)]}' { "log": [ { "commit": "9f7025479ac07749096efadcd6e4b12d9514e28e", "tree": "40bbe9fa5f7f6f33c42b30c43ab5c7483321b5b3", "parents": [ "9923ab6d78bfe22d575067984d39d8f1cbff81ab" ], "author": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Tue Sep 14 19:34:46 2021" }, "committer": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Tue Sep 14 19:34:46 2021" }, "message": "Creating patch files using git format-patch\n\nThe patch files that we use to pull in upstream shim changes are not\nwell formatted, and their origin cannot be easily determined without\nadditional context. This new set of patch files has been generated\nusing git format-patch, ensuring that upstream origin is clearly\nidentifiable for each.\n\nThe Dockerfile is updated to utilize the new patch file names. The\npatches that get applied have not changed, so binaries produced by a\nbuild with them applied should have hashes that match the v9 tag.\n\nBUG\u003db:195737944\nTEST\u003dmake build-no-cache \u0026 make copy\n\nVerify that the sha256 hash for shimia32.efi is\nd7cf7ab01e990fdb2e646434f27807dbc4f0450ccfde622e7a11d3c125a6e0c6\n\nVerify that the sha256 hash for shimx64.efi is\n88cd3870afbfc847019b815190d7b1b36d6eb49f3ba8dd8ddee34e09e00d2d60\n\nChange-Id: I9d2c408db7c144e8227fe153cfdc0474084070b4\n" }, { "commit": "9923ab6d78bfe22d575067984d39d8f1cbff81ab", "tree": "d4b15c93ee7e7babf450b785848133fb244c8b62", "parents": [ "f34eb7f47ef89c8c565108a53742404cdaee7c8f" ], "author": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Mon Sep 13 14:16:25 2021" }, "committer": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Mon Sep 13 14:16:25 2021" }, "message": "Update SBAT to match GRUB2\n\nUpdate sbat.csv to match the product identifier contained in\nGRUB2\u0027s sbat.csv\n\nBUG\u003db:195737944\nTEST\u003dmake build \u0026 make dump-sbat\n\nChange-Id: I07d10777abd79fabf21089ac96fa62f108bd3fa0\n" }, { "commit": "f34eb7f47ef89c8c565108a53742404cdaee7c8f", "tree": "5d9e3f22617f18734b543b85dc955e41fa7d760b", "parents": [ "dc8f032627b3a3ae8c24a1d66385941f415d2b38" ], "author": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Fri Sep 10 18:47:26 2021" }, "committer": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Fri Sep 10 18:47:26 2021" }, "message": "Update public certificate with new Google-generated public key\n\nThe certificate currently embedded in shim builds doesn\u0027t match\nwhat is used for signing grub. This new cert has a 5 year\nvalidity period; the old one had a 2 year validity period.\n\nBUG\u003db:195737944\nTEST\u003dmake build \u0026 make cert-info\n\nChange-Id: Icdf6ad422781589defd861f2fb446e3494dca244\n" }, { "commit": "dc8f032627b3a3ae8c24a1d66385941f415d2b38", "tree": "6b13b9d9bc849297cc70ffd8d1a4fcab33988cc5", "parents": [ "8a05796ee0c9130d3a3b6c740f64ad428a1e3d92" ], "author": { "name": "Ted Brandston", "email": "tbrandston@google.com", "time": "Wed Aug 18 19:38:28 2021" }, "committer": { "name": "Ted Brandston", "email": "tbrandston@google.com", "time": "Wed Aug 18 19:38:28 2021" }, "message": "Add OWNERS file\n\nSeems like the thing to do\n\nChange-Id: I91ffae1733221847df6672a30ab3fb2262e472d2\n" }, { "commit": "8a05796ee0c9130d3a3b6c740f64ad428a1e3d92", "tree": "7d89841e8de80005a615f61bcdc50a919e149873", "parents": [ "2360da3d240c3799a2ea8f71bc2babf68be904c8" ], "author": { "name": "Ted Brandston", "email": "tbrandston@google.com", "time": "Mon Aug 16 18:37:42 2021" }, "committer": { "name": "Ted Brandston", "email": "tbrandston@google.com", "time": "Mon Aug 16 18:53:29 2021" }, "message": "Change shim.cloudready to shim.chromeos\n\nWe\u0027re not CloudReady anymore, so make the names a little clearer.\n\nBUG\u003db:195942249\nTEST\u003d`make build \u0026\u0026 make copy \u0026\u0026 make dump-sbat`\n\nChange-Id: I4a18f4dbd495ba7433dbbe0365aecaea57a8f47b\n" }, { "commit": "2360da3d240c3799a2ea8f71bc2babf68be904c8", "tree": "8c67e00cb44dd6d47a609b7a783128e20183dc1a", "parents": [ "1206ebc6eec87aba4d8712d1aa75af1c5e962a8f" ], "author": { "name": "Jack Neus", "email": "jackneus@google.com", "time": "Fri Aug 06 19:07:42 2021" }, "committer": { "name": "Jack Neus", "email": "jackneus@google.com", "time": "Fri Aug 06 19:07:42 2021" }, "message": "Update sbat.csv to use new GoB fork\n\nBUG\u003db:195148824\nTEST\u003dmake build \u0026 make dump-sbat\n\nChange-Id: Ib29335a0594a5d85faaa7abcf21a4239df6fa840\n" }, { "commit": "1206ebc6eec87aba4d8712d1aa75af1c5e962a8f", "tree": "e3f9c04c2ac5efd400e3d6ccfb5dd959d3965d5c", "parents": [ "f91f23e3ce3f93fe8532d8bbcfe90ace755a5fed" ], "author": { "name": "Jack Neus", "email": "jackneus@google.com", "time": "Fri Jul 30 22:31:39 2021" }, "committer": { "name": "Jack Neus", "email": "jackneus@google.com", "time": "Thu Aug 05 17:36:08 2021" }, "message": "Update public certificate with Google-generated public key\n\nBUG\u003db:195148824\nTEST\u003dnone\n\nChange-Id: I0336e22428c868a92b5ed36c255e82285c098ca6\n" }, { "commit": "f91f23e3ce3f93fe8532d8bbcfe90ace755a5fed", "tree": "828b74c7344a685f4738983e3419e3cba2395733", "parents": [ "273dc047bc69e617fcb76a948e598ca4f81cb4af", "4510b9a1eabca10f6aba59ac391fc41d08f3c13b" ], "author": { "name": "Paul Nardini", "email": "paul.nardini@gmail.com", "time": "Thu May 06 17:03:19 2021" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 06 17:03:19 2021" }, "message": "Merge pull request #5 from neverware/pauln-shim-15.4\n\nPatching critical shim 15.4 regressions" }, { "commit": "4510b9a1eabca10f6aba59ac391fc41d08f3c13b", "tree": "828b74c7344a685f4738983e3419e3cba2395733", "parents": [ "5028afc95b3d41ea32ea3451f559ff4aea575433" ], "author": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Wed May 05 17:11:29 2021" }, "committer": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Thu May 06 12:49:22 2021" }, "message": "Patching critical shim 15.4 regressions\n\nAply patch files generated from the list of critical regressions\nfound at https://github.com/rhboot/shim-review/issues/165 to our\nshim 15.4 build.\n" }, { "commit": "273dc047bc69e617fcb76a948e598ca4f81cb4af", "tree": "6888017851291a8e31d56664a745acb54ec654f5", "parents": [ "6cc2dcd2a62af5aaf2395ca3eacf298f290b275a", "5028afc95b3d41ea32ea3451f559ff4aea575433" ], "author": { "name": "Paul Nardini", "email": "paul.nardini@gmail.com", "time": "Fri Apr 16 21:43:31 2021" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 16 21:43:31 2021" }, "message": "Merge pull request #4 from neverware/pauln-shim-15.4\n\nBuild shim 15.4 from tarball" }, { "commit": "5028afc95b3d41ea32ea3451f559ff4aea575433", "tree": "6888017851291a8e31d56664a745acb54ec654f5", "parents": [ "e471aa64d173a3756e3a81caa636199e025fa5a8" ], "author": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Fri Apr 16 21:37:52 2021" }, "committer": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Fri Apr 16 21:37:52 2021" }, "message": "Build shim 15.4 from tarball\n\nRemoving ability to build shim from a tag - we\u0027re going to assume that\ntarballs are the preferred method of building from this point on.\n" }, { "commit": "e471aa64d173a3756e3a81caa636199e025fa5a8", "tree": "90daeba422b54f56d3c4c8baa15f07e686b6de69", "parents": [ "6cc2dcd2a62af5aaf2395ca3eacf298f290b275a" ], "author": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Fri Apr 16 21:25:26 2021" }, "committer": { "name": "Paul Nardini", "email": "nardini@google.com", "time": "Fri Apr 16 21:25:26 2021" }, "message": "Build shim 15.4 from tarball\n\nFor shim 15.4 upstream review requires that we build from a tarball\n(https://github.com/rhboot/shim/releases/download/15.4/shim-15.4.tar.bz2)\nrather than the git tag. The most obvious reason for this seems to be\nthat the tarball contains required gnu-efi files, while the tag does\nnot. The original git clone commands have been left in the Dockerfile\nto revert to should future submissions to back to the tag-based builds.\n" }, { "commit": "6cc2dcd2a62af5aaf2395ca3eacf298f290b275a", "tree": "40470ebd5d532320e53938681f87a8eb32b1694e", "parents": [ "3898438f40f36508d0cb94412f25d0d811a8f8d8", "550e77cdb21c7d6deeb6874fe4cf462673959d2d" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Thu Apr 01 21:49:06 2021" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 01 21:49:06 2021" }, "message": "Merge pull request #3 from neverware/bishop-sbat\n\nAdd SBAT data" }, { "commit": "550e77cdb21c7d6deeb6874fe4cf462673959d2d", "tree": "40470ebd5d532320e53938681f87a8eb32b1694e", "parents": [ "3898438f40f36508d0cb94412f25d0d811a8f8d8" ], "author": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Thu Apr 01 20:54:12 2021" }, "committer": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Thu Apr 01 20:57:32 2021" }, "message": "Add SBAT data\n\nThe data is in `sbat.csv`. It gets picked up during the build by\ncopying it (in the docker build) to `data/sbat.csv` in the shim source\ncheckout.\n\nAlso added a `make dump-sbat` target to help verify that the data is\ncorrect.\n\nUpstream documentation:\n- https://github.com/rhboot/shim/blob/main/SBAT.md\n- https://github.com/rhboot/shim/blob/main/SBAT.example.md\n\nBUG\u003db:183954427\n" }, { "commit": "3898438f40f36508d0cb94412f25d0d811a8f8d8", "tree": "17cceff4d00c6790fc3dea762a6b18a69a9a499d", "parents": [ "972749f1ea5570f8d039956d61d282d9220d976c", "b2ad046c1b1df7119ee4979f4be5b39fbde413eb" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Wed Mar 31 01:25:54 2021" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Mar 31 01:25:54 2021" }, "message": "Merge pull request #2 from neverware/bishop-shim-154\n\nUpdate to shim 15.4" }, { "commit": "b2ad046c1b1df7119ee4979f4be5b39fbde413eb", "tree": "17cceff4d00c6790fc3dea762a6b18a69a9a499d", "parents": [ "972749f1ea5570f8d039956d61d282d9220d976c" ], "author": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Wed Mar 31 01:15:55 2021" }, "committer": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Wed Mar 31 01:15:55 2021" }, "message": "Update to shim 15.4\n\n- Shim now uses submodules, so run `git submodule update --init` after\n cloning the repo\n- The build patch is no longer needed, drop that\n- Update the container to the latest fedora release (28 -\u003e 33)\n" }, { "commit": "972749f1ea5570f8d039956d61d282d9220d976c", "tree": "feaa83f544c559b77734b82eec477fcd0524034c", "parents": [ "24e50b8b776759e237faad70a80e37f2b248da3d", "857d73e9ecb1155dc85eb08f6eb6bad053b2d6aa" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Wed Aug 19 17:35:57 2020" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 19 17:35:57 2020" }, "message": "Merge pull request #1 from neverware/bishop-15-1\n\nUpdate to shim 15.1" }, { "commit": "857d73e9ecb1155dc85eb08f6eb6bad053b2d6aa", "tree": "feaa83f544c559b77734b82eec477fcd0524034c", "parents": [ "24e50b8b776759e237faad70a80e37f2b248da3d" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Wed Aug 19 17:16:22 2020" }, "committer": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Wed Aug 19 17:19:03 2020" }, "message": "Update to shim 15.1\n\nThis upstream tag does not build, so I added a small patch in\n`build-fix.patch` that gets applied after cloning the repo.\n\nNote that we are still building with a Fedora 28 container. I tried\nupdating to newer versions, but the shim build fails on all newer\nversions I tried. Some of these errors have likely been fixed in the\npast two years of shim development, but there haven\u0027t been any\nofficial releases of that code.\n\nhttps://neverware.atlassian.net/browse/OVER-12692\n" }, { "commit": "24e50b8b776759e237faad70a80e37f2b248da3d", "tree": "c9e668198213c7d07cc9883889bcee480756d686", "parents": [ "73bebc97ba5c66f53a83c266f1e3d83cc2c485f7" ], "author": { "name": "Paul Nardini", "email": "pnardini@neverware.com", "time": "Mon Jun 15 14:43:04 2020" }, "committer": { "name": "Paul Nardini", "email": "pnardini@neverware.com", "time": "Mon Jun 15 14:43:04 2020" }, "message": "Update expiring certificate\n\nOur current certificate expires on 2020/09/02, but given the fact that we are in an environment where response times might be slowed due to COVID-19 we did an early renewal.\nThe new cert is valid from 2020/05/19 to 2022/09/22.\n" }, { "commit": "73bebc97ba5c66f53a83c266f1e3d83cc2c485f7", "tree": "bfb22868dabda0f5309fde9a3805cb8146058b39", "parents": [ "eda883980b70050655c6c9dcf3916f69f31a2e54" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Mon Aug 20 19:22:42 2018" }, "committer": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Mon Aug 20 19:22:42 2018" }, "message": "Update README\n" }, { "commit": "eda883980b70050655c6c9dcf3916f69f31a2e54", "tree": "84a7770cf77216852ea07e833820d9f92ab7a510", "parents": [ "84fe828bf5827f260ba79df2d8138bf42f734221" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Mon Aug 20 19:16:34 2018" }, "committer": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Mon Aug 20 19:18:30 2018" }, "message": "Update expired certificate\n\nOur previous certificate expired July 31, 2018. The new certificate is\nvalid from July 9, 2018 to September 2, 2020.\n" }, { "commit": "84fe828bf5827f260ba79df2d8138bf42f734221", "tree": "ca09258f6d88e9b71d0ef018b7584912bc690f5f", "parents": [ "8f397bbd8d886d1b48744d5a44f56abf320807b4" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Mon Aug 20 19:15:51 2018" }, "committer": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Mon Aug 20 19:15:51 2018" }, "message": "Add \"cert-info\" target to print details of the public certificate\n" }, { "commit": "8f397bbd8d886d1b48744d5a44f56abf320807b4", "tree": "f7a9af65170e2f0b48a10521efc18005d06b9df4", "parents": [ "02fe38daa78f09d222d2db0466847f48c50deea4" ], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Thu Jul 19 20:18:23 2018" }, "committer": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Thu Jul 19 20:18:23 2018" }, "message": "Add a readme\n" }, { "commit": "02fe38daa78f09d222d2db0466847f48c50deea4", "tree": "b918959a342f0e1602ae047bd7dd4b0796eff87f", "parents": [], "author": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Thu Jul 19 20:14:24 2018" }, "committer": { "name": "Nicholas Bishop", "email": "nbishop@neverware.com", "time": "Thu Jul 19 20:14:24 2018" }, "message": "Initial commit\n" } ] }