Force -fno-stack-protector on "boot block" that absolutely can't have
a stack protector (probably not even a -fstack-protector-strong) because
the bloat would render them unuseable. This also means the system
compiler can now take on any more it wants, and all the pieces which
can't use the stack protector are properly marked.
ok kettenis

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

Cleanup bootloader code. Compile with -ffreestanding and add ffs.S as a
build dependency which is required because of that. Add various include
files and some prototypes and change some code so that clang does not issue
warnings anymore.
OK kettenis@ deraadt@

Do not create machine@ symlinks in obj as root during includes:, but
defer their creation to later, so that they are owned by BUILDUSER.
This eliminates the last root-owned files in obj/ from 'make build'.
In addition, place a MACHINE == hppa test in hppa/stand/Makefile.inc
to avoid creating bogus symlinks on all other archs.

joint work with & ok natano, "let's try it" deraadt

Add bcrypt pbkdf support to the softraid crypto boot loader code.

Based on a diff from djm@

Switch sparc64 boot code to libsa MI softraid.

Rename softraid boot files, which are currently in an MD location. This
will allow us to bring in a MI softraid.{c,h} in lib/libsa.

Rename libsa pbkdf2.c to pkcs5_pbkdf2.c so that we match libutil.

Prep for relro: make sure it's off for any non-PIE stand/ program

ok millert@ kettenis@

Introduce softraid boot support to sparc64 ofwboot.
sparc64 machines should now be able to boot from softraid raid1 and crypto.
Tested on sun blade100, sunfire v240, and sun t1000 ldom guests.
Lots of encouragement from deraadt@

Kill NOPIE and NOPIE_FLAGS in sparc64/stand. Binaries are identical according
to deraadt@, ok kettenis@

Add NOPIE= bits for sys/arch/*/stand to ensure that bootblocks will always be
built with -fno-pie. This gets the hairiest part of PIE out of the way ...

ok deraadt@

Remove the SPARC_BOOT_ELF define and associated machinery since it does
not make sense to compile ofwboot without support for ELF. Whilst here,
nuke the unused SPARC_BOOT_NFS define and compile elf64_exec.c as an
object rather than including it in boot.c.

ok miod@

Rename file to reflect that it handles 64 bit ELF only.

ok miod@ (some time ago)

ofwboot can be compiled without -traditional-cpp.

From jsg@

Link bootloader at 1MB (same a the Solaris bootloader) instead of 8MB (which
the firmware on the v1280 doesn't like).

tested by many

few more dribbles of LIBKERN cleanup

libkern, begone. Move to a new mechanism where config(8)'s "file"
directive can select between MI and MD versions of these files. At
the same time, adjust the boot programs to pick exactly what they need,
instead of the 7 or 8 mechanisms previously used.

There will be some fallout from this, but testing it all by myself is a
ridiculously slow process; it will be finished in-tree.

Various developers were very nice and avoided making fun of me when I
was gibbering in the corner..

Do not clean up vers.c as it is not autogenerated anymore.

ok deraadt.

sensible version strings; ok miod

Do not pass -print-map to the linker anymore, as we don't care about this
output.

- rip out support for a.out and 32-bit kernels
- cleanup and simplify Makefile
jason@ ok

branches: 1.6.4;
use some make magic (borrowed from macppc) to build {obj/}machine

nostdinc

NOMAN

another dependency on make bugs.

$OpenBSD$

branches: 1.1.1;
Initial revision

Use arc4 to bit-spread the 512-byte random buffer over the .openbsd.randomdata
section, which has grown a fair bit with the introduction of retguard.
Mortimer discovered the repeated 512-byte sequence as retguard keys, and
this resolves the issue. (Chacha does not fit on the media, so 1.5K early
drop RC4 is hopefully sufficient in our KARL link universe)
Version crank the bootblocks. sysupgrade -s will install new bootblocks.
ok djm mortimer

Cleanup bootloader code. Compile with -ffreestanding and add ffs.S as a
build dependency which is required because of that. Add various include
files and some prototypes and change some code so that clang does not issue
warnings anymore.
OK kettenis@ deraadt@

Do not create machine@ symlinks in obj as root during includes:, but
defer their creation to later, so that they are owned by BUILDUSER.
This eliminates the last root-owned files in obj/ from 'make build'.
In addition, place a MACHINE == hppa test in hppa/stand/Makefile.inc
to avoid creating bogus symlinks on all other archs.

joint work with & ok natano, "let's try it" deraadt

Add bcrypt pbkdf support to the softraid crypto boot loader code.

Based on a diff from djm@

Switch sparc64 boot code to libsa MI softraid.

Rename softraid boot files, which are currently in an MD location. This
will allow us to bring in a MI softraid.{c,h} in lib/libsa.

Rename libsa pbkdf2.c to pkcs5_pbkdf2.c so that we match libutil.

Prep for relro: make sure it's off for any non-PIE stand/ program

ok millert@ kettenis@

Introduce softraid boot support to sparc64 ofwboot.
sparc64 machines should now be able to boot from softraid raid1 and crypto.
Tested on sun blade100, sunfire v240, and sun t1000 ldom guests.
Lots of encouragement from deraadt@

Kill NOPIE and NOPIE_FLAGS in sparc64/stand. Binaries are identical according
to deraadt@, ok kettenis@

Add NOPIE= bits for sys/arch/*/stand to ensure that bootblocks will always be
built with -fno-pie. This gets the hairiest part of PIE out of the way ...

ok deraadt@

Remove the SPARC_BOOT_ELF define and associated machinery since it does
not make sense to compile ofwboot without support for ELF. Whilst here,
nuke the unused SPARC_BOOT_NFS define and compile elf64_exec.c as an
object rather than including it in boot.c.

ok miod@

Rename file to reflect that it handles 64 bit ELF only.

ok miod@ (some time ago)

ofwboot can be compiled without -traditional-cpp.

From jsg@

Link bootloader at 1MB (same a the Solaris bootloader) instead of 8MB (which
the firmware on the v1280 doesn't like).

tested by many

few more dribbles of LIBKERN cleanup

libkern, begone. Move to a new mechanism where config(8)'s "file"
directive can select between MI and MD versions of these files. At
the same time, adjust the boot programs to pick exactly what they need,
instead of the 7 or 8 mechanisms previously used.

There will be some fallout from this, but testing it all by myself is a
ridiculously slow process; it will be finished in-tree.

Various developers were very nice and avoided making fun of me when I
was gibbering in the corner..

Do not clean up vers.c as it is not autogenerated anymore.

ok deraadt.

sensible version strings; ok miod

Do not pass -print-map to the linker anymore, as we don't care about this
output.

- rip out support for a.out and 32-bit kernels
- cleanup and simplify Makefile
jason@ ok

branches: 1.6.4;
use some make magic (borrowed from macppc) to build {obj/}machine

nostdinc

NOMAN

another dependency on make bugs.

$OpenBSD$

branches: 1.1.1;
Initial revision

Cleanup bootloader code. Compile with -ffreestanding and add ffs.S as a
build dependency which is required because of that. Add various include
files and some prototypes and change some code so that clang does not issue
warnings anymore.
OK kettenis@ deraadt@

Do not create machine@ symlinks in obj as root during includes:, but
defer their creation to later, so that they are owned by BUILDUSER.
This eliminates the last root-owned files in obj/ from 'make build'.
In addition, place a MACHINE == hppa test in hppa/stand/Makefile.inc
to avoid creating bogus symlinks on all other archs.

joint work with & ok natano, "let's try it" deraadt

Add bcrypt pbkdf support to the softraid crypto boot loader code.

Based on a diff from djm@

Switch sparc64 boot code to libsa MI softraid.

Rename softraid boot files, which are currently in an MD location. This
will allow us to bring in a MI softraid.{c,h} in lib/libsa.

Rename libsa pbkdf2.c to pkcs5_pbkdf2.c so that we match libutil.

Prep for relro: make sure it's off for any non-PIE stand/ program

ok millert@ kettenis@

Introduce softraid boot support to sparc64 ofwboot.
sparc64 machines should now be able to boot from softraid raid1 and crypto.
Tested on sun blade100, sunfire v240, and sun t1000 ldom guests.
Lots of encouragement from deraadt@

Kill NOPIE and NOPIE_FLAGS in sparc64/stand. Binaries are identical according
to deraadt@, ok kettenis@

Add NOPIE= bits for sys/arch/*/stand to ensure that bootblocks will always be
built with -fno-pie. This gets the hairiest part of PIE out of the way ...

ok deraadt@

Remove the SPARC_BOOT_ELF define and associated machinery since it does
not make sense to compile ofwboot without support for ELF. Whilst here,
nuke the unused SPARC_BOOT_NFS define and compile elf64_exec.c as an
object rather than including it in boot.c.

ok miod@

Rename file to reflect that it handles 64 bit ELF only.

ok miod@ (some time ago)

ofwboot can be compiled without -traditional-cpp.

From jsg@

Link bootloader at 1MB (same a the Solaris bootloader) instead of 8MB (which
the firmware on the v1280 doesn't like).

tested by many

few more dribbles of LIBKERN cleanup

libkern, begone. Move to a new mechanism where config(8)'s "file"
directive can select between MI and MD versions of these files. At
the same time, adjust the boot programs to pick exactly what they need,
instead of the 7 or 8 mechanisms previously used.

There will be some fallout from this, but testing it all by myself is a
ridiculously slow process; it will be finished in-tree.

Various developers were very nice and avoided making fun of me when I
was gibbering in the corner..

Do not clean up vers.c as it is not autogenerated anymore.

ok deraadt.

sensible version strings; ok miod

Do not pass -print-map to the linker anymore, as we don't care about this
output.

- rip out support for a.out and 32-bit kernels
- cleanup and simplify Makefile
jason@ ok

branches: 1.6.4;
use some make magic (borrowed from macppc) to build {obj/}machine

nostdinc

NOMAN

another dependency on make bugs.

$OpenBSD$

branches: 1.1.1;
Initial revision

Do not create machine@ symlinks in obj as root during includes:, but
defer their creation to later, so that they are owned by BUILDUSER.
This eliminates the last root-owned files in obj/ from 'make build'.
In addition, place a MACHINE == hppa test in hppa/stand/Makefile.inc
to avoid creating bogus symlinks on all other archs.

joint work with & ok natano, "let's try it" deraadt

Add bcrypt pbkdf support to the softraid crypto boot loader code.

Based on a diff from djm@

Switch sparc64 boot code to libsa MI softraid.

Rename softraid boot files, which are currently in an MD location. This
will allow us to bring in a MI softraid.{c,h} in lib/libsa.

Rename libsa pbkdf2.c to pkcs5_pbkdf2.c so that we match libutil.

Prep for relro: make sure it's off for any non-PIE stand/ program

ok millert@ kettenis@

Introduce softraid boot support to sparc64 ofwboot.
sparc64 machines should now be able to boot from softraid raid1 and crypto.
Tested on sun blade100, sunfire v240, and sun t1000 ldom guests.
Lots of encouragement from deraadt@

Kill NOPIE and NOPIE_FLAGS in sparc64/stand. Binaries are identical according
to deraadt@, ok kettenis@

Add NOPIE= bits for sys/arch/*/stand to ensure that bootblocks will always be
built with -fno-pie. This gets the hairiest part of PIE out of the way ...

ok deraadt@

Remove the SPARC_BOOT_ELF define and associated machinery since it does
not make sense to compile ofwboot without support for ELF. Whilst here,
nuke the unused SPARC_BOOT_NFS define and compile elf64_exec.c as an
object rather than including it in boot.c.

ok miod@

Rename file to reflect that it handles 64 bit ELF only.

ok miod@ (some time ago)

ofwboot can be compiled without -traditional-cpp.

From jsg@

Link bootloader at 1MB (same a the Solaris bootloader) instead of 8MB (which
the firmware on the v1280 doesn't like).

tested by many

few more dribbles of LIBKERN cleanup

libkern, begone. Move to a new mechanism where config(8)'s "file"
directive can select between MI and MD versions of these files. At
the same time, adjust the boot programs to pick exactly what they need,
instead of the 7 or 8 mechanisms previously used.

There will be some fallout from this, but testing it all by myself is a
ridiculously slow process; it will be finished in-tree.

Various developers were very nice and avoided making fun of me when I
was gibbering in the corner..

Do not clean up vers.c as it is not autogenerated anymore.

ok deraadt.

sensible version strings; ok miod

Do not pass -print-map to the linker anymore, as we don't care about this
output.

- rip out support for a.out and 32-bit kernels
- cleanup and simplify Makefile
jason@ ok

branches: 1.6.4;
use some make magic (borrowed from macppc) to build {obj/}machine

nostdinc

NOMAN

another dependency on make bugs.

$OpenBSD$

branches: 1.1.1;
Initial revision