blob: 6cd83f8e20685511d4cfcf2e533a0ffce6fdc6de (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
# $FreeBSD$
PORTNAME= xen
PORTVERSION= 4.7.2
PORTREVISION= 9
CATEGORIES= emulators
MASTER_SITES= http://downloads.xenproject.org/release/xen/${PORTVERSION}/
PKGNAMESUFFIX= -kernel
MAINTAINER= royger@FreeBSD.org
COMMENT= Hypervisor using a microkernel design
LICENSE= GPLv2
ONLY_FOR_ARCHS= amd64
USES= cpe gmake python:2.7,build
# We need to use ld from ports because the version in base doesn't
# support the '--build-id' switch that's needed for live hypervisor
# hot-patching. Once the ld version in base supports this option the
# dependency can be removed.
#
# GNU objcopy is used instead of elftc objcopy because of bug #533:
# https://sourceforge.net/p/elftoolchain/tickets/533/
# Once this is solved we should be able to switch to elfcopy.
#
# And finally we also need to use nm from binutils because the one
# from base cannot deal with i386pep binary files which is the format
# of the Xen EFI image (note that FreeBSD cannot yet boot as Dom0 from EFI,
# but the image is built anyway). This is reported to elftc as bug #534:
# https://sourceforge.net/p/elftoolchain/tickets/534/
MAKE_ARGS= clang=y PYTHON=${PYTHON_CMD} LD="${LD}" OBJCOPY="${OBJCOPY}" \
NM="${NM}"
USE_BINUTILS= yes
NO_MTREE= yes
STRIP= #
PLIST_FILES= /boot/xen \
/boot/xen.4th
EXTRA_PATCHES= ${FILESDIR}/0001-xen-logdirty-prevent-preemption-if-finished.patch:-p1 \
${FILESDIR}/0002-xen-rework-paging_log_dirty_op-to-work-with-hvm-gues.patch:-p1 \
${FILESDIR}/kconf_arch.patch:-p1 \
${FILESDIR}/0001-x86-drop-unneeded-__packed-attributes.patch:-p1 \
${FILESDIR}/0002-build-clang-fix-XSM-dummy-policy-when-using-clang-4..patch:-p1 \
${FILESDIR}/xsa212.patch:-p1 \
${FILESDIR}/xsa213-4.7.patch:-p1 \
${FILESDIR}/xsa214.patch:-p1 \
${FILESDIR}/xsa215.patch:-p1 \
${FILESDIR}/xsa217.patch:-p1 \
${FILESDIR}/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch:-p1 \
${FILESDIR}/0002-gnttab-fix-unmap-pin-accounting-race.patch:-p1 \
${FILESDIR}/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch:-p1 \
${FILESDIR}/0004-gnttab-correct-maptrack-table-accesses.patch:-p1 \
${FILESDIR}/xsa219-4.8.patch:-p1 \
${FILESDIR}/xsa220-4.7.patch:-p1 \
${FILESDIR}/xsa221.patch:-p1 \
${FILESDIR}/xsa222-1-4.7.patch:-p1 \
${FILESDIR}/xsa222-2-4.7.patch:-p1 \
${FILESDIR}/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch:-p1 \
${FILESDIR}/0002-gnttab-never-create-host-mapping-unless-asked-to.patch:-p1 \
${FILESDIR}/0003-gnttab-correct-logic-to-get-page-references-during-m.patch:-p1 \
${FILESDIR}/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch:-p1 \
${FILESDIR}/xsa226-4.7.patch:-p1 \
${FILESDIR}/xsa227.patch:-p1 \
${FILESDIR}/xsa228-4.8.patch:-p1 \
${FILESDIR}/xsa230.patch:-p1 \
${FILESDIR}/xsa231-4.7.patch:-p1 \
${FILESDIR}/xsa232.patch:-p1 \
${FILESDIR}/xsa233.patch:-p1 \
${FILESDIR}/xsa234-4.8.patch:-p1 \
${FILESDIR}/0001-x86-dont-allow-MSI-pIRQ-mapping-on-unowned-device.patch:-p1 \
${FILESDIR}/0002-x86-enforce-proper-privilege-when-mapping-pIRQ-s.patch:-p1 \
${FILESDIR}/0003-x86-MSI-disallow-redundant-enabling.patch:-p1 \
${FILESDIR}/0004-x86-IRQ-conditionally-preserve-irq-pirq-mapping-on-error.patch:-p1 \
${FILESDIR}/0005-x86-FLASK-fix-unmap-domain-IRQ-XSM-hook.patch:-p1 \
${FILESDIR}/xsa238.patch:-p1 \
${FILESDIR}/xsa239.patch:-p1 \
${FILESDIR}/0001-x86-limit-linear-page-table-use-to-a-single-level.patch:-p1 \
${FILESDIR}/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch:-p1 \
${FILESDIR}/xsa241-4.8.patch:-p1 \
${FILESDIR}/xsa242-4.9.patch:-p1 \
${FILESDIR}/xsa243-4.7.patch:-p1 \
${FILESDIR}/xsa244-4.7.patch:-p1 \
${FILESDIR}/xsa236-4.9.patch:-p1 \
${FILESDIR}/0001-x86-compat-fix-compilation-errors-with-clang-6.patch:-p1 \
${FILESDIR}/xsa246-4.7.patch:-p1 \
${FILESDIR}/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch:-p1 \
${FILESDIR}/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch:-p1 \
${FILESDIR}/xsa248-4.8.patch:-p1 \
${FILESDIR}/xsa249.patch:-p1 \
${FILESDIR}/xsa250.patch:-p1 \
${FILESDIR}/xsa251-4.8.patch:-p1 \
${FILESDIR}/0001-x86-entry-Remove-support-for-partial-cpu_user_regs-f.patch:-p1 \
${FILESDIR}/0001-x86-mm-Always-set-_PAGE_ACCESSED-on-L4e-updates.patch:-p1 \
${FILESDIR}/0001-x86-Meltdown-band-aid-against-malicious-64-bit-PV-gu.patch:-p1 \
${FILESDIR}/0002-x86-allow-Meltdown-band-aid-to-be-disabled.patch:-p1
.include <bsd.port.options.mk>
.if ${OPSYS} != FreeBSD
IGNORE= only supported on FreeBSD
.endif
.if ${OSVERSION} < 1100055
IGNORE= only supported on recent FreeBSD 11
.endif
pre-build:
${MAKE_CMD} -C ${WRKSRC}/xen defconfig ${MAKE_ARGS}
# Enable hypervisor hot-patching.
echo 'CONFIG_XSPLICE=y' >> ${WRKSRC}/xen/.config
echo 'CONFIG_FAST_SYMBOL_LOOKUP=y' >> ${WRKSRC}/xen/.config
# The ports native 'build' target cannot be used because it sets
# CFLAGS, and that breaks the Xen build system.
do-build:
${MAKE_CMD} -j${MAKE_JOBS_NUMBER} -C ${WRKSRC}/xen build ${MAKE_ARGS}
do-install:
${MKDIR} ${STAGEDIR}/boot
${INSTALL_PROGRAM} ${WRKSRC}/xen/xen ${STAGEDIR}/boot
${INSTALL_DATA} ${FILESDIR}/xen.4th ${STAGEDIR}/boot
.include <bsd.port.mk>
|
