|
||||
local somesucceeded="true"
|
||||
elif [[ "$returncode" == "8" ]] ; then
|
||||
akmods_echo 1 2 --failure "New kmod RPM was built but could not be installed."
|
||||
else
|
||||
local somefailed="true"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
if [[ -n "${continue_line}" ]] ; then
|
||||
akmods_echo 1 2 --success
|
||||
elif [[ -n "${someignored}" ]] || [[ -n "${somefailed}" ]] ; then
|
||||
echo
|
||||
akmods_echo 1 2 "Hint: Some kmods were ignored or failed to build or install."
|
||||
akmods_echo 1 2 "You can try to rebuild and install them by by calling"
|
||||
akmods_echo 1 2 "'/usr/sbin/akmods --force' as root."
|
||||
echo
|
||||
sleep 2
|
||||
fi
|
||||
|
||||
# akmods for newly installed akmod rpms as wells as akmods.service run
|
||||
# after udev and systemd-modules-load.service have tried to load modules
|
||||
if [[ -n "${somesucceeded}" ]] && [[ ${this_kernelver} = "$(uname -r)" ]] ; then
|
||||
find /sys/devices -name modalias -print0 | xargs -0 cat | xargs modprobe -a -b -q
|
||||
if [ -f /usr/bin/systemctl ] ; then
|
||||
systemctl restart systemd-modules-load.service
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
myprog_help ()
|
||||
{
|
||||
echo "Checks the akmod packages and rebuilds them if needed"
|
||||
echo $'\n'"Usage: ${myprog} [OPTIONS]"
|
||||
echo $'\n'"Options:"
|
||||
echo " --force -- try all, even if they failed earlier"
|
||||
echo " --kernels <kernel> -- build and install only for kernel <kernel>"
|
||||
echo " (formatted the same as 'uname -r' would produce)"
|
||||
echo " --akmod <akmod> -- build and install only akmod <akmod>"
|
||||
}
|
||||
|
||||
|
||||
# first parse command line options
|
||||
while [ "${1}" ] ; do
|
||||
case "${1}" in
|
||||
--kernel|--kernels)
|
||||
shift
|
||||
if [[ ! -n "${1}" ]] ; then
|
||||
echo "ERROR: Please provide the kernel-version to build for together with --kernel" >&2
|
||||
exit 1
|
||||
elif [[ ! -r /usr/src/kernels/"${1}"/Makefile ]] && \
|
||||
[[ ! -r /lib/modules/"${1}"/build/Makefile ]] ; then
|
||||
echo "Could not find files needed to compile modules for ${1}"
|
||||
echo "Are the development files for kernel ${1} or the appropriate kernel-devel package installed?"
|
||||
exit 1
|
||||
elif [[ -r /usr/src/kernels/"${1}"/Makefile ]] && \
|
||||
[[ ! -d /lib/modules/"${1}" ]] ; then
|
||||
# this is a red hat / fedora kernel-devel package, but the kernel for it is not installed
|
||||
# kmodtool would add a dep on that kernel when building; thus when we'd try to install the
|
||||
# rpms we'd run into a missing-dep problem. Thus we prevent that case
|
||||
echo "Kernel ${1} not installed"
|
||||
exit 1
|
||||
fi
|
||||
# overwrites the default:
|
||||
if [[ ! -n "${kernels}" ]] ; then
|
||||
kernels="${1}"
|
||||
else
|
||||
kernels="${kernels} ${1}"
|
||||
fi
|
||||
# an try to build, even if we tried already
|
||||
alwaystry=true
|
||||
shift
|
||||
;;
|
||||
--akmod|--kmod)
|
||||
shift
|
||||
if [[ ! -n "${1}" ]] ; then
|
||||
echo "ERROR: Please provide a name of a akmod package together with --akmods" >&2
|
||||
exit 1
|
||||
elif [[ -r /usr/src/akmods/"${1}"-kmod.latest ]] ; then
|
||||
akmods="${akmods}${1} "
|
||||
elif [[ -r /usr/src/akmods/"${1}".latest ]] ; then
|
||||
akmods="${akmods}${1%%-kmod} "
|
||||
else
|
||||
echo "Could not find akmod ${1}"
|
||||
exit 1
|
||||
fi
|
||||
shift
|
||||
;;
|
||||
--force)
|
||||
alwaystry=true
|
||||
shift
|
||||
;;
|
||||
--from-init)
|
||||
# just in case: remove stale lockfile if it exists:
|
||||
rm -f /var/cache/akmods/.lockfile
|
||||
# Clean old logs and rpm files from no more installed kmod
|
||||
# packages.
|
||||
cleanup_cachedir
|
||||
shift
|
||||
;;
|
||||
--from-posttrans|--from-kernel-posttrans|--from-akmod-posttrans)
|
||||
# ignored
|
||||
shift
|
||||
;;
|
||||
--verbose)
|
||||
let verboselevel++
|
||||
shift
|
||||
;;
|
||||
--quiet)
|
||||
let verboselevel--
|
||||
shift
|
||||
;;
|
||||
--help)
|
||||
myprog_help
|
||||
exit 0
|
||||
;;
|
||||
--version)
|
||||
echo "${myprog} ${myver}"
|
||||
exit 0
|
||||
;;
|
||||
*)
|
||||
echo "Error: Unknown option '${1}'." >&2
|
||||
myprog_help >&2
|
||||
exit 2
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
# sanity checks
|
||||
init
|
||||
|
||||
# go
|
||||
for kernel in ${kernels} ; do
|
||||
check_kmods ${kernel}
|
||||
done
|
||||
|
||||
# finished :)
|
||||
finally 0
|
||||
@ -0,0 +1,3 @@
|
||||
[Unit]
|
||||
Wants=akmods-keygen@.service
|
||||
PartOf=akmods.service
|
||||
@ -0,0 +1,11 @@
|
||||
[Unit]
|
||||
Description=Akmods Secure boot MOK Key Generation
|
||||
ConditionFileNotEmpty=|!/etc/pki/akmods/certs/public_key.der
|
||||
ConditionFileNotEmpty=|!/etc/pki/akmods/private/private_key.priv
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/usr/sbin/kmodgenca -a
|
||||
|
||||
[Install]
|
||||
WantedBy=akmods-keygen.target
|
||||
@ -0,0 +1,151 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# kmodgenca - Helper script to create CA/Keypair to sign modules.
|
||||
# Copyright (c) 2017 Stanislas Leduc <stanislas.leduc@balinor.net>
|
||||
# Copyright (c) 2018-2019 Nicolas Viéville <nicolas.vieville@uphf.fr>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
MYPROG="kmodgenca"
|
||||
MYVER="0.5.7"
|
||||
FORCE_BUILD=0
|
||||
AUTOMATIC_BUILD=0
|
||||
AUTOMATIC_BUILD_OPTION=""
|
||||
|
||||
myprog_help ()
|
||||
{
|
||||
echo "Build CA/Keypair to sign modules"
|
||||
echo $'\n'"Usage: ${MYPROG} [OPTIONS]"
|
||||
echo $'\n'"Options:"
|
||||
echo " -a, --auto -- generate default values for cacert.config file without prompt"
|
||||
echo " -f, --force -- build CA/Keypair even if there is already ones"
|
||||
echo " -h, --help -- print usage"
|
||||
echo " -V, --version -- show version"
|
||||
}
|
||||
|
||||
|
||||
# Parse command line options.
|
||||
#
|
||||
while [ "${1}" ] ; do
|
||||
case "${1}" in
|
||||
-a|--auto)
|
||||
AUTOMATIC_BUILD=1
|
||||
shift
|
||||
;;
|
||||
-f|--force)
|
||||
FORCE_BUILD=1
|
||||
shift
|
||||
;;
|
||||
-h|--help)
|
||||
myprog_help
|
||||
exit 0
|
||||
;;
|
||||
-V|--version)
|
||||
echo "${MYPROG} ${MYVER}"
|
||||
exit 0
|
||||
;;
|
||||
*)
|
||||
echo "Error: Unknown option '${1}'." >&2
|
||||
myprog_help >&2
|
||||
exit 2
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
# Exit early if cert and private key already exist and if FORCE_BUILD
|
||||
# is not equal to 1.
|
||||
#
|
||||
if $(readlink -e /etc/pki/akmods/certs/public_key.der &>/dev/null) && \
|
||||
$(readlink -e /etc/pki/akmods/private/private_key.priv &>/dev/null) && \
|
||||
[ ${FORCE_BUILD} -eq 0 ] ; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
CACERT_CONFIG="/etc/pki/akmods/cacert.config"
|
||||
KEYNAME="$(hostname)"-"$(od -vAn -N4 -tu4 < /dev/urandom | awk '{print $1}')"
|
||||
|
||||
# Create cacert.config file with local values if AUTOMATIC_BUILD is set
|
||||
# or ask for values manually.
|
||||
#
|
||||
echo "Update cacert.config..."
|
||||
if [ ${AUTOMATIC_BUILD} -eq 1 ] ; then
|
||||
# Set OpenSSL fields values, comment default values and min/max ones.
|
||||
sed -e "s#\(0.organizationName *= \).*#\1$(hostname)#" \
|
||||
-e "s#\(organizationalUnitName *= \).*#\1$(hostname)#" \
|
||||
-e "s#\(emailAddress *= \).*#\1akmods@$(hostname)#" \
|
||||
-e "s#\(localityName *= \).*#\1None#" \
|
||||
-e "s#\(stateOrProvinceName *= \).*#\1None#" \
|
||||
-e "s#\(countryName *= \).*#\1$(locale country_ab2)#" \
|
||||
-e "s#\(commonName *= \).*#\1$(hostname)"-"$(od -vAn -N4 -tu4 < /dev/urandom | awk '{print $1}')#" \
|
||||
-e "s/^[^#]*_default *= /#&/" \
|
||||
-e "s/^[^#]*_min/#&/" \
|
||||
-e "s/^[^#]*_max/#&/" ${CACERT_CONFIG}.in > ${CACERT_CONFIG}
|
||||
AUTOMATIC_BUILD_OPTION=" -batch"
|
||||
else
|
||||
# Activate prompt directive.
|
||||
sed -e "s#\(prompt *= \).*#\1yes#" ${CACERT_CONFIG}.in > ${CACERT_CONFIG}
|
||||
fi
|
||||
KEY_SUFF="$(date "+%F_%T_%N")"
|
||||
# If cert and private key files names already exists, do not overwrite
|
||||
# them but save them.
|
||||
#
|
||||
if [[ -e /etc/pki/akmods/certs/${KEYNAME}.der ]] ; then
|
||||
# If the cert has already been loaded in MOK, add "already_enrolled"
|
||||
# to the suffix of the backup file.
|
||||
# `mokutil --help` fails if EFI variables are not supported on the
|
||||
# system. It is therefore impossible to test the presence of the key
|
||||
# in MOK, and then do not add special suffix to the backup file.
|
||||
#
|
||||
if $(which mokutil &> /dev/null) && $(mokutil --help &> /dev/null) && $(mokutil --test-key /etc/pki/akmods/certs/${KEYNAME}.der &> /dev/null) ; then
|
||||
KEY_SUFF="${KEY_SUFF}_already_enrolled"
|
||||
fi
|
||||
mv /etc/pki/akmods/certs/${KEYNAME}.der /etc/pki/akmods/certs/${KEYNAME}.der.${KEY_SUFF}.bak
|
||||
if [[ -e /etc/pki/akmods/private/${KEYNAME}.priv ]] ; then
|
||||
mv /etc/pki/akmods/private/${KEYNAME}.priv /etc/pki/akmods/private/${KEYNAME}.priv.${KEY_SUFF}.bak
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "Generate new keypair..."
|
||||
sg akmods -c "
|
||||
umask 037
|
||||
openssl req -x509 -new -nodes -utf8 -sha256 -days 3650${AUTOMATIC_BUILD_OPTION} \
|
||||
-config ${CACERT_CONFIG} -outform DER \
|
||||
-out /etc/pki/akmods/certs/${KEYNAME}.der \
|
||||
-keyout /etc/pki/akmods/private/${KEYNAME}.priv
|
||||
"
|
||||
|
||||
# Ensure that akmods group can read keys.
|
||||
#
|
||||
chmod g+r /etc/pki/akmods/certs/${KEYNAME}.*
|
||||
chmod g+r /etc/pki/akmods/private/${KEYNAME}.*
|
||||
|
||||
# Sanitize permissions.
|
||||
#
|
||||
if [[ -x /usr/sbin/restorecon ]] ; then
|
||||
/usr/sbin/restorecon /etc/pki/akmods/certs/${KEYNAME}.der
|
||||
/usr/sbin/restorecon /etc/pki/akmods/private/${KEYNAME}.priv
|
||||
fi
|
||||
|
||||
# Update symlink to use new keypair.
|
||||
#
|
||||
ln -nsf /etc/pki/akmods/certs/${KEYNAME}.der /etc/pki/akmods/certs/public_key.der
|
||||
ln -nsf /etc/pki/akmods/private/${KEYNAME}.priv /etc/pki/akmods/private/private_key.priv
|
||||
|
||||
exit 0
|
||||
@ -0,0 +1,102 @@
|
||||
#!/bin/bash -
|
||||
############################################################################
|
||||
#
|
||||
# akmods - Rebuilds and install akmod RPMs
|
||||
# Copyright (c) 2007, 2008 Thorsten Leemhuis <fedora@leemhuis.info>
|
||||
# Copyright (c) 2018 Nicolas Chauvet <kwizart@gmail.com>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
############################################################################
|
||||
|
||||
myprog="akmods-post"
|
||||
tmpdir=
|
||||
|
||||
# Only do %post builds in ostree
|
||||
if ! grep -q OSTREE_VERSION= /etc/os-release && ! test -f /run/ostree-booted; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
kmodname=$1
|
||||
srpm=$2
|
||||
|
||||
|
||||
finally()
|
||||
{
|
||||
# remove tmpfiles
|
||||
remove_tmpdir
|
||||
|
||||
exit ${1:-128}
|
||||
}
|
||||
|
||||
# Make sure finally() is run regardless of reason for exiting.
|
||||
trap "finally" ABRT HUP INT QUIT
|
||||
|
||||
create_tmpdir()
|
||||
{
|
||||
if ! tmpdir="$(mktemp -d -p /tmp ${myprog}.XXXXXXXX)/" ; then
|
||||
echo "ERROR: failed to create tmpdir." >&2
|
||||
finally 1
|
||||
fi
|
||||
if ! mkdir "${tmpdir}"results ; then
|
||||
echo "ERROR: failed to create result tmpdir." >&2
|
||||
finally 1
|
||||
fi
|
||||
}
|
||||
|
||||
remove_tmpdir()
|
||||
{
|
||||
# remove tmpfiles
|
||||
if [[ -n "${tmpdir}" ]] && [[ -d "${tmpdir}" ]]; then
|
||||
rm -rf "${tmpdir}"
|
||||
fi
|
||||
}
|
||||
|
||||
# This is an ostree build, so do build for all
|
||||
# deployed kernels in the %post
|
||||
kernels="$(ls /lib/modules)"
|
||||
|
||||
create_tmpdir
|
||||
|
||||
for kernel in ${kernels} ; do
|
||||
echo "Building ${srpm} for kernel ${kernel}"
|
||||
# Note: This builds as root, but this is pretty safe because its happening in the ostree %post sandbox.
|
||||
# In fact, given that /usr is a rofiles-fuse mount no other user can access /usr in this sandbox anyway.
|
||||
akmodsbuild --quiet --kernels ${kernel} --outputdir ${tmpdir}results --logfile "${tmpdir}/akmodsbuild.log" "${srpm}" 2>&1
|
||||
returncode=$?
|
||||
if (( ! ${returncode} == 0 )); then
|
||||
finally 1
|
||||
fi
|
||||
done
|
||||
|
||||
for f in $(find "${tmpdir}results" -type f -name '*.rpm' | grep -v debuginfo) ; do
|
||||
rpm2cpio $f | cpio --quiet -D / -id
|
||||
returncode=$?
|
||||
if (( ! ${returncode} == 0 )); then
|
||||
echo "Extracting $f failed:" 2>&1
|
||||
finally 1
|
||||
fi
|
||||
done
|
||||
|
||||
for kernel in ${kernels} ; do
|
||||
depmod -v ${kernel} 2>&1
|
||||
done
|
||||
|
||||
finally 0
|
||||
@ -0,0 +1,31 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# akmods-shutdown - Helper script to build kernel modules on shutdown
|
||||
# Copyright (c) 2012 Richard shaw <hobbes1069@gmail.com>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
|
||||
echo "Building modules for all installed kernels."
|
||||
for kernel in /usr/src/kernels/* ; do
|
||||
kernel=$(basename $kernel)
|
||||
/usr/sbin/akmods --kernels $kernel
|
||||
done
|
||||
|
||||
@ -0,0 +1,14 @@
|
||||
[Unit]
|
||||
Description=Builds and install new kmods from akmod packages
|
||||
Before=shutdown.service reboot.service halt.service
|
||||
Conflicts=shutdown.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/bin/true
|
||||
ExecStop=-/usr/sbin/akmods-shutdown
|
||||
TimeoutStopSec=5min
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@ -0,0 +1,2 @@
|
||||
# See tmpfiles.d(5) for details
|
||||
d /run/akmods 0770 root akmods -
|
||||
@ -0,0 +1,12 @@
|
||||
[BUGS]
|
||||
https://bugzilla.rpmfusion.org/buglist.cgi?product=Fedora&component=akmods&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED
|
||||
[REPORTING BUGS]
|
||||
Submit a bug against the akmods component at:
|
||||
.br
|
||||
https://bugzilla.rpmfusion.org/enter_bug.cgi?product=Fedora
|
||||
[AUTHOR]
|
||||
Thorsten Leemhuis <fedora [AT] leemhuis [DOT] info>
|
||||
[MAINTAINER]
|
||||
Richard Shaw <hobbes1069 [AT] gmail [DOT] com>
|
||||
[SEE ALSO]
|
||||
http://rpmfusion.org/Packaging/KernelModules/Akmods
|
||||
@ -0,0 +1,8 @@
|
||||
/var/log/akmods/akmods.log {
|
||||
monthly
|
||||
rotate 12
|
||||
missingok
|
||||
notifempty
|
||||
create 644 root root
|
||||
su root akmods
|
||||
}
|
||||
@ -0,0 +1,14 @@
|
||||
[Unit]
|
||||
Description=Builds and install new kmods from akmod packages
|
||||
ConditionPathExists=!/run/ostree-booted
|
||||
Before=@SERVICE@
|
||||
After=akmods-keygen.target
|
||||
Wants=akmods-keygen.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/usr/sbin/akmods --from-init
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@ -0,0 +1,12 @@
|
||||
[Unit]
|
||||
Description=Builds and install new kmods from akmod for a given kernel
|
||||
Wants=akmods-keygen.target
|
||||
After=akmods-keygen.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/usr/bin/systemd-inhibit --mode=block --what=idle:sleep:shutdown --who="akmods" --why="Akmods Transaction running" /usr/sbin/akmods --from-kernel-posttrans --kernels %i
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@ -0,0 +1,358 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# akmodbuild - Helper script for building kernel module SRPMs
|
||||
# Copyright (c) 2007 Thorsten Leemhuis <fedora@leemhuis.info>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
myprog="akmodsbuild"
|
||||
myver="0.5.6"
|
||||
|
||||
# defaults that might get overwritten by user:
|
||||
kernels="$(uname -r)"
|
||||
target="$(uname -m)"
|
||||
if [[ "${target}" == "armv7l" ]] ; then
|
||||
target="armv7hl"
|
||||
fi
|
||||
numberofjobs=$(grep -c processor /proc/cpuinfo 2> /dev/null)
|
||||
verboselevel=2
|
||||
outputdir="${PWD}"
|
||||
srpms=
|
||||
|
||||
init ()
|
||||
{
|
||||
## startup checks
|
||||
# prevent root-usage
|
||||
if [[ -w /var ]] ; then
|
||||
echo "ERROR: Not to be used as root; start as user or '${myprog}' instead." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# do we have everything we need to build for the kernels in question?
|
||||
for kernel in ${kernels}; do
|
||||
if [[ ! -e /usr/src/kernels/${kernel}/Makefile ]] && [[ ! -e /usr/lib/modules/${kernel}/build/Makefile ]] ; then
|
||||
echo "ERROR: Files needed for building modules against kernel" >&2
|
||||
echo " ${kernel} could not be found as the following" >&2
|
||||
echo " directories are missing:"
|
||||
echo " /usr/src/kernels/${kernel}/" >&2
|
||||
echo " /usr/lib/modules/${kernel}/build/" >&2
|
||||
exit 2
|
||||
fi
|
||||
done
|
||||
|
||||
if [[ ! -n "${srpms}" ]] ; then
|
||||
echo "ERROR: Please provide a list of SRPM-files to build."
|
||||
exit 2
|
||||
fi
|
||||
|
||||
# SRPMS available?
|
||||
for srpm in ${srpms}; do
|
||||
if [[ ! -r ${srpm} ]] ; then
|
||||
echo "ERROR: Can't find SRPM ${srpm}"
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
|
||||
# room to save things
|
||||
if [[ ! -d "${outputdir}" ]] ; then
|
||||
echo "ERROR: ${outputdir} is not a directory" >&2
|
||||
exit 1
|
||||
elif [[ ! -w "${outputdir}" ]] ; then
|
||||
echo "ERROR: ${outputdir} is not a writable" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
|
||||
# make sure this is a number
|
||||
if ! (( ${numberofjobs} > 0 )) ; then
|
||||
echo "Warning: using hardcoded defaut value for number of jobs"
|
||||
numberofjobs=2
|
||||
fi
|
||||
|
||||
## preparations
|
||||
# tmpdir
|
||||
if ! tmpdir="$(mktemp -d -p /tmp ${myprog}.XXXXXXXX)" ; then
|
||||
echo "ERROR: Could create tempdir."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# buildtreee
|
||||
mkdir "${tmpdir}"/{BUILD,SOURCES,SPECS,SRPMS,RPMS,RPMS/"${target}"}
|
||||
|
||||
# logfile
|
||||
if [[ ! -n "${logfile}" ]] ; then
|
||||
logfile="${tmpdir}/logfile"
|
||||
fi
|
||||
|
||||
if ( [[ -e "${logfile}" ]] && [[ ! -w "${logfile}" ]] ) || ! touch "${logfile}" ; then
|
||||
echo "ERROR: Could not write logfile."
|
||||
finally
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
finally()
|
||||
{
|
||||
# kill background jobs if needed
|
||||
if [[ -n "${watch_jobid}" ]] ; then
|
||||
kill "${watch_jobid}"
|
||||
fi
|
||||
if [[ -n "${rpmbuild_jobid}" ]] ; then
|
||||
kill "${rpmbuild_jobid}"
|
||||
fi
|
||||
|
||||
# remove tmpfiles
|
||||
if [[ -d "${tmpdir}" ]] ; then
|
||||
rm -rf "${tmpdir}"
|
||||
fi
|
||||
}
|
||||
trap "finally" 2
|
||||
|
||||
|
||||
akmods_echo()
|
||||
{
|
||||
# where to output
|
||||
local this_fd=${1}
|
||||
shift
|
||||
|
||||
# verboselevel
|
||||
local this_verbose=${1}
|
||||
shift
|
||||
|
||||
if [[ "${1}" == "--not-logfile" ]] ; then
|
||||
local notlogfile=true
|
||||
shift
|
||||
fi
|
||||
|
||||
# output to console
|
||||
if (( ${verboselevel} >= ${this_verbose} )) ; then
|
||||
echo "$@" >&${this_fd}
|
||||
fi
|
||||
|
||||
# global logfile
|
||||
if [[ ! -n ${notlogfile} ]] ; then
|
||||
echo "$@" >> "${logfile}"
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
watch_rpmbuild()
|
||||
{
|
||||
# background function to show rpmbuild progress
|
||||
# does't use akmods_echo here; this stage handles the output on its own
|
||||
# (seperate process and there is no need to log this)
|
||||
if (( ${verboselevel} == 2 )) ; then
|
||||
tail --pid ${1} -n +1 -s 0.1 -f ${2} 2>/dev/null | grep --line-buffered -e '%prep' -e '%build' -e '%install' -e '%clean' | while read line ; do
|
||||
if [[ "${line}" != "${line##*prep}" ]] ; then
|
||||
echo -n "prep "
|
||||
elif [[ "${line}" != "${line##*build}" ]] ; then
|
||||
echo -n "build "
|
||||
elif [[ "${line}" != "${line##*install}" ]] ; then
|
||||
echo -n "install "
|
||||
elif [[ "${line}" != "${line##*clean}" ]] ; then
|
||||
echo -n "clean; "
|
||||
# last linefeed is done by the caller
|
||||
fi
|
||||
done
|
||||
elif (( ${verboselevel} > 2 )) ; then
|
||||
tail --pid ${1} -n +1 -s 0.1 -f ${2}
|
||||
fi
|
||||
}
|
||||
|
||||
process_srpm()
|
||||
{
|
||||
local source_rpm="${1}"
|
||||
|
||||
# status info
|
||||
akmods_echo 1 2 -n "* Rebuilding ${source_rpm} for kernel(s) ${kernels}: "
|
||||
|
||||
# kick off rebuild into background
|
||||
/usr/bin/time --format='%x' --output="${tmpdir}/.jobexit" rpmbuild \
|
||||
--define "_topdir ${tmpdir}/" \
|
||||
--define "_buildtree ${tmpdir}/BUILD" \
|
||||
--define "_specdir ${tmpdir}/SPECS" \
|
||||
--define "_sourcedir ${tmpdir}/SOURCES" \
|
||||
--define "_srcrpmdir ${tmpdir}/SRPMS" \
|
||||
--define "_rpmdir ${tmpdir}/RPMS" \
|
||||
--define "_smp_mflags -j${numberofjobs}" \
|
||||
--define "kernels ${kernels}" \
|
||||
--target ${target} \
|
||||
--rebuild "${source_rpm}" 2>&1 | tee -a "${logfile}" > "${tmpdir}/.joblog" &
|
||||
|
||||
local rpmbuild_jobid=$!
|
||||
|
||||
# show progress
|
||||
if (( ${verboselevel} >= 2 )) ; then
|
||||
watch_rpmbuild ${rpmbuild_jobid} "${tmpdir}/.joblog" 2> /dev/null &
|
||||
local watch_jobid=$!
|
||||
fi
|
||||
|
||||
# wait for rpmbuild
|
||||
wait ${rpmbuild_jobid}
|
||||
local rpmbuild_returncode=$(tail -n 1 "${tmpdir}/.jobexit")
|
||||
unset rpmbuild_jobid
|
||||
|
||||
# give watch_rpmbuild a moment to catch up; kill it if it does not
|
||||
if (( ${verboselevel} >= 2 )) ; then
|
||||
sleep 0.5
|
||||
kill ${watch_jobid} &> /dev/null
|
||||
unset watch_jobid
|
||||
fi
|
||||
|
||||
# did rpmbuild succeed?
|
||||
if (( ${rpmbuild_returncode} != 0 )) ; then
|
||||
# linefeed:
|
||||
akmods_echo 1 2 ""
|
||||
|
||||
akmods_echo 2 2 --not-logfile "rpmbuild failed with errorcode ${rpmbuild_returncode}; last 35 Lines of log:"
|
||||
akmods_echo 2 2 --not-logfile "--- "
|
||||
tail -n 35 "${tmpdir}/.joblog" >&2
|
||||
akmods_echo 2 2 --not-logfile "---"
|
||||
return ${rpmbuild_returncode}
|
||||
fi
|
||||
|
||||
# finish status for watch_rpmbuild
|
||||
if (( ${verboselevel} >= 2 )) ; then
|
||||
akmods_echo 1 2 -n "Successfull; "
|
||||
fi
|
||||
|
||||
local rpms_built="$(cd "${tmpdir}"/RPMS/"${target}" ; echo *)"
|
||||
|
||||
if ! mv "${tmpdir}/RPMS/${target}/"* "${outputdir}" ; then
|
||||
# linefeed:
|
||||
akmods_echo 1 2 ""
|
||||
|
||||
akmods_echo 2 2 "Failed to move ${tmpdir}/RPMS/${target}/"* "to ${outputdir}"
|
||||
return 128
|
||||
fi
|
||||
|
||||
if (( ${verboselevel} == 1 )) ; then
|
||||
for rpm in ${rpms_built}; do
|
||||
echo "${outputdir%%/}/${rpm}"
|
||||
done
|
||||
elif (( ${verboselevel} >= 2 )) ; then
|
||||
akmods_echo 1 2 "Saved ${rpms_built} in ${outputdir%%/}/"
|
||||
fi
|
||||
|
||||
|
||||
# finished
|
||||
return 0
|
||||
}
|
||||
|
||||
myprog_help ()
|
||||
{
|
||||
echo "Rebuilds kmod SRPM(s)"
|
||||
echo $'\n'"Usage: ${myprog} [OPTIONS] <SRPMS>"
|
||||
echo $'\n'"Options:"
|
||||
echo " -k, --kernels -- build for kernel-versions (output from 'uname -r')"
|
||||
echo " -l, --logfile <file> -- save rpmbuild output to <file>"
|
||||
echo " -o, --outputdir <dir> -- save rpms and logs here (current directory)"
|
||||
echo " -t, --target -- target-arch (output from 'uname -m')"
|
||||
echo " -v, --verbose -- increase verboseness"
|
||||
echo " -q, --quiet -- be more quiet"
|
||||
echo " -h, --help -- show usage"
|
||||
echo " -V, --version -- show version"
|
||||
}
|
||||
|
||||
while [ "${1}" ] ; do
|
||||
case "${1}" in
|
||||
-k|--kernels)
|
||||
shift
|
||||
if [[ ! -n "${1}" ]] ; then
|
||||
echo "ERROR: Please provide kernel-version(s) to build for together with --kernel" >&2
|
||||
exit 1
|
||||
fi
|
||||
kernels="${1}"
|
||||
shift
|
||||
;;
|
||||
-l|--logfile)
|
||||
shift
|
||||
if [[ ! -n "${1}" ]] ; then
|
||||
echo "ERROR: Please provide a filename together with --logfile" >&2
|
||||
exit 1
|
||||
fi
|
||||
logfile="${1}"
|
||||
shift
|
||||
;;
|
||||
-o|--outputdir)
|
||||
shift
|
||||
if [[ ! -n "${1}" ]] ; then
|
||||
echo "ERROR: Please provide the output directory together with --outputdir" >&2
|
||||
exit 1
|
||||
fi
|
||||
outputdir="${1}"
|
||||
shift
|
||||
;;
|
||||
-t|--target)
|
||||
shift
|
||||
if [[ ! -n "${1}" ]] ; then
|
||||
echo "ERROR: Please provide the target-arch together with --target" >&2
|
||||
exit 1
|
||||
fi
|
||||
target="${1}"
|
||||
shift
|
||||
;;
|
||||
-v|--verbose)
|
||||
let verboselevel++
|
||||
shift
|
||||
;;
|
||||
-q|--quiet)
|
||||
let verboselevel--
|
||||
shift
|
||||
;;
|
||||
-h|--help)
|
||||
myprog_help
|
||||
exit 0
|
||||
;;
|
||||
-V|--version)
|
||||
echo "${myprog} ${myver}"
|
||||
exit 0
|
||||
;;
|
||||
--*)
|
||||
echo "Error: Unknown option '${1}'." >&2
|
||||
myprog_help >&2
|
||||
exit 2
|
||||
;;
|
||||
*)
|
||||
srpms="${srpms} ${1}"
|
||||
shift
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
# sanity checks
|
||||
init
|
||||
|
||||
# go
|
||||
for srpm in ${srpms}; do
|
||||
process_srpm ${srpm}
|
||||
returncode=$?
|
||||
|
||||
if (( ${returncode} != 0 )) ; then
|
||||
finally
|
||||
exit ${returncode}
|
||||
fi
|
||||
done
|
||||
|
||||
# finished
|
||||
finally
|
||||
|
||||
exit 0
|
||||
@ -0,0 +1,47 @@
|
||||
#!/bin/bash -
|
||||
#
|
||||
# akmodposttrans - Calls akmods for newly installed kernels
|
||||
#
|
||||
# Copyright (c) 2009 Thorsten Leemhuis <fedora@leemhuis.info>
|
||||
# Copyright (c) 2017 Nicolas Chauvet <kwizart@gmail.com>
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining
|
||||
# a copy of this software and associated documentation files (the
|
||||
# "Software"), to deal in the Software without restriction, including
|
||||
# without limitation the rights to use, copy, modify, merge, publish,
|
||||
# distribute, sublicense, and/or sell copies of the Software, and to
|
||||
# permit persons to whom the Software is furnished to do so, subject to
|
||||
# the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be
|
||||
# included in all copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
||||
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
||||
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
||||
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
||||
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
#
|
||||
|
||||
# just check in case a user calls this directly
|
||||
if [[ ! -w /var ]] ; then
|
||||
echo "Needs to run as root to be able to install rpms." >&2
|
||||
exit 4
|
||||
fi
|
||||
|
||||
# needs to run in background as rpmdb might be locked otherwise
|
||||
if [ -e /bin/systemctl ] ; then
|
||||
# Exit early if system-update.target is active - rhbz#1518401
|
||||
/bin/systemctl is-active system-update.target &>/dev/null
|
||||
RET=$?
|
||||
|
||||
[ $RET == 0 ] && exit 0
|
||||
|
||||
/bin/systemctl restart akmods@${1}.service --no-block >/dev/null 2>&1
|
||||
else
|
||||
nohup /usr/sbin/akmods --from-kernel-posttrans --kernels ${1} > /dev/null 2>&1 &
|
||||
fi
|
||||
|
||||
exit 0
|
||||
@ -0,0 +1,41 @@
|
||||
# Default OpenSSL settings and configuration file for kmodgenca
|
||||
# shell-script.
|
||||
#
|
||||
[ req ]
|
||||
default_bits = 4096
|
||||
distinguished_name = req_distinguished_name
|
||||
prompt = no
|
||||
utf8 = yes
|
||||
string_mask = utf8only
|
||||
x509_extensions = req_exts
|
||||
|
||||
[ req_distinguished_name ]
|
||||
# Values settings
|
||||
#
|
||||
0.organizationName = Organization Name (eg, company)
|
||||
organizationalUnitName = Organizational Unit Name (eg, section)
|
||||
emailAddress = Email Address
|
||||
emailAddress_max = 64
|
||||
localityName = Locality Name (eg, city)
|
||||
stateOrProvinceName = State or Province Name (full name)
|
||||
countryName = Country Name (2 letter code)
|
||||
countryName_min = 2
|
||||
countryName_max = 2
|
||||
commonName = Common Name (eg, your name or your server\'s hostname)
|
||||
commonName_max = 64
|
||||
|
||||
# Default values
|
||||
#
|
||||
0.organizationName_default = akmods local
|
||||
organizationalUnitName_default = akmods
|
||||
emailAddress_default = akmods@localhost.localdomain
|
||||
localityName_default = None
|
||||
stateOrProvinceName_default = None
|
||||
countryName_default = XX
|
||||
commonName_default = akmods local signing CA
|
||||
|
||||
[ req_exts ]
|
||||
basicConstraints = critical,CA:FALSE
|
||||
keyUsage = digitalSignature
|
||||
subjectKeyIdentifier = hash
|
||||
authorityKeyIdentifier = keyid
|
||||
@ -0,0 +1,419 @@
|
||||
Name: akmods
|
||||
Version: 0.5.7
|
||||
Release: 8%{?dist}
|
||||
Summary: Automatic kmods build and install tool
|
||||
|
||||
License: MIT
|
||||
URL: http://rpmfusion.org/Packaging/KernelModules/Akmods
|
||||
|
||||
# We are upstream, these files are maintained directly in pkg-git
|
||||
Source0: 95-akmods.preset
|
||||
Source1: akmods
|
||||
Source2: akmodsbuild
|
||||
Source3: akmods.h2m
|
||||
Source5: akmodsposttrans
|
||||
Source6: akmods.service.in
|
||||
Source7: akmods-shutdown
|
||||
Source8: akmods-shutdown.service
|
||||
Source9: README
|
||||
Source10: LICENSE
|
||||
Source11: akmods@.service
|
||||
Source12: akmods-ostree-post
|
||||
Source13: 95-akmodsposttrans.install
|
||||
Source14: akmods.log
|
||||
Source15: README.secureboot
|
||||
Source16: cacert.config.in
|
||||
Source17: akmods-kmodgenca
|
||||
Source18: akmods-keygen.target
|
||||
Source19: akmods-keygen@.service
|
||||
Source20: %{name}-tmpfiles.conf
|
||||
|
||||
BuildArch: noarch
|
||||
|
||||
BuildRequires: help2man
|
||||
|
||||
# not picked up automatically
|
||||
%if 0%{?rhel} == 6
|
||||
Requires: %{_bindir}/nohup
|
||||
%endif
|
||||
Requires: %{_bindir}/flock
|
||||
Requires: %{_bindir}/time
|
||||
|
||||
# needed for actually building kmods:
|
||||
Requires: %{_bindir}/rpmdev-vercmp
|
||||
Requires: kmodtool >= 1.1-1
|
||||
|
||||
# needed to create CA/Keypair to sign modules
|
||||
Requires: openssl
|
||||
|
||||
# this should track in all stuff that is normally needed to compile modules:
|
||||
Requires: bzip2 coreutils diffutils file findutils gawk gcc grep
|
||||
Requires: gzip make sed tar unzip util-linux which rpm-build
|
||||
|
||||
# On EL, kABI list was renamed
|
||||
%if 0%{?rhel}
|
||||
%if 0%{?rhel} >= 8
|
||||
Requires: (kernel-abi-stablelists or kernel-abi-whitelists)
|
||||
%else
|
||||
Requires: kernel-abi-whitelists
|
||||
%endif
|
||||
%endif
|
||||
|
||||
%if 0%{?fedora} || 0%{?rhel} > 7
|
||||
# We use a virtual provide that would match either
|
||||
# kernel-devel or kernel-PAE-devel
|
||||
Requires: kernel-devel-uname-r
|
||||
# kernel-devel-matched enforces the same kernel version as the -devel
|
||||
%if 0%{?fedora} >= 36 || 0%{?rhel} >= 9
|
||||
Requires: (kernel-debug-devel-matched if kernel-debug-core)
|
||||
Requires: (kernel-devel-matched if kernel-core)
|
||||
Requires: (kernel-lpae-devel-matched if kernel-lpae-core)
|
||||
%else
|
||||
Suggests: (kernel-debug-devel if kernel-debug)
|
||||
Suggests: (kernel-devel if kernel)
|
||||
Suggests: (kernel-lpae-devel if kernel-lpae)
|
||||
%endif
|
||||
Suggests: (kernel-PAE-devel if kernel-PAE)
|
||||
Suggests: (kernel-PAEdebug-devel if kernel-PAEdebug)
|
||||
# Theses are from planetccrma-core or rhel-7-server-rt-rpms
|
||||
Suggests: (kernel-rt-devel if kernel-rt)
|
||||
Suggests: (kernel-rtPAE-devel if kernel-rtPAE)
|
||||
%else
|
||||
# There is no much variant there, so using a sane default
|
||||
Requires: kernel-devel
|
||||
%endif
|
||||
|
||||
# we create a special user that used by akmods to build kmod packages
|
||||
Requires(pre): shadow-utils
|
||||
|
||||
# systemd unit requirements.
|
||||
BuildRequires: systemd
|
||||
Requires(post): systemd
|
||||
Requires(preun): systemd
|
||||
Requires(postun): systemd
|
||||
# Optional but good to have on recent kernel
|
||||
Requires: pkgconfig(libelf)
|
||||
|
||||
|
||||
%description
|
||||
Akmods startup script will rebuild akmod packages during system
|
||||
boot, while its background daemon will build them for kernels right
|
||||
after they were installed.
|
||||
|
||||
|
||||
%prep
|
||||
%setup -q -c -T
|
||||
cp -p %{SOURCE9} %{SOURCE10} %{SOURCE15} .
|
||||
|
||||
|
||||
%build
|
||||
# Nothing to build
|
||||
|
||||
|
||||
%install
|
||||
mkdir -p %{buildroot}%{_usrsrc}/%{name} \
|
||||
%{buildroot}%{_sbindir} \
|
||||
%{buildroot}%{_sysconfdir}/rpm \
|
||||
%{buildroot}%{_sysconfdir}/pki/%{name}/certs \
|
||||
%{buildroot}%{_sysconfdir}/pki/%{name}/private \
|
||||
%{buildroot}%{_sysconfdir}/kernel/postinst.d \
|
||||
%{buildroot}%{_sysconfdir}/logrotate.d \
|
||||
%{buildroot}%{_localstatedir}/cache/%{name} \
|
||||
%{buildroot}%{_localstatedir}/log/%{name} \
|
||||
%{buildroot}%{_tmpfilesdir}
|
||||
|
||||
install -pm 0755 %{SOURCE1} %{buildroot}%{_sbindir}/
|
||||
install -pm 0755 %{SOURCE2} %{buildroot}%{_sbindir}/
|
||||
install -pm 0755 %{SOURCE12} %{buildroot}%{_sbindir}/
|
||||
install -pm 0755 %{SOURCE5} %{buildroot}%{_sysconfdir}/kernel/postinst.d/
|
||||
install -pm 0644 %{SOURCE14} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
|
||||
install -pm 0640 %{SOURCE16} %{buildroot}%{_sysconfdir}/pki/%{name}/
|
||||
install -pm 0755 %{SOURCE17} %{buildroot}%{_sbindir}/kmodgenca
|
||||
install -pm 0644 %{SOURCE20} %{buildroot}%{_tmpfilesdir}/%{name}.conf
|
||||
install -dpm 0770 %{buildroot}%{_rundir}/%{name}/
|
||||
|
||||
mkdir -p %{buildroot}%{_prefix}/lib/kernel/install.d
|
||||
install -pm 0755 %{SOURCE13} %{buildroot}%{_prefix}/lib/kernel/install.d/
|
||||
mkdir -p \
|
||||
%{buildroot}%{_unitdir} \
|
||||
%{buildroot}%{_presetdir}
|
||||
sed "s|@SERVICE@|display-manager.service|" %{SOURCE6} >\
|
||||
%{buildroot}%{_unitdir}/akmods.service
|
||||
install -pm 0644 %{SOURCE0} %{buildroot}%{_presetdir}/
|
||||
install -pm 0755 %{SOURCE7} %{buildroot}%{_sbindir}/
|
||||
install -pm 0644 %{SOURCE8} %{buildroot}%{_unitdir}/
|
||||
install -pm 0644 %{SOURCE11} %{buildroot}%{_unitdir}/
|
||||
install -pm 0644 %{SOURCE18} %{buildroot}%{_unitdir}/
|
||||
install -pm 0644 %{SOURCE19} %{buildroot}%{_unitdir}/
|
||||
|
||||
# Generate and install man pages.
|
||||
mkdir -p %{buildroot}%{_mandir}/man1
|
||||
help2man -N -i %{SOURCE3} -s 1 \
|
||||
-o %{buildroot}%{_mandir}/man1/akmods.1 \
|
||||
%{buildroot}%{_sbindir}/akmods
|
||||
help2man -N -i %{SOURCE3} -s 1 \
|
||||
-o %{buildroot}%{_mandir}/man1/akmodsbuild.1 \
|
||||
%{buildroot}%{_sbindir}/akmodsbuild
|
||||
|
||||
|
||||
%pre
|
||||
# create group and user
|
||||
getent group akmods >/dev/null || groupadd -r akmods
|
||||
getent passwd akmods >/dev/null || \
|
||||
useradd -r -g akmods -d /var/cache/akmods/ -s /sbin/nologin \
|
||||
-c "User is used by akmods to build akmod packages" akmods
|
||||
|
||||
%post
|
||||
%systemd_post akmods.service
|
||||
%systemd_post akmods@.service
|
||||
%systemd_post akmods-shutdown.service
|
||||
|
||||
%preun
|
||||
%systemd_preun akmods.service
|
||||
%systemd_preun akmods@.service
|
||||
%systemd_preun akmods-shutdown.service
|
||||
|
||||
%postun
|
||||
%systemd_postun akmods.service
|
||||
%systemd_postun akmods@.service
|
||||
%systemd_postun akmods-shutdown.service
|
||||
|
||||
|
||||
%files
|
||||
%doc README README.secureboot
|
||||
%license LICENSE
|
||||
%{_sbindir}/akmodsbuild
|
||||
%{_sbindir}/akmods
|
||||
%{_sbindir}/akmods-ostree-post
|
||||
%{_sbindir}/kmodgenca
|
||||
%dir %attr(750,root,akmods) %{_sysconfdir}/pki/%{name}/certs
|
||||
%dir %attr(750,root,akmods) %{_sysconfdir}/pki/%{name}/private
|
||||
%config(noreplace) %attr(640,root,akmods) %{_sysconfdir}/pki/%{name}/cacert.config.in
|
||||
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
|
||||
%{_sysconfdir}/kernel/postinst.d/akmodsposttrans
|
||||
%{_unitdir}/akmods.service
|
||||
%{_unitdir}/akmods@.service
|
||||
%{_sbindir}/akmods-shutdown
|
||||
%{_unitdir}/akmods-shutdown.service
|
||||
%{_prefix}/lib/kernel/install.d/95-akmodsposttrans.install
|
||||
%attr(0644,root,root) %{_unitdir}/akmods-keygen.target
|
||||
%attr(0644,root,root) %{_unitdir}/akmods-keygen@.service
|
||||
%dir %attr(0770,root,akmods) %{_rundir}/%{name}
|
||||
%{_tmpfilesdir}/%{name}.conf
|
||||
# akmods was enabled in the default preset by f28
|
||||
%if 0%{?rhel}
|
||||
%{_presetdir}/95-akmods.preset
|
||||
%else
|
||||
%exclude %{_presetdir}/95-akmods.preset
|
||||
%endif
|
||||
%{_usrsrc}/akmods
|
||||
%dir %attr(-,akmods,akmods) %{_localstatedir}/cache/akmods
|
||||
%dir %attr(0775,root,akmods) %{_localstatedir}/log/%{name}
|
||||
%{_mandir}/man1/*
|
||||
|
||||
|
||||
%changelog
|
||||
* Wed Jun 05 2024 Arkady L. Shane <tigro@msvsphere-os.ru> - 0.5.7-8
|
||||
- Rebuilt for MSVSphere 9.4
|
||||
|
||||
* Wed May 04 2022 Nicolas Chauvet <kwizart@gmail.com> - 0.5.7-8
|
||||
- Fix logrotate permission access to /var/log/akmods directory - rhbz#2078490
|
||||
- Rename logrotate config file
|
||||
|
||||
* Wed Mar 09 2022 Timothée Ravier <tim@siosm.fr> - 0.5.7-7
|
||||
- Use 'Require' instead of 'Suggest' for kernel*-devel packages.
|
||||
|
||||
* Thu Jan 27 2022 Nicolas Viéville <nicolas.vieville@uphf.fr> - 0.5.7-6
|
||||
- Adapt usage of lockfile to systemd-tmpfiles
|
||||
- Re-locate akmods logs in /var/log
|
||||
|
||||
* Wed Jan 26 2022 Timothée Ravier <tim@siosm.fr> - 0.5.7-5
|
||||
- Use kernel*-core variants in conditional Suggests
|
||||
|
||||
* Wed Jan 19 2022 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.7-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
||||
|
||||
* Mon Dec 20 2021 Nicolas Chauvet <kwizart@gmail.com> - 0.5.7-3
|
||||
- Drop perl-interpeter
|
||||
- Drop akmodsinit
|
||||
- Only use preset on rhel
|
||||
- kernel-devel-matched support
|
||||
see also https://src.fedoraproject.org/rpms/akmods/pull-request/7
|
||||
|
||||
* Fri Dec 10 2021 Nicolas Chauvet <kwizart@gmail.com> - 0.5.7-2
|
||||
- Bump kmodtool requirement
|
||||
- Rename kABI list
|
||||
- Drop EL6 support
|
||||
- Switch to distro agnostic deps
|
||||
|
||||
* Fri Oct 22 2021 Nicolas Viéville <nicolas.vieville@uphf.fr> - 0.5.7-1
|
||||
- Add local akmods CA signing keys and support tools to sign modules for
|
||||
Secure boot thanks to Stanislas Leduc <stanislas.leduc@balinor.net>
|
||||
- Add akmods-keygen service to generate MOK key pair on first run
|
||||
|
||||
* Fri Oct 22 2021 Nicolas Viéville <nicolas.vieville@uphf.fr> - 0.5.6-29
|
||||
- Remove trailing spaces and clean-up
|
||||
- Use %%{name} when possible
|
||||
- Convert if statement from "[!] $variable" to "[!] -n $variable"
|
||||
- Fix kernel list build when parsing command line options
|
||||
- Ensure to build for grub default kernel
|
||||
- Improve detection of already installed (weak-)modules in akmods (RHEL)
|
||||
- akmods uses logrotate and clean-up /var/cache/akmods sub-directories of
|
||||
old logs and rpm files from no more installed kmod packages
|
||||
(rhbz #1542658).
|
||||
|
||||
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-28
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
||||
|
||||
* Mon Jan 25 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-27
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||
|
||||
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-26
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||
|
||||
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-25
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||
|
||||
* Wed Nov 20 2019 Nicolas Viéville <nicolas.vieville@uphf.fr> - 0.5.6-24
|
||||
- Check kernel presence differently for systemd-boot machines - rhbz#1769144
|
||||
|
||||
* Wed Oct 16 2019 Leigh Scott <leigh123linux@googlemail.com> - 0.5.6-23
|
||||
- Add requires kernel-abi-whitelists for RHEL
|
||||
|
||||
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-22
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||
|
||||
* Mon May 20 2019 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-21
|
||||
- Add check for rhel8
|
||||
|
||||
* Wed May 15 2019 Nicolas Viéville <nicolas.vieville@uphf.fr> - 0.5.6-20
|
||||
- Fix akmodsposttrans after kernel update/install on Fedora >= 28 and
|
||||
RHEL >= 7 - rhbz#1709055
|
||||
|
||||
* Thu Feb 28 2019 Alexander Larsson <alexl@redhat.com> - 0.5.6-19
|
||||
- Support ostree/silverblue builds - rhbz#1667014
|
||||
|
||||
* Thu Feb 28 2019 Hans de Goede <hdegoede@redhat.com>
|
||||
- Do not fail when the old initscripts pkg is not installed - rhbz#1680121
|
||||
|
||||
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-18
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||
|
||||
* Mon Nov 05 2018 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-17
|
||||
- Don't enforce target arch - rhbz#1644430
|
||||
- Rework log file path
|
||||
- Avoid using /usr/lib/modules for el6 compat
|
||||
|
||||
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-16
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||
|
||||
* Mon Mar 26 2018 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-15
|
||||
- Add inihibitor for akmods@.service
|
||||
- Use restart on akmodsposttrans
|
||||
|
||||
* Mon Mar 26 2018 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-14
|
||||
- Switch to always retry by default
|
||||
- Drop akmods preset by f28
|
||||
- Don't enable service on ah
|
||||
- Test a rw directory
|
||||
|
||||
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-13
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||
|
||||
* Wed Dec 13 2017 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-12
|
||||
- Update kernel posttrans method - rhbz#1518401
|
||||
|
||||
* Thu Aug 03 2017 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-11
|
||||
- Rework kernel-devel requires on el
|
||||
|
||||
* Thu Aug 03 2017 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-10
|
||||
- Enable suggests on fedora
|
||||
- Add back el6 support in spec
|
||||
- Add Requires elfutils-libelf-devel
|
||||
|
||||
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.5.6-9
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||
|
||||
* Thu Jul 13 2017 Petr Pisar <ppisar@redhat.com> - 0.5.6-8
|
||||
- perl dependency renamed to perl-interpreter
|
||||
<https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
|
||||
|
||||
* Thu May 4 2017 Hans de Goede <hdegoede@redhat.com> - 0.5.6-7
|
||||
- "udevadm trigger" may have bad side-effects (rhbz#454407) instead
|
||||
look for modalias files under /sys/devices and call modprobe directly
|
||||
- Fix exit status when no akmod packages are installed, so that systemd
|
||||
does not consider the akmods.service as having failed to start
|
||||
|
||||
* Wed May 3 2017 Hans de Goede <hdegoede@redhat.com> - 0.5.6-6
|
||||
- Run "udevadm trigger" and "systemctl restart systemd-modules-load.service"
|
||||
when new kmod packages have been build and installed so that the new
|
||||
modules may be used immediately without requiring a reboot
|
||||
|
||||
* Mon Mar 6 2017 Hans de Goede <hdegoede@redhat.com> - 0.5.6-5
|
||||
- Add LICENSE file (rhbz#1422918)
|
||||
|
||||
* Fri Feb 24 2017 Hans de Goede <hdegoede@redhat.com> - 0.5.6-4
|
||||
- Replace %%{_prefix}/lib/systemd/system-preset with %%{_presetdir}
|
||||
|
||||
* Thu Feb 16 2017 Hans de Goede <hdegoede@redhat.com> - 0.5.6-3
|
||||
- Submit to Fedora for package review
|
||||
|
||||
* Mon Nov 28 2016 Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-2
|
||||
- Use Suggests kernel-devel weak-dependency - see rfbz#3386
|
||||
|
||||
* Fri Oct 14 2016 Richard Shaw <hobbes1069@gmail.com> - 0.5.6-1
|
||||
- Disable shutdown systemd service file by default.
|
||||
- Remove modprobe line from main service file.
|
||||
|
||||
* Wed Aug 17 2016 Sérgio Basto <sergio@serjux.com> - 0.5.4-3
|
||||
- New release
|
||||
|
||||
* Sun Jan 03 2016 Nicolas Chauvet <kwizart@gmail.com> - 0.5.4-2
|
||||
- Revert conflicts kernel-debug-devel
|
||||
|
||||
* Thu Jul 23 2015 Richard Shaw <hobbes1069@gmail.com> - 0.5.4-1
|
||||
- Do not mark a build as failed when only installing the RPM fails.
|
||||
- Run akmods-shutdown script instead of akmods on shutdown.
|
||||
- Add systemd preset file to enable services by default.
|
||||
|
||||
* Wed Jul 15 2015 Richard Shaw <hobbes1069@gmail.com> - 0.5.3-2
|
||||
- Add package conflicts to stop pulling in kernel-debug-devel, fixes BZ#3386.
|
||||
- Add description for the formatting of the <kernel> parameter, BZ#3580.
|
||||
- Update static man pages and clean them up.
|
||||
- Fixed another instance of TMPDIR causing issues.
|
||||
- Added detection of dnf vs yum to akmods, fixed BZ#3481.
|
||||
|
||||
* Wed Apr 1 2015 Richard Shaw <hobbes1069@gmail.com> - 0.5.2-1
|
||||
- Fix temporary directory creation when TMPDIR environment variable is set,
|
||||
fixes BZ#2596.
|
||||
- Update systemd scripts to use macros.
|
||||
- Fix akmods run on shutdown systemd unit file, fixes BZ#3503.
|
||||
|
||||
* Sun Nov 16 2014 Nicolas Chauvet <kwizart@gmail.com> - 0.5.1-4
|
||||
- Fix akmods on armhfp - rfbz#3117
|
||||
- Use yum instead of rpm to install packages - rfbz#3350
|
||||
Switch to a better date format
|
||||
|
||||
* Fri Jan 11 2013 Richard Shaw <hobbes1069@gmail.com> - 0.5.1-3
|
||||
- Really fix akmods.service.in.
|
||||
|
||||
* Fri Jun 01 2012 Richard Shaw <hobbes1069@gmail.com> - 0.5.1-2
|
||||
- Add service file to run again on shutdown.
|
||||
- Add conditional for Fedora 18 to specify correct systemd graphical service.
|
||||
|
||||
* Thu Apr 12 2012 Nicolas Chauvet <kwizart@gmail.com> - 0.4.0-4
|
||||
- Rebuilt
|
||||
|
||||
* Tue Mar 20 2012 Richard Shaw <hobbes1069@gmail.com> - 0.4.0-3
|
||||
- Add additional error output if the needed kernel development files are not
|
||||
installed. (Fixes #561)
|
||||
|
||||
* Mon Mar 05 2012 Richard Shaw <hobbes1069@gmail.com> - 0.4.0-2
|
||||
- Remove remaining references to previous Fedora releases
|
||||
- Remove legacy SysV init script from CVS.
|
||||
- Added man page for akmods and cleaned up man page for akmodsbuild.
|
||||
|
||||
* Tue Feb 07 2012 Nicolas Chauvet <kwizart@gmail.com> - 0.4.0-1
|
||||
- Update for UsrMove support
|
||||
- Remove unused references to older fedora
|
||||
- Change Requires from kernel-devel to kernel-devel-uname-r
|
||||
Loading…
Reference in new issue