prepare spec for sb update

SPECS/rocky-release.spec

@@ -21,7 +21,7 @@
 %define distro_code  Green Obsidian
 %define major        8
 %define minor        9
-%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.8}
+%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.9}
 %define upstream_rel %{major}.%{minor}-0.1
 %define rpm_license  BSD-3-Clause
 %define dist         .el%{major}
@@ -154,19 +154,26 @@ Source1226:     Rocky-Plus.repo
 Source1300:     rocky.1.gz
 
 # rocky secureboot certs placeholder (1400-1499)
-Source1400:     rockydup1.x509
-Source1401:     rockykpatch1.x509
-Source1402:     rocky-root-ca.der
-#
-Source1403:     rocky-fwupd.cer
-Source1404:     rocky-grub2.cer
-Source1405:     rocky-kernel.cer
-Source1406:     rocky-shim.cer
-Source1408:     rocky-fwupd-aarch64.cer
-Source1409:     rocky-grub2-aarch64.cer
-Source1410:     rocky-kernel-aarch64.cer
-Source1411:     rocky-shim-aarch64.cer
-
+# 1400 is the root
+# 1401-1420 are dedicated to the kernel
+# 1421-1440 is dedicated to x86_64
+# 1441-1460 is dedicated to aarch64
+Source1400:     rocky-root-ca.der
+Source1401:     rockydup1.x509
+Source1402:     rockykpatch1.x509
+Source1403:     rockydup1-aarch64.x509
+Source1404:     rockykpatch1-aarch64.x509
+# x86_64
+Source1421:     rocky-fwupd.cer
+Source1422:     rocky-grub2.cer
+Source1423:     rocky-kernel.cer
+Source1424:     rocky-shim.cer
+# aarch64
+Source1441:     rocky-fwupd-aarch64.cer
+Source1442:     rocky-grub2-aarch64.cer
+Source1443:     rocky-kernel-aarch64.cer
+Source1444:     rocky-shim-aarch64.cer
+ 
 %description
 %{distro_name} release files.
 
@@ -307,12 +314,14 @@ install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1408} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1409} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1410} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1411} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1421} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1422} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1423} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1424} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1443} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1444} %{buildroot}%{_datadir}/pki/sb-certs/
 
 # Placeholders
 # x86_64
@@ -420,6 +429,9 @@ install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
 %{_datadir}/pki/sb-certs/*
 
 %changelog
+* Wed Apr 03 2024 Louis Abel <label@rockylinux.org> - 8.9-1.9
+- Update SB certs
+
 * Fri Dec 22 2023 Louis Abel <label@rockylinux.org> - 8.9-1.8
 - Fix debuginfo repository names