2023-06-17 17:30:37 +00:00
|
|
|
# Note to packagers/builders:
|
|
|
|
|
#
|
|
|
|
|
# If you wish to build the LookAhead or Beta variant of this package, make sure
|
|
|
|
|
# that you are setting --with=rlbeta or --with=rllookahead on your mock
|
|
|
|
|
# command. See the README for more information.
|
|
|
|
|
|
|
|
|
|
%bcond_with rlbeta
|
|
|
|
|
%bcond_with rllookahead
|
|
|
|
|
%bcond_with rloverride
|
|
|
|
|
|
|
|
|
|
%define debug_package %{nil}
|
|
|
|
|
|
|
|
|
|
# Product information
|
|
|
|
|
%define product_family Rocky Linux
|
|
|
|
|
%define variant_titlecase Server
|
|
|
|
|
%define variant_lowercase server
|
|
|
|
|
|
|
|
|
|
# Distribution Name and Version
|
|
|
|
|
%define distro_name Rocky Linux
|
|
|
|
|
%define distro %{distro_name}
|
2023-09-05 05:36:22 +00:00
|
|
|
%define distro_code Red Quartz
|
2023-06-17 17:30:37 +00:00
|
|
|
%define major 10
|
|
|
|
|
%define minor 0
|
|
|
|
|
%define rocky_rel 0%{?rllh:.%{rllh}}%{!?rllh:.1}
|
|
|
|
|
%define rpm_license BSD-3-Clause
|
|
|
|
|
%define dist .el%{major}
|
|
|
|
|
%define home_url https://rockylinux.org/
|
|
|
|
|
%define bug_url https://bugs.rockylinux.org/
|
|
|
|
|
%define debug_url https://debuginfod.rockylinux.org/
|
|
|
|
|
%define dist_vendor RESF
|
|
|
|
|
|
|
|
|
|
%define contentdir pub/rocky
|
|
|
|
|
%define sigcontent pub/sig
|
|
|
|
|
%define rlosid rocky
|
|
|
|
|
|
|
|
|
|
%define os_bug_name Rocky-Linux-%{major}
|
2023-11-21 01:38:03 +00:00
|
|
|
%define support_end 2035-05-31
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# Rocky LookAhead Section
|
|
|
|
|
#
|
|
|
|
|
# Reset defines for LookAhead variant. Default is stable if 0 or undefined.
|
|
|
|
|
%if %{with rllookahead}
|
|
|
|
|
%define minor 0
|
|
|
|
|
%define contentdir pub/rocky-lh
|
|
|
|
|
%define rltype -lookahead
|
|
|
|
|
%define rlstatement LookAhead
|
|
|
|
|
%endif
|
|
|
|
|
# End Rocky LookAhead Section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# Rocky Beta Section
|
|
|
|
|
#
|
|
|
|
|
# Reset defines for Beta variant. Default is stable if 0 or undefined.
|
|
|
|
|
# We do NOT override the minor version number here.
|
|
|
|
|
%if %{with rlbeta}
|
|
|
|
|
%define contentdir pub/rocky-beta
|
|
|
|
|
%define rltype -beta
|
|
|
|
|
%define rlstatement Beta
|
|
|
|
|
%endif
|
|
|
|
|
# End Rocky Beta Section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# Rocky Override Section
|
|
|
|
|
#
|
|
|
|
|
# Resets only the dist tag for the override package. All this does is ensure
|
|
|
|
|
# that only the rhel macros and settings are provided - This is useful in the
|
|
|
|
|
# case of a build that cannot be properly debranded (eg dotnet).
|
|
|
|
|
%if %{with rloverride}
|
|
|
|
|
%define dist .el%{major}.override
|
|
|
|
|
%define rlosid rhel
|
|
|
|
|
%endif
|
|
|
|
|
# End Rocky Override Section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%define base_release_version %{major}
|
|
|
|
|
%define dist_release_version %{major}
|
|
|
|
|
%define full_release_version %{major}.%{minor}
|
|
|
|
|
|
|
|
|
|
%ifarch ppc64le
|
|
|
|
|
%define tuned_profile :server
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
# Avoids a weird anaconda problem
|
|
|
|
|
%global __requires_exclude_from %{_libexecdir}
|
|
|
|
|
|
|
|
|
|
# conditional section for future use
|
|
|
|
|
|
|
|
|
|
Name: rocky-release%{?rltype}
|
|
|
|
|
Version: %{full_release_version}
|
|
|
|
|
Release: %{rocky_rel}%{dist}
|
|
|
|
|
Summary: %{distro_name} release files
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
License: %{rpm_license}
|
|
|
|
|
URL: https://rockylinux.org
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
|
|
|
|
|
# What do we provide? Some of these needs are a necesity (think comps and
|
|
|
|
|
# groups) and things like EPEL need it.
|
|
|
|
|
Provides: rocky-release = %{version}-%{release}
|
|
|
|
|
Provides: rocky-release(upstream) = %{full_release_version}
|
|
|
|
|
Provides: redhat-release = %{version}-%{release}
|
|
|
|
|
Provides: system-release = %{version}-%{release}
|
|
|
|
|
Provides: system-release(releasever) = %{major}
|
|
|
|
|
Provides: centos-release = %{version}-%{release}
|
|
|
|
|
Provides: centos-release(upstream) = %{full_release_version}
|
|
|
|
|
|
2023-12-13 16:59:06 +00:00
|
|
|
# Needed to avoid lorax-templates-generic
|
|
|
|
|
Suggests: lorax-templates-rhel
|
|
|
|
|
|
2023-06-17 17:30:37 +00:00
|
|
|
## Required by libdnf
|
|
|
|
|
Provides: base-module(platform:el%{major})
|
|
|
|
|
|
|
|
|
|
## This makes lorax/pungi/anaconda happy
|
|
|
|
|
Provides: rocky-release-eula = %{version}-%{release}
|
|
|
|
|
Provides: redhat-release-eula = %{version}-%{release}
|
|
|
|
|
Provides: centos-release-eula = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
# What are our requirements?
|
|
|
|
|
Requires: rocky-repos(%{major})
|
|
|
|
|
|
|
|
|
|
# GPG Keys (100-199)
|
|
|
|
|
Source101: RPM-GPG-KEY-Rocky-%{major}
|
|
|
|
|
Source102: RPM-GPG-KEY-Rocky-%{major}-Testing
|
|
|
|
|
|
|
|
|
|
# Release Sources (200-499)
|
|
|
|
|
Source200: EULA
|
|
|
|
|
Source201: LICENSE
|
|
|
|
|
Source202: Contributors
|
|
|
|
|
Source203: COMMUNITY-CHARTER
|
|
|
|
|
|
|
|
|
|
# !! Stable !!
|
|
|
|
|
Source300: 85-display-manager.preset
|
|
|
|
|
Source301: 90-default.preset
|
|
|
|
|
Source302: 90-default-user.preset
|
|
|
|
|
Source303: 99-default-disable.preset
|
|
|
|
|
Source304: 50-redhat.conf
|
|
|
|
|
|
|
|
|
|
# Repo Sources (1200-1299)
|
|
|
|
|
Source1200: rocky.repo
|
|
|
|
|
Source1201: rocky-addons.repo
|
|
|
|
|
Source1202: rocky-extras.repo
|
|
|
|
|
Source1203: rocky-devel.repo
|
|
|
|
|
|
|
|
|
|
# Add ons (1300-1399)
|
|
|
|
|
Source1300: rocky.1.gz
|
|
|
|
|
|
|
|
|
|
# rocky secureboot certs placeholder (1400-1499)
|
|
|
|
|
Source1400: rockydup1.x509
|
|
|
|
|
Source1401: rockykpatch1.x509
|
|
|
|
|
Source1402: rocky-root-ca.der
|
|
|
|
|
#
|
|
|
|
|
Source1403: rocky-fwupd.cer
|
|
|
|
|
Source1404: rocky-grub2.cer
|
|
|
|
|
Source1405: rocky-kernel.cer
|
|
|
|
|
Source1406: rocky-shim.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
Source1407: rocky-uki-virt.cer
|
|
|
|
|
Source1408: rocky-fwupd-aarch64.cer
|
|
|
|
|
Source1409: rocky-grub2-aarch64.cer
|
|
|
|
|
Source1410: rocky-kernel-aarch64.cer
|
|
|
|
|
Source1411: rocky-shim-aarch64.cer
|
|
|
|
|
Source1412: rocky-uki-virt-aarch64.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
# all certs in DER format
|
2023-11-06 17:48:12 +00:00
|
|
|
Source1433: rocky-fwupd.der
|
|
|
|
|
Source1434: rocky-grub2.der
|
|
|
|
|
Source1435: rocky-kernel.der
|
|
|
|
|
Source1436: rocky-shim.der
|
|
|
|
|
Source1437: rocky-uki-virt.der
|
|
|
|
|
Source1438: rocky-fwupd-aarch64.der
|
|
|
|
|
Source1439: rocky-grub2-aarch64.der
|
|
|
|
|
Source1440: rocky-kernel-aarch64.der
|
|
|
|
|
Source1441: rocky-shim-aarch64.der
|
|
|
|
|
Source1442: rocky-uki-virt-aarch64.der
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
%{distro_name} release files.
|
|
|
|
|
|
|
|
|
|
%package -n rocky-repos%{?rltype}
|
|
|
|
|
Summary: %{distro_name} Package Repositories
|
|
|
|
|
License: %{rpm_license}
|
|
|
|
|
Provides: system-repos = %{version}-%{release}
|
|
|
|
|
Provides: rocky-repos(%{major}) = %{full_release_version}
|
|
|
|
|
Requires: system-release = %{version}-%{release}
|
|
|
|
|
Requires: rocky-gpg-keys%{?rltype}
|
|
|
|
|
Conflicts: %{name} < 8.0
|
|
|
|
|
|
|
|
|
|
%description -n rocky-repos%{?rltype}
|
|
|
|
|
%{distro_name} package repository files for yum/dnf
|
|
|
|
|
|
|
|
|
|
%package -n rocky-gpg-keys%{?rltype}
|
|
|
|
|
Summary: Rocky RPM GPG Keys
|
|
|
|
|
Conflicts: %{name} < 8.0
|
|
|
|
|
|
|
|
|
|
%description -n rocky-gpg-keys%{?rltype}
|
|
|
|
|
This package provides the RPM signature keys for Rocky.
|
|
|
|
|
|
|
|
|
|
%package -n rocky-sb-certs%{?rltype}
|
|
|
|
|
Summary: %{distro_name} public secureboot certificates
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
Provides: system-sb-certs = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description -n rocky-sb-certs%{?rltype}
|
|
|
|
|
This package contains the %{distro_name} secureboot public certificates.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%if %{with rllookahead} && %{with rlbeta}
|
|
|
|
|
echo "!! WARNING !!"
|
|
|
|
|
echo "Both LookAhead and Beta were enabled. This is not supported."
|
|
|
|
|
echo "As a result: BUILD FAILED."
|
|
|
|
|
exit 1
|
|
|
|
|
%endif
|
|
|
|
|
echo Good.
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
echo Good.
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
# docs dir for license and contributors
|
|
|
|
|
mkdir ./docs
|
|
|
|
|
cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# system-release data
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}
|
|
|
|
|
echo "%{distro_name} release %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})" > %{buildroot}%{_sysconfdir}/rocky-release
|
|
|
|
|
echo "Derived from Red Hat Enterprise Linux %{full_release_version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream
|
|
|
|
|
ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release
|
|
|
|
|
ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release
|
|
|
|
|
mkdir -p %{buildroot}%{_mandir}/man1
|
|
|
|
|
install -p -m 0644 %{SOURCE1300} %{buildroot}%{_mandir}/man1/
|
|
|
|
|
|
|
|
|
|
# Create the os-release file
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib
|
|
|
|
|
cat > %{buildroot}%{_prefix}/lib/os-release << EOF
|
|
|
|
|
NAME="%{distro_name}"
|
|
|
|
|
VERSION="%{full_release_version} (%{distro_code})"
|
|
|
|
|
ID="%{rlosid}"
|
|
|
|
|
ID_LIKE="rhel centos fedora"
|
|
|
|
|
VERSION_ID="%{full_release_version}"
|
|
|
|
|
PLATFORM_ID="platform:el%{major}"
|
|
|
|
|
PRETTY_NAME="%{distro_name} %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})"
|
|
|
|
|
ANSI_COLOR="0;32"
|
|
|
|
|
LOGO="fedora-logo-icon"
|
|
|
|
|
CPE_NAME="cpe:/o:rocky:rocky:%{major}::baseos"
|
|
|
|
|
HOME_URL="%{home_url}"
|
|
|
|
|
BUG_REPORT_URL="%{bug_url}"
|
2023-11-21 01:38:03 +00:00
|
|
|
SUPPORT_END="%{support_end}"
|
2023-06-17 17:30:37 +00:00
|
|
|
ROCKY_SUPPORT_PRODUCT="%{os_bug_name}"
|
|
|
|
|
ROCKY_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement:-%{rlstatement}}"
|
|
|
|
|
REDHAT_SUPPORT_PRODUCT="%{distro_name}"
|
|
|
|
|
REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement: %{rlstatement}}"
|
|
|
|
|
EOF
|
|
|
|
|
|
|
|
|
|
# Create the symlink for /etc/os-release
|
|
|
|
|
ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
|
|
|
|
|
|
|
|
|
|
# write cpe to /etc/system/release-cpe
|
|
|
|
|
echo "cpe:/o:rocky:rocky:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe
|
|
|
|
|
|
|
|
|
|
# create /etc/issue and /etc/issue.net, /etc/issue.d
|
|
|
|
|
echo '\S' > %{buildroot}%{_sysconfdir}/issue
|
|
|
|
|
echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
|
|
|
|
|
cp %{buildroot}%{_sysconfdir}/issue{,.net}
|
|
|
|
|
echo >> %{buildroot}%{_sysconfdir}/issue
|
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/issue.d
|
|
|
|
|
|
|
|
|
|
# set up the dist tag macros
|
|
|
|
|
mkdir -p %{buildroot}%{_rpmmacrodir}
|
|
|
|
|
cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
|
|
|
|
|
# dist macros.
|
|
|
|
|
|
|
|
|
|
%%__bootstrap ~bootstrap
|
|
|
|
|
%%rocky_ver %{major}
|
|
|
|
|
%%rocky %{major}
|
|
|
|
|
%%centos_ver %{major}
|
|
|
|
|
%%centos %{major}
|
|
|
|
|
%%rhel %{major}
|
|
|
|
|
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}.el%{major}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
|
|
|
|
|
%%el%{major} 1
|
|
|
|
|
|
|
|
|
|
%%dist_vendor %{dist_vendor}
|
|
|
|
|
%%dist_name %{distro}
|
|
|
|
|
%%dist_home_url %{home_url}
|
|
|
|
|
%%dist_bug_report_url %{bug_url}
|
|
|
|
|
%%dist_debuginfod_url %{debug_url}
|
|
|
|
|
EOF
|
|
|
|
|
|
|
|
|
|
# Data directory
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_datadir}/rocky-release
|
|
|
|
|
ln -s rocky-release %{buildroot}%{_datadir}/redhat-release
|
|
|
|
|
install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/
|
|
|
|
|
|
|
|
|
|
# end system-release data
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# systemd section
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/
|
|
|
|
|
|
|
|
|
|
install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
|
|
|
|
|
|
|
|
|
|
# same behavior for both presets
|
|
|
|
|
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
|
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
|
|
|
|
|
|
|
|
|
|
# sysctl presets
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/
|
|
|
|
|
install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
|
|
|
|
|
# systemd section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# start secureboot section
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
|
|
|
|
|
# Backported certs for now
|
|
|
|
|
install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
|
2023-11-06 17:48:12 +00:00
|
|
|
install -m 0644 %{SOURCE1407} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1408} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1409} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1410} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1411} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1412} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
## all der
|
|
|
|
|
install -m 0644 %{SOURCE1433} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1434} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1435} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1436} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1437} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1438} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1439} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1440} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
|
install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# Placeholders
|
|
|
|
|
# x86_64
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-x86_64.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# aarch64
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-aarch64.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# ppc64le
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-ppc64le.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# armhfp
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-armhfp.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-armhfp.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# s390x
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-s390x.cer
|
2023-11-06 17:48:12 +00:00
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
|
2023-06-17 17:30:37 +00:00
|
|
|
|
|
|
|
|
# symlinks for everybody
|
|
|
|
|
for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do
|
|
|
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/${x} %{buildroot}%{_sysconfdir}/pki/sb-certs/${x}
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# end secureboot section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
################################################################################
|
|
|
|
|
# dnf repo section
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
|
|
|
|
|
install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
|
|
|
|
|
|
# dnf stuff
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
|
|
|
|
|
echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
|
|
|
|
|
echo "%{sigcontent}" > %{buildroot}%{_sysconfdir}/dnf/vars/sigcontentdir
|
|
|
|
|
echo "%{?rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
|
|
|
|
|
echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
|
|
|
|
|
|
|
|
|
|
# Copy out GPG keys
|
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
|
|
|
|
|
install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
|
install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
|
# end dnf repo section
|
|
|
|
|
################################################################################
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%license docs/LICENSE
|
|
|
|
|
%doc docs/Contributors docs/COMMUNITY-CHARTER
|
|
|
|
|
%dir %{_sysconfdir}/yum.repos.d
|
|
|
|
|
%{_sysconfdir}/redhat-release
|
|
|
|
|
%{_sysconfdir}/system-release
|
|
|
|
|
%{_sysconfdir}/rocky-release
|
|
|
|
|
%{_sysconfdir}/rocky-release-upstream
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/os-release
|
|
|
|
|
%config %{_sysconfdir}/system-release-cpe
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/issue
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/issue.net
|
|
|
|
|
%dir %{_sysconfdir}/issue.d
|
|
|
|
|
%{_rpmmacrodir}/macros.dist
|
|
|
|
|
%{_datadir}/redhat-release
|
|
|
|
|
%{_datadir}/rocky-release
|
|
|
|
|
%{_prefix}/lib/os-release
|
|
|
|
|
%{_prefix}/lib/systemd/system-preset/*
|
|
|
|
|
%{_prefix}/lib/systemd/user-preset/*
|
|
|
|
|
%{_prefix}/lib/sysctl.d/50-redhat.conf
|
|
|
|
|
%{_mandir}/man1/rocky.1.gz
|
|
|
|
|
|
|
|
|
|
%files -n rocky-repos%{?rltype}
|
|
|
|
|
%license docs/LICENSE
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-addons.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-extras.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-devel.repo
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/contentdir
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/sigcontentdir
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/rltype
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/stream
|
|
|
|
|
|
|
|
|
|
%files -n rocky-gpg-keys%{?rltype}
|
|
|
|
|
%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
|
|
|
|
|
|
%files -n rocky-sb-certs%{?rltype}
|
|
|
|
|
# care: resetting symlinks is intended
|
|
|
|
|
%dir %{_sysconfdir}/pki/sb-certs
|
|
|
|
|
%dir %{_datadir}/pki/sb-certs
|
|
|
|
|
%{_sysconfdir}/pki/sb-certs/*
|
|
|
|
|
%{_datadir}/pki/sb-certs/*
|
|
|
|
|
|
|
|
|
|
%changelog
|
2024-02-24 01:38:19 +00:00
|
|
|
* Fri Feb 23 2024 Louis Abel <label@rockylinux.org> - 10.0-0.2
|
|
|
|
|
- Update GPG key
|
|
|
|
|
|
2023-06-17 17:30:37 +00:00
|
|
|
* Sat Jun 17 2023 Louis Abel <label@rockylinux.org> - 10.0-0.1
|
2023-09-05 05:36:22 +00:00
|
|
|
- Init for Rocky Linux 10 (Red Quartz)
|
