Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Enable multithreading across all CPUs.  Don't change the compression
level as suggested, though.  Users who still want faster compression
should choose a different compressor.

Closes: #942144
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

This is obsolete since Linux 2.6.28.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

v86d currently maps parts of /dev/mem as executable, even though it
may use an emulator.  For now, only mount /dev with the "noexec"
option if it's not present.

Closes: #940171
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

"update-initramfs -c -k all" used to re-create initramfs images if
they had been deleted without using "update-initramfs -d", as it used
the state directory to determine which kernel versions should have
them.

Since commit f39625af "update-initramfs: Make "-k all" take over other
initramfs images", it ignores the state directory and is almost
equivalent to "update-initramfs -u -k all".

Change it to operate on all installed kernel versions.  This will
ignore which kernel versions suppressed initramfs generation, but
I think it's reasonable to assume users won't use these options
if they have installed such kernels.

Closes: #926401
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

This reverts commit 9f7bb9c7.  All the
keyword=value forms for block device naming are now handled in
resolve_device.

Related-to: #944777
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

modinfo now prints an error message if modules.builtin.bin (created
by depmod) is missing.  Copy it in early if it's present.

Closes: #948257
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

This reverts commit 9c823ad2.  It did
not solve the problem it was intended to, because it used "$DESTDIR"
in the destination argument to copy_exec and would therefore copy to
/var/tmp/<something> inside the initramfs.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Executables should always be installed into the initramfs with
copy_exec.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Do not copy SELinux context in mkinitramfs (Closes: #948365)

See merge request kernel-team/initramfs-tools!25

This is consistent with all the other copies into the initramfs.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Tighten permissions for /run/initramfs

See merge request kernel-team/initramfs-tools!22

/run/initramfs contains a log file from fsck of root file system,
which could perhaps contain sensitive information, for example if
/home or /var are also located there and fsck is triggered.

Let's tighten the permissions to 0700.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>

Fix some issues reported by lintian

See merge request kernel-team/initramfs-tools!21

debhelper 12 wants to run dh_installinitramfs, but we don't want this
- in particular, because it makes initramfs-tools-core's maintainer
scripts run update-initramfs.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Instead use the default one with option 'Z'.

hook-functions: Add f2fs as base in auto_add_modules

See merge request kernel-team/initramfs-tools!24

For people wanting to change their filesystem to F2FS or for embedded
devices with eMMC or sdcard, add the f2fs module and its dependency as
base module. Moreover, this adds "crc32" as hidden dependency module for
f2fs.

This reverts commit da64d1a1, which
was a workaround for the inconsistent choices of interpreter path in
the early days of armhf and the limitations of copy_file at the time.
Now that copy_file automatically replicates symlinks and their
targets, we don't need to do anything special about the dynamic
linker.

An initramfs built for Debian 10 on armhf currently contains:

/lib/arm-linux-gnueabihf/ld-2.28.so           regular file
/lib/arm-linux-gnueabihf/ld-linux-armhf.so.3  link to ld-2.28.so
/lib/arm-linux-gnueabihf/ld-linux.so.3        link to /lib/ld-linux-armhf.so.3
/lib/ld-linux-armhf.so.3                      regular file

There are two *copies* of the dynamic linker as well as two symlinks
to one or the other of them.

After this commit, the initramfs contains:

/lib/arm-linux-gnueabihf/ld-2.28.so           regular file
/lib/arm-linux-gnueabihf/ld-linux-armhf.so.3  link to ld-2.28.so
/lib/ld-linux-armhf.so.3                      link to arm-linux-gnueabihf/ld-2.28.so

The /lib/…/ld-linux.so.3 symlink is no longer created, because Debian
armhf binaries all use /lib/ld-linux-armhf.so.3 as the interpreter
path, but it would be created if we ever switched over.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

This reverts commit 879602b2.  The
arm (OABI little-endian) port was replaced by armel and was last
released in Debian 5.0.  The armeb (OABI big-endian) port never made
it into a Debian release and has died off completely.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Remove the temporary hack introduced by commit ab913066 "init:
Take over handling of rootdelay parameter from udev boot script".

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Fixes lintian: uses-debhelper-compat-file
See https://lintian.debian.org/tags/uses-debhelper-compat-file.html for more details.

Fixes lintian: package-uses-old-debhelper-compat-version
See https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html for more details.

hook-functions: preloaded libraries should not end up in the initramfs

See merge request kernel-team/initramfs-tools!19

Closes: #944929

Don't require build dependency on shellcheck when nocheck profile is enabled

See merge request kernel-team/initramfs-tools!20

hook-functions: Handle dw_mmc-rockchip hidden dependency on rockchip-io-domain

See merge request kernel-team/initramfs-tools!18

Include modules for Chromebook Plus display

See merge request kernel-team/initramfs-tools!15

Running a static checker is not a substitute for proper integration
tests, which are still TBD.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

On Samsung Chromebook Plus (v1), messages and prompts printed during an
initramfs run aren't visible to the user unless the pwm_bl, rockchipdrm,
pwm-cros-ec and panel-simple modules are included. This commit includes
these when MODULES=dep and when MODULES=most.

For MODULES=dep: adds backlight and pwm to the dep_modules_add sys-walk.
Walking backlight includes pwm_bl and pwm includes pwm-cros-ec. Since
panel-simple isn't reachable from /sys/class/**, but it can be reached
from /sys/devices/platform/edp-panel, that path is sys-walked if it
exists.

When {efi,platform,simple,vesa}-framebuffer cannot provide a working
framebuffer device, graphics is sys-walked as well. Walking drm works
for rockchipdrm too, but also includes panfrost, so graphics was chosen
instead.

For MODULES=most: the modules are included in a new case 'fb' in the
auto_add_modules intended for modules providing framebuffer support
for machines where generic drivers don't provide one.

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>

Without rockchip-io-domain, I'm getting the following errors when
plugging micro SD cards to a rk3399-gru-kevin:

    dwmmc_rockchip fe320000.dwmmc: All phases bad!
    mmc1: tuning execution failed: -5
    mmc1: error -5 whilst initialising SD card

In that case the relevant /dev/mmcblk* device isn't available either,
so we can't boot from the external SD card.

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>

Update to new name for kernel module therm_pm72

See merge request kernel-team/initramfs-tools!17

Also update a minor comment to clarify what to load nowadays.

See commit 6cd320996746 ("powerpc/powermac: New windfarm driver for
PowerMac G5 (AGP) and Xserve G5").

Signed-off-by: Mathieu Malaterre <malat@debian.org>

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

hook-functions: Handle spi-rockchip hidden dependency on pl330

See merge request kernel-team/initramfs-tools!16

There are still other packages with hooks and scripts that shellcheck
finds fault with.  This shouldn't cause a test failure for
initramfs-tools itself, but unfortunately that's what happens now:

https://ci.debian.net/data/autopkgtest/testing/amd64/i/initramfs-tools/2780481/log.gz



Replace the Test-Command with a script that tests only hook and boot
scripts installed by specific binary packages.  We can expand this
list as and when other packages are updated.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Recent kernel versions (v5.0) enabled SPI DMA channels in the RK3399 DTS
file. Not including pl330 in the initramfs now makes some systems
unbootable (at least rk3399-gru-kevin) presumably because of this.

Signed-off-by: Alper Nebi Yasak <alpernebiyasak@gmail.com>

init: /dev can be noexec and /run nodev

This change *will* be visible in systemd units that use the
InaccessiblePaths option to hide device files.  systemd creates a
dummy file of each type in /run/systemd/inaccessible/<type> and
bind-mounts them over the paths specified in this option.  If a
process in such a unit attempts to access a device that is made
inaccessible, it will now fail with error EPERM and not ENODEV.
Hopefully this won't cause breakage.

See merge request kernel-team/initramfs-tools!9