%global security_hardening none

 Summary:       Kernel
 Name:          linux-esx

 Version:       4.4.20

 Release:       6%{?dist}

 License:       GPLv2
 URL:           http://www.kernel.org/
 Group:         System Environment/Kernel

 Vendor:        VMware, Inc.

 Distribution:  Photon

 Source0:       http://www.kernel.org/pub/linux/kernel/v4.x/linux-%{version}.tar.xz
 %define sha1 linux=67f6d0f7d8c90d7f9fe7c3e1ee4d82b008b77767

 Source1:       config-esx-%{version}

 Patch0:        double-tcp_mem-limits.patch
 Patch1:        linux-4.4-sysctl-sched_weighted_cpuload_uses_rla.patch
 Patch2:        linux-4.4-watchdog-Disable-watchdog-on-virtual-machines.patch
 Patch3:        SUNRPC-Do-not-reuse-srcport-for-TIME_WAIT-socket.patch

 Patch4:        vmxnet3-1.4.6.0-update-rx-ring2-max-size.patch

 Patch5:        01-clear-linux.patch
 Patch6:        02-pci-probe.patch
 Patch7:        03-poweroff.patch
 Patch8:        04-quiet-boot.patch
 Patch9:        05-pv-ops.patch
 Patch10:       06-sunrpc.patch

 Patch11:       vmxnet3-1.4.6.0-avoid-calling-pskb_may_pull-with-interrupts-disabled.patch

 #fixes CVE-2016-3135

 Patch12:       netfilter-x_tables-check-for-size-overflow.patch
 Patch13:       REVERT-sched-fair-Beef-up-wake_wide.patch

 Patch14:       e1000e-prevent-div-by-zero-if-TIMINCA-is-zero.patch

 Patch15:       VSOCK-Detach-QP-check-should-filter-out-non-matching-QPs.patch
 Patch16:       vmxnet3-1.4.6.0-fix-lock-imbalance-in-vmxnet3_tq_xmit.patch
 Patch17:       vmxnet3-1.4.7.0-set-CHECKSUM_UNNECESSARY-for-IPv6-packets.patch
 Patch18:       vmxnet3-1.4.8.0-segCnt-can-be-1-for-LRO-packets.patch
 #fixes CVE-2016-0758
 Patch19:       keys-fix-asn.1-indefinite-length-object-parsing.patch
 Patch20:       vmci-1.1.4.0-use-32bit-atomics-for-queue-headers.patch
 Patch21:       vmci-1.1.5.0-doorbell-create-and-destroy-fixes.patch

 #fixes CVE-2016-8666
 Patch22:       ipip-properly-mark-ipip-GRO-packets-as-encapsulated.patch
 #fixes CVE-2016-8666
 Patch23:       tunnels-dont-apply-GRO-to-multiple-layers-of-encapsulation.patch

 BuildRequires: bc

 BuildRequires: kbd
 BuildRequires: kmod
 BuildRequires: glib-devel
 BuildRequires: xerces-c-devel
 BuildRequires: xml-security-c-devel
 BuildRequires: libdnet
 BuildRequires: libmspack
 BuildRequires: Linux-PAM
 BuildRequires: openssl-devel
 BuildRequires: procps-ng-devel
 Requires:      filesystem kmod coreutils

 
 %description

 The Linux kernel build for GOS for VMware hypervisor.

 %package devel
 Summary:       Kernel Dev
 Group:         System Environment/Kernel
 Requires:      python2
 Requires:      %{name} = %{version}-%{release}
 %description devel

 The Linux package contains the Linux kernel dev files
 
 %package docs

 Summary:       Kernel docs
 Group:         System Environment/Kernel
 Requires:      python2
 Requires:      %{name} = %{version}-%{release}

 %description docs
 The Linux package contains the Linux kernel doc files
 
 %prep

 %setup -q -n linux-%{version}

 %patch0 -p1

 %patch1 -p1
 %patch2 -p1
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1

 %patch6 -p1

 %patch7 -p1

 %patch8 -p1

 %patch9 -p1

 %patch10 -p1

 %patch11 -p1
 %patch12 -p1

 %patch13 -p1

 %patch14 -p1

 %patch15 -p1
 %patch16 -p1
 %patch17 -p1
 %patch18 -p1
 %patch19 -p1
 %patch20 -p1
 %patch21 -p1

 %patch22 -p1
 %patch23 -p1

 
 %build

 # patch vmw_balloon driver
 sed -i 's/module_init/late_initcall/' drivers/misc/vmw_balloon.c
 

 make mrproper
 cp %{SOURCE1} .config
 make LC_ALL= oldconfig
 make VERBOSE=1 KBUILD_BUILD_VERSION="1-photon" KBUILD_BUILD_HOST="photon" ARCH="x86_64" %{?_smp_mflags}
 
 %install
 install -vdm 755 %{buildroot}/etc
 install -vdm 755 %{buildroot}/boot

 install -vdm 755 %{buildroot}%{_defaultdocdir}/linux-esx-%{version}

 install -vdm 755 %{buildroot}/etc/modprobe.d

 install -vdm 755 %{buildroot}/usr/src/%{name}-headers-%{version}-%{release}

 make INSTALL_MOD_PATH=%{buildroot} modules_install

 cp -v arch/x86/boot/bzImage    %{buildroot}/boot/vmlinuz-esx-%{version}-%{release}
 cp -v System.map        %{buildroot}/boot/system.map-esx-%{version}-%{release}
 cp -v .config            %{buildroot}/boot/config-esx-%{version}-%{release}

 cp -r Documentation/*        %{buildroot}%{_defaultdocdir}/linux-esx-%{version}

 install -vdm 755 %{buildroot}/usr/lib/debug/lib/modules/%{version}-esx
 cp -v vmlinux %{buildroot}/usr/lib/debug/lib/modules/%{version}-esx/vmlinux-esx-%{version}-%{release}

 # TODO: noacpi acpi=off noapic pci=conf1,nodomains pcie_acpm=off pnpacpi=off

 cat > %{buildroot}/boot/%{name}-%{version}-%{release}.cfg << "EOF"

 # GRUB Environment Block

 photon_cmdline=init=/lib/systemd/systemd rcupdate.rcu_expedited=1 rw systemd.show_status=0 quiet noreplace-smp cpu_init_udelay=0 plymouth.enable=0

 photon_linux=vmlinuz-esx-%{version}-%{release}

 EOF

 # cleanup dangling symlinks
 rm -f %{buildroot}/lib/modules/%{version}-esx/source
 rm -f %{buildroot}/lib/modules/%{version}-esx/build
 
 # create /use/src/linux-esx-headers-*/ content

 find . -name Makefile* -o -name Kconfig* -o -name *.pl | xargs  sh -c 'cp --parents "$@" %{buildroot}/usr/src/%{name}-headers-%{version}-%{release}' copy
 find arch/x86/include include scripts -type f | xargs  sh -c 'cp --parents "$@" %{buildroot}/usr/src/%{name}-headers-%{version}-%{release}' copy
 find $(find arch/x86 -name include -o -name scripts -type d) -type f | xargs  sh -c 'cp --parents "$@" %{buildroot}/usr/src/%{name}-headers-%{version}-%{release}' copy
 find arch/x86/include Module.symvers include scripts -type f | xargs  sh -c 'cp --parents "$@" %{buildroot}/usr/src/%{name}-headers-%{version}-%{release}' copy

 
 # copy .config manually to be where it's expected to be
 cp .config %{buildroot}/usr/src/%{name}-headers-%{version}-%{release}
 # symling to the build folder
 ln -sf /usr/src/%{name}-headers-%{version}-%{release} %{buildroot}/lib/modules/%{version}-esx/build

 find %{buildroot}/lib/modules -name '*.ko' -print0 | xargs -0 chmod u+x

 %post
 /sbin/depmod -aq %{version}-esx
 ln -sf %{name}-%{version}-%{release}.cfg /boot/photon.cfg
 

 %files
 %defattr(-,root,root)

 /boot/system.map-esx-%{version}-%{release}
 /boot/config-esx-%{version}-%{release}
 /boot/vmlinuz-esx-%{version}-%{release}

 %config(noreplace) /boot/%{name}-%{version}-%{release}.cfg

 /lib/modules/*
 %exclude /lib/modules/%{version}-esx/build

 %exclude /usr/src

 
 %files docs
 %defattr(-,root,root)

 %{_defaultdocdir}/linux-esx-%{version}/*

 %files devel

 %defattr(-,root,root)
 /lib/modules/%{version}-esx/build

 /usr/src/%{name}-headers-%{version}-%{release}

 
 %changelog

 *   Tue Oct 18 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.20-6
 -   ipip-properly-mark-ipip-GRO-packets-as-encapsulated.patch
 -   tunnels-dont-apply-GRO-to-multiple-layers-of-encapsulation.patch

 *   Thu Oct  6 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.20-5
 -   .config: added ADM PCnet32 support
 -   vmci-1.1.4.0-use-32bit-atomics-for-queue-headers.patch
 -   vmci-1.1.5.0-doorbell-create-and-destroy-fixes.patch
 -   late_initcall for vmw_balloon driver
 -   Minor fixed in pv-ops patchset
 *   Mon Oct  3 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.20-4
 -   Package vmlinux with PROGBITS sections in -debuginfo subpackage
 *   Wed Sep 21 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.20-3
 -   Add PCIE hotplug support
 -   Switch processor type to generic
 *   Tue Sep 20 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.20-2
 -   Add -release number for /boot/* files
 -   Fixed generation of debug symbols for kernel modules & vmlinux
 *   Wed Sep  7 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.20-1
 -   Update to linux-4.4.20
 -   keys-fix-asn.1-indefinite-length-object-parsing.patch
 *   Thu Aug 25 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-11
 -   vmxnet3 patches to bumpup a version to 1.4.8.0
 *   Wed Aug 24 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-10
 -   .config: added NVME blk dev support
 *   Wed Aug 10 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-9
 -   Added VSOCK-Detach-QP-check-should-filter-out-non-matching-QPs.patch
 *   Wed Jul 20 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-8
 -   .config: added cgroups for pids,mem and blkio
 *   Mon Jul 11 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-7
 -   .config: added ip multible tables support

 *   Fri Jun 17 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-6
 -   patch: e1000e-prevent-div-by-zero-if-TIMINCA-is-zero.patch
 -   .config: disable rt group scheduling - not supported by systemd

 *   Fri May 27 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-5
 -   patch: REVERT-sched-fair-Beef-up-wake_wide.patch

 *   Wed May 25 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-4
 -   .config: added net_9p and 9p_fs
 *   Tue May 24 2016 Priyesh Padmavilasom <ppadmavilasom@vmware.com> 4.4.8-3
 -   GA - Bump release of all rpms

 *   Mon May 23 2016 Divya Thaluru <dthaluru@vmware.com> 4.4.8-2
 -   Added patches to fix CVE-2016-3134, CVE-2016-3135

 *   Fri May 13 2016 Alexey Makhalov <amakhalov@vmware.com> 4.4.8-1
 -   Update to linux-4.4.8
 -   Added net-Drivers-Vmxnet3-set-... patch
 -   Added e1000e module

 *   Tue Mar 29 2016 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-19
 -   Support kmsg dumping to vmware.log on panic
 -   sunrpc: xs_bind uses ip_local_reserved_ports

 *   Thu Mar 24 2016 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-18
 -   Apply photon8 config (+stack protector regular)
 -   pv-ops patch: added STA support
 -   Added patches from generic kernel

 *   Wed Mar 09 2016 Harish Udaiya Kumar <hudaiyakumar@vmware.com> 4.2.0-17

 -   Enable ACPI hotplug support in kernel config

 *   Sun Feb 14 2016 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-16
 -   veth patch: don’t modify ip_summed

 *   Mon Feb 08 2016 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-15
 -   Double tcp_mem limits, patch is added.

 *   Wed Feb 03 2016 Anish Swaminathan <anishs@vmware.com>  4.2.0-14
 -   Fixes for CVE-2015-7990/6937 and CVE-2015-8660.

 *   Fri Jan 22 2016 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-13
 -   Fix for CVE-2016-0728

 *   Wed Jan 13 2016 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-12
 -   CONFIG_HZ=250
 -   Disable sched autogroup.

 *   Tue Jan 12 2016 Mahmoud Bassiouny <mbassiouny@vmware.com> 4.2.0-11
 -   Remove rootfstype from the kernel parameter.

 *   Tue Dec 15 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-10
 -   Skip rdrand reseed to improve boot time.
 -   .config changes: jolietfs(m), default THP=always, hotplug_cpu(m)

 *   Tue Nov 17 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-9
 -   nordrand cmdline param is removed.
 -   .config: + serial 8250 driver (M).

 *   Fri Nov 13 2015 Mahmoud Bassiouny <mbassiouny@vmware.com> 4.2.0-8
 -   Change the linux image directory.

 *   Tue Nov 10 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-7
 -   Get LAPIC timer frequency from HV, skip boot time calibration.
 -   .config: + dummy net driver (M).

 *   Mon Nov 09 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-6

 -   Rename subpackage dev -> devel.

 -   Added the build essential files in the devel subpackage.
 -   .config: added genede driver module.

 *   Wed Oct 28 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-5
 -   Import patches from kernel2 repo.
 -   Added pv-ops patch (timekeeping related improvements).
 -   Removed unnecessary cmdline params.
 -   .config changes: elevator=noop by default, paravirt clock enable,
     initrd support, openvswitch module, x2apic enable.

 *   Mon Sep 21 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-4
 -   CDROM modules are added.

 *   Thu Sep 17 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-3

 -   Fix for 05- patch (SVGA mem size)

 -   Compile out: pci hotplug, sched smt.

 -   Compile in kernel: vmware balloon & vmci.

 -   Module for efi vars.
 *   Fri Sep 4 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-2

 -   Hardcoded poweroff (direct write to piix4), no ACPI is required.
 -   sd.c: Lower log level for "Assuming drive cache..." message.

 *   Tue Sep 1 2015 Alexey Makhalov <amakhalov@vmware.com> 4.2.0-1

 -   Update to linux-4.2.0. Enable CONFIG_EFI

 *   Fri Aug 28 2015 Alexey Makhalov <amakhalov@vmware.com> 4.1.3-5
 -   Added MD/LVM/DM modules.
 -   Pci probe improvements.

 *   Fri Aug 14 2015 Alexey Makhalov <amakhalov@vmware.com> 4.1.3-4
 -   Use photon.cfg as a symlink.

 *   Thu Aug 13 2015 Alexey Makhalov <amakhalov@vmware.com> 4.1.3-3

 -   Added environment file(photon.cfg) for a grub.

 *   Tue Aug 11 2015 Alexey Makhalov <amakhalov@vmware.com> 4.1.3-2
     Added pci-probe-vmware.patch. Removed unused modules. Decreased boot time. 

 *   Tue Jul 28 2015 Alexey Makhalov <amakhalov@vmware.com> 4.1.3-1
     Initial commit. Use patchset from Clear Linux.