Commit Graph

52 Commits

Author SHA1 Message Date
Roger Pau Monné
6dff577bd6 emulators/xen-kernel: improve package message
Use onifconsole for the Xen console, so that when booting bare metal
there are no annoying messages about a console being off. Also note
the usage of vm.max_user_wired instead of vm.max_wired on FreeBSD >
13. Finally expand a little bit on how to get a working serial and VGA
consoles simultaneously.

Sponsored by:	Citrix Systems R&D
Approved by:	bapt (implicit)
2020-05-04 08:43:41 +00:00
Roger Pau Monné
a6b94a0696 xen-{kernel/tools}: update to 4.13
Sponsored by:		Citrix Systems R&D
Approved by:		bapt
Differential revision:	https://reviews.freebsd.org/D23170
2020-02-17 09:17:52 +00:00
Mathieu Arnold
79698c8457 Convert to UCL & cleanup pkg-message (categories e-g) 2019-08-13 16:03:11 +00:00
Roger Pau Monné
0d306f24e0 xen-{tools/kernel}: update to 4.12.1
Sponsored by:		Citrix Systems R&D
Approved by:		mat
Differential revision:	https://reviews.freebsd.org/D21227
2019-08-13 13:39:58 +00:00
Roger Pau Monné
3a144d9694 emulators/xen-kernel: fix foreign mappings
Backport upstream patch to fix foreign mappings.

Sponsored by:		Citrix Systems R&D
Approved by:		ports (tobik)
Differential revision:	https://reviews.freebsd.org/D21028
2019-07-29 14:58:42 +00:00
Roger Pau Monné
2213382ec7 xen-{kernel/tools}: switch back to LLVM toolchain
Backport upstream fixes to correctly build Xen using LLVM 8
toolchain.

Note the fixes are not strictly needed for xen-tools since the Xen
shim build is only ever supposed to be booted using the PVH entry
point (and not the multiboot entry points). Yet given LLD8 erratic
behaviour with orphan section placement I think it's best to ensure
proper section placement for the shim also.

Sponsored by:		Citrix Systems R&D
Reviewed by:		mat
Differential revision:	https://reviews.freebsd.org/D20816
2019-07-03 14:24:46 +00:00
Roger Pau Monné
43b9be10c5 emulators/xen-kernel: use binutils to workaround LLD 8 bug
LLD 8 changed the behaviour regarding the placement of orphaned
sections, which produces a non-bootable Xen kernel:

https://bugs.llvm.org/show_bug.cgi?id=42327

Switch to GNU LD (and NM) until this is resolved.

Sponsored by:		Citrix Systems R&D
Reviewed by:		mat
Differential revision:	https://reviews.freebsd.org/D20706
2019-06-20 15:25:42 +00:00
Roger Pau Monné
228d3e5670 xen: add fixes for XSA-297 (MDS)
Sponsored by:		Citrix Systems R&D
Reviewed by:		mat
Differential revision:	https://reviews.freebsd.org/D20265
2019-05-15 10:24:57 +00:00
Roger Pau Monné
7931facd63 xen: update to 4.12
Reviewed by:		bapt
Sponsored by:		Citrix Systems R&D
Differential revision:	https://reviews.freebsd.org/D20038
2019-04-24 14:21:41 +00:00
Roger Pau Monné
803787f39f emulators/xen-kernel: backport fixes and apply XSAs
Backport a couple of fixes critical for PVH dom0 and
fixes for XSA-{284,287,290,292-294}.

Sponsored-by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19413
2019-03-12 15:02:35 +00:00
Roger Pau Monné
48c035bae6 xen-kernel & xen-tools: fix ignore message
To mention 12.0 or any newer release, instead of just mentioning
HEAD.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19387
2019-02-27 14:00:43 +00:00
Roger Pau Monné
4cfcdeaeb3 emulators/xen-kernel & sysutils/xen-tools: update to 4.11.1
Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19293
2019-02-27 10:02:43 +00:00
Roger Pau Monné
3b0d6a32bd emulators/xen-kernel411 & sysutils/xen-tools411: drop version number from port
Actually perform the rename of the directories missing in r494039.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19284
2019-02-27 09:45:13 +00:00
Roger Pau Monné
768717cce7 xen: rename to xen47
Preparatory change in order to import a newer Xen version while
keeping the previous one.

Reviewed by:		bapt
Sponsored by:		Citrix Systems R&D
Differential Revision:	https://reviews.freebsd.org/D16416
2018-07-24 13:47:03 +00:00
Roger Pau Monné
e9233956dd xen-kernel: add prerequisites for XSA-254 bandaid
MFH with:	r459787
MFH:		2018Q1
2018-01-24 08:51:37 +00:00
Roger Pau Monné
0cf5fe5c18 xen-kernel: fix build with clang 6 and apply pending XSA patches
This includes a band-aid for running 64bit PV guests without
compromising the whole system.

Commit the makefile diff left behind in r459786.

MFH:		2018Q1
Sponsored by:	Citrix Systems R&D
2018-01-23 16:30:48 +00:00
Roger Pau Monné
989d8dbb27 xen-kernel: fix build with clang 6 and apply pending XSA patches
This includes a band-aid for running 64bit PV guests without
compromising the whole system.

MFH:		2018Q1
Sponsored by:	Citrix Systems R&D
2018-01-23 16:23:57 +00:00
Antoine Brodin
a021c1b8c0 - Those ports fail to build with python3
- Add some explicit FLAVOR to dependencies where needed
2017-12-10 20:48:45 +00:00
Roger Pau Monné
26386f00eb xen: apply XSA-236
Approved by:	bapt (implicit)
MFH:		2017Q4
Sponsored by:	Citrix Systems R&D
2017-10-24 14:11:22 +00:00
Roger Pau Monné
aac1e9a2f0 xen-kernel: apply XSA-{237..244}
Approved by:	bapt (implicit)
MFH:		2017Q4
Sponsored by:	Citrix Systems R&D
2017-10-12 15:02:30 +00:00
Roger Pau Monné
befbaafd49 xen: apply XSA-{231-234}
MFH:		2017Q3
Approved by:	bapt
Sponsored by:	Citrix Systems R&D
2017-09-19 12:56:50 +00:00
Roger Pau Monné
7a08b0d624 xen-kernel: apply XSA-{226,227,228,230}
This is CVE-2017-12135, CVE-2017-12137, CVE-2017-12136 and
CVE-2017-12855.

MFH:		2017Q3
Approved by:	lwshu
Sponsored by:	Citrix Systems R&D
2017-08-15 15:08:25 +00:00
Roger Pau Monné
50c059acb6 xen: apply XSA-{217,218,219,220,221,222,224}
Approved by:	bapt
Sponsored by:	Citrix Systems R&D
MFH:		2017Q2
2017-06-20 13:04:23 +00:00
Roger Pau Monné
0e78990b85 xen: XSA-{213,214,215}
Apply XSA-213, XSA-214 and XSA-215.

MFH:		2017Q2
Approved by:	bapt
Sponsored by:	Citrix Systems R&D
2017-05-10 12:55:20 +00:00
Roger Pau Monné
a8aaff068f xen: apply XSA-212
And do some portlint fixing (thanks to Li-Wen Hsu).

Approved by:	lwshu
Sponsored by:	Citrix Systems R&D
MFH:		2017Q1
2017-04-04 13:32:53 +00:00
Roger Pau Monné
6a777074d5 xen: update to 4.7.2
Apply build fixes for clang 4.0 (picked from upstream) and XSA-211.

Reviewed by:		bapt
MFH:			2017Q1
Sponsored by:		AsiaBSDCon
Differential revision:	https://reviews.freebsd.org/D9926
2017-03-20 10:42:20 +00:00
Mathieu Arnold
64dd85b710 Fixup EXTRA_PATCHES and PATCHFILES missing the :-pX argument.
Sponsored by:	Absolight
2017-01-16 16:46:25 +00:00
Roger Pau Monné
f543f322e4 xen: apply XSA-202
Approved by:	bapt
MFH:		2016Q4
Sponsored by:	Citrix Systems R&D
2016-12-21 12:27:40 +00:00
Roger Pau Monné
9f7fe32f6e xen-kernel: add fix for XSA-204
Approved by:	bapt
MFH:		2016Q4
Sponsored by:	Citrix Systems R&D
2016-12-19 16:34:04 +00:00
Roger Pau Monné
36bd345801 xen: apply XSA-200
MFH:		2016Q4
Approved by:	bapt
Sponsored by:	Citrix Systems R&D
2016-12-13 15:20:42 +00:00
Roger Pau Monné
4168d77f03 xen: update to 4.7.1
Xen 4.7.1 contains the following XSAs: 184, 185, 186, 187, 188 and 190 which
where missing in the previous package. Additionally XSAs 191, 192, 193, 194,
195, 197 and 198 are also applied.

Approved by:	bapt
Sponsored by:	Citrix Systems R&D
2016-12-02 16:07:24 +00:00
Roger Pau Monné
27734a12cb xen: apply XSA-{182/183/184}
Sponsored by:	Citrix Systems R&D
PR:		211482
2016-08-01 08:35:54 +00:00
Roger Pau Monné
26d0500335 xen: update to final 4.7.0
Sponsored by: Citrix Systems R&D
2016-07-04 15:29:45 +00:00
Roger Pau Monné
85cb897cb3 xen: update to 4.7.0-rc6
Sponsored by:	Citrix Systems R&D
2016-06-16 15:25:26 +00:00
Roger Pau Monné
500732089d xen: add missing file from r416310
Sponsored by: Citrix Systems R&D
2016-06-07 07:34:40 +00:00
Roger Pau Monné
a4dda243bb xen-kernel: update post install message
Expand the post install instructions to mention the need to add
hw.pci.mcfg=0 to /boot/loader.conf, or else FreeBSD is not going to be able
to boot as Dom0.

Approved by:	bapt
Sponsored by:	Citrix Systems R&D
2016-06-03 13:03:08 +00:00
Roger Pau Monné
5e841df32b xen: update to Xen 4.7-rc4
Now both the xen-kernel and xen-tools packages are compiled with clang from
base.

xen-kernel however needs to use binutils due to some limitations in the
current elftc.

Approved by:	bapt
Sponsored by:	Citrix Systems R&D
2016-06-03 11:26:09 +00:00
Roger Pau Monné
286f646984 xen: update port and apply security fixes
* Apply the following Xen security fixes (XSAs): 167, 168, 170.
 * Update SeaBIOS version to 1.8.2, and apply build fix so it builds with
   ELF toolchain objcopy [0].
 * Perform the backport of two functional changes to the Xen kernel in order
   to improve PVH Dom0 hardware support [1].

Security:		CVE-2016-1570
Security:		CVE-2016-1571
Security:		CVE-2016-2271
Sponsored by:		Citrix Systems R&D
Requested by:		Gustau Pérez <gperez@entel.upc.edu> [1]
PR:			207170 [0]
Approved by:		bapt
Differential revision:	https://reviews.freebsd.org/D5420
2016-02-26 12:56:36 +00:00
Roger Pau Monné
b24beda464 xen: fix XSAs
Add the following XSA patches: 159, 160, 162, 165, 166.

Security:		CVE-2015-8339
Security:		CVE-2015-8340
Security:		CVE-2015-8341
Security:		CVE-2015-7504
Security:		CVE-2015-8555
PR:			205841
MFH:			2016Q1
Sponsored by:		Citrix Systems R&D
Requested by:		junovitch
Reviewed by:		junovitch
Differential revision:	https://reviews.freebsd.org/D4783
2016-01-05 10:06:07 +00:00
Roger Pau Monné
9da11fae56 xen: update to 4.5.2
...and add XSA-156.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential Revision:	https://reviews.freebsd.org/D4150
2015-11-14 09:27:31 +00:00
Baptiste Daroussin
8a3da32b7a drop maintainership: ENOTIME 2015-11-09 15:09:34 +00:00
Roger Pau Monné
e26fcacb8f xen: apply XSAs
Apply the following XSAs: 148, 149, 150, 151, 152 and 153. More information
about the content of each XSA can be found at: http://xenbits.xen.org/xsa/

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D4049
2015-10-31 10:52:39 +00:00
Roger Pau Monné
936db4de55 xen: update to 4.5.1
Update xen-kernel to 4.5.1 and add patches to allow live migration, save and
restore. Remove qemu-traditional patches (FreeBSD doesn't support
qemu-traditional) and add XSA-142.

Approved by:		bapt
Differential revision:	https://reviews.freebsd.org/D3854
Sponsored by:		Citrix Systems R&D
2015-10-09 14:09:07 +00:00
Devin Teske
f7447acc90 Move Xen Kernel menuitem to Boot Options submenu. Prevent conflict with
upcoming Boot Environment menu. The Xen Kernel is dynamically appended
after the last menuitem in the Boot Options submenu. If xen_kernel is not
defined in loader.conf(5) the Xen Kernel menuitem displays "N/A" versus
"On"/"off". While here, fix-up the pkg-message (make capitalization of
"in" vs. "In" consistent; make use of trailing ":" consistent; move a
comment out of the way of file contents, etc.).

Differential Revision:	https://reviews.freebsd.org/D2717
Reviewed by:	allanjude, bapt
Approved by:	bapt
2015-08-03 22:29:30 +00:00
Alex Kozlov
cb2472596d - Fix typo: ONLY_FOR_ARCH -> ONLY_FOR_ARCHS
Approved by: bapt (manintainer), office (bapt)
2015-07-25 10:53:11 +00:00
Roger Pau Monné
c5fa7de873 xen: add two symtab/strtab loading fixes from upstream
Those are upstream commits:

06ee60 libxc: fix xc_dom_load_elf_symtab
90b18f libelf: fix elf_parse_bsdsyms call

Reviewed by: bapt
Sponsored by: Citrix Systems R&D
2015-06-19 10:41:31 +00:00
Baptiste Daroussin
41bd009722 Fix plenty of security issues
Security:	XSA-117 / CVE-2015-0268
Security:	XSA-118 / CVE-2015-1563
Security:	XSA-121 / CVE-2015-2044
Security:	XSA-122 / CVE-2015-2045
Security:	XSA-123 / CVE-2015-2151
Security:	XSA-125 / CVE-2015-2752
Security:	XSA-127 / CVE-2015-2751
Security:	XSA-132 / CVE-2015-3340
Security:	XSA-134 / CVE-2015-4163
Security:	XSA-136 / CVE-2015-4164
2015-06-11 18:08:41 +00:00
Baptiste Daroussin
b6a8134ab4 Grr forgot svn add
Reported by:	decke
2015-05-21 14:59:45 +00:00
Baptiste Daroussin
14b3d2fd2a Add a patch to disable posted interrupts for PVH guest
Submitted by:	royger
2015-05-21 13:32:25 +00:00
Dmitry Marakasov
2f140cb709 - Add CPE info
Approved by:	portmgr blanket
2015-05-14 10:04:06 +00:00