- build from latest git - remove all the backports - manually forward-port + vendor the hiddenentry patch (original link was dead btw) - vendor (and check) the exact gnulib version grub wants