From 3c4814464d15ca4164f24c10b29cf1fb41633a96 Mon Sep 17 00:00:00 2001 From: nazunalika Date: Tue, 30 Nov 2021 01:24:40 -0700 Subject: [PATCH] lookahead stuff - commit #1 --- SOURCES/50-redhat.conf.lh | 8 + SOURCES/85-display-manager.preset.lh | 11 + SOURCES/90-default-user.preset.lh | 21 ++ SOURCES/90-default.preset.lh | 202 ++++++++++++++++ SOURCES/99-default-disable.preset.lh | 2 + SOURCES/Rocky-AppStream.repo | 6 +- SOURCES/Rocky-BaseOS.repo | 6 +- SOURCES/Rocky-CRB.repo | 6 +- SOURCES/Rocky-Devel.repo | 2 +- SOURCES/Rocky-Extras.repo | 6 +- SOURCES/Rocky-HighAvailability.repo | 6 +- SOURCES/Rocky-NFV.repo | 2 +- SOURCES/Rocky-Plus.repo | 6 +- SOURCES/Rocky-RT.repo | 6 +- SOURCES/Rocky-ResilientStorage.repo | 6 +- SOURCES/Rocky-SAP.repo | 4 +- SPECS/rocky-release.spec | 88 +++++-- SPECS/rocky-release_with_lh.spec | 349 --------------------------- 18 files changed, 335 insertions(+), 402 deletions(-) create mode 100644 SOURCES/50-redhat.conf.lh create mode 100644 SOURCES/85-display-manager.preset.lh create mode 100644 SOURCES/90-default-user.preset.lh create mode 100644 SOURCES/90-default.preset.lh create mode 100644 SOURCES/99-default-disable.preset.lh delete mode 100644 SPECS/rocky-release_with_lh.spec diff --git a/SOURCES/50-redhat.conf.lh b/SOURCES/50-redhat.conf.lh new file mode 100644 index 0000000..689ef5e --- /dev/null +++ b/SOURCES/50-redhat.conf.lh @@ -0,0 +1,8 @@ +# These defaults are from upstream and are not patched into systemd like in el8 +# https://bugzilla.redhat.com/show_bug.cgi?id=1689346 +kernel.kptr_restrict = 1 + +# Source route verification +net.ipv4.conf.default.rp_filter = 1 +net.ipv4.conf.*.rp_filter = 1 +-net.ipv4.conf.all.rp_filter diff --git a/SOURCES/85-display-manager.preset.lh b/SOURCES/85-display-manager.preset.lh new file mode 100644 index 0000000..08d5060 --- /dev/null +++ b/SOURCES/85-display-manager.preset.lh @@ -0,0 +1,11 @@ +# We enable all display managers by default. Since only one can +# actually be enabled at the same time the one which is installed +# first wins + +enable gdm.service +enable lightdm.service +enable slim.service +enable lxdm.service +enable sddm.service +enable kdm.service +enable xdm.service diff --git a/SOURCES/90-default-user.preset.lh b/SOURCES/90-default-user.preset.lh new file mode 100644 index 0000000..d0095ff --- /dev/null +++ b/SOURCES/90-default-user.preset.lh @@ -0,0 +1,21 @@ +# Enable the D-Bus service (including its socket for socket activation) +# unconditionally. It is used throughout Fedora and required on all machines. +# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4 +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 +enable dbus.socket +enable dbus-broker.service + +# Socket-activated pipewire service for individual user sessions +# https://bugzilla.redhat.com/show_bug.cgi?id=1592434 +enable pipewire.socket + +# Enable the PipeWire PulseAudio compatibility socket interface +# https://bugzilla.redhat.com/show_bug.cgi?id=1904239 +# https://bugzilla.redhat.com/show_bug.cgi?id=1907906 +# https://fedoraproject.org/wiki/Changes/DefaultPipeWire +enable pipewire-pulse.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1976006 +enable pipewire-media-session.service +# https://bugzilla.redhat.com/show_bug.cgi?id=2022717 +enable wireplumber.service diff --git a/SOURCES/90-default.preset.lh b/SOURCES/90-default.preset.lh new file mode 100644 index 0000000..3ad5d81 --- /dev/null +++ b/SOURCES/90-default.preset.lh @@ -0,0 +1,202 @@ +# Also see: +# https://fedoraproject.org/wiki/Starting_services_by_default + +disable systemd-timesyncd.service +disable systemd-resolved.service + +# systemd +enable remote-fs.target +enable getty@tty1.service + +# System stuff +enable sshd.service +enable atd.* +enable crond.* +enable chronyd.service +enable rpcbind.* +enable NetworkManager.service +enable NetworkManager-dispatcher.service +enable ModemManager.service +enable auditd.service +enable restorecond.service +enable bluetooth.* +enable avahi-daemon.* +enable cups.* + +# The various syslog implementations +enable rsyslog.* +enable syslog-ng.* +enable sysklogd.* + +# Network facing +enable firewalld.service +enable xinetd.service +enable ladvd.service + +# Virtualization driver specific daemons. Start by defalt at boot for VM +# autostart, but shutdown after 2 mins and socket activated thereafter +enable virtqemud.service + +# Compatibility with libvirtd sockets for old clients and expose TCP sockets +enable virtproxyd.socket + +# Secondary drivers providing supporting functionality to main virtualization +# drivers, socket activated only when required +enable virtinterfaced.socket +enable virtnetworkd.socket +enable virtnodedevd.socket +enable virtnwfilterd.socket +enable virtsecretd.socket +enable virtstoraged.socket + +# Storage +enable multipathd.service +enable libstoragemgmt.service +enable lvm2-lvmpolld.socket +enable lvm2-monitor.* +enable lvm2-lvmetad.* +enable dm-event.* +enable dmraid-activation.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=855372 +enable mdmonitor.service +enable mdmonitor-takeover.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=876237 +enable spice-vdagentd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=885406 +enable qemu-guest-agent.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=928726 +enable dnf-makecache.timer + +# https://bugzilla.redhat.com/show_bug.cgi?id=957135 +enable vmtoolsd.service + +# mcelog is a utility that collects and decodes Machine Check Exception data +# on x86-32 and x86-64 systems. +# https://bugzilla.redhat.com/show_bug.cgi?id=1302179 +enable mcelog.service + +#https://bugzilla.redhat.com/show_bug.cgi?id=995987 +enable kdump.service + +#https://bugzilla.redhat.com/show_bug.cgi?id=1009970 +enable tuned.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1215645 +enable unbound-anchor.timer + +# Enable SSSD Kerberos Credential Cache Server +# https://bugzilla.redhat.com/show_bug.cgi?id=1558927 +enable sssd-kcm.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1578833 +enable sssd.service + +# Hardware +enable gpm.* +enable gpsd.* +enable irqbalance.service +enable lm_sensors.service +enable mcelog.* +enable microcode.service +enable smartd.service +enable pcscd.socket +enable rngd.service + +# Other stuff +enable abrtd.service +enable abrt-journal-core.service +enable abrt-oops.service +enable abrt-xorg.service +enable abrt-vmcore.service +enable lttng-sessiond.service +enable ksm.service +enable ksmtuned.service +enable rootfs-resize.service +enable sysstat.service +enable uuidd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1193616 +enable hypervfcopyd.service +enable hypervkvpd.service +enable hypervvssd.service + +# Desktop stuff +enable accounts-daemon.service +enable rtkit-daemon.service +enable upower.service +enable udisks2.service +enable packagekit-offline-update.service +enable PackageKit.service + +# Initial Setup reconfiguration service +enable initial-setup-reconfiguration.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1312446 +enable opal-prd.service + +# virtlog.service is sometimes used by VMs started by libvirt.service +# Enable virtlog.socket to have it socket activated +# https://bugzilla.redhat.com/show_bug.cgi?id=1325503 +enable virtlogd.socket + + +# https://bugzilla.redhat.com/show_bug.cgi?id=1271839 +enable rhsmcertd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1359645 +enable brandbot.* + +# https://bugzilla.redhat.com/show_bug.cgi?id=1572550 +enable timedatex.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1578870 +enable selinux-autorelabel-mark.service +enable rhel-configure.service +enable rhel-dmesg.service + +# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808 +enable nis-domainname.service +enable import-state.service +enable loadmodules.service +enable readonly-root.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1630200 +# s390x specific services +enable cpi.service +enable device_cio_free.service + +# Enable the stratis daemon for managing stratis storage +# https://bugzilla.redhat.com/show_bug.cgi?id=1632510 +enable stratisd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1817591 +enable mlocate-updatedb.timer + +# nvme auto connect +# https://bugzilla.redhat.com/show_bug.cgi?id=1805466 +enable nvmefc-boot-connections.service + +# OSTree based systems need to remount /sysroot and +# /var as rw via ostree-remount.service +# ignored by non-OSTree based systems +# https://bugzilla.redhat.com/show_bug.cgi?id=1848453 +enable ostree-remount.service + +# DBus needed by Anaconda +enable dbus.socket +enable dbus-broker.service + +# Enable iscsi service files +# https://bugzilla.redhat.com/show_bug.cgi?id=1930458 +enable iscsi.service +enable iscsid.socket +enable iscsiuio.socket +enable iscsi-onboot.service + +# Enable preset for low-memory-monitor +# https://bugzilla.redhat.com/show_bug.cgi?id=2013299 +enable low-memory-monitor.service diff --git a/SOURCES/99-default-disable.preset.lh b/SOURCES/99-default-disable.preset.lh new file mode 100644 index 0000000..6161454 --- /dev/null +++ b/SOURCES/99-default-disable.preset.lh @@ -0,0 +1,2 @@ +# Final disable all +disable * diff --git a/SOURCES/Rocky-AppStream.repo b/SOURCES/Rocky-AppStream.repo index 83d1efb..0087920 100644 --- a/SOURCES/Rocky-AppStream.repo +++ b/SOURCES/Rocky-AppStream.repo @@ -10,7 +10,7 @@ [appstream] name=Rocky Linux $releasever - AppStream -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/ gpgcheck=1 enabled=1 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [appstream-debug] name=Rocky Linux $releasever - AppStream - Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [appstream-source] name=Rocky Linux $releasever - AppStream - Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=AppStream-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=AppStream-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-BaseOS.repo b/SOURCES/Rocky-BaseOS.repo index c3a3d3f..0164e9e 100644 --- a/SOURCES/Rocky-BaseOS.repo +++ b/SOURCES/Rocky-BaseOS.repo @@ -10,7 +10,7 @@ [baseos] name=Rocky Linux $releasever - BaseOS -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/os/ gpgcheck=1 enabled=1 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [baseos-debug] name=Rocky Linux $releasever - BaseOS - Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [baseos-source] name=Rocky Linux $releasever - BaseOS - Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=BaseOS-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=BaseOS-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-CRB.repo b/SOURCES/Rocky-CRB.repo index 3e54212..91c83c4 100644 --- a/SOURCES/Rocky-CRB.repo +++ b/SOURCES/Rocky-CRB.repo @@ -10,7 +10,7 @@ [crb] name=Rocky Linux $releasever - CRB -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/os/ gpgcheck=1 enabled=0 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [crb-debug] name=Rocky Linux $releasever - CRB - Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [crb-source] name=Rocky Linux $releasever - CRB - Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=CRB-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=CRB-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-Devel.repo b/SOURCES/Rocky-Devel.repo index 23230fb..994c1e6 100644 --- a/SOURCES/Rocky-Devel.repo +++ b/SOURCES/Rocky-Devel.repo @@ -3,7 +3,7 @@ [devel] name=Rocky Linux $releasever - Devel WARNING! FOR BUILDROOT ONLY -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=Devel-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=Devel-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/Devel/$basearch/os/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-Extras.repo b/SOURCES/Rocky-Extras.repo index 54457a1..2c762b3 100644 --- a/SOURCES/Rocky-Extras.repo +++ b/SOURCES/Rocky-Extras.repo @@ -10,7 +10,7 @@ [extras] name=Rocky Linux $releasever - Extras -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/ gpgcheck=1 enabled=1 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [extras-debug] name=Rocky Linux $releasever - Extras Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/debug/tree/ gpgcheck=1 enabled=1 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [extras-source] name=Rocky Linux $releasever - Extras Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/source/tree/ gpgcheck=1 enabled=1 diff --git a/SOURCES/Rocky-HighAvailability.repo b/SOURCES/Rocky-HighAvailability.repo index e5e9237..041bbb1 100644 --- a/SOURCES/Rocky-HighAvailability.repo +++ b/SOURCES/Rocky-HighAvailability.repo @@ -10,7 +10,7 @@ [highavailability] name=Rocky Linux $releasever - HighAvailability -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/os/ gpgcheck=1 enabled=0 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [highavailability-debug] name=Rocky Linux $releasever - High Availability - Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [highavailability-source] name=Rocky Linux $releasever - High Availability - Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=HighAvailability-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=HighAvailability-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-NFV.repo b/SOURCES/Rocky-NFV.repo index 7a5944e..f75c5a6 100644 --- a/SOURCES/Rocky-NFV.repo +++ b/SOURCES/Rocky-NFV.repo @@ -10,7 +10,7 @@ [nfv] name=Rocky Linux $releasever - NFV -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/nfv/$basearch/os/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-Plus.repo b/SOURCES/Rocky-Plus.repo index 0156ab1..f5f7fb8 100644 --- a/SOURCES/Rocky-Plus.repo +++ b/SOURCES/Rocky-Plus.repo @@ -10,7 +10,7 @@ [plus] name=Rocky Linux $releasever - Plus -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/os/ gpgcheck=1 enabled=0 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [plus-debug] name=Rocky Linux $releasever - Plus - Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [plus-source] name=Rocky Linux $releasever - Plus - Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=rockyplus-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=rockyplus-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-RT.repo b/SOURCES/Rocky-RT.repo index 7a8c948..a88dd57 100644 --- a/SOURCES/Rocky-RT.repo +++ b/SOURCES/Rocky-RT.repo @@ -10,7 +10,7 @@ [rt] name=Rocky Linux $releasever - Realtime -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/os/ gpgcheck=1 enabled=0 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [rt-debug] name=Rocky Linux $releasever - Realtime Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [rt-source] name=Rocky Linux $releasever - Realtime Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-ResilientStorage.repo b/SOURCES/Rocky-ResilientStorage.repo index 333198d..a4bf2c2 100644 --- a/SOURCES/Rocky-ResilientStorage.repo +++ b/SOURCES/Rocky-ResilientStorage.repo @@ -10,7 +10,7 @@ [resilient-storage] name=Rocky Linux $releasever - ResilientStorage -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/os/ gpgcheck=1 enabled=0 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [resilient-storage-debug] name=Rocky Linux $releasever - Resilient Storage - Debug -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever-debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever-debug&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/debug/tree/ gpgcheck=1 enabled=0 @@ -26,7 +26,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [resilient-storage-source] name=Rocky Linux $releasever - Resilient Storage - Source -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=ResilientStorage-$releasever-source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=ResilientStorage-$releasever-source&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/source/tree/ gpgcheck=1 enabled=0 diff --git a/SOURCES/Rocky-SAP.repo b/SOURCES/Rocky-SAP.repo index 63132c1..df34b86 100644 --- a/SOURCES/Rocky-SAP.repo +++ b/SOURCES/Rocky-SAP.repo @@ -10,7 +10,7 @@ [sap] name=Rocky Linux $releasever - SAP -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/os/ gpgcheck=1 enabled=0 @@ -18,7 +18,7 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rocky-9 [sap-hana] name=Rocky Linux $releasever - SAP -#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever&rltype=$rltype baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/os/ gpgcheck=1 enabled=0 diff --git a/SPECS/rocky-release.spec b/SPECS/rocky-release.spec index fc6404c..1705ca9 100644 --- a/SPECS/rocky-release.spec +++ b/SPECS/rocky-release.spec @@ -1,3 +1,9 @@ +# Note to packagers/builders: +# +# If you wish to build the LookAhead variant of this package, ensure that the +# rllh macro is set either in your build or in the build system. Please see +# the git repository readme for more information. + %define debug_package %{nil} # Product information @@ -10,10 +16,27 @@ %define distro_code Blue Onyx %define major 9 %define minor 0 -%define rocky_rel 1.2 +%define rocky_rel 1.%{!?rllh:0} %define rpm_license BSD-3-Clause %define contentdir pub/rocky +%define rltype stable + +################################################################################ +# Rocky LookAhead Section +# +# Check for lookahead and reset defines - This ensures a "lookahead" system +# will contact the mirrors or set the baseurl to properly use Rocky LookAhead, +# otherwise, the default is "stable" +%if 0%{?rllh} +%define minor 1 +%define contentdir pub/rocky-lh +%define rltype lookahead +%define rlpkg -lookahead +%define rlstatement (LookAhead) +%endif +# End Rocky LookAhead Section +################################################################################ %define base_release_version %{major} %define dist_release_version %{major} @@ -28,7 +51,7 @@ # conditional section for future use -Name: rocky-release +Name: rocky-release%{?rlpkg} Version: %{major}.%{minor} Release: %{rocky_rel}.el%{major} Summary: %{distro_name} release files @@ -62,23 +85,31 @@ Requires: rocky-repos(%{major}) Source101: RPM-GPG-KEY-rocky-%{major} Source102: RPM-GPG-KEY-rockytesting -# Release Sources (200-399) +# Release Sources (200-499) Source200: EULA Source201: LICENSE Source202: Contributors Source203: COMMUNITY-CHARTER + +# !! Stable !! Source300: 85-display-manager.preset Source301: 90-default.preset Source302: 90-default-user.preset Source303: 99-default-disable.preset Source304: 50-redhat.conf +# !! LookAhead !! +Source400: 85-display-manager.preset.lh +Source401: 90-default.preset.lh +Source402: 90-default-user.preset.lh +Source403: 99-default-disable.preset.lh +Source404: 50-redhat.conf.lh + # Repo Sources (1200-1299) Source1200: Rocky-BaseOS.repo Source1201: Rocky-AppStream.repo Source1202: Rocky-CRB.repo Source1203: Rocky-Extras.repo -Source1204: Rocky-LH.repo # Rocky Add-ons Source1210: Rocky-HighAvailability.repo @@ -100,7 +131,7 @@ Source1300: rocky.1.gz %description %{distro_name} release files. -%package -n rocky-repos +%package -n rocky-repos%{?rlpkg} Summary: %{distro_name} Package Repositories License: %{rpm_license} Provides: rocky-repos(%{major}) = %{full_release_version} @@ -108,22 +139,22 @@ Requires: system-release = %{full_release_version} Requires: rocky-gpg-keys Conflicts: %{name} < 8.0 -%description -n rocky-repos +%description -n rocky-repos%{?rlpkg} %{distro_name} package repository files for yum/dnf -%package -n rocky-gpg-keys +%package -n rocky-gpg-keys%{?rlpkg} Summary: Rocky RPM GPG Keys Conflicts: %{name} < 8.0 -%description -n rocky-gpg-keys +%description -n rocky-gpg-keys%{?rlpkg} This package provides the RPM signature keys for Rocky. -%package -n rocky-sb-certs +%package -n rocky-sb-certs%{?rlpkg} Summary: %{distro_name} public secureboot certificates Group: System Environment/Base Provides: system-sb-certs = %{version}-%{release} -%description -n rocky-sb-certs +%description -n rocky-sb-certs%{?rlpkg} This package contains the %{distro_name} secureboot public certificates. %prep @@ -140,7 +171,7 @@ cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs ################################################################################ # system-release data install -d -m 0755 %{buildroot}%{_sysconfdir} -echo "%{distro_name} release %{version} (%{distro_code})" > %{buildroot}%{_sysconfdir}/rocky-release +echo "%{distro_name} release %{version} (%{distro_code})%{?rlstatement: %{rlstatement}}" > %{buildroot}%{_sysconfdir}/rocky-release echo "Derived from Red Hat Enterprise Linux %{version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release @@ -157,7 +188,7 @@ ID="rocky" ID_LIKE="rhel centos fedora" VERSION_ID="%{full_release_version}" PLATFORM_ID="platform:el%{major}" -PRETTY_NAME="%{distro_name} %{full_release_version} (%{distro_code})" +PRETTY_NAME="%{distro_name} %{full_release_version} (%{distro_code})%{?rlstatement: %{rlstatement}}" ANSI_COLOR="0;32" CPE_NAME="cpe:/o:rocky:rocky:%{full_release_version}:GA" HOME_URL="https://rockylinux.org/" @@ -205,6 +236,7 @@ install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/ # systemd section install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/ install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/ + install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ @@ -217,6 +249,16 @@ install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/ install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/ install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/ +# lookahead replacements +%if 0%{?rllh} +install -m 0644 %{SOURCE400} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ +install -m 0644 %{SOURCE401} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ +install -m 0644 %{SOURCE402} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ +install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ +install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/user-preset/ +install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/ +%endif + # systemd section ################################################################################ @@ -255,7 +297,6 @@ install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/ install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/ install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/ install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1204} %{buildroot}%{_sysconfdir}/yum.repos.d/ install -p -m 0644 %{SOURCE1210} %{buildroot}%{_sysconfdir}/yum.repos.d/ install -p -m 0644 %{SOURCE1211} %{buildroot}%{_sysconfdir}/yum.repos.d/ install -p -m 0644 %{SOURCE1212} %{buildroot}%{_sysconfdir}/yum.repos.d/ @@ -268,6 +309,7 @@ install -p -m 0644 %{SOURCE1226} %{buildroot}%{_sysconfdir}/yum.repos.d/ # dnf stuff install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir +echo "%{rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype # Copy out GPG keys install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg @@ -299,15 +341,16 @@ install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/ %{_prefix}/lib/sysctl.d/50-redhat.conf %{_mandir}/man1/rocky.1.gz -%files -n rocky-repos +%files -n rocky-repos%{?rlpkg} %license docs/LICENSE %config(noreplace) %{_sysconfdir}/yum.repos.d/Rocky-*.repo %config(noreplace) %{_sysconfdir}/dnf/vars/contentdir +%config(noreplace) %{_sysconfdir}/dnf/vars/rltype -%files -n rocky-gpg-keys +%files -n rocky-gpg-keys%{?rlpkg} %{_sysconfdir}/pki/rpm-gpg/ -%files -n rocky-sb-certs +%files -n rocky-sb-certs%{?rlpkg} # care: resetting symlinks is intended %dir %{_sysconfdir}/pki/sb-certs %dir %{_datadir}/pki/sb-certs @@ -315,13 +358,8 @@ install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/ %{_datadir}/pki/sb-certs/*.crt %changelog -* Sun Nov 28 2021 Louis Abel - 9.0-1.2 -- Sync with upstream -- Adding conditionals section for future use - -* Mon Nov 01 2021 Louis Abel - 9.0-1.1 -- Change everything to baseurl for now -- Add LH repository - -* Tue Oct 05 2021 Louis Abel - 9.0-1 +* Tue Nov 30 2021 Louis Abel - 9.0-1.0 - Init for Rocky Linux 9 (Blue Onyx) +- Sync with upstream +- Add direct LookAhead support +- Add spec file notes for packagers diff --git a/SPECS/rocky-release_with_lh.spec b/SPECS/rocky-release_with_lh.spec deleted file mode 100644 index ffd7690..0000000 --- a/SPECS/rocky-release_with_lh.spec +++ /dev/null @@ -1,349 +0,0 @@ -%define debug_package %{nil} - -# Product information -%define product_family Rocky Linux -%define variant_titlecase Server -%define variant_lowercase server - -# Distribution Name and Version -%define distro_name Rocky Linux -%define distro_code Blue Onyx -%define major 9 -%define minor 0 -%define rocky_rel 1.2 -%define rpm_license BSD-3-Clause - -%define contentdir pub/rocky -%define rltype stable - -################################################################################ -# Rocky LookAhead Section -# -# Note to Packagers/Builders: If you wish to enable this, rllh should be -# set to a number greater than 0. There is a chance -# that rllh could be used as a way to define what -# the "internal" version of lookahead is. -# Check for lookahead and reset defines - This ensures a "lookahead" system -# will contact the mirrors or set the baseurl to properly use Rocky LookAhead, -# otherwise, the default is "stable" -%if 0%{?rllh} -%define minor 1 -%define contentdir pub/rocky-lh -%define rltype lookahead -%define rlpkg -lookahead -%define rlstatement (LookAhead) -%endif -# End Rocky LookAhead Section -################################################################################ - -%define base_release_version %{major} -%define dist_release_version %{major} -%define full_release_version %{major}.%{minor} - -%ifarch ppc64le -%define tuned_profile :server -%endif - -# Avoids a weird anaconda problem -%global __requires_exclude_from %{_libexecdir} - -# conditional section for future use - -Name: rocky-release%{?rlpkg} -Version: %{major}.%{minor} -Release: %{rocky_rel}.el%{major} -Summary: %{distro_name} release files -Group: System Environment/Base -License: %{rpm_license} -URL: https://rockylinux.org -BuildArch: noarch - -# What do we provide? Some of these needs are a necesity (think comps and -# groups) and things like EPEL need it. -Provides: rocky-release = %{version}-%{release} -Provides: rocky-release(upstream) = %{full_release_version} -Provides: redhat-release = %{version}-%{release} -Provides: system-release = %{version}-%{release} -Provides: system-release(releasever) = %{major} -Provides: centos-release = %{version}-%{release} -Provides: centos-release(upstream) = %{full_release_version} - -## Required by libdnf -Provides: base-module(platform:el%{major}) - -## This makes lorax/pungi/anaconda happy -Provides: rocky-release-eula = %{version}-%{release} -Provides: redhat-release-eula = %{version}-%{release} -Provides: centos-release-eula = %{version}-%{release} - -# What are our requirements? -Requires: rocky-repos(%{major}) - -# GPG Keys (100-199) -Source101: RPM-GPG-KEY-rocky-%{major} -Source102: RPM-GPG-KEY-rockytesting - -# Release Sources (200-399) -Source200: EULA -Source201: LICENSE -Source202: Contributors -Source203: COMMUNITY-CHARTER -Source300: 85-display-manager.preset -Source301: 90-default.preset -Source302: 90-default-user.preset -Source303: 99-default-disable.preset -Source304: 50-redhat.conf - -# Repo Sources (1200-1299) -Source1200: Rocky-BaseOS.repo -Source1201: Rocky-AppStream.repo -Source1202: Rocky-CRB.repo -Source1203: Rocky-Extras.repo - -# Rocky Add-ons -Source1210: Rocky-HighAvailability.repo -Source1211: Rocky-ResilientStorage.repo -Source1212: Rocky-RT.repo -Source1213: Rocky-NFV.repo -Source1214: Rocky-SAP.repo - -# Rocky Special Stuff -Source1220: Rocky-Media.repo -Source1223: Rocky-Devel.repo -Source1226: Rocky-Plus.repo - -# Add ons (1300-1399) -Source1300: rocky.1.gz - -# rocky secureboot certs placeholder (1400-1499) - -%description -%{distro_name} release files. - -%package -n rocky-repos%{?rlpkg} -Summary: %{distro_name} Package Repositories -License: %{rpm_license} -Provides: rocky-repos(%{major}) = %{full_release_version} -Requires: system-release = %{full_release_version} -Requires: rocky-gpg-keys -Conflicts: %{name} < 8.0 - -%description -n rocky-repos%{?rlpkg} -%{distro_name} package repository files for yum/dnf - -%package -n rocky-gpg-keys%{?rlpkg} -Summary: Rocky RPM GPG Keys -Conflicts: %{name} < 8.0 - -%description -n rocky-gpg-keys%{?rlpkg} -This package provides the RPM signature keys for Rocky. - -%package -n rocky-sb-certs%{?rlpkg} -Summary: %{distro_name} public secureboot certificates -Group: System Environment/Base -Provides: system-sb-certs = %{version}-%{release} - -%description -n rocky-sb-certs%{?rlpkg} -This package contains the %{distro_name} secureboot public certificates. - -%prep -echo Good. - -%build -echo Good. - -%install -# docs dir for license and contributors -mkdir ./docs -cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs - -################################################################################ -# system-release data -install -d -m 0755 %{buildroot}%{_sysconfdir} -echo "%{distro_name} release %{version} (%{distro_code})%{?rlstatement: %{rlstatement}}" > %{buildroot}%{_sysconfdir}/rocky-release -echo "Derived from Red Hat Enterprise Linux %{version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream -ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release -ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release -ln -s rocky-release %{buildroot}%{_sysconfdir}/centos-release -mkdir -p %{buildroot}%{_mandir}/man1 -install -p -m 0644 %{SOURCE1300} %{buildroot}%{_mandir}/man1/ - -# Create the os-release file -install -d -m 0755 %{buildroot}%{_prefix}/lib -cat > %{buildroot}%{_prefix}/lib/os-release << EOF -NAME="%{distro_name}" -VERSION="%{full_release_version} (%{distro_code})" -ID="rocky" -ID_LIKE="rhel centos fedora" -VERSION_ID="%{full_release_version}" -PLATFORM_ID="platform:el%{major}" -PRETTY_NAME="%{distro_name} %{full_release_version} (%{distro_code})%{?rlstatement: %{rlstatement}}" -ANSI_COLOR="0;32" -CPE_NAME="cpe:/o:rocky:rocky:%{full_release_version}:GA" -HOME_URL="https://rockylinux.org/" -BUG_REPORT_URL="https://bugs.rockylinux.org/" -ROCKY_SUPPORT_PRODUCT="%{distro_name}" -ROCKY_SUPPORT_PRODUCT_VERSION="%{major}" -EOF - -# Create the symlink for /etc/os-release -ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release - -# write cpe to /etc/system/release-cpe -echo "cpe:/o:rocky:rocky:%{full_release_version}:GA" > %{buildroot}%{_sysconfdir}/system-release-cpe - -# create /etc/issue and /etc/issue.net, /etc/issue.d -echo '\S' > %{buildroot}%{_sysconfdir}/issue -echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue -cp %{buildroot}%{_sysconfdir}/issue{,.net} -echo >> %{buildroot}%{_sysconfdir}/issue -mkdir -p %{buildroot}%{_sysconfdir}/issue.d - -# set up the dist tag macros -install -d -m 0755 %{buildroot}%{_sysconfdir}/rpm -cat > %{buildroot}%{_sysconfdir}/rpm/macros.dist << EOF -# dist macros. - -%%rocky_ver %{major} -%%rocky %{major} -%%centos_ver %{major} -%%centos %{major} -%%rhel %{major} -%%dist .el%{major} -%%el%{major} 1 -EOF - -# Data directory -install -d -m 0755 %{buildroot}%{_datadir}/rocky-release -ln -s rocky-release %{buildroot}%{_datadir}/redhat-release -install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/ - -# end system-release data -################################################################################ - -################################################################################ -# systemd section -install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/ -install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/ -install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ -install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ -install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ - -# same behavior for both presets -install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/ -install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/ - -# sysctl presets -install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/ -install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/ - -# systemd section -################################################################################ - -################################################################################ -# start secureboot section -install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/ -install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/ - -# x86_64 -echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.crt - -# aarch64 -echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.crt - -# ppc64le -echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.crt - -# armhfp -echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.crt - -# s390x -echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.crt - -# symlinks for everybody -for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do - ln -sr %{buildroot}%{_datadir}/pki/sb-certs/${x} %{buildroot}%{_sysconfdir}/pki/sb-certs/${x} -done - -# end secureboot section -################################################################################ - -################################################################################ -# dnf repo section -install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d -install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1210} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1211} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1212} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1213} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1214} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1220} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1223} %{buildroot}%{_sysconfdir}/yum.repos.d/ -install -p -m 0644 %{SOURCE1226} %{buildroot}%{_sysconfdir}/yum.repos.d/ - -# dnf stuff -install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars -echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir -echo "%{rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype - -# Copy out GPG keys -install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg -#install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/ -install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/ -# end dnf repo section -################################################################################ - -%files -%license docs/LICENSE -%doc docs/Contributors docs/COMMUNITY-CHARTER -%dir %{_sysconfdir}/yum.repos.d -%{_sysconfdir}/redhat-release -%{_sysconfdir}/centos-release -%{_sysconfdir}/system-release -%{_sysconfdir}/rocky-release -%{_sysconfdir}/rocky-release-upstream -%config(noreplace) %{_sysconfdir}/os-release -%config %{_sysconfdir}/system-release-cpe -%config(noreplace) %{_sysconfdir}/issue -%config(noreplace) %{_sysconfdir}/issue.net -%dir %{_sysconfdir}/issue.d -%{_sysconfdir}/rpm/macros.dist -%{_datadir}/redhat-release -%{_datadir}/rocky-release -%{_prefix}/lib/os-release -%{_prefix}/lib/systemd/system-preset/* -%{_prefix}/lib/systemd/user-preset/* -%{_prefix}/lib/sysctl.d/50-redhat.conf -%{_mandir}/man1/rocky.1.gz - -%files -n rocky-repos%{?rlpkg} -%license docs/LICENSE -%config(noreplace) %{_sysconfdir}/yum.repos.d/Rocky-*.repo -%config(noreplace) %{_sysconfdir}/dnf/vars/contentdir -%config(noreplace) %{_sysconfdir}/dnf/vars/rltype - -%files -n rocky-gpg-keys%{?rlpkg} -%{_sysconfdir}/pki/rpm-gpg/ - -%files -n rocky-sb-certs%{?rlpkg} -# care: resetting symlinks is intended -%dir %{_sysconfdir}/pki/sb-certs -%dir %{_datadir}/pki/sb-certs -%{_sysconfdir}/pki/sb-certs/*.crt -%{_datadir}/pki/sb-certs/*.crt - -%changelog -* Mon Nov 29 2021 Louis Abel - 9.0-1.2 -- Sync with upstream -- Adding conditionals section for future use -- Add direct LookAhead support - -* Mon Nov 01 2021 Louis Abel - 9.0-1.1 -- Change everything to baseurl for now -- Add LH repository - -* Tue Oct 05 2021 Louis Abel - 9.0-1 -- Init for Rocky Linux 9 (Blue Onyx)