2023-06-17 17:30:37 +00:00
|
|
|
%define debug_package %{nil}
|
|
|
|
|
|
|
|
|
|
# Product information
|
|
|
|
|
%define product_family Rocky Linux
|
|
|
|
|
%define variant_titlecase Server
|
|
|
|
|
%define variant_lowercase server
|
|
|
|
|
|
2024-09-22 05:42:07 +00:00
|
|
|
# Distribution Version Information
|
2023-06-17 17:30:37 +00:00
|
|
|
%define distro_name Rocky Linux
|
|
|
|
|
%define distro %{distro_name}
|
2023-09-05 05:36:22 +00:00
|
|
|
%define distro_code Red Quartz
|
2023-06-17 17:30:37 +00:00
|
|
|
%define major 10
|
|
|
|
|
%define minor 0
|
2024-10-17 16:07:18 +00:00
|
|
|
%define rocky_rel 0.21
|
2023-06-17 17:30:37 +00:00
|
|
|
%define rpm_license BSD-3-Clause
|
|
|
|
|
%define dist .el%{major}
|
|
|
|
|
%define home_url https://rockylinux.org/
|
|
|
|
|
%define bug_url https://bugs.rockylinux.org/
|
|
|
|
|
%define debug_url https://debuginfod.rockylinux.org/
|
|
|
|
|
%define dist_vendor RESF
|
2024-07-26 15:31:24 +00:00
|
|
|
%define vendor_url https://resf.org/
|
2023-06-17 17:30:37 +00:00
|
|
|
|
2024-07-07 05:56:05 +00:00
|
|
|
%define contentdir stg/rocky
|
2023-06-17 17:30:37 +00:00
|
|
|
%define sigcontent pub/sig
|
|
|
|
|
%define rlosid rocky
|
|
|
|
|
|
|
|
|
|
%define os_bug_name Rocky-Linux-%{major}
|
2023-11-21 01:38:03 +00:00
|
|
|
%define support_end 2035-05-31
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
%define base_release_version %{major}
|
|
|
|
|
%define dist_release_version %{major}
|
|
|
|
|
%define full_release_version %{major}.%{minor}
|
|
|
|
|
|
|
|
|
|
%ifarch ppc64le
|
|
|
|
|
%define tuned_profile :server
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
# Avoids a weird anaconda problem
|
|
|
|
|
%global __requires_exclude_from %{_libexecdir}
|
|
|
|
|
|
|
|
|
|
# conditional section for future use
|
|
|
|
|
|
|
|
|
|
Name: rocky-release%{?rltype}
|
|
|
|
|
Version: %{full_release_version}
|
|
|
|
|
Release: %{rocky_rel}%{dist}
|
|
|
|
|
Summary: %{distro_name} release files
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
License: %{rpm_license}
|
|
|
|
|
URL: https://rockylinux.org
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
|
|
|
|
|
# What do we provide? Some of these needs are a necesity (think comps and
|
|
|
|
|
# groups) and things like EPEL need it.
|
|
|
|
|
Provides: rocky-release = %{version}-%{release}
|
|
|
|
|
Provides: rocky-release(upstream) = %{full_release_version}
|
|
|
|
|
Provides: redhat-release = %{version}-%{release}
|
|
|
|
|
Provides: system-release = %{version}-%{release}
|
|
|
|
|
Provides: system-release(releasever) = %{major}
|
|
|
|
|
Provides: centos-release = %{version}-%{release}
|
|
|
|
|
Provides: centos-release(upstream) = %{full_release_version}
|
|
|
|
|
|
2023-12-13 16:59:06 +00:00
|
|
|
# Needed to avoid lorax-templates-generic
|
|
|
|
|
Suggests: lorax-templates-rhel
|
|
|
|
|
|
2023-06-17 17:30:37 +00:00
|
|
|
## Required by libdnf
|
|
|
|
|
Provides: base-module(platform:el%{major})
|
|
|
|
|
|
|
|
|
|
## This makes lorax/pungi/anaconda happy
|
|
|
|
|
Provides: rocky-release-eula = %{version}-%{release}
|
|
|
|
|
Provides: redhat-release-eula = %{version}-%{release}
|
|
|
|
|
Provides: centos-release-eula = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
# What are our requirements?
|
|
|
|
|
Requires: rocky-repos(%{major})
|
|
|
|
|
|
|
|
|
|
# GPG Keys (100-199)
|
|
|
|
|
Source101: RPM-GPG-KEY-Rocky-%{major}
|
|
|
|
|
Source102: RPM-GPG-KEY-Rocky-%{major}-Testing
|
|
|
|
|
|
|
|
|
|
# Release Sources (200-499)
|
|
|
|
|
Source200: EULA
|
|
|
|
|
Source201: LICENSE
|
|
|
|
|
Source202: Contributors
|
|
|
|
|
Source203: COMMUNITY-CHARTER
|
|
|
|
|
|
|
|
|
|
# !! Stable !!
|
|
|
|
|
Source300: 85-display-manager.preset
|
|
|
|
|
Source301: 90-default.preset
|
|
|
|
|
Source302: 90-default-user.preset
|
|
|
|
|
Source303: 99-default-disable.preset
|
|
|
|
|
Source304: 50-redhat.conf
|
|
|
|
|
|
|
|
|
|
# Repo Sources (1200-1299)
|
|
|
|
|
Source1200: rocky.repo
|
|
|
|
|
Source1201: rocky-addons.repo
|
|
|
|
|
Source1202: rocky-extras.repo
|
|
|
|
|
Source1203: rocky-devel.repo
|
|
|
|
|
|
|
|
|
|
# Add ons (1300-1399)
|
|
|
|
|
Source1300: rocky.1.gz
|
|
|
|
|
|
2024-04-04 20:14:34 +00:00
|
|
|
# 1400 is the root
|
|
|
|
|
# 1401-1420 are dedicated to the kernel
|
|
|
|
|
# 1421-1440 is dedicated to x86_64
|
|
|
|
|
# 1441-1460 is dedicated to aarch64
|
|
|
|
|
Source1400: rocky-root-ca.der
|
|
|
|
|
Source1401: rockydup1.x509
|
|
|
|
|
Source1402: rockykpatch1.x509
|
|
|
|
|
Source1403: rockydup1-aarch64.x509
|
|
|
|
|
Source1404: rockykpatch1-aarch64.x509
|
2024-04-30 23:58:23 +00:00
|
|
|
Source1405: rocky-nvidiagpuoot101.x509
|
2024-05-01 00:24:12 +00:00
|
|
|
Source1406: rocky-nvidiagpuoot101-aarch64.x509
|
2024-04-04 20:14:34 +00:00
|
|
|
# x86_64
|
|
|
|
|
Source1421: rocky-fwupd.cer
|
|
|
|
|
Source1422: rocky-grub2.cer
|
|
|
|
|
Source1423: rocky-kernel.cer
|
|
|
|
|
Source1424: rocky-shim.cer
|
|
|
|
|
Source1425: rocky-uki-virt.cer
|
|
|
|
|
# x86_64 in der
|
|
|
|
|
Source1426: rocky-fwupd.der
|
|
|
|
|
Source1427: rocky-grub2.der
|
|
|
|
|
Source1428: rocky-kernel.der
|
|
|
|
|
Source1429: rocky-shim.der
|
|
|
|
|
Source1430: rocky-uki-virt.der
|
|
|
|
|
# aarch64
|
|
|
|
|
Source1441: rocky-fwupd-aarch64.cer
|
|
|
|
|
Source1442: rocky-grub2-aarch64.cer
|
|
|
|
|
Source1443: rocky-kernel-aarch64.cer
|
|
|
|
|
Source1444: rocky-shim-aarch64.cer
|
|
|
|
|
Source1445: rocky-uki-virt-aarch64.cer
|
|
|
|
|
# aarch64 in der
|
|
|
|
|
Source1446: rocky-fwupd-aarch64.der
|
|
|
|
|
Source1447: rocky-grub2-aarch64.der
|
|
|
|
|
Source1448: rocky-kernel-aarch64.der
|
|
|
|
|
Source1449: rocky-shim-aarch64.der
|
|
|
|
|
Source1450: rocky-uki-virt-aarch64.der
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
%{distro_name} release files.
|
|
|
|
|
|
|
|
|
|
%package -n rocky-repos%{?rltype}
|
|
|
|
|
Summary: %{distro_name} Package Repositories
|
|
|
|
|
License: %{rpm_license}
|
|
|
|
|
Provides: system-repos = %{version}-%{release}
|
|
|
|
|
Provides: rocky-repos(%{major}) = %{full_release_version}
|
|
|
|
|
Requires: system-release = %{version}-%{release}
|
|
|
|
|
Requires: rocky-gpg-keys%{?rltype}
|
|
|
|
|
Conflicts: %{name} < 8.0
|
|
|
|
|
|
|
|
|
|
%description -n rocky-repos%{?rltype}
|
|
|
|
|
%{distro_name} package repository files for yum/dnf
|
|
|
|
|
|
|
|
|
|
%package -n rocky-gpg-keys%{?rltype}
|
|
|
|
|
Summary: Rocky RPM GPG Keys
|
|
|
|
|
Conflicts: %{name} < 8.0
|
|
|
|
|
|
|
|
|
|
%description -n rocky-gpg-keys%{?rltype}
|
|
|
|
|
This package provides the RPM signature keys for Rocky.
|
|
|
|
|
|
|
|
|
|
%package -n rocky-sb-certs%{?rltype}
|
|
|
|
|
Summary: %{distro_name} public secureboot certificates
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
Provides: system-sb-certs = %{version}-%{release}
|
2024-04-08 00:34:52 +00:00
|
|
|
Provides: redhat-sb-certs = %{version}-%{release}
|
|
|
|
|
Provides: centos-sb-certs = %{version}-%{release}
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
%description -n rocky-sb-certs%{?rltype}
|
|
|
|
|
This package contains the %{distro_name} secureboot public certificates.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
echo Good.
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
echo Good.
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
# docs dir for license and contributors
|
|
|
|
|
mkdir ./docs
|
|
|
|
|
cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# system-release data
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}
|
|
|
|
|
echo "%{distro_name} release %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})" > %{buildroot}%{_sysconfdir}/rocky-release
|
|
|
|
|
echo "Derived from Red Hat Enterprise Linux %{full_release_version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream
|
|
|
|
|
ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release
|
|
|
|
|
ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release
|
|
|
|
|
mkdir -p %{buildroot}%{_mandir}/man1
|
|
|
|
|
install -p -m 0644 %{SOURCE1300} %{buildroot}%{_mandir}/man1/
|
|
|
|
|
|
|
|
|
|
# Create the os-release file
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib
|
|
|
|
|
cat > %{buildroot}%{_prefix}/lib/os-release << EOF
|
|
|
|
|
NAME="%{distro_name}"
|
|
|
|
|
VERSION="%{full_release_version} (%{distro_code})"
|
|
|
|
|
ID="%{rlosid}"
|
|
|
|
|
ID_LIKE="rhel centos fedora"
|
|
|
|
|
VERSION_ID="%{full_release_version}"
|
|
|
|
|
PLATFORM_ID="platform:el%{major}"
|
|
|
|
|
PRETTY_NAME="%{distro_name} %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})"
|
|
|
|
|
ANSI_COLOR="0;32"
|
|
|
|
|
LOGO="fedora-logo-icon"
|
|
|
|
|
CPE_NAME="cpe:/o:rocky:rocky:%{major}::baseos"
|
|
|
|
|
HOME_URL="%{home_url}"
|
2024-07-26 15:31:24 +00:00
|
|
|
VENDOR_NAME="%{dist_vendor}"
|
|
|
|
|
VENDOR_URL="%{vendor_url}"
|
2023-06-17 17:30:37 +00:00
|
|
|
BUG_REPORT_URL="%{bug_url}"
|
2023-11-21 01:38:03 +00:00
|
|
|
SUPPORT_END="%{support_end}"
|
2023-06-17 17:30:37 +00:00
|
|
|
ROCKY_SUPPORT_PRODUCT="%{os_bug_name}"
|
|
|
|
|
ROCKY_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement:-%{rlstatement}}"
|
|
|
|
|
REDHAT_SUPPORT_PRODUCT="%{distro_name}"
|
|
|
|
|
REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement: %{rlstatement}}"
|
|
|
|
|
EOF
|
|
|
|
|
|
|
|
|
|
# Create the symlink for /etc/os-release
|
|
|
|
|
ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
|
|
|
|
|
|
|
|
|
|
# write cpe to /etc/system/release-cpe
|
|
|
|
|
echo "cpe:/o:rocky:rocky:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe
|
|
|
|
|
|
|
|
|
|
# create /etc/issue and /etc/issue.net, /etc/issue.d
|
|
|
|
|
echo '\S' > %{buildroot}%{_sysconfdir}/issue
|
|
|
|
|
echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
|
|
|
|
|
cp %{buildroot}%{_sysconfdir}/issue{,.net}
|
|
|
|
|
echo >> %{buildroot}%{_sysconfdir}/issue
|
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/issue.d
|
|
|
|
|
|
|
|
|
|
# set up the dist tag macros
|
|
|
|
|
mkdir -p %{buildroot}%{_rpmmacrodir}
|
|
|
|
|
cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
|
|
|
|
|
# dist macros.
|
|
|
|
|
|
|
|
|
|
%%__bootstrap ~bootstrap
|
|
|
|
|
%%rocky_ver %{major}
|
|
|
|
|
%%rocky %{major}
|
|
|
|
|
%%centos_ver %{major}
|
|
|
|
|
%%centos %{major}
|
|
|
|
|
%%rhel %{major}
|
2024-06-07 13:31:22 +00:00
|
|
|
%%distcore .el%{major}
|
2024-05-28 04:25:56 +00:00
|
|
|
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
|
2023-06-17 17:30:37 +00:00
|
|
|
%%el%{major} 1
|
|
|
|
|
|
|
|
|
|
%%dist_vendor %{dist_vendor}
|
|
|
|
|
%%dist_name %{distro}
|
|
|
|
|
%%dist_home_url %{home_url}
|
|
|
|
|
%%dist_bug_report_url %{bug_url}
|
|
|
|
|
%%dist_debuginfod_url %{debug_url}
|
2024-09-22 05:42:07 +00:00
|
|
|
|
|
|
|
|
#### End basic Rocky Linux macros
|
2023-06-17 17:30:37 +00:00
|
|
|
EOF
|
|
|
|
|
|
|
|
|
|
# Data directory
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_datadir}/rocky-release
|
|
|
|
|
ln -s rocky-release %{buildroot}%{_datadir}/redhat-release
|
|
|
|
|
install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/
|
|
|
|
|
|
|
|
|
|
# end system-release data
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# systemd section
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/
|
|
|
|
|
|
|
|
|
|
install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
|
|
|
|
|
|
|
|
|
|
# same behavior for both presets
|
|
|
|
|
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
|
|
|
|
|
|
|
|
|
|
# sysctl presets
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/
|
|
|
|
|
install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
|
|
|
|
|
# systemd section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# start secureboot section
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
|
|
|
|
|
# Backported certs for now
|
2024-04-04 20:14:34 +00:00
|
|
|
## root and kernel
|
2023-06-17 17:30:37 +00:00
|
|
|
install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
|
2024-05-01 00:24:12 +00:00
|
|
|
install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
|
2024-04-04 20:14:34 +00:00
|
|
|
## x86_64
|
|
|
|
|
# cer
|
|
|
|
|
install -m 0644 %{SOURCE1421} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1422} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1423} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1424} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1425} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
# der
|
|
|
|
|
install -m 0644 %{SOURCE1426} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1427} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1428} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1429} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1430} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
## aarch64
|
|
|
|
|
# cer
|
2023-11-06 17:48:12 +00:00
|
|
|
install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
|
2024-04-04 20:14:34 +00:00
|
|
|
install -m 0644 %{SOURCE1443} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1444} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1445} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
# der
|
|
|
|
|
install -m 0644 %{SOURCE1446} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1447} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1448} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1449} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1450} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
|
2023-06-17 17:30:37 +00:00
|
|
|
# Placeholders
|
|
|
|
|
# x86_64
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-x86_64.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# aarch64
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# ppc64le
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-ppc64le.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# armhfp
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-armhfp.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-armhfp.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# s390x
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-s390x.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# symlinks for everybody
|
|
|
|
|
for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/${x} %{buildroot}%{_sysconfdir}/pki/sb-certs/${x}
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# end secureboot section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# dnf repo section
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
|
|
|
|
|
install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
|
|
|
|
|
# dnf stuff
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
|
|
|
|
|
echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
|
|
|
|
|
echo "%{sigcontent}" > %{buildroot}%{_sysconfdir}/dnf/vars/sigcontentdir
|
|
|
|
|
echo "%{?rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
|
|
|
|
|
echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
|
|
|
|
|
|
|
|
|
|
# Copy out GPG keys
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
|
|
|
|
|
install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
|
install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
|
# end dnf repo section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%license docs/LICENSE
|
|
|
|
|
%doc docs/Contributors docs/COMMUNITY-CHARTER
|
|
|
|
|
%dir %{_sysconfdir}/yum.repos.d
|
|
|
|
|
%{_sysconfdir}/redhat-release
|
|
|
|
|
%{_sysconfdir}/system-release
|
|
|
|
|
%{_sysconfdir}/rocky-release
|
|
|
|
|
%{_sysconfdir}/rocky-release-upstream
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/os-release
|
|
|
|
|
%config %{_sysconfdir}/system-release-cpe
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/issue
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/issue.net
|
|
|
|
|
%dir %{_sysconfdir}/issue.d
|
|
|
|
|
%{_rpmmacrodir}/macros.dist
|
|
|
|
|
%{_datadir}/redhat-release
|
|
|
|
|
%{_datadir}/rocky-release
|
|
|
|
|
%{_prefix}/lib/os-release
|
|
|
|
|
%{_prefix}/lib/systemd/system-preset/*
|
|
|
|
|
%{_prefix}/lib/systemd/user-preset/*
|
|
|
|
|
%{_prefix}/lib/sysctl.d/50-redhat.conf
|
|
|
|
|
%{_mandir}/man1/rocky.1.gz
|
|
|
|
|
|
|
|
|
|
%files -n rocky-repos%{?rltype}
|
|
|
|
|
%license docs/LICENSE
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-addons.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-extras.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-devel.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/contentdir
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/sigcontentdir
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/rltype
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/stream
|
|
|
|
|
|
|
|
|
|
%files -n rocky-gpg-keys%{?rltype}
|
|
|
|
|
%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
|
|
|
|
|
|
%files -n rocky-sb-certs%{?rltype}
|
|
|
|
|
# care: resetting symlinks is intended
|
|
|
|
|
%dir %{_sysconfdir}/pki/sb-certs
|
|
|
|
|
%dir %{_datadir}/pki/sb-certs
|
|
|
|
|
%{_sysconfdir}/pki/sb-certs/*
|
|
|
|
|
%{_datadir}/pki/sb-certs/*
|
|
|
|
|
|
|
|
|
|
%changelog
|
2024-10-17 16:07:18 +00:00
|
|
|
* Thu Oct 17 2024 Louis Abel <label@resf.org> - 10.0-0.21
|
|
|
|
|
- Remove resilient storage repos
|
|
|
|
|
|
2024-10-01 15:50:34 +00:00
|
|
|
* Tue Oct 01 2024 Louis Abel <label@resf.org> - 10.0-0.20
|
|
|
|
|
- Enable kdump.service
|
|
|
|
|
|
2024-09-22 05:42:07 +00:00
|
|
|
* Sat Sep 21 2024 Louis Abel <label@resf.org> - 10.0-0.19
|
|
|
|
|
- Restructure spec file and remove unused macros
|
|
|
|
|
|
2024-08-13 21:18:06 +00:00
|
|
|
* Tue Aug 13 2024 Louis Abel <label@resf.org> - 10.0-0.18
|
|
|
|
|
- Enable rpcbind.service/socket
|
|
|
|
|
|
2024-08-13 06:49:55 +00:00
|
|
|
* Mon Aug 12 2024 Louis Abel <label@resf.org> - 10.0-0.17
|
|
|
|
|
- Remove systemd-resolved.service
|
|
|
|
|
|
2024-07-26 15:31:24 +00:00
|
|
|
* Fri Jul 26 2024 Louis Abel <label@resf.org> - 10.0-0.16
|
|
|
|
|
- Add a vendor os-release information
|
|
|
|
|
|
2024-07-14 16:43:46 +00:00
|
|
|
* Sun Jul 14 2024 Louis Abel <label@resf.org> - 10.0-0.15
|
|
|
|
|
- Fix repo files
|
|
|
|
|
|
2024-07-11 20:06:18 +00:00
|
|
|
* Thu Jul 11 2024 Louis Abel <label@rockylinux.org> - 10.0-0.14
|
|
|
|
|
- Update man page
|
|
|
|
|
|
2024-07-07 05:56:05 +00:00
|
|
|
* Sat Jul 06 2024 Louis Abel <label@resf.org> - 10.0-0.13
|
|
|
|
|
- Set to baseurl for now
|
|
|
|
|
|
2024-06-07 13:34:40 +00:00
|
|
|
* Fri Jun 07 2024 Louis Abel <label@resf.org> - 10.0-0.12
|
2024-06-07 13:31:22 +00:00
|
|
|
- Fix macros
|
|
|
|
|
|
2024-05-30 18:14:29 +00:00
|
|
|
* Thu May 30 2024 Louis Abel <label@resf.org> - 10.0-0.11
|
|
|
|
|
- Enable cups
|
|
|
|
|
|
2024-05-28 04:25:56 +00:00
|
|
|
* Mon May 27 2024 Louis Abel <label@resf.org> - 10.0-0.10
|
|
|
|
|
- Add distcore macro
|
|
|
|
|
|
2024-05-14 16:25:16 +00:00
|
|
|
* Tue May 14 2024 Louis Abel <label@rockylinux.org> - 10.0-0.9
|
|
|
|
|
- Update preset
|
|
|
|
|
|
2024-05-04 18:33:20 +00:00
|
|
|
* Sat May 04 2024 Louis Abel <label@rockylinux.org> - 10.0-0.8
|
|
|
|
|
- Update contributors
|
|
|
|
|
|
2024-05-01 00:24:12 +00:00
|
|
|
* Tue Apr 30 2024 Louis Abel <label@rockylinux.org> - 10.0-0.7
|
|
|
|
|
- Add nvidia SB certs
|
2024-04-30 23:58:23 +00:00
|
|
|
|
2024-04-08 00:34:52 +00:00
|
|
|
* Sun Apr 07 2024 Louis Abel <label@rockylinux.org> - 10.0-0.5
|
|
|
|
|
- Add additional provides to rocky-sb-certs
|
|
|
|
|
|
2024-04-04 20:14:34 +00:00
|
|
|
* Thu Apr 04 2024 Louis Abel <label@rockylinux.org> - 10.0-0.4
|
|
|
|
|
- Update SB certs
|
|
|
|
|
|
2024-03-04 17:54:37 +00:00
|
|
|
* Mon Mar 04 2024 Louis Abel <label@rockylinux.org> - 10.0-0.3
|
|
|
|
|
- Update presets
|
|
|
|
|
|
2024-02-24 01:38:19 +00:00
|
|
|
* Fri Feb 23 2024 Louis Abel <label@rockylinux.org> - 10.0-0.2
|
|
|
|
|
- Update GPG key
|
|
|
|
|
|
2023-06-17 17:30:37 +00:00
|
|
|
* Sat Jun 17 2023 Louis Abel <label@rockylinux.org> - 10.0-0.1
|
2023-09-05 05:36:22 +00:00
|
|
|
- Init for Rocky Linux 10 (Red Quartz)
|
