-
grub2 (2.02~beta2-36ubuntu11.4) yakkety; urgency=medium
* debian/patches: Rework linuxefi/SecureBoot support and sync with upstream
SB patch set: (LP: #1696599)
- linuxefi_backport_arm64.patch: backport basic arm64 chainload/linux
command support from 17.04.
- linuxefi_arm_sb_support.patch: add Secure Boot support for arm for its
chainloader.
- linuxefi_fix_validation_race.patch: Fix a race in validating images.
- linuxefi_chainloader_path.patch: honor the starting path for grub, so
images do not need to be started from $root.
- linuxefi_chainloader_sb.patch: Fix some more issues in chainloader use
when Secure Boot is enabled.
- linuxefi_loaders_enforce_sb.patch: Enforce Secure Boot policy for all
loaders: don't load the commands when Secure Boot is enabled.
- linuxefi_re-enable_linux_cmd.patch: Since we rely on the linux and
initrd commands to automatically hand-off to linuxefi/initrdefi; re-
enable the linux loader.
- linuxefi_chainloader_pe_fixes.patch: PE parsing fixes for chainloading
"special" PE images, such as Windows'.
- linuxefi_rework_non-sb_cases.patch: rework cases where Secure Boot is
disabled or shim validation is disabled so loading works as EFI binaries
when it is supposed to.
- Removed linuxefi_require_shim.patch; superseded by the above.
(LP: #1689687)
* debian/patches/git_tsc_use_alt_delay_sources_d43a5ee6.patch: refreshed.
-- Mathieu Trudel-Lapierre <email address hidden> Wed, 14 Jun 2017 14:40:36 -0400
-
grub2 (2.02~beta2-36ubuntu11.3) yakkety; urgency=medium
* debian/patches/install_signed.patch: don't install fb$arch.efi; it breaks
"removable" installs where files are all installed to /EFI/BOOT; and it
also doesn't belong in the /EFI/ubuntu path for the default case. Fallback
install simply needs more work and isn't ready for SRU. (LP: #1684341)
* debian/postinst.in: clean up fb$arch.efi.
-- Mathieu Trudel-Lapierre <email address hidden> Thu, 11 May 2017 18:26:30 -0400
-
grub2 (2.02~beta2-36ubuntu11.2) yakkety; urgency=medium
* debian/patches/install_signed.patch: update to use the new names for the
shim binary (shim$arch), MokManager (mm$arch) and add fallback (fb$arch).
(LP: #1637290)
* debian/control: Breaks shim (<< 0.9+1474479173.6c180c6-0ubuntu1~) for the
renamed EFI binaries.
-- Mathieu Trudel-Lapierre <email address hidden> Thu, 22 Sep 2016 12:34:56 -0400
-
grub2 (2.02~beta2-36ubuntu11.1) yakkety; urgency=medium
* debian/patches/install_signed.patch: update to use the new names for the
shim binary (shim$arch), MokManager (mm$arch) and add fallback (fb$arch).
(LP: #1637290)
* debian/control: Breaks shim (<< 0.9+1474479173.6c180c6-0ubuntu1~) for the
renamed EFI binaries.
-- Mathieu Trudel-Lapierre <email address hidden> Thu, 22 Sep 2016 12:34:56 -0400
-
grub2 (2.02~beta2-36ubuntu11) yakkety; urgency=medium
* debian/control: don't force building with GCC 5 when 6 is now the default.
* support_module_without_symbol_table.patch: fix checks for modules without
a symbol table to be allowed, since binutils' 'strip --stripunneeded' no
longer leaves a symbols section around after stripping.
* Fix support for IPv6 PXE booting under UEFI:
- grub_add_grub_env_set_net_property.patch: add grub_env_set_net_property.
- misc-fix-invalid-char-strtol.patch: fix strto*l methods invalid chars.
- net_read_bracketed_ipv6_addr.patch: read bracketed IPv6 addresses.
- bootp_new_net_bootp6_command.patch: add new bootp6 commands.
- efinet_uefi_ipv6_pxe_support.patch: teach efinet to allow bootp6.
- bootp_process_dhcpack_http_boot.patch: process DHCPACK, support HTTP.
- efinet_set_network_from_uefi_devpath.patch: configure network from the
devpath provided by the UEFI firmware.
- efinet_set_dns_from_uefi_proto.patch: set DNS nameservers and search
domains from the UEFI protocol.
-- Mathieu Trudel-Lapierre <email address hidden> Tue, 06 Sep 2016 10:10:02 -0400
-
grub2 (2.02~beta2-36ubuntu10) yakkety; urgency=medium
* debian/patches/ip6_send_router_solicitation_7c4b6b7b.patch: handle long
RA intervals by explicitly sending a SOLICIT.
* debian/patches/ip6_fix_routing_eb9f401f.patch: fix IPv6 routing; we should
be able to talk to things outside of link-local addresses; to do this,
allow specifying a gateway and interface. (LP: #1229458)
-- Mathieu Trudel-Lapierre <email address hidden> Wed, 27 Jul 2016 16:02:18 -0400
-
grub2 (2.02~beta2-36ubuntu9) yakkety; urgency=medium
* Add loopback and squash4 modules to the signed EFI images. LP: #1604499.
-- Steve Langasek <email address hidden> Tue, 19 Jul 2016 11:43:28 -0700
-
grub2 (2.02~beta2-36ubuntu8) yakkety; urgency=medium
* debian/grub-common.init: Don't source /lib/init/vars.sh, we don't depend
on initscripts (and don't want to). There is no reason why we would not
use the LSB log_action_msg in non-verbose (default) mode, most other
packages use it unconditionally. (LP: #1584134)
-- Martin Pitt <email address hidden> Fri, 20 May 2016 18:33:35 +0200
-
grub2 (2.02~beta2-36ubuntu7) yakkety; urgency=medium
* debian/postinst.in: replace setup_mok_validation with a call to
update-secureboot-policy, a script shipped by shim-signed.
* debian/control: drop Depends on mokutil, we're not calling it directly.
-- Mathieu Trudel-Lapierre <email address hidden> Wed, 18 May 2016 11:05:43 -0400
-
grub2 (2.02~beta2-36ubuntu6) yakkety; urgency=medium
* Fix booting on Hyper-V gen 2 VMs due to the lack of PIT there; we can deal
with this by using other timers when PIT aren't available. (LP: #1519836)
- debian/patches/git_tsc_use_alt_delay_sources_d43a5ee6.patch
- debian/patches/git_split_pmtimer_wait_tsc_d9a3bfea.patch
- debian/patches/git_fix_tsc_calibration_pit_a03c1034.patch
-- Mathieu Trudel-Lapierre <email address hidden> Fri, 13 May 2016 12:28:38 -0400
-
grub2 (2.02~beta2-36ubuntu5) yakkety; urgency=medium
* debian/patches/zpool_full_device_name.patch: Signal to zpool that
it should emit full names of constituent devices.
-- Chad MILLER <email address hidden> Tue, 10 May 2016 11:45:42 -0500
-
grub2 (2.02~beta2-36ubuntu4) yakkety; urgency=medium
* debian/rules: disable pie builds for grub modules by adding
-no-pie to TARGET_LDFLAGS
-- Steve Beattie <email address hidden> Mon, 25 Apr 2016 10:07:38 -0700
-
grub2 (2.02~beta2-36ubuntu3) xenial; urgency=medium
* No-change rebuild to correctly build our unicode font against libfreetype6.
(LP: #1559933)
-- Mathieu Trudel-Lapierre <email address hidden> Fri, 15 Apr 2016 17:21:17 -0400
