# We have to override the new %%install behavior because, well... the kernel is special.

%global __spec_install_pre %{___build_pre}

# this should go away soon

%define _legacy_common_support 1

# At the time of this writing (2019-03), RHEL8 packages use w2.xzdio

# compression for rpms (xz, level 2).

# Kernel has several large (hundreds of mbytes) rpms, they take ~5 mins

# to compress by single-threaded xz. Switch to threaded compression,

# and from level 2 to 3 to keep compressed sizes close to "w2" results.

#

# NB: if default compression in /usr/lib/rpm/redhat/macros ever changes,

# this one might need tweaking (e.g. if default changes to w3.xzdio,

# change below to w4T.xzdio):

#

# This is disabled on i686 as it triggers oom errors

%ifnarch i686

%define _binary_payload w3T.xzdio

%endif

Summary: The Linux kernel

# For a kernel released for public testing, released_kernel should be 1.

# For internal testing builds during development, it should be 0.

# For rawhide and/or a kernel built from an rc or git snapshot,

# released_kernel should be 0.

# For a stable, released kernel, released_kernel should be 1.

%global released_kernel 1

%if 0%{?fedora}

%define secure_boot_arch x86_64

%else

%define secure_boot_arch x86_64 aarch64 s390x ppc64le

%endif

# Signing for secure boot authentication

%ifarch %{secure_boot_arch}

%global signkernel 1

%else

%global signkernel 0

%endif

# Sign modules on all arches

%global signmodules 1

# Compress modules only for architectures that build modules

%ifarch noarch

%global zipmodules 0

%else

%global zipmodules 1

%endif

%if %{zipmodules}

%global zipsed -e 's/\.ko$/\.ko.xz/'

# for parallel xz processes, replace with 1 to go back to single process

%global zcpu `nproc --all`

%endif

# define buildid .local

%if 0%{?fedora}

%define primary_target fedora

%else

# check for 'hyperscale'/'facebook'/'twitter' here

%define primary_target centos-sig-hyperscale

%endif

# baserelease defines which build revision of this kernel version we're

# building.  We used to call this fedora_build, but the magical name

# baserelease is matched by the rpmdev-bumpspec tool, which you should use.

#

# We used to have some extra magic weirdness to bump this automatically,

# but now we don't.  Just use: rpmdev-bumpspec -c 'comment for changelog'

# When changing base_sublevel below or going from rc to a final kernel,

# reset this by hand to 1 (or to 0 and then use rpmdev-bumpspec).

# scripts/rebase.sh should be made to do that for you, actually.

#

# NOTE: baserelease must be > 0 or bad things will happen if you switch

#       to a released kernel (released version will be < rc version)

#

# For non-released -rc kernels, this will be appended after the rcX and

# gitX tags, so a 3 here would become part of release "0.rcX.gitX.3"

#

%global baserelease 200

%global fedora_build %{baserelease}

# base_sublevel is the kernel version we're starting with and patching

# on top of -- for example, 3.1-rc7-git1 starts with a 3.0 base,

# which yields a base_sublevel of 0.

%define base_sublevel 10

## If this is a released kernel ##

%if 0%{?released_kernel}

# Do we have a -stable update to apply?

%define stable_update 31

# Set rpm version accordingly

%if 0%{?stable_update}

%define stablerev %{stable_update}

%define stable_base %{stable_update}

%endif

%define rpmversion 5.%{base_sublevel}.%{stable_update}

## The not-released-kernel case ##

%else

# The next upstream release sublevel (base_sublevel+1)

%define upstream_sublevel %(echo $((%{base_sublevel} + 1)))

# The rc snapshot level

%global rcrev 0

# The git snapshot level

%define gitrev 0

# Set rpm version accordingly

%define rpmversion 5.%{upstream_sublevel}.0

%endif

# Nb: The above rcrev and gitrev values automagically define Patch00 and Patch01 below.

# What parts do we want to build?  We must build at least one kernel.

# These are the kernels that are built IF the architecture allows it.

# All should default to 1 (enabled) and be flipped to 0 (disabled)

# by later arch-specific checks.

# The following build options are enabled by default.

# Use either --without <opt> in your rpmbuild command or force values

# to 0 in here to disable them.

#

# standard kernel

%define with_up        %{?_without_up:        0} %{?!_without_up:        1}

# kernel PAE (only valid for ARM (lpae))

%define with_pae       %{?_without_pae:       0} %{?!_without_pae:       1}

# kernel-debug

%define with_debug     %{?_without_debug:     0} %{?!_without_debug:     1}

# kernel-doc

%define with_doc       %{?_without_doc:       0} %{?!_without_doc:       1}

# kernel-headers

%define with_headers   %{?_without_headers:   0} %{?!_without_headers:   1}

%define with_cross_headers   %{?_without_cross_headers:   0} %{?!_without_cross_headers:   1}

# perf

%define with_perf      %{?_without_perf:      0} %{?!_without_perf:      1}

# tools

%define with_tools     %{?_without_tools:     0} %{?!_without_tools:     1}

# bpf tool

%define with_bpftool   %{?_without_bpftool:   0} %{?!_without_bpftool:   1}

# kernel-debuginfo

%define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1}

# Want to build a the vsdo directories installed

%define with_vdso_install %{?_without_vdso_install: 0} %{?!_without_vdso_install: 1}

# kernel-zfcpdump (s390 specific kernel for zfcpdump)

%define with_zfcpdump  %{?_without_zfcpdump:  0} %{?!_without_zfcpdump:  1}

# kernel-abi-whitelists

%define with_kernel_abi_whitelists %{?_without_kernel_abi_whitelists: 0} %{?!_without_kernel_abi_whitelists: 0}

# internal samples and selftests

%define with_selftests %{?_without_selftests: 0} %{?!_without_selftests: 1}

#

# Additional options for user-friendly one-off kernel building:

#

# Only build the base kernel (--with baseonly):

%define with_baseonly  %{?_with_baseonly:     1} %{?!_with_baseonly:     0}

# Only build the pae kernel (--with paeonly):

%define with_paeonly   %{?_with_paeonly:      1} %{?!_with_paeonly:      0}

# Only build the debug kernel (--with dbgonly):

%define with_dbgonly   %{?_with_dbgonly:      1} %{?!_with_dbgonly:      0}

# Control whether we perform a compat. check against published ABI.

%define with_kabichk   %{?_without_kabichk:   0} %{?!_without_kabichk:   0}

# Temporarily disable kabi checks until RC.

%define with_kabichk 0

# Control whether we perform a compat. check against DUP ABI.

%define with_kabidupchk %{?_with_kabidupchk:  1} %{?!_with_kabidupchk:   0}

#

# Control whether to run an extensive DWARF based kABI check.

# Note that this option needs to have baseline setup in SOURCE300.

%define with_kabidwchk %{?_without_kabidwchk: 0} %{?!_without_kabidwchk: 1}

%define with_kabidw_base %{?_with_kabidw_base: 1} %{?!_with_kabidw_base: 0}

#

# should we do C=1 builds with sparse

%define with_sparse    %{?_with_sparse:       1} %{?!_with_sparse:       0}

#

# Cross compile requested?

%define with_cross    %{?_with_cross:         1} %{?!_with_cross:        0}

#

# build a release kernel on rawhide

%define with_release   %{?_with_release:      1} %{?!_with_release:      0}

# verbose build, i.e. no silent rules and V=1

%define with_verbose %{?_with_verbose:        1} %{?!_with_verbose:      0}

#

# check for mismatched config options

%define with_configchecks %{?_without_configchecks:        0} %{?!_without_configchecks:        1}

#

# gcov support

%define with_gcov %{?_with_gcov:1}%{?!_with_gcov:0}

#

# ipa_clone support

%define with_ipaclones %{?_without_ipaclones: 0} %{?!_without_ipaclones: 1}

# Want to build a vanilla kernel build without any non-upstream patches?

%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}

# Set debugbuildsenabled to 1 for production (build separate debug kernels)

#  and 0 for rawhide (all kernels are debug kernels).

# See also 'make debug' and 'make release'.

%define debugbuildsenabled 1

%if 0%{?fedora}

# Kernel headers are being split out into a separate package

%define with_headers 0

%define with_cross_headers 0

# no selftests for now

%define with_selftests 0

# no ipa_clone for now

%define with_ipaclones 0

# no whitelist

%define with_kernel_abi_whitelists 0

# Fedora builds these separately

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%endif

%if %{with_verbose}

%define make_opts V=1

%else

%define make_opts -s

%endif

# pkg_release is what we'll fill in for the rpm Release: field

%if 0%{?released_kernel}

%define pkg_release %{fedora_build}%{?buildid}%{?dist}

%else

# non-released_kernel

%if 0%{?rcrev}

%define rctag .rc%rcrev

%else

%define rctag .rc0

%endif

%if 0%{?gitrev}

%define gittag .git%gitrev

%else

%define gittag .git0

%endif

%define pkg_release 0%{?rctag}%{?gittag}.%{fedora_build}%{?buildid}%{?dist}

%endif

# The kernel tarball/base version

%define kversion 5.%{base_sublevel}

# turn off debug kernel and kabichk for gcov builds

%if %{with_gcov}

%define with_debug 0

%define with_kabichk 0

%define with_kabidupchk 0

%define with_kabidwchk 0

%endif

# turn off kABI DWARF-based check if we're generating the base dataset

%if %{with_kabidw_base}

%define with_kabidwchk 0

%endif

# kpatch_kcflags are extra compiler flags applied to base kernel

# -fdump-ipa-clones is enabled only for base kernels on selected arches

%if %{with_ipaclones}

%ifarch x86_64 ppc64le

%define kpatch_kcflags -fdump-ipa-clones

%else

%define with_ipaclones 0

%endif

%endif

%define make_target bzImage

%define image_install_path boot

%define KVERREL %{version}-%{release}.%{_target_cpu}

%define KVERREL_RE %(echo %KVERREL | sed 's/+/[+]/g')

%define hdrarch %_target_cpu

%define asmarch %_target_cpu

%if 0%{!?nopatches:1}

%define nopatches 0

%endif

%if %{with_vanilla}

%define nopatches 1

%endif

%if %{nopatches}

%define variant -vanilla

%endif

%if !%{debugbuildsenabled}

%define with_debug 0

%endif

%if !%{with_debuginfo}

%define _enable_debug_packages 0

%endif

%define debuginfodir /usr/lib/debug

# Needed because we override almost everything involving build-ids

# and debuginfo generation. Currently we rely on the old alldebug setting.

%global _build_id_links alldebug

# kernel PAE is only built on ARMv7

%ifnarch armv7hl

%define with_pae 0

%endif

# if requested, only build base kernel

%if %{with_baseonly}

%define with_pae 0

%define with_debug 0

%endif

# if requested, only build pae kernel

%if %{with_paeonly}

%define with_up 0

%define with_debug 0

%endif

# if requested, only build debug kernel

%if %{with_dbgonly}

%if %{debugbuildsenabled}

%define with_up 0

%endif

%define with_pae 0

%define with_tools 0

%define with_perf 0

%define with_bpftool 0

%endif

# turn off kABI DUP check and DWARF-based check if kABI check is disabled

%if !%{with_kabichk}

%define with_kabidupchk 0

%define with_kabidwchk 0

%endif

%if %{with_vdso_install}

%define use_vdso 1

%endif

%ifnarch noarch

%define with_kernel_abi_whitelists 0

%endif

# Overrides for generic default options

# only package docs noarch

%ifnarch noarch

%define with_doc 0

%define doc_build_fail true

%endif

%if 0%{?fedora}

# don't do debug builds on anything but i686 and x86_64

%ifnarch i686 x86_64

%define with_debug 0

%endif

%endif

# don't build noarch kernels or headers (duh)

%ifarch noarch

%define with_up 0

%define with_headers 0

%define with_cross_headers 0

%define with_tools 0

%define with_perf 0

%define with_bpftool 0

%define with_selftests 0

%define with_debug 0

%define all_arch_configs kernel-%{version}-*.config

%endif

# sparse blows up on ppc

%ifnarch ppc64le

%define with_sparse 0

%endif

# zfcpdump mechanism is s390 only

%ifnarch s390x

%define with_zfcpdump 0

%endif

%if 0%{?fedora}

# This is not for Fedora

%define with_zfcpdump 0

%endif

# Per-arch tweaks

%ifarch i686

%define asmarch x86

%define hdrarch i386

%define all_arch_configs kernel-%{version}-i?86*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch x86_64

%define asmarch x86

%define all_arch_configs kernel-%{version}-x86_64*.config

%define kernel_image arch/x86/boot/bzImage

%endif

%ifarch ppc64le

%define asmarch powerpc

%define hdrarch powerpc

%define make_target vmlinux

%define kernel_image vmlinux

%define kernel_image_elf 1

%define all_arch_configs kernel-%{version}-ppc64le*.config

%define kcflags -O3

%endif

%ifarch s390x

%define asmarch s390

%define hdrarch s390

%define all_arch_configs kernel-%{version}-s390x.config

%define kernel_image arch/s390/boot/bzImage

%endif

%ifarch %{arm}

%define all_arch_configs kernel-%{version}-arm*.config

%define skip_nonpae_vdso 1

%define asmarch arm

%define hdrarch arm

%define make_target bzImage

%define kernel_image arch/arm/boot/zImage

# http://lists.infradead.org/pipermail/linux-arm-kernel/2012-March/091404.html

%define kernel_mflags KALLSYMS_EXTRA_PASS=1

# we only build headers/perf/tools on the base arm arches

# just like we used to only build them on i386 for x86

%ifnarch armv7hl

%define with_headers 0

%define with_cross_headers 0

%endif

# These currently don't compile on armv7

%define with_selftests 0

%endif

%ifarch aarch64

%define all_arch_configs kernel-%{version}-aarch64*.config

%define asmarch arm64

%define hdrarch arm64

%define make_target Image.gz

%define kernel_image arch/arm64/boot/Image.gz

%endif

# Should make listnewconfig fail if there's config options

# printed out?

%if %{nopatches}

%define with_configchecks 0

%endif

# To temporarily exclude an architecture from being built, add it to

# %%nobuildarches. Do _NOT_ use the ExclusiveArch: line, because if we

# don't build kernel-headers then the new build system will no longer let

# us use the previous build of that package -- it'll just be completely AWOL.

# Which is a BadThing(tm).

# We only build kernel-headers on the following...

%if 0%{?fedora}

%define nobuildarches i386

%else

%define nobuildarches i386 i686

%endif

%ifarch %nobuildarches

%define with_up 0

%define with_debug 0

%define with_debuginfo 0

%define with_perf 0

%define with_tools 0

%define with_bpftool 0

%define with_selftests 0

%define with_pae 0

%define _enable_debug_packages 0

%endif

# Architectures we build tools/cpupower on

%if 0%{?fedora}

%define cpupowerarchs %{ix86} x86_64 ppc64le %{arm} aarch64

%else

%define cpupowerarchs i686 x86_64 ppc64le aarch64

%endif

%if %{use_vdso}

%if 0%{?skip_nonpae_vdso}

%define _use_vdso 0

%else

%define _use_vdso 1

%endif

%else

%define _use_vdso 0

%endif

#

# Packages that need to be installed before the kernel is, because the %%post

# scripts use them.

#

%define kernel_prereq  coreutils, systemd >= 203-2, /usr/bin/kernel-install

%define initrd_prereq  dracut >= 027

Name: kernel%{?variant}

License: GPLv2 and Redistributable, no modification permitted

URL: https://www.kernel.org/

Version: %{rpmversion}

Release: %{pkg_release}

# DO NOT CHANGE THE 'ExclusiveArch' LINE TO TEMPORARILY EXCLUDE AN ARCHITECTURE BUILD.

# SET %%nobuildarches (ABOVE) INSTEAD

%if 0%{?fedora}

ExclusiveArch: x86_64 s390x %{arm} aarch64 ppc64le

%else

ExclusiveArch: noarch i386 i686 x86_64 s390x %{arm} aarch64 ppc64le

%endif

ExclusiveOS: Linux

%ifnarch %{nobuildarches}

Requires: kernel-core-uname-r = %{KVERREL}%{?variant}

Requires: kernel-modules-uname-r = %{KVERREL}%{?variant}

%endif

#

# List the packages used during the kernel build

#

BuildRequires: kmod, patch, bash, tar, git-core

BuildRequires: bzip2, xz, findutils, gzip, m4, perl-interpreter, perl-Carp, perl-devel, perl-generators, make, diffutils, gawk

BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex

BuildRequires: net-tools, hostname, bc, elfutils-devel

BuildRequires: dwarves

# Used to mangle unversioned shebangs to be Python 3

BuildRequires: python3-devel

%if %{with_headers}

BuildRequires: rsync

%endif

%if %{with_doc}

BuildRequires: xmlto, asciidoc, python3-sphinx

%endif

%if %{with_sparse}

BuildRequires: sparse

%endif

%if %{with_perf}

BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison flex xz-devel

BuildRequires: audit-libs-devel

BuildRequires: java-devel

%ifnarch %{arm} s390x

BuildRequires: numactl-devel

%endif

%endif

%if %{with_tools}

BuildRequires: gettext ncurses-devel

%ifnarch s390x

BuildRequires: pciutils-devel

%endif

%endif

%if %{with_bpftool}

BuildRequires: python3-docutils

BuildRequires: zlib-devel binutils-devel

%endif

%if %{with_selftests}

%if 0%{?fedora}

BuildRequires: clang llvm

%else

BuildRequires: llvm-toolset

%endif

%ifnarch %{arm}

BuildRequires: numactl-devel

%endif

BuildRequires: libcap-devel libcap-ng-devel rsync

%endif

BuildConflicts: rhbuildsys(DiskFree) < 500Mb

%if %{with_debuginfo}

BuildRequires: rpm-build, elfutils

BuildConflicts: rpm < 4.13.0.1-19

%if 0%{?fedora}

BuildConflicts: dwarves < 1.13

%endif

# Most of these should be enabled after more investigation

%undefine _include_minidebuginfo

%undefine _find_debuginfo_dwz_opts

%undefine _unique_build_ids

%undefine _unique_debug_names

%undefine _unique_debug_srcs

%undefine _debugsource_packages

%undefine _debuginfo_subpackages

%global _find_debuginfo_opts -r

%global _missing_build_ids_terminate_build 1

%global _no_recompute_build_ids 1

%endif

%if %{with_kabidwchk} || %{with_kabidw_base}

BuildRequires: kabi-dw

%endif

%if %{signkernel}%{signmodules}

BuildRequires: openssl openssl-devel

%if %{signkernel}

%ifarch x86_64 aarch64

BuildRequires: nss-tools

BuildRequires: pesign >= 0.10-4

%endif

%endif

%endif

%if %{with_cross}

BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu

%define cross_opts CROSS_COMPILE=%{_build_arch}-linux-gnu-

%endif

# These below are required to build man pages

%if %{with_perf}

BuildRequires: xmlto

%endif

%if %{with_perf} || %{with_tools}

BuildRequires: asciidoc

%endif

Source0: https://www.kernel.org/pub/linux/kernel/v5.x/linux-%{kversion}.tar.xz

# Name of the packaged file containing signing key

%ifarch ppc64le

%define signing_key_filename kernel-signing-ppc.cer

%endif

%ifarch s390x

%define signing_key_filename kernel-signing-s390.cer

%endif

Source10: x509.genkey.rhel

Source11: x509.genkey.fedora

%if %{?released_kernel}

Source12: redhatsecurebootca5.cer

Source13: redhatsecurebootca1.cer

Source14: redhatsecureboot501.cer

Source15: redhatsecureboot301.cer

Source16: secureboot_s390.cer

Source17: secureboot_ppc.cer

%define secureboot_ca_1 %{SOURCE12}

%define secureboot_ca_0 %{SOURCE13}

%ifarch x86_64 aarch64

%define secureboot_key_1 %{SOURCE14}

%define pesign_name_1 redhatsecureboot501

%define secureboot_key_0 %{SOURCE15}

%define pesign_name_0 redhatsecureboot301

%endif

%ifarch s390x

%define secureboot_key_0 %{SOURCE16}

%define pesign_name_0 redhatsecureboot302

%endif

%ifarch ppc64le

%define secureboot_key_0 %{SOURCE17}

%define pesign_name_0 redhatsecureboot303

%endif

# released_kernel

%else

Source12: redhatsecurebootca4.cer

Source13: redhatsecurebootca2.cer

Source14: redhatsecureboot401.cer

Source15: redhatsecureboot003.cer

%define secureboot_ca_1 %{SOURCE12}

%define secureboot_ca_0 %{SOURCE13}

%define secureboot_key_1 %{SOURCE14}

%define pesign_name_1 redhatsecureboot401

%define secureboot_key_0 %{SOURCE15}

%define pesign_name_0 redhatsecureboot003

# released_kernel

%endif

Source22: mod-extra.list.rhel

Source23: mod-extra.list.fedora

Source24: mod-extra.sh

Source18: mod-sign.sh

Source19: mod-extra-blacklist.sh

Source79: parallel_xz.sh

Source80: filter-x86_64.sh.fedora

Source81: filter-armv7hl.sh.fedora

Source82: filter-i686.sh.fedora

Source83: filter-aarch64.sh.fedora

Source86: filter-ppc64le.sh.fedora

Source87: filter-s390x.sh.fedora

Source89: filter-modules.sh.fedora

Source90: filter-x86_64.sh.rhel

Source91: filter-armv7hl.sh.rhel

Source92: filter-i686.sh.rhel

Source93: filter-aarch64.sh.rhel

Source96: filter-ppc64le.sh.rhel

Source97: filter-s390x.sh.rhel

Source99: filter-modules.sh.rhel

%define modsign_cmd %{SOURCE18}

Source20: kernel-aarch64-rhel.config

Source21: kernel-aarch64-debug-rhel.config

Source30: kernel-ppc64le-rhel.config

Source31: kernel-ppc64le-debug-rhel.config

Source32: kernel-s390x-rhel.config

Source33: kernel-s390x-debug-rhel.config

Source34: kernel-s390x-zfcpdump-rhel.config

Source35: kernel-x86_64-rhel.config

Source36: kernel-x86_64-debug-rhel.config

Source37: kernel-aarch64-fedora.config

Source38: kernel-aarch64-debug-fedora.config

Source39: kernel-armv7hl-fedora.config

Source40: kernel-armv7hl-debug-fedora.config

Source41: kernel-armv7hl-lpae-fedora.config

Source42: kernel-armv7hl-lpae-debug-fedora.config

Source43: kernel-i686-fedora.config

Source44: kernel-i686-debug-fedora.config

Source45: kernel-ppc64le-fedora.config

Source46: kernel-ppc64le-debug-fedora.config

Source47: kernel-s390x-fedora.config

Source48: kernel-s390x-debug-fedora.config

Source49: kernel-x86_64-fedora.config

Source50: kernel-x86_64-debug-fedora.config

Source51: generate_all_configs.sh

Source52: process_configs.sh

Source53: generate_bls_conf.sh

Source56: update_scripts.sh

Source54: mod-internal.list

Source55: merge.pl

Source200: check-kabi

Source201: Module.kabi_aarch64

Source202: Module.kabi_ppc64le

Source203: Module.kabi_s390x

Source204: Module.kabi_x86_64

Source210: Module.kabi_dup_aarch64

Source211: Module.kabi_dup_ppc64le

Source212: Module.kabi_dup_s390x

Source213: Module.kabi_dup_x86_64

#Source300: kernel-abi-whitelists-%{rpmversion}-%{distro_build}.tar.bz2

#Source301: kernel-kabi-dw-%{rpmversion}-%{distro_build}.tar.bz2

# Sources for kernel-tools

Source2000: cpupower.service

Source2001: cpupower.config

# CentOS SIG HyperScale config(s)

Source3001: kernel-x86_64-centos-sig-hyperscale.config

Source3002: kernel-x86_64-debug-centos-sig-hyperscale.config

Source3003: filter-aarch64.sh.centos-sig-hyperscale

Source3004: filter-armv7hl.sh.centos-sig-hyperscale

Source3005: filter-i686.sh.centos-sig-hyperscale

Source3006: filter-modules.sh.centos-sig-hyperscale

Source3007: filter-ppc64le.sh.centos-sig-hyperscale

Source3008: filter-s390x.sh.centos-sig-hyperscale

Source3009: filter-x86_64.sh.centos-sig-hyperscale

Source3010: mod-extra.list.centos-sig-hyperscale

Source3011: x509.genkey.centos-sig-hyperscale

## Patches needed for building this package

# Patch1: patch-%{rpmversion}-redhat.patch

# empty final patch to facilitate testing of kernel patches

# Patch999999: linux-kernel-test.patch

# This file is intentionally left empty in the stock kernel. Its a nicety

# added for those wanting to do custom rebuilds with altered config opts.

Source1000: kernel-local

# Here should be only the patches up to the upstream canonical Linus tree.

# For a stable release kernel

%if 0%{?stable_update}

%if 0%{?stable_base}

%define    stable_patch_00  patch-5.%{base_sublevel}.%{stable_base}.xz

Source5000: %{stable_patch_00}

%endif

# non-released_kernel case

# These are automagically defined by the rcrev and gitrev values set up

# near the top of this spec file.

%else

%if 0%{?rcrev}

Source5000: patch-5.%{upstream_sublevel}-rc%{rcrev}.xz

%if 0%{?gitrev}

Source5001: patch-5.%{upstream_sublevel}-rc%{rcrev}-git%{gitrev}.xz

%endif

%else

# pre-{base_sublevel+1}-rc1 case

%if 0%{?gitrev}

Source5000: patch-5.%{base_sublevel}-git%{gitrev}.xz

%endif

%endif

%endif

## Patches needed for building this package

## compile fixes

%if !%{nopatches}

Patch6: 0001-ACPI-APEI-arm64-Ignore-broken-HPE-moonshot-APEI-supp.patch

Patch8: 0001-ACPI-irq-Workaround-firmware-issue-on-X-Gene-based-m.patch

Patch9: 0001-aarch64-acpi-scan-Fix-regression-related-to-X-Gene-U.patch

Patch11: 0001-kdump-round-up-the-total-memory-size-to-128M-for-cra.patch

Patch12: 0001-kdump-add-support-for-crashkernel-auto.patch

Patch15: 0001-kdump-fix-a-grammar-issue-in-a-kernel-message.patch

Patch19: 0001-Vulcan-AHCI-PCI-bar-fix-for-Broadcom-Vulcan-early-si.patch

Patch20: 0001-ahci-thunderx2-Fix-for-errata-that-affects-stop-engi.patch

Patch24: 0001-scsi-smartpqi-add-inspur-advantech-ids.patch

Patch26: 0001-ipmi-do-not-configure-ipmi-for-HPE-m400.patch

Patch28: 0001-iommu-arm-smmu-workaround-DMA-mode-issues.patch

Patch29: 0001-arm-aarch64-Drop-the-EXPERT-setting-from-ARM64_FORCE.patch

Patch31: 0001-Add-efi_status_to_str-and-rework-efi_status_to_err.patch

Patch32: 0001-Make-get_cert_list-use-efi_status_to_str-to-print-er.patch

Patch33: 0001-security-lockdown-expose-a-hook-to-lock-the-kernel-d.patch

Patch34: 0001-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch

Patch35: 0001-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mo.patch

Patch36: 0001-s390-Lock-down-the-kernel-when-the-IPL-secure-flag-i.patch

Patch37: 0001-Add-option-of-13-for-FORCE_MAX_ZONEORDER.patch

Patch58: 0001-arm-make-CONFIG_HIGHPTE-optional-without-CONFIG_EXPE.patch

Patch59: 0001-ARM-tegra-usb-no-reset.patch

Patch61: 0001-Input-rmi4-remove-the-need-for-artificial-IRQ-in-cas.patch

Patch62: 0001-Drop-that-for-now.patch

Patch63: 0001-KEYS-Make-use-of-platform-keyring-for-module-signatu.patch

Patch64: 0001-mm-kmemleak-skip-late_init-if-not-skip-disable.patch

Patch65: 0001-ARM-fix-__get_user_check-in-case-uaccess_-calls-are-.patch

Patch66: 0001-dt-bindings-panel-add-binding-for-Xingbangda-XBD599-.patch

Patch67: 0001-drm-panel-add-Xingbangda-XBD599-panel.patch

Patch68: 0001-drm-sun4i-sun6i_mipi_dsi-fix-horizontal-timing-calcu.patch

Patch72: 0001-Work-around-for-gcc-bug-https-gcc.gnu.org-bugzilla-s.patch

# https://patchwork.kernel.org/patch/11796255/

Patch100: arm64-dts-rockchip-disable-USB-type-c-DisplayPort.patch

# Tegra fixes

Patch101: 0001-PCI-Add-MCFG-quirks-for-Tegra194-host-controllers.patch

# A patch to fix some undocumented things broke a bunch of Allwinner networks due to wrong assumptions

Patch102: 0001-update-phy-on-pine64-a64-devices.patch

# OMAP Pandaboard fix

Patch103: arm-pandaboard-fix-add-bluetooth.patch

# Fix for USB on some newer RPi4 / firmware combinations

Patch104: 0001-brcm-rpi4-fix-usb-numeration.patch

# RPi-4 and wifi issues

Patch105: arm-dts-rpi-4-disable-wifi-frequencies.patch

# fix python shebangs

Patch106: switch-some-more-scripts-explicitly-to-python-3.patch

# fix bad config options

Patch107: fix-config-option.patch

# END OF PATCH DEFINITIONS

%endif