edk2/repos/extra-any/PKGBUILD

   1 # Maintainer: David Runge <dvzrv@archlinux.org>
   2 # Contributor: Alexander Epaneshnikov <alex19ep@archlinux.org>
   3
   4 _brotli_ver=1.0.9
   5 _openssl_ver=1.1.1n
   6 pkgbase=edk2
   7 pkgname=(edk2-armvirt edk2-shell edk2-ovmf)
   8 pkgver=202202
   9 pkgrel=2
  10 pkgdesc="Modern, feature-rich firmware development environment for the UEFI specifications"
  11 arch=(any)
  12 url="https://github.com/tianocore/edk2"
  13 license=(BSD)
  14 makedepends=(aarch64-linux-gnu-gcc acpica git iasl util-linux-libs nasm python seabios)
  15 options=(!makeflags)
  16 source=(
  17   $pkgbase-$pkgver.tar.gz::https://github.com/tianocore/$pkgbase/archive/$pkgbase-stable$pkgver.tar.gz
  18   https://www.openssl.org/source/openssl-$_openssl_ver.tar.gz{,.asc}
  19   brotli-$_brotli_ver.tar.gz::https://github.com/google/brotli/archive/v$_brotli_ver.tar.gz
  20   50-edk2-ovmf-i386-secure.json
  21   50-edk2-ovmf-x86_64-secure.json
  22   60-edk2-ovmf-i386.json
  23   60-edk2-ovmf-x86_64.json
  24   60-edk2-armvirt-aarch64.json
  25   70-edk2-ovmf-i386-csm.json
  26   70-edk2-ovmf-x86_64-csm.json
  27   80-edk2-ovmf-ia32-on-x86_64-secure.json
  28   81-edk2-ovmf-ia32-on-x86_64.json
  29   82-edk2-ovmf-ia32-on-x86_64-csm.json
  30   $pkgbase-202202-brotli.patch
  31   $pkgbase-202202-ovmfpkgia32.patch
  32 )
  33 sha512sums=('200690a4867331de06e0478869b85577bc510213ebe679f2103160efb84d94c82ac8481ef1f15c3e42c1e9f22b7c5ef0d6c8f2c655bce7702ce843551cf9bb83'
  34             '1937796736613dcf4105a54e42ecb61f95a1cea74677156f9459aea0f2c95159359e766089632bf364ee6b0d28d661eb9957bce8fecc9d2436378d8d79e8d0a4'
  35             'SKIP'
  36             'b8e2df955e8796ac1f022eb4ebad29532cb7e3aa6a4b6aee91dbd2c7d637eee84d9a144d3e878895bb5e62800875c2c01c8f737a1261020c54feacf9f676b5f5'
  37             '603cae145a87bae371bd069d05128beebddb7048e78b93650b19c44b86b2d27cabbcf3bc4c0b2384b862f32383ce7a914a10fc0ad564632bcadd6e4f9389fede'
  38             '3e10bdc9ad13aadbd4111230fb8f37d5f16306aeb7bce2af5ec31c1e2b5adea26d5875cd0d7070ea82eca7546ecbacc8c195ed68425428bf6d2533b58e307b2d'
  39             '56d0bffd6dd7be79709f66bcfba2112e8ef6208de9b5018e90251e3ba68b37f9d911f0bd5a03987b49bb19bd0d62f7fa9ac3ca9f234e80ada3c4dbdd619705b9'
  40             '04b4c86f5afeab6170ad1b7b9937fa775a920c78719a33b213f7f8924e4e905709335307c38b8d5d9c127dd8c7000ddbe740b77f1ddfb68035819b7b4cf2b1e4'
  41             '6d2799171058b45ff4205441ad222893ebe2fce5c5c71c9c52c97efc95e4cad65d66d390b6a554ce7a2ce505ceba7431d18f79f2c2c1101addccee55141d4a66'
  42             '4ee69302de1cec37e4bf4c6a5525d887392f8f733ae8a95a54021f6531741e95baef31da1538b45667a1b198cbbab3069678169069f9ba8db641d603ebb3735b'
  43             '77e23f0c116ae5a087553edb2754df172b2c4fe5bc346356abe0e1f2acfb41a346d06d87b0569102ca4ac9356e189198c0c74476cb35f1b62773a956cb6a1e04'
  44             '8e5eb4e24fad4644a66eb52c95a90a82f01df0af6e57208ad61cb0859dd4425e623e75d93846e8fc3235370a88d93a1d27a512dc4e559bedfe3249404797838b'
  45             '7c9f8e7ce7451e7aa852998ffcd3ca95c08083c313dc8dcf0877969ef23d9da6f69c60bb1e652387a223da6e690524fa094bfbaed14d8bdae2853e68530b2f82'
  46             '891d3ea36d966114ff1f79c3619675a46b30b68def16ab426f2dee00bd0768f82ca0ee26acd7adedd379f25613e309ec9dfaed4e8a5d3f3e4fa7e8d845f55b18'
  47             'd074c794796d17d77eed7c34201d93d7ef3f1322fe1ea4a2ddd7137fae884d49f94f465ee39cfd8346b026142668a41f5a8671e521409505dd6d002f71c0eebc'
  48             '5886eb35732c3850071ea903388861b40a50c59a11fc0384ed38413538baf8714d481cb21d23969c997701e9165972a73a7fd80cb49add4b611d5bcf953dff56')
  49 b2sums=('d8411e6808b335ccd551349a10c983b9448a357e73273fa6c30a07785e27feffed0224950ee98b668712c33f6739a9b006e5043b7dfd014f48dba9fd449b3354'
  50         'af530258d9f7ca4f1bd1c6c344eb385e766e465c9341dd08797676165f67bbb82d3fd549ed7559dc12fb8c9c4db5e04fa6ec7ab729ec1467f5e8bce469ff5398'
  51         'SKIP'
  52         '8b9939d5224396ef33b43e019250ba4bc8949903583615e8dc02c85340fc0a1e2d1632161e00b0ee7355d77f05529ac772f482e05d2089afd71a0bf71e803904'
  53         'fa75566a2ac591fc0c296812f907bfe3fd67f2ee90d3762f0fcae6427df0dfd6260238f5af4fc6b74a76eccfc264db2259db70f8c533871e8b58f37b91a90657'
  54         'f6aaccf4b5a070b05e8eb58d5df60c8798d9b9de2f9febf1417a1ae178431be9a69890a7107d3ca100a439551b4949b937ba400ac36bb9eebaf7e1fdb61dc9d3'
  55         '891719a70d14f29f6ec9e9cfe83cbf48abb5aedfaf5a3a02efaf9cf1dcca0c14f42f8e4486425df12c72001d7811b0f6030520bad2d83b4885f13d110ab2ae0f'
  56         '899ecf699815216984905a7abdd3385890c6309f3ef7813778bedf63c15d42ab12c59532d45033a11838f990744417100eb13048b53cee5cdf46440af61b475d'
  57         'e61378139f2da0d4185e67436d87a023600a075b4258234e818fe7f591bdb5d363713d29d250263df6074f5d37deed269c067983ee6bd322f2f7d0ee710bc452'
  58         '8c211a1bbef20ff361c53735b91cc05660f9d94e7d8a937d903c061a1ec9c96ec2c37f0ef5e954cd4aac7f7962489f5a7a0507e44c781a7671211a9530dccb5b'
  59         '7f48bb1747c732c597a749c851a6cac46de844c1727f3d5edca35249df845a0f578780e8bcda7d86ad2c4a62a9a2a0bc7e1cfab9b7b93d7b5415bb5817d73346'
  60         'ddacbab89d0fd7831149594487559bb6bac1464b2b5620641043306fabfc37800db8c6d87a833c70ec35c699ea2f35cf09d34028ec7982a94686e8cd97b73300'
  61         '99bf35c4042fd5105a3b3b7f71b0aeb18db7811da4ed4481ffec485258619c30d33b08633f9a1c762d383e3bf0191053be9b88b9a4c142350186c6df1261d1f7'
  62         'd45b224c36eda139ca6ad9e4c6c04282724b264dd36a0b3ba904d71476b83e02963c8cadf1f1e1233955071d133dc0defa746740fa08b26398c489fbf6ba89a0'
  63         '644c071dc4fbbccaa64b0b1babcad60395ffce1a7a317a6f5380eff44cbb886be5f29156a8e967ab02b508a33954fcf5602606b43362cc3bb1936a8cfc3a3c07'
  64         '937d507a0ffd9a87a9b008b01f26d4941dc8ee9c3f263fff8d782c8f29c933c8bbd10da9c44ad2ca106befa9db666062d55ed5d7fb793d758c4c8777f5e018c7')
  65 validpgpkeys=('8657ABB260F056B1E5190839D9C4D26D0E604491') # Matt Caswell <matt@openssl.org>
  66 _arch_list=(AARCH64 IA32 X64)
  67 _build_type=RELEASE
  68 _build_plugin=GCC5
  69
  70 prepare() {
  71   # patch to be able to use brotli 1.0.9
  72   patch -Np1 -d $pkgbase-$pkgbase-stable$pkgver -i ../$pkgbase-202202-brotli.patch
  73   # reintroduce include accidentally removed in https://github.com/tianocore/edk2/commit/b47575801e1903e8b316d01840572ce2681cf2c6
  74   patch -Np1 -d $pkgbase-$pkgbase-stable$pkgver -i ../$pkgbase-202202-ovmfpkgia32.patch
  75
  76   cd $pkgbase-$pkgbase-stable$pkgver
  77
  78   # symlinking openssl into place
  79   rm -rfv CryptoPkg/Library/OpensslLib/openssl
  80   ln -sfv "${srcdir}/openssl-$_openssl_ver" CryptoPkg/Library/OpensslLib/openssl
  81
  82   # symlinking brotli into place
  83   rm -rfv BaseTools/Source/C/BrotliCompress/brotli MdeModulePkg/Library/BrotliCustomDecompressLib/brotli
  84   ln -sfv "${srcdir}/brotli-${_brotli_ver}" BaseTools/Source/C/BrotliCompress/brotli
  85   ln -sfv "${srcdir}/brotli-${_brotli_ver}" MdeModulePkg/Library/BrotliCustomDecompressLib/brotli
  86
  87   # -Werror, not even once
  88   sed -e 's/ -Werror//g' -i BaseTools/Conf/*.template BaseTools/Source/C/Makefiles/*.makefile
  89
  90   # copy seabios's CSM binary into place, so that it can be included in the binaries:
  91   cp -v /usr/share/qemu/bios-csm.bin OvmfPkg/Csm/Csm16/Csm16.bin
  92 }
  93
  94 # TODO: check TPM_ENABLE/TPM2_ENABLE
  95 build() {
  96   local _arch
  97   # shared targets for all
  98   local _common_args=(
  99     -b "$_build_type"
 100     -n "$(nproc)"
 101     -t "$_build_plugin"
 102   )
 103   # shared targets for all EFI binaries
 104   local _efi_args=(
 105     -D NETWORK_IP6_ENABLE
 106     -D TPM_CONFIG_ENABLE
 107     -D TPM1_ENABLE
 108     -D TPM2_ENABLE
 109   )
 110   # shared targets x86_64 and i686
 111   local _x86_args=(
 112     -D FD_SIZE_2MB
 113     -D HTTP_BOOT_ENABLE
 114     -D TLS_ENABLE
 115   )
 116
 117   cd $pkgbase-$pkgbase-stable$pkgver
 118   export GCC5_IA32_PREFIX="x86_64-linux-gnu-"
 119   export GCC5_X64_PREFIX="x86_64-linux-gnu-"
 120   export GCC5_AARCH64_PREFIX="aarch64-linux-gnu-"
 121   echo "Building base tools (AARCH64)"
 122   ARCH=AARCH64 make -C BaseTools
 123   echo "Building base tools"
 124   make -C BaseTools
 125   . edksetup.sh
 126
 127   for _arch in ${_arch_list[@]}; do
 128     # shell
 129     echo "Building shell ($_arch)."
 130     BaseTools/BinWrappers/PosixLike/build -p ShellPkg/ShellPkg.dsc -a "$_arch" "${_common_args[@]}"
 131     # ovmf
 132     if [[ "$_arch" == IA32 ]]; then
 133       echo "Building ovmf ($_arch) with secure boot support"
 134       OvmfPkg/build.sh -p OvmfPkg/OvmfPkgIa32.dsc \
 135                        -a "$_arch" \
 136                        "${_common_args[@]}" \
 137                        "${_efi_args[@]}" \
 138                        "${_x86_args[@]}" \
 139                        -D EXCLUDE_SHELL_FROM_FD \
 140                        -D LOAD_X64_ON_IA32_ENABLE \
 141                        -D SECURE_BOOT_ENABLE \
 142                        -D SMM_REQUIRE
 143       mv -v Build/Ovmf{Ia32,IA32-secure}
 144       echo "Building ovmf ($_arch) with CSM support"
 145       OvmfPkg/build.sh -p OvmfPkg/OvmfPkgIa32.dsc \
 146                        -a "${_arch}" \
 147                        "${_common_args[@]}" \
 148                        "${_efi_args[@]}" \
 149                        "${_x86_args[@]}" \
 150                        -D CSM_ENABLE \
 151                        -D LOAD_X64_ON_IA32_ENABLE
 152       mv -v Build/Ovmf{Ia32,IA32-csm}
 153       echo "Building ovmf ($_arch) default"
 154       OvmfPkg/build.sh -p OvmfPkg/OvmfPkgIa32.dsc \
 155                        -a "$_arch" \
 156                        "${_common_args[@]}" \
 157                        "${_efi_args[@]}" \
 158                        "${_x86_args[@]}" \
 159                        -D LOAD_X64_ON_IA32_ENABLE
 160       mv -v Build/Ovmf{Ia32,IA32}
 161     fi
 162     if [[ "$_arch" == X64 ]]; then
 163       echo "Building ovmf ($_arch) with secure boot support"
 164       OvmfPkg/build.sh -p OvmfPkg/OvmfPkgIa32X64.dsc \
 165                        -a IA32 -a "$_arch" \
 166                        "${_common_args[@]}" \
 167                        "${_efi_args[@]}" \
 168                        "${_x86_args[@]}" \
 169                        -D SECURE_BOOT_ENABLE \
 170                        -D SMM_REQUIRE \
 171                        -D EXCLUDE_SHELL_FROM_FD
 172       mv -v Build/Ovmf3264{,-secure}
 173       echo "Building ovmf ($_arch) with CSM support"
 174       OvmfPkg/build.sh -p OvmfPkg/OvmfPkg$_arch.dsc \
 175                        -a "${_arch}" \
 176                        "${_common_args[@]}" \
 177                        "${_efi_args[@]}" \
 178                        "${_x86_args[@]}" \
 179                        -D CSM_ENABLE
 180       mv -v Build/OvmfX64{,-csm}
 181       echo "Building ovmf (${_arch}) without secure boot"
 182       OvmfPkg/build.sh -p OvmfPkg/OvmfPkg$_arch.dsc \
 183                        -a "$_arch" \
 184                        "${_common_args[@]}" \
 185                        "${_efi_args[@]}" \
 186                        "${_x86_args[@]}"
 187     fi
 188     if [[ "$_arch" == AARCH64 ]]; then
 189       echo "Building ArmVirtPkg ($_arch) with secure boot"
 190       BaseTools/BinWrappers/PosixLike/build -p ArmVirtPkg/ArmVirtQemu.dsc \
 191                                             -a "$_arch" \
 192                                             "${_common_args[@]}" \
 193                                             "${_efi_args[@]}" \
 194                                             -D NETWORK_HTTP_BOOT_ENABLE \
 195                                             -D NETWORK_TLS_ENABLE \
 196                                             -D SECURE_BOOT_ENABLE
 197       dd if=/dev/zero of=Build/ArmVirtQemu-$_arch/${_build_type}_${_build_plugin}/FV/QEMU_CODE.fd bs=1M count=64
 198       dd if=Build/ArmVirtQemu-$_arch/${_build_type}_${_build_plugin}/FV/QEMU_EFI.fd of=Build/ArmVirtQemu-$_arch/${_build_type}_${_build_plugin}/FV/QEMU_CODE.fd conv=notrunc
 199       dd if=/dev/zero of=Build/ArmVirtQemu-$_arch/${_build_type}_${_build_plugin}/FV/QEMU_VARS.fd bs=1M count=64
 200     fi
 201   done
 202 }
 203
 204 package_edk2-armvirt() {
 205   local _arch=AARCH64
 206
 207   pkgdesc="Firmware for Virtual Machines (aarch64)"
 208   url="https://github.com/tianocore/tianocore.github.io/wiki/ArmVirtPkg"
 209
 210   cd $pkgbase-$pkgbase-stable$pkgver
 211   install -vDm 644 Build/ArmVirtQemu-$_arch/${_build_type}_${_build_plugin}/FV/*.fd -t "$pkgdir/usr/share/$pkgname/${_arch,,}/"
 212   # add libvirt compatibility (which hardcodes the following paths)
 213   install -vdm 755 "$pkgdir/usr/share/AAVMF"
 214   ln -svf /usr/share/$pkgname/${_arch,,}/QEMU_CODE.fd "$pkgdir/usr/share/AAVMF/AAVMF_CODE.fd"
 215   ln -svf /usr/share/$pkgname/${_arch,,}/QEMU_VARS.fd "$pkgdir/usr/share/AAVMF/AAVMF_VARS.fd"
 216   # install qemu descriptors in accordance with qemu:
 217   # https://git.qemu.org/?p=qemu.git;a=tree;f=pc-bios/descriptors
 218   install -vDm 644 ../*$pkgname*.json -t "$pkgdir/usr/share/qemu/firmware/"
 219   # license
 220   install -vDm 644 License.txt -t "$pkgdir/usr/share/licenses/$pkgname/"
 221 }
 222
 223 package_edk2-shell() {
 224   local _arch
 225   # minimal UEFI shell, as defined in ShellPkg/Application/Shell/ShellPkg.inf
 226   local _min='7C04A583-9E3E-4f1c-AD65-E05268D0B4D1'
 227   # full UEFI shell, as defined in ShellPkg/ShellPkg.dsc
 228   local _full='EA4BB293-2D7F-4456-A681-1F22F42CD0BC'
 229
 230   pkgdesc="EDK2 UEFI Shell"
 231   provides=(uefi-shell)
 232
 233   cd $pkgbase-$pkgbase-stable$pkgver
 234   for _arch in ${_arch_list[@]}; do
 235     if [[ "${_arch}" == 'AARCH64' ]]; then
 236       install -vDm 644 Build/ArmVirtQemu-$_arch/${_build_type}_${_build_plugin}/$_arch/Shell.efi -t "$pkgdir/usr/share/$pkgname/${_arch,,}/"
 237     else
 238       install -vDm 644 Build/Shell/${_build_type}_${_build_plugin}/$_arch/Shell_$_min.efi "$pkgdir/usr/share/$pkgname/${_arch,,}/Shell.efi"
 239       install -vDm 644 Build/Shell/${_build_type}_${_build_plugin}/$_arch/Shell_$_full.efi "$pkgdir/usr/share/$pkgname/${_arch,,}/Shell_Full.efi"
 240     fi
 241   done
 242   # license
 243   install -vDm 644 License.txt -t "$pkgdir/usr/share/licenses/$pkgname/"
 244   # docs
 245   install -vDm 644 {ReadMe.rst,Maintainers.txt} -t "$pkgdir/usr/share/doc/$pkgname/"
 246 }
 247
 248 package_edk2-ovmf() {
 249   local _arch
 250
 251   pkgdesc="Firmware for Virtual Machines (x86_64, i686)"
 252   url="https://github.com/tianocore/tianocore.github.io/wiki/OVMF"
 253   license+=(MIT)
 254   provides=(ovmf)
 255   conflicts=(ovmf)
 256   replaces=(ovmf)
 257   install=$pkgname.install
 258
 259   cd $pkgbase-$pkgbase-stable$pkgver
 260   # installing the various firmwares
 261   for _arch in ${_arch_list[@]}; do
 262     if [[ "$_arch" == AARCH64 ]]; then
 263       continue
 264     else
 265       # installing OVMF.fd for xen: https://bugs.archlinux.org/task/58635
 266       install -vDm 644 Build/Ovmf$_arch/${_build_type}_${_build_plugin}/FV/OVMF.fd -t "$pkgdir/usr/share/$pkgname/${_arch,,}"
 267       install -vDm 644 Build/Ovmf$_arch/${_build_type}_${_build_plugin}/FV/OVMF_CODE.fd -t "$pkgdir/usr/share/$pkgname/${_arch,,}"
 268       install -vDm 644 Build/Ovmf$_arch/${_build_type}_${_build_plugin}/FV/OVMF_VARS.fd -t "$pkgdir/usr/share/$pkgname/${_arch,,}"
 269       install -vDm 644 Build/Ovmf$_arch-csm/${_build_type}_${_build_plugin}/FV/OVMF_CODE.fd "$pkgdir/usr/share/$pkgname/${_arch,,}/OVMF_CODE.csm.fd"
 270       if [[ "${_arch}" == 'X64' ]]; then
 271         install -vDm 644 Build/Ovmf3264-secure/${_build_type}_${_build_plugin}/FV/OVMF_CODE.fd "$pkgdir/usr/share/$pkgname/${_arch,,}/OVMF_CODE.secboot.fd"
 272       else
 273         install -vDm 644 Build/Ovmf$_arch-secure/${_build_type}_${_build_plugin}/FV/OVMF_CODE.fd "$pkgdir/usr/share/$pkgname/${_arch,,}/OVMF_CODE.secboot.fd"
 274       fi
 275     fi
 276   done
 277   # installing qemu descriptors in accordance with qemu:
 278   # https://git.qemu.org/?p=qemu.git;a=tree;f=pc-bios/descriptors
 279   # https://bugs.archlinux.org/task/64206
 280   install -vDm 644 ../*$pkgname*.json -t "$pkgdir/usr/share/qemu/firmware/"
 281   # adding symlink for previous ovmf location
 282   # https://bugs.archlinux.org/task/66528
 283   ln -svf /usr/share/$pkgname "$pkgdir/usr/share/ovmf"
 284   # adding a symlink for applications with questionable heuristics (such as lxd)
 285   ln -svf /usr/share/$pkgname "$pkgdir/usr/share/OVMF"
 286   # licenses
 287   install -vDm 644 License.txt -t "$pkgdir/usr/share/licenses/$pkgname/"
 288   install -vDm 644 OvmfPkg/License.txt "$pkgdir/usr/share/licenses/$pkgname/OvmfPkg.License.txt"
 289   # docs
 290   install -vDm 644 {OvmfPkg/README,ReadMe.rst,Maintainers.txt} -t "$pkgdir/usr/share/doc/$pkgname/"
 291 }