[arch-commits] Commit in ipxe/repos/community-x86_64 (16 files)

David Runge dvzrv at gemini.archlinux.org
Fri Jul 23 16:41:17 UTC 2021


    Date: Friday, July 23, 2021 @ 16:41:17
  Author: dvzrv
Revision: 984542

archrelease: copy trunk to community-x86_64

Added:
  ipxe/repos/community-x86_64/PKGBUILD
    (from rev 984541, ipxe/trunk/PKGBUILD)
  ipxe/repos/community-x86_64/arch.ipxe
    (from rev 984541, ipxe/trunk/arch.ipxe)
  ipxe/repos/community-x86_64/codesigning_pierre_archlinux.pem
    (from rev 984541, ipxe/trunk/codesigning_pierre_archlinux.pem)
  ipxe/repos/community-x86_64/default.ipxe
    (from rev 984541, ipxe/trunk/default.ipxe)
  ipxe/repos/community-x86_64/general.h
    (from rev 984541, ipxe/trunk/general.h)
  ipxe/repos/community-x86_64/isrgrootx1.pem
    (from rev 984541, ipxe/trunk/isrgrootx1.pem)
  ipxe/repos/community-x86_64/lets-encrypt-r3.pem
    (from rev 984541, ipxe/trunk/lets-encrypt-r3.pem)
  ipxe/repos/community-x86_64/run_ipxe
    (from rev 984541, ipxe/trunk/run_ipxe)
Deleted:
  ipxe/repos/community-x86_64/PKGBUILD
  ipxe/repos/community-x86_64/arch.ipxe
  ipxe/repos/community-x86_64/codesigning_pierre_archlinux.pem
  ipxe/repos/community-x86_64/default.ipxe
  ipxe/repos/community-x86_64/dst_root_ca_x3.pem
  ipxe/repos/community-x86_64/general.h
  ipxe/repos/community-x86_64/letsencrypt_authority_x3.pem
  ipxe/repos/community-x86_64/run_ipxe

----------------------------------+
 PKGBUILD                         |  202 +++++++++++++++++++------------------
 arch.ipxe                        |    8 -
 codesigning_pierre_archlinux.pem |   60 +++++-----
 default.ipxe                     |   12 +-
 dst_root_ca_x3.pem               |   20 ---
 general.h                        |   32 ++---
 isrgrootx1.pem                   |   31 +++++
 lets-encrypt-r3.pem              |   30 +++++
 letsencrypt_authority_x3.pem     |   27 ----
 run_ipxe                         |   87 ++++++++-------
 10 files changed, 267 insertions(+), 242 deletions(-)

Deleted: PKGBUILD
===================================================================
--- PKGBUILD	2021-07-23 16:41:00 UTC (rev 984541)
+++ PKGBUILD	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,96 +0,0 @@
-# Maintainer: David Runge <dvzrv at archlinux.org>
-
-pkgname=ipxe
-pkgver=1.21.1
-pkgrel=1
-pkgdesc="Network bootloader"
-arch=('x86_64')
-url="https://ipxe.org"
-license=('GPL2' 'custom:UBDL')
-makedepends=('cdrtools')
-optdepends=(
-  'bash: for run_ipxe'
-  'qemu: for run_ipxe'
-  'edk2-ovmf: for run_ipxe'
-)
-source=("$pkgname-$pkgver.tar.gz::https://github.com/${pkgname}/${pkgname}/archive/refs/tags/v${pkgver}.tar.gz"
-        "arch.ipxe"
-        "dst_root_ca_x3.pem"
-        "letsencrypt_authority_x3.pem"
-        "codesigning_pierre_archlinux.pem"
-        "default.ipxe"
-        "general.h"
-        "run_${pkgname}")
-sha512sums=('47400975110ed4ab95835aa1b7c8d5a6917c19c5713c6ab88bc0741a3adcd62245a9c4251d1f46fffc45289c6b18bf893f86dbc3b67d3189c41b7f198367ecaa'
-            'ec41e20333ce91b555d4f6a64f211323315a183466d8437404dc548287b96cc8aa4d2953bb5a496677f77e73b7b99752dc973688ade0ccab842fabb8f6127f47'
-            '1f52b62aa9e3ec0656ea3cb5c8e52eda924d58728e64bb03ca6c112858b91b13cf0a9328b105bb232973e240406b240ed14e72b5bd325e82e6fddf3126dbcc58'
-            '0fa893f751f0880c7d89c398cae9708f5ff04d466832fb6160a824395032259ac52e02a44da531d0f8bf7e310298b0067b1e8257f816d3223034f391ecba491d'
-            'e3a8c74dcf95cb4b77ed379d2185ef56b6ab2f4c7bdaf5a68876d21aca4d7961b0d8090da7132c6f1797bdca24014dfea032129ee207282797b91e31b6dc4d48'
-            '9162f528cd0080b9231785795f08d3229c52ce3c18ca5a6efcfbea5028e103a294ddef79a0f28ab64b8d0cdcb9e6cdd7fee797766ad2c3d1dbc3891ddeb4b553'
-            '080b5b7f1a02d6e3a4691e0e65f12a554ede2a783284357f4ef940eb506fec7ec477dc3060c67cf31999af99eba26b0bfa1495cb2a5baa5af4c133bdca2152af'
-            '545680910b8b0cbe2dad8b4fd2745a1a58a176601fa3f3695c7f1750dccd67df78a04bc22c121cb8e78c58bdea85947c686e58ae20fca68c355710dc044f9a32')
-b2sums=('03871b5f89c6228a9082bb89c7b102d85e5f3afcd5fe0d93762e220fe162c9c3037a9918f30251fd103835d949335f99109a12559f560a5b686e65a7c24c6501'
-        '13f73fbd49867a087cbb036562f067ee30e3a3718402363fd6c6d318bb819dde5728510c1459d7bb5906bec37469b2046a2ad148175b6ea4fb58ce68ee614d91'
-        '417023f75b356003f60258522e4b68b46d0c4ebf8cb3f36faf47de300451cfc708e952b8bfa7e2579fa60c9c9cc5bdb49da5b2591b872087b7a19f6a1bdfa192'
-        'a055d8af4df3554310d13b92f4937672293fde506d31dde3a345a802abb051549a06e4609a29b8aab26100e874abc84f4112585b011b6e532d0e60a22672d33b'
-        'a61f76a2ecbf344bb26e064146e4c6821ee195c7b7579cbf8c61d60ded3c3946d53329a8c2e795435ef5498bec97042472f186c13b4e0dc274da34d047f8f326'
-        'f38eec3584967f9a8d4f9f2cc39803de9fa21fd1406efe802c3422f6de30c79e4cd679e775a886f778a40aacb81b9c4120d7205178284cacf69fa7d43557a906'
-        'a69a2dabf23b931aa062d20936510eda6bc9d6a61cded4b5e5960958b2a06642d527bb788b3fae9961dbf5d2ac18c63a6df69db52668cf904b75bd7366117b9b'
-        'ee372696fcb35f886ea30d7989f2b795e4f7575ee666cfe951737781079d6a2c7bdf94b597a29f8bd580549d8a2267272f654aa0ce6d50b31e01769524201ea9')
-
-prepare() {
-  cd "$pkgname-$pkgver"
-  # symlink header with custom configuration into place
-  ln -sv "${srcdir}/general.h" src/config/local/
-}
-
-build() {
-  local _file _certs=""
-  # add certs
-  for _file in "${source[@]}"; do
-    if [[ "${_file}" == *.pem ]]; then
-      _certs+="${srcdir}/${_file},"
-    fi
-  done
-
-  cd "$pkgname-$pkgver"
-  # build arch specific images
-  # TODO: adapt arch.ipxe as soon as we can fix https://bugs.archlinux.org/task/70767
-  # NOTE: to debug issues with TLS or codesigning, add "DEBUG=open,tls,x509:3,certstore,privkey"
-  make -C src NO_WERROR=1 \
-    EMBED="$srcdir/arch.ipxe" \
-    CERT="${_certs}" \
-    TRUST="${_certs}" \
-    bin/ipxe.lkrn \
-    bin/ipxe.pxe \
-    bin-i386-efi/ipxe.efi \
-    bin-x86_64-efi/ipxe.efi
-
-  # move binaries out of the way
-  mv -v src/bin/ipxe{,-arch}.lkrn
-  mv -v src/bin/ipxe{,-arch}.pxe
-  mv -v src/bin-i386-efi/ipxe{,-arch}.efi
-  mv -v src/bin-x86_64-efi/ipxe{,-arch}.efi
-
-  # build default images
-  make -C src NO_WERROR=1 \
-    EMBED="$srcdir/default.ipxe" \
-    bin/ipxe.lkrn \
-    bin/ipxe.pxe \
-    bin-i386-efi/ipxe.efi \
-    bin-x86_64-efi/ipxe.efi
-
-}
-
-package() {
-  local _arch
-
-  cd "$pkgname-$pkgver"
-  install -vDm 644 src/bin/ipxe{,-arch}.{lkrn,pxe} -t "${pkgdir}/usr/share/${pkgname}/"
-  for _arch in i386 x86_64; do
-    install -vDm 644 "src/bin-${_arch}-efi/ipxe"{,-arch}.efi -t "${pkgdir}/usr/share/${pkgname}/${_arch}/"
-  done
-  install -vDm 644 COPYING.UBDL -t "${pkgdir}/usr/share/licenses/${pkgname}/"
-
-  install -vDm 755 ../"run_${pkgname}" -t "${pkgdir}/usr/bin"
-}

Copied: ipxe/repos/community-x86_64/PKGBUILD (from rev 984541, ipxe/trunk/PKGBUILD)
===================================================================
--- PKGBUILD	                        (rev 0)
+++ PKGBUILD	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,106 @@
+# Maintainer: David Runge <dvzrv at archlinux.org>
+
+pkgname=ipxe
+pkgver=1.21.1
+pkgrel=2
+pkgdesc="Network bootloader"
+arch=('x86_64')
+url="https://ipxe.org"
+license=('GPL2' 'custom:UBDL')
+makedepends=('cdrtools')
+optdepends=(
+  'bash: for run_ipxe'
+  'qemu: for run_ipxe'
+  'edk2-ovmf: for run_ipxe'
+)
+# the TLS chain of trust is described at the upstream letsencrypt website:
+# https://letsencrypt.org/certificates/
+# the code signing setup is described in Arch Linux's releng repository:
+# https://gitlab.archlinux.org/archlinux/releng/-/blob/master/README.rst#code-signing
+source=("$pkgname-$pkgver.tar.gz::https://github.com/${pkgname}/${pkgname}/archive/refs/tags/v${pkgver}.tar.gz"
+        "${pkgname}-1.21.1-fragmented_handshake.patch::https://github.com/ipxe/ipxe/pull/116/commits/ca9f5fc5645c60c00c3ca232d2a492aa1eb29c58.patch"
+        "arch.ipxe"
+        "isrgrootx1.pem"
+        "lets-encrypt-r3.pem"
+        "codesigning_pierre_archlinux.pem"
+        "default.ipxe"
+        "general.h"
+        "run_${pkgname}")
+sha512sums=('47400975110ed4ab95835aa1b7c8d5a6917c19c5713c6ab88bc0741a3adcd62245a9c4251d1f46fffc45289c6b18bf893f86dbc3b67d3189c41b7f198367ecaa'
+            '7b021b5720ddf71d3162d2d326a05e4d883562d91effce92a8c90368e69424ccf581d2d3bf6c5e1517e3b6cc5e4ab5edfdcd41c36368488b6d357d2fd00f63b0'
+            'ec41e20333ce91b555d4f6a64f211323315a183466d8437404dc548287b96cc8aa4d2953bb5a496677f77e73b7b99752dc973688ade0ccab842fabb8f6127f47'
+            'b819e7965412dbeecc6417b1e57356d9b10e8e2feb0db1165947e7e1b7d882de226afb8457475f5107393a981d902c7f405500cadb6f61bd2acbca5d8c7cc1f4'
+            '7ff2a6b6501b30806e19446d569db0348c0457c15a9c86f186d957607278ee3cbeedd8307e1ff6dc5c0740545192eada7c0f84cdeb8ff39e6b85bd3fc400a914'
+            'e3a8c74dcf95cb4b77ed379d2185ef56b6ab2f4c7bdaf5a68876d21aca4d7961b0d8090da7132c6f1797bdca24014dfea032129ee207282797b91e31b6dc4d48'
+            '9162f528cd0080b9231785795f08d3229c52ce3c18ca5a6efcfbea5028e103a294ddef79a0f28ab64b8d0cdcb9e6cdd7fee797766ad2c3d1dbc3891ddeb4b553'
+            '080b5b7f1a02d6e3a4691e0e65f12a554ede2a783284357f4ef940eb506fec7ec477dc3060c67cf31999af99eba26b0bfa1495cb2a5baa5af4c133bdca2152af'
+            '4f026baf7d30ef33b660530001b3bcf8189a7d1a11603ccb126957d07070283907c8207dad912ff4c735b8a0376c8a5383fef2235ac3b71ef519d7201c079b93')
+b2sums=('03871b5f89c6228a9082bb89c7b102d85e5f3afcd5fe0d93762e220fe162c9c3037a9918f30251fd103835d949335f99109a12559f560a5b686e65a7c24c6501'
+        '2c1ef1e1ffd1716e29e046ae4bc69e8b98f9116c1cb3d6e2e10a9119256194ea4fd510a9d4bf79b96504fb95f6bef0b2edce9b257d8d360224dfe1ce6029025c'
+        '13f73fbd49867a087cbb036562f067ee30e3a3718402363fd6c6d318bb819dde5728510c1459d7bb5906bec37469b2046a2ad148175b6ea4fb58ce68ee614d91'
+        '6d02d871afa45caaa2b22ea2ed48217012aeeb61c50b28e82cc0750344719bdb9ef4b0100abc524b12ec6cb2b1c0084f4d24ce480af87b52aa39d4d3714467ca'
+        '44fc45af926d8c0a563b81640764a4ced266f857c72113839dcd5d441c030bb6f78576b04fcbd8b17f645ed4e2701a4634e55755f13210fa880f442ad6fbb5b1'
+        'a61f76a2ecbf344bb26e064146e4c6821ee195c7b7579cbf8c61d60ded3c3946d53329a8c2e795435ef5498bec97042472f186c13b4e0dc274da34d047f8f326'
+        'f38eec3584967f9a8d4f9f2cc39803de9fa21fd1406efe802c3422f6de30c79e4cd679e775a886f778a40aacb81b9c4120d7205178284cacf69fa7d43557a906'
+        'a69a2dabf23b931aa062d20936510eda6bc9d6a61cded4b5e5960958b2a06642d527bb788b3fae9961dbf5d2ac18c63a6df69db52668cf904b75bd7366117b9b'
+        '9c7a8eb0f9aafdc336d7eac984b6f1fcbb875d1589fb4b67f45393054f66e916c1157e1bb4e8d02af68e6438dff68a812e57bbf685a0b477634891e49c1c3284')
+
+prepare() {
+  cd "$pkgname-$pkgver"
+  # fix issues with fragmented handshakes (e.g. fullchain.pem when using a letsencrypt certificate):
+  # https://github.com/ipxe/ipxe/issues/407
+  patch -Np1 -i "../${pkgname}-1.21.1-fragmented_handshake.patch"
+  # symlink header with custom configuration into place
+  ln -sv "${srcdir}/general.h" src/config/local/
+}
+
+build() {
+  local _file _certs=""
+  # add certs
+  for _file in "${source[@]}"; do
+    if [[ "${_file}" == *.pem ]]; then
+      _certs+="${srcdir}/${_file},"
+    fi
+  done
+
+  cd "$pkgname-$pkgver"
+  # build arch specific images
+  # TODO: adapt arch.ipxe as soon as we can fix https://bugs.archlinux.org/task/70767
+  # NOTE: to debug issues with TLS or codesigning, add "DEBUG=open,tls,x509:3,certstore,privkey"
+  make -C src NO_WERROR=1 \
+    EMBED="$srcdir/arch.ipxe" \
+    CERT="${_certs}" \
+    TRUST="${_certs}" \
+    bin/ipxe.lkrn \
+    bin/ipxe.pxe \
+    bin-i386-efi/ipxe.efi \
+    bin-x86_64-efi/ipxe.efi
+
+  # move binaries out of the way
+  mv -v src/bin/ipxe{,-arch}.lkrn
+  mv -v src/bin/ipxe{,-arch}.pxe
+  mv -v src/bin-i386-efi/ipxe{,-arch}.efi
+  mv -v src/bin-x86_64-efi/ipxe{,-arch}.efi
+
+  # build default images
+  make -C src NO_WERROR=1 \
+    EMBED="$srcdir/default.ipxe" \
+    bin/ipxe.lkrn \
+    bin/ipxe.pxe \
+    bin-i386-efi/ipxe.efi \
+    bin-x86_64-efi/ipxe.efi
+
+}
+
+package() {
+  local _arch
+
+  cd "$pkgname-$pkgver"
+  install -vDm 644 src/bin/ipxe{,-arch}.{lkrn,pxe} -t "${pkgdir}/usr/share/${pkgname}/"
+  for _arch in i386 x86_64; do
+    install -vDm 644 "src/bin-${_arch}-efi/ipxe"{,-arch}.efi -t "${pkgdir}/usr/share/${pkgname}/${_arch}/"
+  done
+  install -vDm 644 COPYING.UBDL -t "${pkgdir}/usr/share/licenses/${pkgname}/"
+
+  install -vDm 755 ../"run_${pkgname}" -t "${pkgdir}/usr/bin"
+}

Deleted: arch.ipxe
===================================================================
--- arch.ipxe	2021-07-23 16:41:00 UTC (rev 984541)
+++ arch.ipxe	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,4 +0,0 @@
-#!ipxe
-ifconf
-ntp pool.ntp.org
-chain https://ipxe.archlinux.org/releng/netboot/archlinux.ipxe || shell

Copied: ipxe/repos/community-x86_64/arch.ipxe (from rev 984541, ipxe/trunk/arch.ipxe)
===================================================================
--- arch.ipxe	                        (rev 0)
+++ arch.ipxe	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,4 @@
+#!ipxe
+ifconf
+ntp pool.ntp.org
+chain https://ipxe.archlinux.org/releng/netboot/archlinux.ipxe || shell

Deleted: codesigning_pierre_archlinux.pem
===================================================================
--- codesigning_pierre_archlinux.pem	2021-07-23 16:41:00 UTC (rev 984541)
+++ codesigning_pierre_archlinux.pem	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,30 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFOzCCAyOgAwIBAgIJAM/ujMJZQq3IMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
-BAYTAkRFMRcwFQYDVQQDDA5QaWVycmUgU2NobWl0ejEiMCAGCSqGSIb3DQEJARYT
-cGllcnJlQGFyY2hsaW51eC5kZTAeFw0xNjA2MDExNjQxNTZaFw0yNjA1MzAxNjQx
-NTZaMEoxCzAJBgNVBAYTAkRFMRcwFQYDVQQDDA5QaWVycmUgU2NobWl0ejEiMCAG
-CSqGSIb3DQEJARYTcGllcnJlQGFyY2hsaW51eC5kZTCCAiIwDQYJKoZIhvcNAQEB
-BQADggIPADCCAgoCggIBAMybf9uwe6O+FPUYR4ycBDcBJp0QOsUDSSw9c5EJsTJJ
-/0HDk+cFW9OdhxnRsxOPCYyrqE/FEusMyAyyyrZ1DVqprTegcqwqgZSmLNwBp+gP
-Dt10JuNQM7IFIs0p3CE6JyuLWJWjn+ZJuVa1Qwfg80wOv/CLkQEWP5ols3o4VroF
-CzJAKd4nVRf8JSyk+4Hka1udtqw4zEyDtaomZ661ZxBH3+PAoE2N+VcMPC3yTOBS
-4RuabUU4PotfFXMrWGfBLuxGK3IVH99rof2SFG719o0ZDOtVLuaCEAo4VywiYqO0
-qAKKBlH0XEvdOAG4KuHFFKQN1UTFRQ9yZXcfdNBnMYRW3QpbPfMcrFUDYvhHW4N/
-dH5JhKL0LDvvrn0Nr1C5OJbZSl2triPmJUJpMBRhcRut6ZH6FkNWLmavNV8Q9cpM
-1qXG0s/yH2RaBQ2+Le7YdKVrcy05SiYJoaZQovxrxQGzJDg9OuWiM49gjBHW32lm
-uK1C4o7B/sf65qZOCkZO2zagLCf8xxKEh/ftbdpnhBpLFbUqXT07Ve5rX26IUUT6
-C+N/dRIxXcmV0+iWOa/Isbo81oOebriHZl5659Fceae2wA8JoBaT7/m3rRSXOPyC
-4hABWbX0eRg3fhiObubTfH74Q1oeLCEClBx8N4sutvoMA0S4Q2VuUvFaB6VyN5w5
-AgMBAAGjJDAiMAsGA1UdDwQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzANBgkq
-hkiG9w0BAQsFAAOCAgEAirqIJj9KkT+uTgz4EphPZN2FbaxDcw0bxBrEX4t9E68K
-seAHkKJd9GPNGkky8JLI1XwfZ4ZTlzapRfAzPrFDk7Gb43qZeuITvCNfPrPMJ7xw
-JmvIw1ryMs9zV2WCNwVFT6EYeGQXW+F9/osP7oAIhFiGeOmDuy7qFkf7BGDCPAaS
-PlMs+YjGPJTHCbtJKV3VFDhAquQYXS6pQat+v1Nbq+53ijow9H7x+GMBz8dtPI4u
-AKjufH4V3XaxJwDUie73i8iavo9QBDA1HzYMhJ/bDymqyI3uxYkh4rsy9In/8V/z
-aZ5pUXT8HW569uQLpjbb5EKaARwXC7d9GO2rTeSDngzlU8KjeLBeR0zHx+P1TsTP
-R4SAvOSxzZGfYr04Qqwr7ivU92liJntoTcgyvvjELoXODvd4EaS2Sixb4s+eqrYI
-8GPTR1HmvknKbhaNI9caERNsnnKLWtkKkhmPmNkLaX+WQIFgcD/BkeeIbLkYA2Xp
-HCPrYuihUSN+7E80BUkbrSp+wohiieMr24LDE6H6BA/qp9Y8HwK7YsnePyaYxKL7
-CchxRmv5VmVo2bYKZvClVfB82n4yG43zR/YMVDTc5n0TqVq2/0AuOtnoiRfNUfzg
-GIaNoMJ8I0NHpB0aL9cIB9UALPY4dsVo/5TqUPgSEXki9fn2A54A8N2A5nqp0uY=
------END CERTIFICATE-----

Copied: ipxe/repos/community-x86_64/codesigning_pierre_archlinux.pem (from rev 984541, ipxe/trunk/codesigning_pierre_archlinux.pem)
===================================================================
--- codesigning_pierre_archlinux.pem	                        (rev 0)
+++ codesigning_pierre_archlinux.pem	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

Deleted: default.ipxe
===================================================================
--- default.ipxe	2021-07-23 16:41:00 UTC (rev 984541)
+++ default.ipxe	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,6 +0,0 @@
-#!ipxe
-
-set next-server-port 80
-
-dhcp &&
-chain http://${next-server}:${next-server-port}/default.ipxe

Copied: ipxe/repos/community-x86_64/default.ipxe (from rev 984541, ipxe/trunk/default.ipxe)
===================================================================
--- default.ipxe	                        (rev 0)
+++ default.ipxe	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,6 @@
+#!ipxe
+
+set next-server-port 80
+
+dhcp &&
+chain http://${next-server}:${next-server-port}/default.ipxe

Deleted: dst_root_ca_x3.pem
===================================================================
--- dst_root_ca_x3.pem	2021-07-23 16:41:00 UTC (rev 984541)
+++ dst_root_ca_x3.pem	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/
-MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
-DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow
-PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD
-Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
-AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O
-rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq
-OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b
-xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw
-7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD
-aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
-HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG
-SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69
-ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr
-AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz
-R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5
-JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo
-Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ
------END CERTIFICATE-----

Deleted: general.h
===================================================================
--- general.h	2021-07-23 16:41:00 UTC (rev 984541)
+++ general.h	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,16 +0,0 @@
-
-// disable unsafe options
-#undef CRYPTO_80211_WEP  /* WEP encryption (deprecated and insecure!) */
-#undef CRYPTO_80211_WPA  /* WPA Personal, authenticating with passphrase */
-
-// enable additional options
-#define NET_PROTO_IPV6  /* IPv6 protocol */
-#define DOWNLOAD_PROTO_HTTPS  /* Secure Hypertext Transfer Protocol */
-#define DOWNLOAD_PROTO_NFS  /* Network File System Protocol */
-#define IMAGE_TRUST_CMD /* Image trust management commands */
-#define NEIGHBOUR_CMD   /* Neighbour management commands */
-#define NTP_CMD   /* NTP commands */
-#define REBOOT_CMD    /* Reboot command */
-#define PING_CMD    /* Ping command */
-#define POWEROFF_CMD    /* Power off command */
-#define CERT_CMD    /* Certificate management commands */

Copied: ipxe/repos/community-x86_64/general.h (from rev 984541, ipxe/trunk/general.h)
===================================================================
--- general.h	                        (rev 0)
+++ general.h	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,16 @@
+
+// disable unsafe options
+#undef CRYPTO_80211_WEP  /* WEP encryption (deprecated and insecure!) */
+#undef CRYPTO_80211_WPA  /* WPA Personal, authenticating with passphrase */
+
+// enable additional options
+#define NET_PROTO_IPV6  /* IPv6 protocol */
+#define DOWNLOAD_PROTO_HTTPS  /* Secure Hypertext Transfer Protocol */
+#define DOWNLOAD_PROTO_NFS  /* Network File System Protocol */
+#define IMAGE_TRUST_CMD /* Image trust management commands */
+#define NEIGHBOUR_CMD   /* Neighbour management commands */
+#define NTP_CMD   /* NTP commands */
+#define REBOOT_CMD    /* Reboot command */
+#define PING_CMD    /* Ping command */
+#define POWEROFF_CMD    /* Power off command */
+#define CERT_CMD    /* Certificate management commands */

Copied: ipxe/repos/community-x86_64/isrgrootx1.pem (from rev 984541, ipxe/trunk/isrgrootx1.pem)
===================================================================
--- isrgrootx1.pem	                        (rev 0)
+++ isrgrootx1.pem	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

Copied: ipxe/repos/community-x86_64/lets-encrypt-r3.pem (from rev 984541, ipxe/trunk/lets-encrypt-r3.pem)
===================================================================
--- lets-encrypt-r3.pem	                        (rev 0)
+++ lets-encrypt-r3.pem	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Deleted: letsencrypt_authority_x3.pem
===================================================================
--- letsencrypt_authority_x3.pem	2021-07-23 16:41:00 UTC (rev 984541)
+++ letsencrypt_authority_x3.pem	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,27 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIEkjCCA3qgAwIBAgIQCgFBQgAAAVOFc2oLheynCDANBgkqhkiG9w0BAQsFADA/
-MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
-DkRTVCBSb290IENBIFgzMB4XDTE2MDMxNzE2NDA0NloXDTIxMDMxNzE2NDA0Nlow
-SjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMT
-GkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
-AQ8AMIIBCgKCAQEAnNMM8FrlLke3cl03g7NoYzDq1zUmGSXhvb418XCSL7e4S0EF
-q6meNQhY7LEqxGiHC6PjdeTm86dicbp5gWAf15Gan/PQeGdxyGkOlZHP/uaZ6WA8
-SMx+yk13EiSdRxta67nsHjcAHJyse6cF6s5K671B5TaYucv9bTyWaN8jKkKQDIZ0
-Z8h/pZq4UmEUEz9l6YKHy9v6Dlb2honzhT+Xhq+w3Brvaw2VFn3EK6BlspkENnWA
-a6xK8xuQSXgvopZPKiAlKQTGdMDQMc2PMTiVFrqoM7hD8bEfwzB/onkxEz0tNvjj
-/PIzark5McWvxI0NHWQWM6r6hCm21AvA2H3DkwIDAQABo4IBfTCCAXkwEgYDVR0T
-AQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwfwYIKwYBBQUHAQEEczBxMDIG
-CCsGAQUFBzABhiZodHRwOi8vaXNyZy50cnVzdGlkLm9jc3AuaWRlbnRydXN0LmNv
-bTA7BggrBgEFBQcwAoYvaHR0cDovL2FwcHMuaWRlbnRydXN0LmNvbS9yb290cy9k
-c3Ryb290Y2F4My5wN2MwHwYDVR0jBBgwFoAUxKexpHsscfrb4UuQdf/EFWCFiRAw
-VAYDVR0gBE0wSzAIBgZngQwBAgEwPwYLKwYBBAGC3xMBAQEwMDAuBggrBgEFBQcC
-ARYiaHR0cDovL2Nwcy5yb290LXgxLmxldHNlbmNyeXB0Lm9yZzA8BgNVHR8ENTAz
-MDGgL6AthitodHRwOi8vY3JsLmlkZW50cnVzdC5jb20vRFNUUk9PVENBWDNDUkwu
-Y3JsMB0GA1UdDgQWBBSoSmpjBH3duubRObemRWXv86jsoTANBgkqhkiG9w0BAQsF
-AAOCAQEA3TPXEfNjWDjdGBX7CVW+dla5cEilaUcne8IkCJLxWh9KEik3JHRRHGJo
-uM2VcGfl96S8TihRzZvoroed6ti6WqEBmtzw3Wodatg+VyOeph4EYpr/1wXKtx8/
-wApIvJSwtmVi4MFU5aMqrSDE6ea73Mj2tcMyo5jMd6jmeWUHK8so/joWUoHOUgwu
-X4Po1QYz+3dszkDqMp4fklxBwXRsW10KXzPMTZ+sOPAveyxindmjkW8lGy+QsRlG
-PfZ+G6Z6h7mjem0Y+iWlkYcV4PIWL1iwBi8saCbGS5jN2p8M+X+Q7UNKEkROb3N6
-KOqkqm57TH2H3eDJAkSnh6/DNFu0Qg==
------END CERTIFICATE-----

Deleted: run_ipxe
===================================================================
--- run_ipxe	2021-07-23 16:41:00 UTC (rev 984541)
+++ run_ipxe	2021-07-23 16:41:17 UTC (rev 984542)
@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-
-ovmf_code=/usr/share/edk2-ovmf/x64/OVMF_CODE.fd
-ovmf_vars=/usr/share/edk2-ovmf/x64/OVMF_VARS.fd
-ipxe_image="${1}"
-
-if [[ ! -f "${ovmf_code}" ]]; then
-  printf "ERROR: %s is missing, install the edk2-ovmf package." "${ovmf_code}" >&2
-  exit 1
-fi
-if [[ ! -f "${ovmf_vars}" ]]; then
-  printf "ERROR: %s is missing, install the edk2-ovmf package." "${ovmf_vars}" >&2
-  exit 1
-fi
-if [[ ! -f "${ipxe_image}" ]]; then
-  echo "ERROR: No IPXE image to run provided as first argument." >&2
-  exit 1
-fi
-
-workdir=$(mktemp -d --tmpdir run_ipxe.XXXXXX)
-trap 'rm -rf $workdir' EXIT INT TERM QUIT
-
-cd "${workdir}"
-cp "${ovmf_vars}" efivars
-mkdir -p ./fat/EFI/Boot/
-cp "${ipxe_image}" ./fat/EFI/Boot/bootx64.efi
-
-exec qemu-system-x86_64 \
-  -boot order=d,menu=on,reboot-timeout=5000 \
-  -m "size=3072,slots=0,maxmem=$((3072*1024*1024))" \
-  -k en-us \
-  -name ipxe,process=ipxe_0 \
-  -device virtio-net-pci,romfile=,netdev=net0 \
-  -netdev user,ipv4,id=net0 \
-  -drive if=pflash,format=raw,unit=0,readonly,file="${ovmf_code}" \
-  -drive if=pflash,format=raw,unit=1,file=efivars \
-  -usb \
-  -enable-kvm \
-  -drive if=none,id=usb-fat,format=raw,file=fat:rw:./fat \
-  -device usb-storage,drive=usb-fat \
-  -vga virtio

Copied: ipxe/repos/community-x86_64/run_ipxe (from rev 984541, ipxe/trunk/run_ipxe)
===================================================================
--- run_ipxe	                        (rev 0)
+++ run_ipxe	2021-07-23 16:41:17 UTC (rev 984542)
@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+ovmf_code=/usr/share/edk2-ovmf/x64/OVMF_CODE.fd
+ovmf_vars=/usr/share/edk2-ovmf/x64/OVMF_VARS.fd
+ipxe_image="${1}"
+
+if [[ ! -f "${ovmf_code}" ]]; then
+  printf "ERROR: %s is missing, install the edk2-ovmf package." "${ovmf_code}" >&2
+  exit 1
+fi
+if [[ ! -f "${ovmf_vars}" ]]; then
+  printf "ERROR: %s is missing, install the edk2-ovmf package." "${ovmf_vars}" >&2
+  exit 1
+fi
+if [[ ! -f "${ipxe_image}" ]]; then
+  echo "ERROR: No IPXE image to run provided as first argument." >&2
+  exit 1
+fi
+
+workdir=$(mktemp -d --tmpdir run_ipxe.XXXXXX)
+trap 'rm -rf $workdir' EXIT INT TERM QUIT
+
+cd "${workdir}"
+cp "${ovmf_vars}" efivars
+mkdir -p ./fat/EFI/Boot/
+cp "${ipxe_image}" ./fat/EFI/Boot/bootx64.efi
+
+exec qemu-system-x86_64 \
+  -boot order=d,menu=on,reboot-timeout=5000 \
+  -m "size=3072,slots=0,maxmem=$((3072*1024*1024))" \
+  -k en-us \
+  -name ipxe,process=ipxe_0 \
+  -device virtio-net-pci,romfile=,netdev=net0 \
+  -netdev user,ipv4=on,id=net0 \
+  -drive if=pflash,format=raw,unit=0,readonly=on,file="${ovmf_code}" \
+  -drive if=pflash,format=raw,unit=1,file=efivars \
+  -usb \
+  -enable-kvm \
+  -serial stdio \
+  -drive if=none,id=usb-fat,format=raw,file=fat:rw:./fat \
+  -device usb-storage,drive=usb-fat \
+  -vga virtio




More information about the arch-commits mailing list