1################################################################################
2#
3# grub2
4#
5################################################################################
6
7GRUB2_VERSION = 2.12
8GRUB2_SITE = http://ftp.gnu.org/gnu/grub
9GRUB2_SOURCE = grub-$(GRUB2_VERSION).tar.xz
10GRUB2_LICENSE = GPL-3.0+
11GRUB2_LICENSE_FILES = COPYING
12GRUB2_DEPENDENCIES = host-bison host-flex host-gawk host-grub2
13HOST_GRUB2_DEPENDENCIES = host-bison host-flex host-gawk
14GRUB2_INSTALL_IMAGES = YES
15
16# CVE-2019-14865 is about a flaw in the grub2-set-bootflag tool, which
17# doesn't exist upstream, but is added by the Redhat/Fedora
18# packaging. Not applicable to Buildroot.
19GRUB2_IGNORE_CVES += CVE-2019-14865
20# CVE-2020-15705 is related to a flaw in the use of the
21# grub_linuxefi_secure_validate(), which was added by Debian/Ubuntu
22# patches. The issue doesn't affect upstream Grub, and
23# grub_linuxefi_secure_validate() is not implemented in the grub2
24# version available in Buildroot.
25GRUB2_IGNORE_CVES += CVE-2020-15705
26# vulnerability is specific to the SUSE distribution
27GRUB2_IGNORE_CVES += CVE-2021-46705
28
29ifeq ($(BR2_TARGET_GRUB2_INSTALL_TOOLS),y)
30GRUB2_INSTALL_TARGET = YES
31else
32GRUB2_INSTALL_TARGET = NO
33endif
34GRUB2_CPE_ID_VENDOR = gnu
35
36GRUB2_BUILTIN_MODULES_PC = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_MODULES_PC))
37GRUB2_BUILTIN_MODULES_EFI = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_MODULES_EFI))
38GRUB2_BUILTIN_CONFIG_PC = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_CONFIG_PC))
39GRUB2_BUILTIN_CONFIG_EFI = $(call qstrip,$(BR2_TARGET_GRUB2_BUILTIN_CONFIG_EFI))
40GRUB2_BOOT_PARTITION = $(call qstrip,$(BR2_TARGET_GRUB2_BOOT_PARTITION))
41
42GRUB2_IMAGE_i386-pc = $(BINARIES_DIR)/grub.img
43GRUB2_CFG_i386-pc = $(TARGET_DIR)/boot/grub/grub.cfg
44GRUB2_PREFIX_i386-pc = ($(GRUB2_BOOT_PARTITION))/boot/grub
45GRUB2_TARGET_i386-pc = i386
46GRUB2_PLATFORM_i386-pc = pc
47GRUB2_BUILTIN_CONFIG_i386-pc = $(GRUB2_BUILTIN_CONFIG_PC)
48GRUB2_BUILTIN_MODULES_i386-pc = $(GRUB2_BUILTIN_MODULES_PC)
49GRUB2_TUPLES-$(BR2_TARGET_GRUB2_I386_PC) += i386-pc
50
51GRUB2_IMAGE_i386-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootia32.efi
52GRUB2_CFG_i386-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
53GRUB2_PREFIX_i386-efi = /EFI/BOOT
54GRUB2_TARGET_i386-efi = i386
55GRUB2_PLATFORM_i386-efi = efi
56GRUB2_BUILTIN_CONFIG_i386-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
57GRUB2_BUILTIN_MODULES_i386-efi = $(GRUB2_BUILTIN_MODULES_EFI)
58GRUB2_TUPLES-$(BR2_TARGET_GRUB2_I386_EFI) += i386-efi
59
60GRUB2_IMAGE_x86_64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootx64.efi
61GRUB2_CFG_x86_64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
62GRUB2_PREFIX_x86_64-efi = /EFI/BOOT
63GRUB2_TARGET_x86_64-efi = x86_64
64GRUB2_PLATFORM_x86_64-efi = efi
65GRUB2_BUILTIN_CONFIG_x86_64-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
66GRUB2_BUILTIN_MODULES_x86_64-efi = $(GRUB2_BUILTIN_MODULES_EFI)
67GRUB2_TUPLES-$(BR2_TARGET_GRUB2_X86_64_EFI) += x86_64-efi
68
69GRUB2_IMAGE_arm-uboot = $(BINARIES_DIR)/boot-part/grub/grub.img
70GRUB2_CFG_arm-uboot = $(BINARIES_DIR)/boot-part/grub/grub.cfg
71GRUB2_PREFIX_arm-uboot = ($(GRUB2_BOOT_PARTITION))/boot/grub
72GRUB2_TARGET_arm-uboot = arm
73GRUB2_PLATFORM_arm-uboot = uboot
74GRUB2_BUILTIN_CONFIG_arm-uboot = $(GRUB2_BUILTIN_CONFIG_PC)
75GRUB2_BUILTIN_MODULES_arm-uboot = $(GRUB2_BUILTIN_MODULES_PC)
76GRUB2_TUPLES-$(BR2_TARGET_GRUB2_ARM_UBOOT) += arm-uboot
77
78GRUB2_IMAGE_arm-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootarm.efi
79GRUB2_CFG_arm-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
80GRUB2_PREFIX_arm-efi = /EFI/BOOT
81GRUB2_TARGET_arm-efi = arm
82GRUB2_PLATFORM_arm-efi = efi
83GRUB2_BUILTIN_CONFIG_arm-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
84GRUB2_BUILTIN_MODULES_arm-efi = $(GRUB2_BUILTIN_MODULES_EFI)
85GRUB2_TUPLES-$(BR2_TARGET_GRUB2_ARM_EFI) += arm-efi
86
87GRUB2_IMAGE_arm64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootaa64.efi
88GRUB2_CFG_arm64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
89GRUB2_PREFIX_arm64-efi = /EFI/BOOT
90GRUB2_TARGET_arm64-efi = aarch64
91GRUB2_PLATFORM_arm64-efi = efi
92GRUB2_BUILTIN_CONFIG_arm64-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
93GRUB2_BUILTIN_MODULES_arm64-efi = $(GRUB2_BUILTIN_MODULES_EFI)
94GRUB2_TUPLES-$(BR2_TARGET_GRUB2_ARM64_EFI) += arm64-efi
95
96GRUB2_IMAGE_riscv64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/bootriscv64.efi
97GRUB2_CFG_riscv64-efi = $(BINARIES_DIR)/efi-part/EFI/BOOT/grub.cfg
98GRUB2_PREFIX_riscv64-efi = /EFI/BOOT
99GRUB2_TARGET_riscv64-efi = riscv64
100GRUB2_PLATFORM_riscv64-efi = efi
101GRUB2_BUILTIN_CONFIG_riscv64-efi = $(GRUB2_BUILTIN_CONFIG_EFI)
102GRUB2_BUILTIN_MODULES_riscv64-efi = $(GRUB2_BUILTIN_MODULES_EFI)
103GRUB2_TUPLES-$(BR2_TARGET_GRUB2_RISCV64_EFI) += riscv64-efi
104
105# Grub2 is kind of special: it considers CC, LD and so on to be the
106# tools to build the host programs and uses TARGET_CC, TARGET_CFLAGS,
107# TARGET_CPPFLAGS, TARGET_LDFLAGS to build the bootloader itself.
108#
109# NOTE: TARGET_STRIP is overridden by !BR2_STRIP_strip, so always
110# use the cross compile variant to ensure grub2 builds
111
112HOST_GRUB2_CONF_ENV = \
113	CPP="$(HOSTCC) -E"
114
115GRUB2_CONF_ENV = \
116	CPP="$(TARGET_CC) -E" \
117	TARGET_CC="$(TARGET_CC)" \
118	CFLAGS="$(TARGET_CFLAGS) -Os" \
119	TARGET_CFLAGS="$(TARGET_CFLAGS) -Os" \
120	CPPFLAGS="$(TARGET_CPPFLAGS) -Os -fno-stack-protector" \
121	TARGET_CPPFLAGS="$(TARGET_CPPFLAGS) -Os -fno-stack-protector" \
122	TARGET_LDFLAGS="$(TARGET_LDFLAGS) -Os" \
123	TARGET_NM="$(TARGET_NM)" \
124	TARGET_OBJCOPY="$(TARGET_OBJCOPY)" \
125	TARGET_STRIP="$(TARGET_CROSS)strip"
126
127HOST_GRUB2_CONF_OPTS = \
128	--with-platform=none \
129	--disable-grub-mkfont \
130	--enable-efiemu=no \
131	ac_cv_lib_lzma_lzma_code=no \
132	--enable-device-mapper=no \
133	--enable-libzfs=no \
134	--disable-werror
135
136define GRUB2_CONFIGURE_CMDS
137	$(foreach tuple, $(GRUB2_TUPLES-y), \
138		@$(call MESSAGE,Configuring $(tuple))
139		mkdir -p $(@D)/build-$(tuple)
140		cd $(@D)/build-$(tuple) && \
141		$(TARGET_CONFIGURE_OPTS) \
142		$(TARGET_CONFIGURE_ARGS) \
143		$(GRUB2_CONF_ENV) \
144		../configure \
145			--target=$(GRUB2_TARGET_$(tuple)) \
146			--with-platform=$(GRUB2_PLATFORM_$(tuple)) \
147			--host=$(GNU_TARGET_NAME) \
148			--build=$(GNU_HOST_NAME) \
149			--prefix=/ \
150			--exec-prefix=/ \
151			--disable-grub-mkfont \
152			--enable-efiemu=no \
153			ac_cv_lib_lzma_lzma_code=no \
154			--enable-device-mapper=no \
155			--enable-libzfs=no \
156			--disable-werror
157	)
158endef
159
160define GRUB2_BUILD_CMDS
161	$(foreach tuple, $(GRUB2_TUPLES-y), \
162		@$(call MESSAGE,Building $(tuple))
163		$(TARGET_MAKE_ENV) $(MAKE) -C $(@D)/build-$(tuple)
164	)
165endef
166
167define GRUB2_INSTALL_IMAGES_CMDS
168	$(foreach tuple, $(GRUB2_TUPLES-y), \
169		@$(call MESSAGE,Installing $(tuple) to images directory)
170		mkdir -p $(dir $(GRUB2_IMAGE_$(tuple)))
171		$(HOST_DIR)/bin/grub-mkimage \
172			-d $(@D)/build-$(tuple)/grub-core/ \
173			-O $(tuple) \
174			-o $(GRUB2_IMAGE_$(tuple)) \
175			-p "$(GRUB2_PREFIX_$(tuple))" \
176			$(if $(GRUB2_BUILTIN_CONFIG_$(tuple)), \
177				-c $(GRUB2_BUILTIN_CONFIG_$(tuple))) \
178			$(GRUB2_BUILTIN_MODULES_$(tuple))
179		$(INSTALL) -D -m 0644 boot/grub2/grub.cfg $(GRUB2_CFG_$(tuple))
180		$(if $(findstring $(GRUB2_PLATFORM_$(tuple)), pc), \
181			cat $(@D)/build-$(tuple)/grub-core/cdboot.img $(GRUB2_IMAGE_$(tuple)) > \
182				$(BINARIES_DIR)/grub-eltorito.img
183		) \
184	)
185endef
186
187ifeq ($(BR2_TARGET_GRUB2_INSTALL_TOOLS),y)
188define GRUB2_INSTALL_TARGET_CMDS
189	$(foreach tuple, $(GRUB2_TUPLES-y), \
190		@$(call MESSAGE,Installing $(tuple) to target directory)
191		$(TARGET_MAKE_ENV) $(MAKE) -C $(@D)/build-$(tuple) DESTDIR=$(TARGET_DIR) install
192	)
193endef
194endif
195
196$(eval $(generic-package))
197$(eval $(host-autotools-package))
198