grub2: Update to 2.12

[silkeh]

Summary

New in 2.12:

• GCC 13 support.
• clang 14 support.
• binutils 2.38 support.
• Unification of EFI Linux kernel loader across architectures.
• Transition to EFI Linux kernel stub loader for x86 architecture.
• Initial support for Boot Loader Interface.
• Support for dynamic GRUB runtime memory addition using firmware calls.
• PCI and MMIO UARTs support.
• SDL2 support.
• LoongArch support.
• TPM driver fixes.
• Many filesystems fixes.
• Many CVE and Coverity fixes.
• Debugging support improvements.
• Tests improvements.
• Documentation improvements.
• ...and tons of other fixes and cleanups...

New in 2.06:

• GCC 10 support.
• clang 10 support.
• SBAT support.
• LUKS2 support.
• Drop small MBR gap support.
• Xen Security Modules (XSM/FLASK) support.
• The lockdown mechanism similar to the Linux kernel one.
• Disable the os-prober by default.
• Many backports of GRUB distros specific patches.
• BootHole and BootHole2 fixes.
• ...and tons of other fixes and cleanups...

Resolves #1348

Security Includes fixes for:

• CVE-2014-4607
• CVE-2020-10713
• CVE-2020-14308
• CVE-2020-14309
• CVE-2020-14310
• CVE-2020-14311
• CVE-2020-14372
• CVE-2020-15705
• CVE-2020-15706
• CVE-2020-15707
• CVE-2020-25632
• CVE-2020-25647
• CVE-2020-27749
• CVE-2020-27779
• CVE-2021-20225
• CVE-2021-20233
• CVE-2021-3418
• CVE-2021-3695
• CVE-2021-3696
• CVE-2021-3697
• CVE-2021-3981
• CVE-2022-2601
• CVE-2022-28733
• CVE-2022-28734
• CVE-2022-28735
• CVE-2022-28736
• CVE-2022-3775
• CVE-2023-4692
• CVE-2023-4693

Test Plan

• Install Solus with various configurations:

• Update VMs in plain, LUKS and LVM form and verify reboot.

Checklist

• [x] Package was built and tested against unstable

[ermo]

Looking good!

[silkeh]

Note that CBM doesn't automatically update Grub like it does for systemd-boot. Use grub-install to update it manually, for example:

sudo eopkg install grub2-2.12-38-1-x86_64.eopkg
sudo grub-install /dev/sdX # boot disk (not partition) here
sudo systemctl reboot

[sheepman4267]

Note that CBM doesn't automatically update Grub like it does for systemd-boot. Use grub-install to update it manually, for example:

sudo eopkg install grub2-2.12-38-1-x86_64.eopkg
sudo grub-install /dev/sdX # boot disk here
sudo systemctl reboot

When I try this, I get:

Installing for i386-pc platform.
grub-install: warning: this GPT partition label contains no BIOS Boot Partition; embedding won't be possible.
grub-install: warning: Embedding is not possible.  GRUB can only be installed in this setup using blocklists.  However, blocklists are UNRELIABLE and their usage is discouraged..
grub-install: error: will not proceed with blocklists.

Any ideas?

[silkeh]

Any ideas?

Yes! Forcing it :see_no_evil: (this is what the installer does):

WARNING: This command has a high risk of breaking your system, especially when not used on a Solus 4.5 install. Do not perform the command below unless you are willing to reinstall!!!

sudo eopkg install grub2-2.12-38-1-x86_64.eopkg
sudo grub-install --boot-directory=/boot/ --target=i386-pc --recheck --force /dev/sdX

I have tested the above with an install from a recent snapshot ISO. Ensure your /boot is mounted if you have one (should be the case by default):

[sheepman4267]

Any ideas?

Yes! Forcing it :see_no_evil: (this is what the installer does).

sudo eopkg install grub2-2.12-38-1-x86_64.eopkg
sudo grub-install --boot-directory=/boot/ --target=i386-pc --recheck --force /dev/sdX

I have tested the above with an install from a recent snapshot ISO. Ensure your /boot is mounted if you have one (should be the case by default):

Nice! Okay, I'll do that when I get home (on Saturday, hopefully).