sysutils/xen-tools: add GNU TLS dependency

The Xen toolstack `vncpasswd` guest configuration option depends on QEMU
being built with an external crypto library as of QEMU commit:

21407ddf967f crypto: delete built-in DES implementation

Introduce a dependency of the xen-tools package on gnutls, so that the
option continues to work as expected.  Otherwise when attempting to use
`vncpasswd` option guest creation fails due to QEMU not starting.

Reported by: Subbsd <subbsd@gmail.com>
Sponsored by: Cloud Software Group
Approved by: bapt (implicit)

{emulators,sysutils}/xen-{kernel,tools}: update to 4.19.1.20250217

Update Xen packages, include QEMU fix to avoid using %ms scanf directive
which is not supported by FreeBSD libc.

Link:
https://lore.kernel.org/xen-devel/20250107093140.86180-1-roger.pau@citrix.com/
Link: https://lists.freebsd.org/archives/freebsd-xen/2025-February/000227.html
Approved by: bapt (implicit)
Sponsored by: Cloud Software Group

*/*: Use Gnome helper for defining libxml2 dependency

Replace LIB_DEPENDS with USES= gnome, USE_GNOME= libxml2

Approved by:	portmgr (blanket)

{emulators,sysutils}/xen-{kernel,tools}: update to 4.19.0

Sponsored by: Cloud Software Group
Approved by: bapt (implicit)

devel/argp-standalone: Update to newer snapshot (8ded2bc)

- Bump PORTREVISION for package change
- Bump PORTREVISION of dependent ports for shlib change

{emulators,sysutils}/xen-{kernel,tools}: update to 4.8.2

Changelog: https://xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=RELEASE-4.18.2
Sponsored by: Cloud Software Group
Approved by: bapt (implicit)

{sysutils,emulators}/xen-{tools,kernel}: update to latest stable hash

Update the kernel and tools packages and also include a fix for a clang code
generation bug.

Sponsored by: Cloud Software Group
Approved by: bapt (implicit)

MANPREFIX: eliminate usage of MANPREFIX

While here move some manpages to share/man

*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068

emulators/xen-kernel,sysutils/xen-tools: update to 4.18.0

See release notes:

https://wiki.xenproject.org/wiki/Xen_Project_4.18_Release_Notes

Approved by: bapt (implicit)

{emulators,sysutils}/xen-{kernel,tools}: update to 4.17.2

Also take the opportunity to switch to fetching the sources from the GitHub
mirror based on commit hash.  This makes it easier to update the port when
security fixes or relevant bugfixes are backported to the stable branches,
instead of manually having to cherry pick the changes and add them as patches.

Long term we should look into building emulators/qemu with Xen support so that
the xen-tools package doesn't need to carry its own version of QEMU.

Approved by: bapt (implicit)

sys-utils/xen-tools: remove usage of signed bitfields

When using a single-bit signed bitfield clang complains with:

xenalyze.c:6157:17: error: implicit truncation from 'int' to a one-bit wide
bit-field changes value from 1 to -1

Backport fix from upstream Xen.

Sponsored by: Citrix System R&D
Approved by: bapt (implicit)

all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>

{emulators,sysutils}/xen-{kernel,tools}: update to 4.17

While there also update SeaBIOS to 1.16.1.

Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)

{emulators,sysutils}/xen-{kernel,tools}: update to 4.16.0

Add fixes for XSA-{395,398} and backport clang retpoline support from
unstable.

Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)

textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246

sysutils/xen-tools: fix build with clang 13.0.0

Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)

Style: improve ONLY_FOR_ARCHS_REASON (grammar, markup, etc.)

ONLY_FOR_ARCHS_REASON is used as part of the sentence and thus should
start with lower-case letter and not end with a period which is added
by the framework, similar to other knobs like BROKEN, IGNORE, et al.

While here, remove needless quoting, add missing Oxford comma, expand
contractions and jargonisms, use correct spelling for proper names.

cleanup: drop support for EOL FreeBSD 11.X

Search criteria used:
- 11.4
- OSREL*
- OSVER*
- *_FreeBSD_11

Input from:
- adridg: devel/qca-legacy
- jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds
- sunpoet: security/p5-*OpenSSL*

Reviewed by:	doceng, kde, multimedia, perl, python, ruby, rust
Differential Revision: https://reviews.freebsd.org/D32008
Test Plan: make index

sysutils/xen-tools: fix build with go installed

Unconditionally disable building the Go bindings. Such bindings
should be packaged in a separate port.

PR:		256978
Reported by:	Ting-Wei Lan <lantw44@gmail.com>
Approved by:	bapt (implicit)

sysutils/xen-tools: improve ivshmem check

There's no need to check twice for OPSYS, as there's already a check
for OPSYS being FreeBSD in the makefile.

Also bump the port revision.

Approved by: bapt (implicit)

sysutils/xen-tools: fix build on FreeBSD 12

QEMU Inter-VM shared memory device (ivshmem) depends on eventfd and
will only be built on FreeBSD versions > 12.

The fix is picked up from the QEMU port.

Approved by: bapt (implicit)

xen-tools: Handle DOCS correctly

Reviewed by:	royger
Differential Revision:	https://reviews.freebsd.org/D30306

sysutils/edk2: Rename xen flavor to xen_x64

We might want to have other flavor of this for other xen
arches at one point.

Reviewed by:	royger
Differential Revision:	https://reviews.freebsd.org/D30278

{emulators,sysutils}/xen-{kernel,tools}: update to 4.15.0

Also add support for using UEFI firmware in guests.

Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

Remove # $FreeBSD$ from Makefiles.

sysutils/xen-tools: remove markdown depenmdency

It's not required since Xen 4.12.

Approved by: bapt (implicit)

emulators/xen-kernel,sysutils/xen-tools: update to 4.14.1

Sponsored by:	Citrix Systems R&D
Approved by:	bapt (implicit)

sysutils/xen-tools: switch to PYTHON_EXT_SUFFIX

sysutils/xen-tools: unbreak packaging

Unbreak package with python!=3.7
Switch to use py3.6+ only
Use BINARY_ALIAS for python3
Bump PORTREVISION

PR:		249541
Submitted by:	fluffy
Approved by:	maintainer (royger)

emulators/xen-kernel & sysutils/xen-tools: update to 4.14.0

Update to latest version and include a build fix for LLVM 11.

Approved by:	bapt (implicit)

sysutils/xen-tools + emulators/xen-kernel: update to 4.13.1

Sponsored by:	Citrix Systems R&D
Approved by:	bapt (implicit)

sysutils/xen-tools: properly fix Wno-misleading-indentation errors

Backport the commit from upstream in order to properly fix
Wno-misleading-indentation related errors from the Flex generated
libxl disk parser.

Sponsored by:	Citrix Systems R&D
Approved by:	bapt (implicit)

sysutils/xen-tools: fix build with clang and lld 10

Disable QEMU user support, it's not used by Xen and doesn't currently
build with lld 10 and the QEMU version shipped by Xen. Also pass
-Wno-misleading-indentation to fix the build with clang 10.

Approved by:		bapt
Sponsored by:		Citrix Systems R&D
Differential revision:	https://reviews.freebsd.org/D24482

sysutils/xen-tools: fix makefile typo

Add missing strip annotation (-p1) to patch line.

Approved by:		lwhsu
Differential revision:	https://reviews.freebsd.org/D24160

sysutils/xen-tools: fix build with clang 10.0

Add upstream fix for clang 10.0 build.

Sponsored by:		Citrix Systems R&D
Approved by:		lwhsu
Differential revision:	https://reviews.freebsd.org/D24097

Fix plist

With hat:	portmgr

xen-{kernel/tools}: update to 4.13

Sponsored by:		Citrix Systems R&D
Approved by:		bapt
Differential revision:	https://reviews.freebsd.org/D23170

sysutils: Add missing USES={gnome,mate,php}

xen-{tools/kernel}: update to 4.12.1

Sponsored by:		Citrix Systems R&D
Approved by:		mat
Differential revision:	https://reviews.freebsd.org/D21227

xen-{kernel/tools}: switch back to LLVM toolchain

Backport upstream fixes to correctly build Xen using LLVM 8
toolchain.

Note the fixes are not strictly needed for xen-tools since the Xen
shim build is only ever supposed to be booted using the PVH entry
point (and not the multiboot entry points). Yet given LLD8 erratic
behaviour with orphan section placement I think it's best to ensure
proper section placement for the shim also.

Sponsored by:		Citrix Systems R&D
Reviewed by:		mat
Differential revision:	https://reviews.freebsd.org/D20816

xen: add fixes for XSA-297 (MDS)

Sponsored by:		Citrix Systems R&D
Reviewed by:		mat
Differential revision:	https://reviews.freebsd.org/D20265

xen: update to 4.12

Reviewed by:		bapt
Sponsored by:		Citrix Systems R&D
Differential revision:	https://reviews.freebsd.org/D20038

sysutils/xen-tools: add QEMU migration fix

Add a QEMU fix to make migration more reliable.

Sponsored by:		Citrix Systems R&D
Reviewed by:		novel
Differential revision:	https://reviews.freebsd.org/D19591

sysutils/xen-tools: fix plist when DOCS option is disabled

 - Fix plist when DOCS option is disabled
 - Install man pages into a proper directory and also get them compressed
 - Bump PORTREVISION

Approved by:	maintainer
Differential Revision:	https://reviews.freebsd.org/D19521

xen-kernel & xen-tools: fix ignore message

To mention 12.0 or any newer release, instead of just mentioning
HEAD.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19387

emulators/xen-kernel & sysutils/xen-tools: update to 4.11.1

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19293

emulators/xen-kernel411 & sysutils/xen-tools411: drop version number from port

Actually perform the rename of the directories missing in r494039.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D19284

xen: rename to xen47

Preparatory change in order to import a newer Xen version while
keeping the previous one.

Reviewed by:		bapt
Sponsored by:		Citrix Systems R&D
Differential Revision:	https://reviews.freebsd.org/D16416

xen: fix charset of patch file

Phabricator doesn't handle iso-8859-1 properly, so use utf-8 instead.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential Revision:	https://reviews.freebsd.org/D16415

- Update WWW

Approved by:	portmgr blanket

xen-tools: fix build with newer iasl

The added patch fixes the build on HEAD that contains a newer version
of iasl.

Sponsored by:	Citrix Systems R&D

Bump PORTREVISIONs of all users of math/mpc that we just updated to
version 1.1.0 (via revision 464079).

- Fix shebangs

Approved by:	portmgr blanket

- Those ports fail to build with python3
- Add some explicit FLAVOR to dependencies where needed

Fix whitespace issues (mixed tab/spaces, alignment) in a few ports.

This round is @FreeBSD.org residents except teams.

xen-tools: fix ASL QEMU code

In order to build with newer IASL compiler found in FreeBSD 12

Approved by:	bapt
Sponsored by:	Citrix Systems R&D
MFH:		2017Q2

xen: apply XSA-206

Reviewed by:		bapt
MFH:			2017Q1
Sponsored by:		Citrix Systems R&D
Differential revision:	https://reviews.freebsd.org/D10163

xen: update to 4.7.2

Apply build fixes for clang 4.0 (picked from upstream) and XSA-211.

Reviewed by:		bapt
MFH:			2017Q1
Sponsored by:		AsiaBSDCon
Differential revision:	https://reviews.freebsd.org/D9926

xen: fix build after XSA-209

Approved by:	bapt (implicit, build fix)
Sponsored by:	Citrix Systems R&D
MFH:		2017Q1

xen: XSA-209

Approved by:	bapt
Sponsored by:	Citrix Systems R&D
MFH:		2017Q1

xen: fix build failure after XSA-208

Approved by:	bapt
MFH:		2017Q1
Sponsored by:	Citrix Systems R&D

xen: apply XSA-209

Approved by:	bapt
MFH:		2017Q1
Sponsored by:	Citrix Systems R&D

Fixup EXTRA_PATCHES and PATCHFILES missing the :-pX argument.

Sponsored by:	Absolight

Remove BROKEN_FreeBSD_9

Approved by:	portmgr (blanket)

xen-tools: fix path of xenstore device

When xenstore is not running on the same domain as the toolstack the xenstore
device is used in order to access it (like when running some tools from an
unprivileged domain). Fix the path to point to the FreeBSD path
(/dev/xen/xenstore). This is a backport of upstream commit 7ff99b.

Sponsored by:	Citrix Systems R&D
Approved by:	bapt
MFH:		2016Q4
--This line, and hose below, will be ignored--

M    sysutils/xen-tools/Makefile
AM  
sysutils/xen-tools/files/0001-libs-xenstore-set-correct-FreeBSD-device.patch

xen: update to 4.7.1

Xen 4.7.1 contains the following XSAs: 184, 185, 186, 187, 188 and 190 which
where missing in the previous package. Additionally XSAs 191, 192, 193, 194,
195, 197 and 198 are also applied.

Approved by:	bapt
Sponsored by:	Citrix Systems R&D

- Mark broken on 9.x as well

Approved by:	portmgr blanket

Let USES=localbase add -L${LOCALBASE}/lib to LIBS instead of LDFLAGS.
USES=localbase:ldflags can be used to set LDFLAGS.  Normally LDFLAGS
appears too early on the command line causing some ports to link with
their own libraries in LOCALBASE (if installed) instead of WRKSRC.

Also make use of _USES_POST so -L${LOCALBASE}/lib is added as late as
possible after anything a port Makefile might set.  Use _USES_POST
instead of .include in libedit.mk and libarchive.mk so things like
'USES=libedit localbase:ldflags' work correctly.

Fix some issues with LIBS in some ports.

Switch ports that don't support LIBS to localbase:ldflags.

PR:		212987
Exp-run by:	antoine
Approved by:	portmgr (antoine)

xen: apply XSA-{182/183/184}

Sponsored by:	Citrix Systems R&D
PR:		211482

xen-tools: bump PORTREVISION after SeaBIOS update

Trigger a xen-tools rebuild after the SeaBIOS update.

Sponsored by: Citrix Systems R&D

xen: update to final 4.7.0

Sponsored by: Citrix Systems R&D

xen: update to 4.7.0-rc6

Sponsored by:	Citrix Systems R&D

xen: update to Xen 4.7-rc4

Now both the xen-kernel and xen-tools packages are compiled with clang from
base.

xen-kernel however needs to use binutils due to some limitations in the
current elftc.

Approved by:	bapt
Sponsored by:	Citrix Systems R&D

- Mark BROKEN on 10.x, does not build:

<inline asm>:2:5: error: unexpected directive .code16
    .code16
    ^
<inline asm>:2:33: error: .code16 not supported yet
    .code16
                                ^
<inline asm>:3:16: error: unexpected directive .code16
ap_boot_start: .code16
               ^
<inline asm>:3:33: error: .code16 not supported yet
ap_boot_start: .code16
                                ^
4 errors generated.

Reported by:	pkg-fallout
Approved by:	portmgr blanket

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

xen-tools: extract seabios, build with clang

Submitted by:		bapt
Minor fixes by:		royger
Approved by:		bapt

xen: update port and apply security fixes

 * Apply the following Xen security fixes (XSAs): 167, 168, 170.
 * Update SeaBIOS version to 1.8.2, and apply build fix so it builds with
   ELF toolchain objcopy [0].
 * Perform the backport of two functional changes to the Xen kernel in order
   to improve PVH Dom0 hardware support [1].

Security:		CVE-2016-1570
Security:		CVE-2016-1571
Security:		CVE-2016-2271
Sponsored by:		Citrix Systems R&D
Requested by:		Gustau Perez <gperez@entel.upc.edu> [1]
PR:			207170 [0]
Approved by:		bapt
Differential revision:	https://reviews.freebsd.org/D5420

xen: fix XSAs

Add the following XSA patches: 159, 160, 162, 165, 166.

Security:		CVE-2015-8339
Security:		CVE-2015-8340
Security:		CVE-2015-8341
Security:		CVE-2015-7504
Security:		CVE-2015-8555
PR:			205841
MFH:			2016Q1
Sponsored by:		Citrix Systems R&D
Requested by:		junovitch
Reviewed by:		junovitch
Differential revision:	https://reviews.freebsd.org/D4783

xen: update to 4.5.2

...and add XSA-156.

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential Revision:	https://reviews.freebsd.org/D4150

Fix build on FreeBSD 10, lang/gcc now supports -fstack-protector-strong
but c++(1) from base doesn't

drop maintainership: ENOTIME

xen: apply XSAs

Apply the following XSAs: 148, 149, 150, 151, 152 and 153. More information
about the content of each XSA can be found at: http://xenbits.xen.org/xsa/

Sponsored by:		Citrix Systems R&D
Reviewed by:		bapt
Differential revision:	https://reviews.freebsd.org/D4049

xen: update to 4.5.1

Update xen-kernel to 4.5.1 and add patches to allow live migration, save and
restore. Remove qemu-traditional patches (FreeBSD doesn't support
qemu-traditional) and add XSA-142.

Approved by:		bapt
Differential revision:	https://reviews.freebsd.org/D3854
Sponsored by:		Citrix Systems R&D

sysutils/xen-tools: Update to 4.5.1 and apply XSA-139/XSA-140 patches

- Update to 4.5.1
- Remove XSA-117 to XSA-136 and elf_parse_bsdsyms patches now part of 4.5.1
- Leave XSA-135 QEMU traditional patches due an oversight in 4.5.1
- Apply patches for XSA-139/XSA-140
- Set USE_LDCONFIG, sort USES, use ${PATCH}, and reorder Makefile (portlint)

PR:		201931
Security:	CVE-2015-5166
Security:	ee99899d-4347-11e5-93ad-002590263bf5
Security:	CVE-2015-5165
Security:	f06f20dc-4347-11e5-93ad-002590263bf5
Approved by:	bapt (maintainer), feld (mentor)
MFH:		2015Q3

Fix XSA-138 / CVE-2015-5154

PR:		201931
Security:	CVE-2015-5154
Security:	da451130-365d-11e5-a4a5-002590263bf5
Approved by:	ports-secteam (delphij), delphij (mentor)
MFH:		2015Q3

Fix XSA-137 / CVE-2015-3259

PR:		201416
Submitted by:	Jason Unovitch <jason.unovitch@gmail.com>

xen: add two symtab/strtab loading fixes from upstream

Those are upstream commits:

06ee60 libxc: fix xc_dom_load_elf_symtab
90b18f libelf: fix elf_parse_bsdsyms call

Reviewed by: bapt
Sponsored by: Citrix Systems R&D

Remove patch that has been replaced by the upstream version

Pointyhat to:	bapt

Fix multiple security issues Remove previous XSA-133 fix for consistency

Security:	XSA-119 / CVE-2015-2152
Security:	XSA-125 / CVE-2015-2752
Security:	XSA-126 / CVE-2015-2756
Security:	XSA-128 / CVE-2015-4103
Security:	XSA-129 / CVE-2015-4104
Security:	XSA-130 / CVE-2015-4105
Security:	XSA-131 / CVE-2015-4106
Security:	XSA-133 / CVE-2015-3456
Security:	XSA-135 / CVE-2015-3209

Apply patch from XSA-133 to address CVE-2015-3456 "VENOM" attack.

Obtained from:	http://xenbits.xen.org/xsa/advisory-133.html
Security:	CVE-2015-3456

- Add CPE info

Approved by:	portmgr blanket

Cleanup DIST* variables.

When appropriate:
- Try to use DISTVERSION{SUF,PRE}FIX
- Replace PORTNAME-PORTVERSION by DISTNAME
- Convert MASTER_SITES to use macros
- Other light cleanup

With hat:	portmgr
Sponsored by:	Absolight

Reenable vnc disabled by mistake

Control what we do build from qemu-xen to avoid automagically detected
dependencies
Reduce the size of the package by 10M by not building the qemu tools
Hack the build to always use the c++ compiler from base which avoids having
qemu-system-i386 linked to gcc's libstdc++

Based on reports by:	Michael Dexter

Build xen-tools with qemu so that dom0 is usable

Reported by:	Michael Dexter
Pointyhat to:	bapt