rocky-release/SPECS/rocky-release.spec

615 lines
24 KiB
RPMSpec
Raw Normal View History

2021-11-30 08:24:40 +00:00
# Note to packagers/builders:
#
2022-05-08 15:40:59 +00:00
# If you wish to build the LookAhead or Beta variant of this package, make sure
2022-05-08 15:40:04 +00:00
# that you are setting --with=rlbeta or --with=rllookahead on your mock
# command. See the README for more information.
%bcond_with rlbeta
%bcond_with rllookahead
%bcond_with rloverride
2021-11-30 08:24:40 +00:00
2021-04-09 03:50:23 +00:00
%define debug_package %{nil}
# Product information
%define product_family Rocky Linux
%define variant_titlecase Server
%define variant_lowercase server
# Distribution Name and Version
2021-05-25 00:36:03 +00:00
%define distro_name Rocky Linux
2023-06-10 20:36:33 +00:00
%define distro %{distro_name}
2021-10-19 08:39:56 +00:00
%define distro_code Blue Onyx
2021-11-30 02:37:33 +00:00
%define major 9
2024-05-01 00:26:11 +00:00
%define minor 5
2024-05-28 04:23:42 +00:00
%define rocky_rel 1%{?rllh:.%{rllh}}%{!?rllh:.2}
2021-07-10 22:01:25 +00:00
%define rpm_license BSD-3-Clause
2021-11-30 21:52:40 +00:00
%define dist .el%{major}
%define home_url https://rockylinux.org/
%define bug_url https://bugs.rockylinux.org/
%define debug_url https://debuginfod.rockylinux.org/
%define dist_vendor RESF
2024-07-26 15:33:36 +00:00
%define vendor_url https://resf.org/
2021-04-09 03:50:23 +00:00
2021-11-30 02:37:33 +00:00
%define contentdir pub/rocky
2022-05-20 17:36:39 +00:00
%define sigcontent pub/sig
2022-05-13 18:50:52 +00:00
%define rlosid rocky
2021-11-30 08:24:40 +00:00
2022-05-02 01:15:04 +00:00
%define os_bug_name Rocky-Linux-%{major}
2023-11-21 01:50:04 +00:00
%define support_end 2032-05-31
2022-05-02 01:15:04 +00:00
2021-11-30 08:24:40 +00:00
################################################################################
# Rocky LookAhead Section
#
2021-11-30 21:52:40 +00:00
# Reset defines for LookAhead variant. Default is stable if 0 or undefined.
2022-05-08 15:40:04 +00:00
%if %{with rllookahead}
2024-10-17 17:17:37 +00:00
%define minor 6
2021-11-30 08:24:40 +00:00
%define contentdir pub/rocky-lh
2022-07-01 18:46:44 +00:00
%define rltype -lookahead
2021-11-30 21:52:40 +00:00
%define rlstatement LookAhead
2021-11-30 08:24:40 +00:00
%endif
# End Rocky LookAhead Section
################################################################################
2021-11-30 02:37:33 +00:00
2021-11-30 21:52:40 +00:00
################################################################################
# Rocky Beta Section
#
# Reset defines for Beta variant. Default is stable if 0 or undefined.
# We do NOT override the minor version number here.
2022-05-08 15:40:04 +00:00
%if %{with rlbeta}
2021-11-30 21:52:40 +00:00
%define contentdir pub/rocky-beta
2022-07-01 18:46:44 +00:00
%define rltype -beta
2021-11-30 21:52:40 +00:00
%define rlstatement Beta
%endif
# End Rocky Beta Section
################################################################################
2022-02-09 00:35:47 +00:00
################################################################################
# Rocky Override Section
#
# Resets only the dist tag for the override package. All this does is ensure
# that only the rhel macros and settings are provided - This is useful in the
# case of a build that cannot be properly debranded (eg dotnet).
2022-05-13 18:50:52 +00:00
%if %{with rloverride}
2022-02-09 00:35:47 +00:00
%define dist .el%{major}.override
2022-05-13 18:50:52 +00:00
%define rlosid rhel
2022-02-09 00:35:47 +00:00
%endif
# End Rocky Override Section
################################################################################
2021-04-09 03:50:23 +00:00
%define base_release_version %{major}
%define dist_release_version %{major}
%define full_release_version %{major}.%{minor}
2021-04-09 03:50:23 +00:00
%ifarch ppc64le
%define tuned_profile :server
%endif
# Avoids a weird anaconda problem
%global __requires_exclude_from %{_libexecdir}
2021-02-01 07:12:25 +00:00
# conditional section for future use
2022-07-01 18:46:44 +00:00
Name: rocky-release%{?rltype}
2021-11-30 21:52:40 +00:00
Version: %{full_release_version}
Release: %{rocky_rel}%{dist}
2021-05-25 00:36:03 +00:00
Summary: %{distro_name} release files
2021-11-30 02:37:33 +00:00
Group: System Environment/Base
2021-07-10 22:01:25 +00:00
License: %{rpm_license}
2021-02-01 07:12:25 +00:00
URL: https://rockylinux.org
BuildArch: noarch
# What do we provide? Some of these needs are a necesity (think comps and
# groups) and things like EPEL need it.
2021-04-09 03:52:11 +00:00
Provides: rocky-release = %{version}-%{release}
2021-10-20 23:21:00 +00:00
Provides: rocky-release(upstream) = %{full_release_version}
2021-04-09 03:59:11 +00:00
Provides: redhat-release = %{version}-%{release}
Provides: system-release = %{version}-%{release}
2021-04-09 03:50:23 +00:00
Provides: system-release(releasever) = %{major}
2021-09-13 22:28:39 +00:00
Provides: centos-release = %{version}-%{release}
2021-10-20 23:21:00 +00:00
Provides: centos-release(upstream) = %{full_release_version}
2021-02-01 07:12:25 +00:00
2021-04-09 03:50:23 +00:00
## Required by libdnf
Provides: base-module(platform:el%{major})
2021-11-30 02:55:46 +00:00
## This makes lorax/pungi/anaconda happy
Provides: rocky-release-eula = %{version}-%{release}
Provides: redhat-release-eula = %{version}-%{release}
Provides: centos-release-eula = %{version}-%{release}
2021-04-09 03:50:23 +00:00
# What are our requirements?
2021-05-28 05:29:55 +00:00
Requires: rocky-repos(%{major})
2021-02-01 07:12:25 +00:00
2021-10-20 03:10:35 +00:00
# GPG Keys (100-199)
2022-04-06 01:03:31 +00:00
Source101: RPM-GPG-KEY-Rocky-%{major}
2022-05-05 02:30:45 +00:00
Source102: RPM-GPG-KEY-Rocky-%{major}-Testing
2021-02-01 07:12:25 +00:00
2021-11-30 08:24:40 +00:00
# Release Sources (200-499)
2021-02-01 07:12:25 +00:00
Source200: EULA
Source201: LICENSE
Source202: Contributors
Source203: COMMUNITY-CHARTER
2021-11-30 08:24:40 +00:00
# !! Stable !!
2021-02-01 07:12:25 +00:00
Source300: 85-display-manager.preset
Source301: 90-default.preset
2021-10-05 07:52:23 +00:00
Source302: 90-default-user.preset
Source303: 99-default-disable.preset
Source304: 50-redhat.conf
2021-02-01 07:12:25 +00:00
2021-11-30 08:24:40 +00:00
# !! LookAhead !!
Source400: 85-display-manager.preset.lh
Source401: 90-default.preset.lh
Source402: 90-default-user.preset.lh
Source403: 99-default-disable.preset.lh
Source404: 50-redhat.conf.lh
2021-10-20 03:10:35 +00:00
# Repo Sources (1200-1299)
2022-04-23 02:04:30 +00:00
Source1200: rocky.repo
Source1201: rocky-addons.repo
Source1202: rocky-extras.repo
Source1203: rocky-devel.repo
2021-10-20 03:10:35 +00:00
# Add ons (1300-1399)
2021-05-26 15:09:34 +00:00
Source1300: rocky.1.gz
2021-04-09 03:50:23 +00:00
2021-10-20 03:10:35 +00:00
# rocky secureboot certs placeholder (1400-1499)
2024-04-03 17:14:20 +00:00
# 1400 is the root
# 1401-1420 are dedicated to the kernel
# 1421-1440 is dedicated to x86_64
# 1441-1460 is dedicated to aarch64
Source1400: rocky-root-ca.der
Source1401: rockydup1.x509
Source1402: rockykpatch1.x509
Source1403: rockydup1-aarch64.x509
Source1404: rockykpatch1-aarch64.x509
2024-04-30 23:55:48 +00:00
Source1405: rocky-nvidiagpuoot101.x509
2024-05-01 00:25:24 +00:00
Source1406: rocky-nvidiagpuoot101-aarch64.x509
2024-04-03 17:14:20 +00:00
# x86_64
Source1421: rocky-fwupd.cer
Source1422: rocky-grub2.cer
Source1423: rocky-kernel.cer
Source1424: rocky-shim.cer
Source1425: rocky-uki-virt.cer
# x86_64 in der
Source1426: rocky-fwupd.der
Source1427: rocky-grub2.der
Source1428: rocky-kernel.der
Source1429: rocky-shim.der
Source1430: rocky-uki-virt.der
# aarch64
Source1441: rocky-fwupd-aarch64.cer
Source1442: rocky-grub2-aarch64.cer
Source1443: rocky-kernel-aarch64.cer
Source1444: rocky-shim-aarch64.cer
Source1445: rocky-uki-virt-aarch64.cer
# aarch64 in der
Source1446: rocky-fwupd-aarch64.der
Source1447: rocky-grub2-aarch64.der
Source1448: rocky-kernel-aarch64.der
Source1449: rocky-shim-aarch64.der
Source1450: rocky-uki-virt-aarch64.der
2021-02-01 07:12:25 +00:00
%description
2021-05-25 00:36:03 +00:00
%{distro_name} release files.
2021-02-01 07:12:25 +00:00
2022-07-01 18:46:44 +00:00
%package -n rocky-repos%{?rltype}
2021-05-25 00:36:03 +00:00
Summary: %{distro_name} Package Repositories
2021-07-10 22:01:25 +00:00
License: %{rpm_license}
2022-02-09 00:46:12 +00:00
Provides: system-repos = %{version}-%{release}
2021-10-20 23:21:00 +00:00
Provides: rocky-repos(%{major}) = %{full_release_version}
2022-02-09 00:46:12 +00:00
Requires: system-release = %{version}-%{release}
2022-07-01 18:46:44 +00:00
Requires: rocky-gpg-keys%{?rltype}
2021-04-09 03:59:11 +00:00
Conflicts: %{name} < 8.0
2021-04-09 03:50:23 +00:00
2022-07-01 18:46:44 +00:00
%description -n rocky-repos%{?rltype}
2021-05-25 00:36:03 +00:00
%{distro_name} package repository files for yum/dnf
2021-04-09 03:50:23 +00:00
2022-07-01 18:46:44 +00:00
%package -n rocky-gpg-keys%{?rltype}
2021-04-09 03:50:23 +00:00
Summary: Rocky RPM GPG Keys
Conflicts: %{name} < 8.0
2022-07-01 18:46:44 +00:00
%description -n rocky-gpg-keys%{?rltype}
2021-04-09 03:50:23 +00:00
This package provides the RPM signature keys for Rocky.
2022-07-01 18:46:44 +00:00
%package -n rocky-sb-certs%{?rltype}
2021-10-19 04:47:21 +00:00
Summary: %{distro_name} public secureboot certificates
Group: System Environment/Base
Provides: system-sb-certs = %{version}-%{release}
Provides: redhat-sb-certs = %{version}-%{release}
Provides: centos-sb-certs = %{version}-%{release}
2021-10-19 04:47:21 +00:00
2022-07-01 18:46:44 +00:00
%description -n rocky-sb-certs%{?rltype}
2021-10-19 04:47:21 +00:00
This package contains the %{distro_name} secureboot public certificates.
2021-04-09 03:50:23 +00:00
%prep
2022-05-08 15:40:04 +00:00
%if %{with rllookahead} && %{with rlbeta}
2021-11-30 21:52:40 +00:00
echo "!! WARNING !!"
echo "Both LookAhead and Beta were enabled. This is not supported."
echo "As a result: BUILD FAILED."
exit 1
%endif
2021-04-09 03:50:23 +00:00
echo Good.
%build
echo Good.
2021-02-01 07:12:25 +00:00
%install
2021-10-19 04:47:21 +00:00
# docs dir for license and contributors
mkdir ./docs
cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs
2021-02-01 07:12:25 +00:00
2021-10-19 08:39:56 +00:00
################################################################################
# system-release data
2021-02-01 07:12:25 +00:00
install -d -m 0755 %{buildroot}%{_sysconfdir}
2021-11-30 21:52:40 +00:00
echo "%{distro_name} release %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})" > %{buildroot}%{_sysconfdir}/rocky-release
echo "Derived from Red Hat Enterprise Linux %{full_release_version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream
2021-02-01 07:12:25 +00:00
ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release
ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release
2021-05-26 03:23:29 +00:00
mkdir -p %{buildroot}%{_mandir}/man1
2021-05-26 03:07:44 +00:00
install -p -m 0644 %{SOURCE1300} %{buildroot}%{_mandir}/man1/
2021-02-01 07:12:25 +00:00
# Create the os-release file
install -d -m 0755 %{buildroot}%{_prefix}/lib
cat > %{buildroot}%{_prefix}/lib/os-release << EOF
2021-05-25 00:36:03 +00:00
NAME="%{distro_name}"
2021-10-20 23:21:00 +00:00
VERSION="%{full_release_version} (%{distro_code})"
2022-05-13 18:50:52 +00:00
ID="%{rlosid}"
2021-09-13 22:28:39 +00:00
ID_LIKE="rhel centos fedora"
2021-10-20 23:21:00 +00:00
VERSION_ID="%{full_release_version}"
2021-02-01 07:12:25 +00:00
PLATFORM_ID="platform:el%{major}"
2021-11-30 21:52:40 +00:00
PRETTY_NAME="%{distro_name} %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})"
2021-05-25 00:36:03 +00:00
ANSI_COLOR="0;32"
2022-01-11 04:05:20 +00:00
LOGO="fedora-logo-icon"
2022-03-24 00:53:04 +00:00
CPE_NAME="cpe:/o:rocky:rocky:%{major}::baseos"
HOME_URL="%{home_url}"
2024-07-26 15:33:36 +00:00
VENDOR_NAME="%{dist_vendor}"
VENDOR_URL="%{vendor_url}"
BUG_REPORT_URL="%{bug_url}"
2023-11-21 01:50:04 +00:00
SUPPORT_END="%{support_end}"
2022-05-02 01:15:04 +00:00
ROCKY_SUPPORT_PRODUCT="%{os_bug_name}"
ROCKY_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement:-%{rlstatement}}"
2022-03-29 21:04:01 +00:00
REDHAT_SUPPORT_PRODUCT="%{distro_name}"
REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement: %{rlstatement}}"
2021-02-01 07:12:25 +00:00
EOF
# Create the symlink for /etc/os-release
ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
# write cpe to /etc/system/release-cpe
2022-03-24 00:53:04 +00:00
echo "cpe:/o:rocky:rocky:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe
2021-02-01 07:12:25 +00:00
# create /etc/issue and /etc/issue.net, /etc/issue.d
2021-05-20 00:06:30 +00:00
echo '\S' > %{buildroot}%{_sysconfdir}/issue
echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
cp %{buildroot}%{_sysconfdir}/issue{,.net}
2021-02-01 07:12:25 +00:00
echo >> %{buildroot}%{_sysconfdir}/issue
mkdir -p %{buildroot}%{_sysconfdir}/issue.d
2021-02-01 07:12:25 +00:00
# set up the dist tag macros
2023-02-01 08:56:08 +00:00
mkdir -p %{buildroot}%{_rpmmacrodir}
cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
2021-02-01 07:12:25 +00:00
# dist macros.
2022-02-14 08:52:17 +00:00
%%__bootstrap ~bootstrap
2021-02-01 07:12:25 +00:00
%%rocky_ver %{major}
%%rocky %{major}
2021-09-13 23:05:19 +00:00
%%centos_ver %{major}
%%centos %{major}
2021-02-01 07:12:25 +00:00
%%rhel %{major}
2024-06-07 13:31:48 +00:00
%%distcore .el%{major}
2024-05-28 04:23:42 +00:00
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
2021-02-01 07:12:25 +00:00
%%el%{major} 1
%%dist_vendor %{dist_vendor}
%%dist_name %{distro}
%%dist_home_url %{home_url}
%%dist_bug_report_url %{bug_url}
%%dist_debuginfod_url %{debug_url}
2021-02-01 07:12:25 +00:00
EOF
2021-04-09 18:14:55 +00:00
# Data directory
2021-02-01 07:12:25 +00:00
install -d -m 0755 %{buildroot}%{_datadir}/rocky-release
ln -s rocky-release %{buildroot}%{_datadir}/redhat-release
install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/
2021-10-19 08:39:56 +00:00
# end system-release data
################################################################################
2021-10-19 04:47:21 +00:00
################################################################################
# systemd section
2021-02-01 07:12:25 +00:00
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
2021-10-05 07:52:23 +00:00
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/
2021-11-30 08:24:40 +00:00
2021-04-09 03:50:23 +00:00
install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
2022-06-14 15:08:09 +00:00
install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
2021-02-01 07:12:25 +00:00
2021-10-19 04:47:21 +00:00
# same behavior for both presets
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
2021-10-05 07:52:23 +00:00
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
# sysctl presets
install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/
install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
2021-10-19 08:39:56 +00:00
# systemd section
################################################################################
2021-10-19 04:47:21 +00:00
################################################################################
# start secureboot section
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
2021-04-09 03:50:23 +00:00
2022-01-27 19:05:01 +00:00
# Backported certs for now
2024-04-03 17:14:20 +00:00
## root and kernel
2022-01-27 19:05:01 +00:00
install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
2023-05-15 16:45:08 +00:00
install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
2023-04-27 05:30:31 +00:00
install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
2024-04-30 23:55:48 +00:00
install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
2024-05-01 00:25:24 +00:00
install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
2024-04-03 17:14:20 +00:00
## x86_64
# cer
install -m 0644 %{SOURCE1421} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1422} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1423} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1424} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1425} %{buildroot}%{_datadir}/pki/sb-certs/
# der
install -m 0644 %{SOURCE1426} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1427} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1428} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1429} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1430} %{buildroot}%{_datadir}/pki/sb-certs/
## aarch64
# cer
2023-10-20 20:20:42 +00:00
install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
2024-04-03 17:14:20 +00:00
install -m 0644 %{SOURCE1443} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1444} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1445} %{buildroot}%{_datadir}/pki/sb-certs/
# der
install -m 0644 %{SOURCE1446} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1447} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1448} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1449} %{buildroot}%{_datadir}/pki/sb-certs/
install -m 0644 %{SOURCE1450} %{buildroot}%{_datadir}/pki/sb-certs/
2022-04-13 16:46:28 +00:00
# Placeholders
2021-10-19 04:47:21 +00:00
# x86_64
2022-04-13 17:42:56 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
2023-04-25 19:14:47 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-x86_64.cer
2023-10-20 20:20:42 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
2021-10-19 04:47:21 +00:00
# aarch64
2022-04-13 17:42:56 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
2023-10-20 20:20:42 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-aarch64.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
2021-10-19 04:47:21 +00:00
# ppc64le
2022-04-13 17:42:56 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
2023-05-15 16:45:08 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-ppc64le.cer
2023-10-20 20:20:42 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
2021-10-19 04:47:21 +00:00
# armhfp
2022-04-13 17:42:56 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.cer
2023-04-25 19:14:47 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-armhfp.cer
2023-10-20 20:20:42 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-armhfp.cer
2021-04-09 03:50:23 +00:00
2021-10-19 04:47:21 +00:00
# s390x
2022-04-13 17:42:56 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
2023-04-25 19:14:47 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-s390x.cer
2023-10-20 20:20:42 +00:00
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
2021-10-19 04:47:21 +00:00
# symlinks for everybody
for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/${x} %{buildroot}%{_sysconfdir}/pki/sb-certs/${x}
done
# end secureboot section
################################################################################
################################################################################
# dnf repo section
2021-04-09 03:50:23 +00:00
install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
2021-04-19 03:21:16 +00:00
install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/
2021-02-01 07:12:25 +00:00
2021-10-19 04:47:21 +00:00
# dnf stuff
install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
2021-10-20 23:21:00 +00:00
echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
2022-05-20 17:36:39 +00:00
echo "%{sigcontent}" > %{buildroot}%{_sysconfdir}/dnf/vars/sigcontentdir
2022-07-01 18:46:44 +00:00
echo "%{?rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
2022-08-30 07:58:17 +00:00
echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
2021-10-19 04:47:21 +00:00
# Copy out GPG keys
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
2021-11-30 21:52:40 +00:00
install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
2021-10-19 04:47:21 +00:00
install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
# end dnf repo section
################################################################################
2021-11-30 21:52:40 +00:00
################################################################################
# lookahead overrides
# TODO: Is there a cleaner way?
2022-05-08 15:40:04 +00:00
%if %{with rllookahead}
2021-11-30 21:52:40 +00:00
install -m 0644 %{SOURCE400} %{buildroot}/%{_prefix}/lib/systemd/system-preset/85-display-manager.preset
install -m 0644 %{SOURCE401} %{buildroot}/%{_prefix}/lib/systemd/system-preset/90-default.preset
2022-06-14 15:08:09 +00:00
install -m 0644 %{SOURCE402} %{buildroot}/%{_prefix}/lib/systemd/user-preset/90-default-user.preset
2021-11-30 21:52:40 +00:00
install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/system-preset/99-default-disable.preset
install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/user-preset/99-default-disable.preset
install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
%endif
# lookahead replacements
################################################################################
2021-02-01 07:12:25 +00:00
%files
2021-10-19 04:47:21 +00:00
%license docs/LICENSE
%doc docs/Contributors docs/COMMUNITY-CHARTER
%dir %{_sysconfdir}/yum.repos.d
2021-02-01 07:12:25 +00:00
%{_sysconfdir}/redhat-release
%{_sysconfdir}/system-release
%{_sysconfdir}/rocky-release
%{_sysconfdir}/rocky-release-upstream
%config(noreplace) %{_sysconfdir}/os-release
%config %{_sysconfdir}/system-release-cpe
%config(noreplace) %{_sysconfdir}/issue
%config(noreplace) %{_sysconfdir}/issue.net
%dir %{_sysconfdir}/issue.d
2023-02-01 08:56:08 +00:00
%{_rpmmacrodir}/macros.dist
2021-11-30 02:55:46 +00:00
%{_datadir}/redhat-release
%{_datadir}/rocky-release
2021-02-01 07:12:25 +00:00
%{_prefix}/lib/os-release
%{_prefix}/lib/systemd/system-preset/*
2021-10-05 07:52:23 +00:00
%{_prefix}/lib/systemd/user-preset/*
2021-10-19 04:47:21 +00:00
%{_prefix}/lib/sysctl.d/50-redhat.conf
2021-05-26 15:09:34 +00:00
%{_mandir}/man1/rocky.1.gz
2021-02-01 07:12:25 +00:00
2022-07-01 18:46:44 +00:00
%files -n rocky-repos%{?rltype}
2021-10-19 05:03:01 +00:00
%license docs/LICENSE
2022-04-23 02:04:30 +00:00
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-addons.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-extras.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-devel.repo
2021-04-09 03:50:23 +00:00
%config(noreplace) %{_sysconfdir}/dnf/vars/contentdir
2022-05-20 17:36:39 +00:00
%config(noreplace) %{_sysconfdir}/dnf/vars/sigcontentdir
2021-11-30 08:24:40 +00:00
%config(noreplace) %{_sysconfdir}/dnf/vars/rltype
2022-08-30 08:02:58 +00:00
%config(noreplace) %{_sysconfdir}/dnf/vars/stream
2021-04-09 03:50:23 +00:00
2022-07-01 18:46:44 +00:00
%files -n rocky-gpg-keys%{?rltype}
2021-04-09 03:50:23 +00:00
%{_sysconfdir}/pki/rpm-gpg/
2021-02-01 07:12:25 +00:00
2022-07-01 18:46:44 +00:00
%files -n rocky-sb-certs%{?rltype}
2021-10-19 04:47:21 +00:00
# care: resetting symlinks is intended
%dir %{_sysconfdir}/pki/sb-certs
%dir %{_datadir}/pki/sb-certs
2022-04-13 17:44:38 +00:00
%{_sysconfdir}/pki/sb-certs/*
%{_datadir}/pki/sb-certs/*
2021-10-19 04:47:21 +00:00
2021-02-01 07:12:25 +00:00
%changelog
2024-05-28 04:23:42 +00:00
* Mon May 27 2024 Louis Abel <label@rockylinux.org> - 9.5-1.2
- Backport distcore from 10
2024-07-26 15:33:36 +00:00
- Add vendor data for os-release
2024-05-28 04:23:42 +00:00
2024-05-01 00:26:11 +00:00
* Tue Apr 30 2024 Louis Abel <label@rockylinux.org> - 9.5-1.1
- Bump to 9.5
2024-05-01 00:25:24 +00:00
* Tue Apr 30 2024 Louis Abel <label@rockylinux.org> - 9.4-1.5
- Add nvidia SB certificates
2024-04-30 23:55:48 +00:00
* Sun Apr 07 2024 Louis Abel <label@rockylinux.org> - 9.4-1.3
- Add additional provides for rocky-sb-certs
2024-04-03 17:14:20 +00:00
* Wed Apr 03 2024 Louis Abel <label@rockylinux.org> - 9.4-1.2
- Update SB certs
2024-03-27 18:04:20 +00:00
* Wed Mar 27 2024 Louis Abel <label@rockylinux.org> - 9.4-1.1
- Preparation for 9.4
2024-03-04 17:54:54 +00:00
* Mon Mar 04 2024 Louis Abel <label@rockylinux.org> - 9.4-0.3
2024-03-04 17:42:24 +00:00
- Add kernel-bootcfg-boot-successful.service
2024-01-12 21:03:40 +00:00
* Fri Jan 12 2024 Louis Abel <label@rockylinux.org> - 9.4-0.2
- Improve presets for virtualization
2023-10-20 20:22:17 +00:00
* Fri Oct 20 2023 Louis Abel <label@rockylinux.org> - 9.4-0.1
- Bump to 9.4
2023-10-20 20:20:42 +00:00
* Fri Oct 20 2023 Louis Abel <label@rockylinux.org> - 9.3-0.6
- Add in true UKI-VIRT certificate
- Add aarch64 signing certificates
- Fix date in changelog
* Tue Sep 05 2023 Louis Abel <label@rockylinux.org> - 9.3-0.5
2023-09-06 02:07:21 +00:00
- Add placeholder certs for UKI-VIRT
2023-06-10 20:36:33 +00:00
* Sat Jun 10 2023 Louis Abel <label@rockylinux.org> - 9.3-0.4
- Define the distro macro
2023-05-15 16:45:08 +00:00
* Mon May 15 2023 Louis Abel <label@rockylinux.org> - 9.3-0.3
- Use DER format for ppc64le certificates for now
2023-04-25 19:14:47 +00:00
* Tue Apr 25 2023 Louis Abel <label@rockylinux.org> - 9.3-0.2
- Update secure boot certificates
2023-04-06 16:40:15 +00:00
* Thu Apr 06 2023 Louis Abel <label@rockylinux.org> - 9.3-0.1
2023-03-29 17:23:51 +00:00
- Bump main version to 9.3
2023-04-06 16:40:15 +00:00
- Enable obex
2023-03-29 17:23:51 +00:00
2023-10-20 20:20:42 +00:00
* Sun Jan 01 2023 Louis Abel <label@rockylinux.org> - 9.2-1.2
2023-02-01 08:56:08 +00:00
- Move macros.dist to a proper location
2022-12-23 02:24:21 +00:00
* Thu Dec 22 2022 Louis Abel <label@rockylinux.org> - 9.2-1.1
2022-12-09 16:59:46 +00:00
- Update devel repos (RLBT#0001354)
2022-12-23 02:24:21 +00:00
- Add SUPPORT_END with absolute EOL (See sig_core/#3)
2022-12-09 16:59:46 +00:00
2022-10-20 15:32:29 +00:00
* Wed Oct 19 2022 Louis Abel <label@rockylinux.org> - 9.1-1.10
- Change secure boot certificates
2022-10-19 00:49:47 +00:00
* Tue Oct 18 2022 Louis Abel <label@rockylinux.org> - 9.1-1.9
2022-09-27 17:20:36 +00:00
- Bump release version to match upstream
2022-09-08 01:01:28 +00:00
* Wed Sep 07 2022 Louis Abel <label@rockylinux.org> - 9.1-1.1
- Bump main version and prepare for upcoming beta
2022-08-30 07:58:17 +00:00
* Tue Aug 30 2022 Louis Abel <label@rockylinux.org> - 9.0-3.2
- Add stream dnf var
2022-07-28 16:02:06 +00:00
* Thu Jul 28 2022 Louis Abel <label@rockylinux.org> - 9.0-3.1
- Ensure distsuffix is part of disttag
2022-07-20 17:00:05 +00:00
* Wed Jul 20 2022 Louis Abel <label@rockylinux.org> - 9.0-2.2
- Fix mirrorlist URL for plus repository
2022-06-30 21:45:40 +00:00
* Thu Jun 30 2022 Louis Abel <label@rockylinux.org> - 9.0-2.1
- Prepare for release
2022-07-01 18:33:27 +00:00
- Ensure rltype is blank for stable releases
2022-06-30 21:45:40 +00:00
2022-06-22 15:59:44 +00:00
* Wed Jun 22 2022 Louis Abel <label@rockylinux.org> - 9.0-1.22
- Change to using mirrorlist
2022-06-14 15:08:09 +00:00
* Sun Jun 12 2022 Louis Abel <label@rockylinux.org> - 9.0-1.21
2022-01-27 19:05:01 +00:00
- Backport current SB certs for now
2022-02-09 00:35:47 +00:00
- Add logrotate timer and switcheroo
2022-02-14 08:52:17 +00:00
- Add missing macros
2022-03-24 00:53:04 +00:00
- Fix CPE values
- Remove /etc/centos-release file
2022-05-02 01:15:04 +00:00
- Add redhat and fix rocky tags in os-release
2022-04-06 01:03:31 +00:00
- Fix GPG key names to be consistent with SIG requirements
2022-04-23 02:04:30 +00:00
- Reduce number of repo files
2022-05-05 02:30:45 +00:00
- Change testing key to "testing" key from build system
- Add official "stable" key from build system
2022-05-05 02:30:45 +00:00
- List both GPG keys in repo files
2022-05-10 11:07:39 +00:00
- Fix rlpkg macro for gpg keys
2022-05-20 17:36:39 +00:00
- Add sig content dir
2022-06-11 15:00:03 +00:00
- Remove nplb as devel is technically it
2022-01-27 19:05:01 +00:00
2022-01-11 04:09:37 +00:00
* Mon Jan 10 2022 Louis Abel <label@rockylinux.org> - 9.0-1.1
- Add LOGO to /etc/os-release
2021-11-30 08:24:40 +00:00
* Tue Nov 30 2021 Louis Abel <label@rockylinux.org> - 9.0-1.0
2021-10-05 07:52:23 +00:00
- Init for Rocky Linux 9 (Blue Onyx)
2021-11-30 08:24:40 +00:00
- Sync with upstream
- Add direct LookAhead support
2021-11-30 21:52:40 +00:00
- Add direct Beta support
2021-11-30 08:24:40 +00:00
- Add spec file notes for packagers
2021-12-22 02:34:34 +00:00
- Add countme=1 to all base repos