From adfbd1abde898f6af99798616aa89276b1a54073 Mon Sep 17 00:00:00 2001 From: nazunalika Date: Fri, 13 May 2022 11:50:52 -0700 Subject: [PATCH] fix rloverride settings --- SOURCES/sb/50-redhat.conf | 8 + SOURCES/sb/50-redhat.conf.lh | 8 + SOURCES/sb/85-display-manager.preset | 11 ++ SOURCES/sb/85-display-manager.preset.lh | 11 ++ SOURCES/sb/90-default-user.preset | 22 +++ SOURCES/sb/90-default-user.preset.lh | 21 +++ SOURCES/sb/90-default.preset | 221 ++++++++++++++++++++++++ SOURCES/sb/90-default.preset.lh | 214 +++++++++++++++++++++++ SOURCES/sb/99-default-disable.preset | 2 + SOURCES/sb/99-default-disable.preset.lh | 2 + SOURCES/sb/COMMUNITY-CHARTER | 113 ++++++++++++ SOURCES/sb/Contributors | 66 +++++++ SOURCES/sb/EULA | 9 + SOURCES/sb/LICENSE | 44 +++++ SOURCES/sb/RPM-GPG-KEY-Rocky-9 | 31 ++++ SOURCES/sb/RPM-GPG-KEY-Rocky-9-Testing | 52 ++++++ SOURCES/sb/rocky-addons.repo | 195 +++++++++++++++++++++ SOURCES/sb/rocky-devel.repo | 23 +++ SOURCES/sb/rocky-extras.repo | 71 ++++++++ SOURCES/sb/rocky-root-ca.der | Bin 0 -> 1177 bytes SOURCES/sb/rocky-signing.der | Bin 0 -> 1183 bytes SOURCES/sb/rocky.1.gz | Bin 0 -> 2753 bytes SOURCES/sb/rocky.repo | 102 +++++++++++ SOURCES/sb/rockydup1.x509 | Bin 0 -> 1296 bytes SOURCES/sb/rockykpatch1.x509 | Bin 0 -> 1289 bytes SPECS/rocky-release.spec | 10 +- 26 files changed, 1232 insertions(+), 4 deletions(-) create mode 100644 SOURCES/sb/50-redhat.conf create mode 100644 SOURCES/sb/50-redhat.conf.lh create mode 100644 SOURCES/sb/85-display-manager.preset create mode 100644 SOURCES/sb/85-display-manager.preset.lh create mode 100644 SOURCES/sb/90-default-user.preset create mode 100644 SOURCES/sb/90-default-user.preset.lh create mode 100644 SOURCES/sb/90-default.preset create mode 100644 SOURCES/sb/90-default.preset.lh create mode 100644 SOURCES/sb/99-default-disable.preset create mode 100644 SOURCES/sb/99-default-disable.preset.lh create mode 100644 SOURCES/sb/COMMUNITY-CHARTER create mode 100644 SOURCES/sb/Contributors create mode 100644 SOURCES/sb/EULA create mode 100644 SOURCES/sb/LICENSE create mode 100644 SOURCES/sb/RPM-GPG-KEY-Rocky-9 create mode 100644 SOURCES/sb/RPM-GPG-KEY-Rocky-9-Testing create mode 100644 SOURCES/sb/rocky-addons.repo create mode 100644 SOURCES/sb/rocky-devel.repo create mode 100644 SOURCES/sb/rocky-extras.repo create mode 100644 SOURCES/sb/rocky-root-ca.der create mode 100644 SOURCES/sb/rocky-signing.der create mode 100644 SOURCES/sb/rocky.1.gz create mode 100644 SOURCES/sb/rocky.repo create mode 100644 SOURCES/sb/rockydup1.x509 create mode 100644 SOURCES/sb/rockykpatch1.x509 diff --git a/SOURCES/sb/50-redhat.conf b/SOURCES/sb/50-redhat.conf new file mode 100644 index 0000000..689ef5e --- /dev/null +++ b/SOURCES/sb/50-redhat.conf @@ -0,0 +1,8 @@ +# These defaults are from upstream and are not patched into systemd like in el8 +# https://bugzilla.redhat.com/show_bug.cgi?id=1689346 +kernel.kptr_restrict = 1 + +# Source route verification +net.ipv4.conf.default.rp_filter = 1 +net.ipv4.conf.*.rp_filter = 1 +-net.ipv4.conf.all.rp_filter diff --git a/SOURCES/sb/50-redhat.conf.lh b/SOURCES/sb/50-redhat.conf.lh new file mode 100644 index 0000000..689ef5e --- /dev/null +++ b/SOURCES/sb/50-redhat.conf.lh @@ -0,0 +1,8 @@ +# These defaults are from upstream and are not patched into systemd like in el8 +# https://bugzilla.redhat.com/show_bug.cgi?id=1689346 +kernel.kptr_restrict = 1 + +# Source route verification +net.ipv4.conf.default.rp_filter = 1 +net.ipv4.conf.*.rp_filter = 1 +-net.ipv4.conf.all.rp_filter diff --git a/SOURCES/sb/85-display-manager.preset b/SOURCES/sb/85-display-manager.preset new file mode 100644 index 0000000..08d5060 --- /dev/null +++ b/SOURCES/sb/85-display-manager.preset @@ -0,0 +1,11 @@ +# We enable all display managers by default. Since only one can +# actually be enabled at the same time the one which is installed +# first wins + +enable gdm.service +enable lightdm.service +enable slim.service +enable lxdm.service +enable sddm.service +enable kdm.service +enable xdm.service diff --git a/SOURCES/sb/85-display-manager.preset.lh b/SOURCES/sb/85-display-manager.preset.lh new file mode 100644 index 0000000..08d5060 --- /dev/null +++ b/SOURCES/sb/85-display-manager.preset.lh @@ -0,0 +1,11 @@ +# We enable all display managers by default. Since only one can +# actually be enabled at the same time the one which is installed +# first wins + +enable gdm.service +enable lightdm.service +enable slim.service +enable lxdm.service +enable sddm.service +enable kdm.service +enable xdm.service diff --git a/SOURCES/sb/90-default-user.preset b/SOURCES/sb/90-default-user.preset new file mode 100644 index 0000000..be8a5d7 --- /dev/null +++ b/SOURCES/sb/90-default-user.preset @@ -0,0 +1,22 @@ +# Enable the D-Bus service (including its socket for socket activation) +# unconditionally. It is used throughout Fedora and required on all machines. +# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4 +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 +enable dbus.socket +enable dbus-broker.service + +# Socket-activated pipewire service for individual user sessions +# https://bugzilla.redhat.com/show_bug.cgi?id=1592434 +enable pipewire.socket + +# Enable the PipeWire PulseAudio compatibility socket interface +# https://bugzilla.redhat.com/show_bug.cgi?id=1904239 +# https://bugzilla.redhat.com/show_bug.cgi?id=1907906 +# https://fedoraproject.org/wiki/Changes/DefaultPipeWire +enable pipewire-pulse.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1976006 +enable pipewire-media-session.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=2022717 +enable wireplumber.service diff --git a/SOURCES/sb/90-default-user.preset.lh b/SOURCES/sb/90-default-user.preset.lh new file mode 100644 index 0000000..d0095ff --- /dev/null +++ b/SOURCES/sb/90-default-user.preset.lh @@ -0,0 +1,21 @@ +# Enable the D-Bus service (including its socket for socket activation) +# unconditionally. It is used throughout Fedora and required on all machines. +# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4 +# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748 +enable dbus.socket +enable dbus-broker.service + +# Socket-activated pipewire service for individual user sessions +# https://bugzilla.redhat.com/show_bug.cgi?id=1592434 +enable pipewire.socket + +# Enable the PipeWire PulseAudio compatibility socket interface +# https://bugzilla.redhat.com/show_bug.cgi?id=1904239 +# https://bugzilla.redhat.com/show_bug.cgi?id=1907906 +# https://fedoraproject.org/wiki/Changes/DefaultPipeWire +enable pipewire-pulse.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1976006 +enable pipewire-media-session.service +# https://bugzilla.redhat.com/show_bug.cgi?id=2022717 +enable wireplumber.service diff --git a/SOURCES/sb/90-default.preset b/SOURCES/sb/90-default.preset new file mode 100644 index 0000000..ca994a3 --- /dev/null +++ b/SOURCES/sb/90-default.preset @@ -0,0 +1,221 @@ +# Also see: +# https://fedoraproject.org/wiki/Starting_services_by_default + +disable systemd-timesyncd.service +disable systemd-resolved.service + +# systemd +enable remote-fs.target +enable getty@tty1.service + +# System stuff +enable sshd.service +enable atd.* +enable crond.* +enable chronyd.service +enable rpcbind.* +enable NetworkManager.service +enable NetworkManager-dispatcher.service +enable ModemManager.service +enable auditd.service +enable restorecond.service +enable bluetooth.* +enable avahi-daemon.* +enable cups.* + +# The various syslog implementations +enable rsyslog.* +enable syslog-ng.* +enable sysklogd.* + +# Network facing +enable firewalld.service +enable xinetd.service +enable ladvd.service + +# Virtualization driver specific daemons. Start by defalt at boot for VM +# autostart, but shutdown after 2 mins and socket activated thereafter +enable virtqemud.service + +# Compatibility with libvirtd sockets for old clients and expose TCP sockets +enable virtproxyd.socket + +# Secondary drivers providing supporting functionality to main virtualization +# drivers, socket activated only when required +enable virtinterfaced.socket +enable virtnetworkd.socket +enable virtnodedevd.socket +enable virtnwfilterd.socket +enable virtsecretd.socket +enable virtstoraged.socket + +# Storage +enable multipathd.service +enable libstoragemgmt.service +enable lvm2-lvmpolld.socket +enable lvm2-monitor.* +enable lvm2-lvmetad.* +enable dm-event.* +enable dmraid-activation.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=855372 +enable mdmonitor.service +enable mdmonitor-takeover.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=876237 +enable spice-vdagentd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=885406 +enable qemu-guest-agent.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=928726 +enable dnf-makecache.timer + +# https://bugzilla.redhat.com/show_bug.cgi?id=957135 +enable vmtoolsd.service + +# mcelog is a utility that collects and decodes Machine Check Exception data +# on x86-32 and x86-64 systems. +# https://bugzilla.redhat.com/show_bug.cgi?id=1302179 +enable mcelog.service + +#https://bugzilla.redhat.com/show_bug.cgi?id=995987 +enable kdump.service + +#https://bugzilla.redhat.com/show_bug.cgi?id=1009970 +enable tuned.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1215645 +enable unbound-anchor.timer + +# Enable SSSD Kerberos Credential Cache Server +# https://bugzilla.redhat.com/show_bug.cgi?id=1558927 +enable sssd-kcm.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1578833 +enable sssd.service + +# Hardware +enable gpm.* +enable gpsd.* +enable irqbalance.service +enable lm_sensors.service +enable mcelog.* +enable microcode.service +enable smartd.service +enable pcscd.socket +enable rngd.service + +# Other stuff +enable abrtd.service +enable abrt-journal-core.service +enable abrt-oops.service +enable abrt-xorg.service +enable abrt-vmcore.service +enable lttng-sessiond.service +enable ksm.service +enable ksmtuned.service +enable rootfs-resize.service +enable sysstat.service +enable uuidd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1193616 +enable hypervfcopyd.service +enable hypervkvpd.service +enable hypervvssd.service + +# Desktop stuff +enable accounts-daemon.service +enable rtkit-daemon.service +enable upower.service +enable udisks2.service +enable packagekit-offline-update.service +enable PackageKit.service +# https://bugzilla.redhat.com/show_bug.cgi?id=2011240 +enable power-profiles-daemon.service + +# Initial Setup reconfiguration service +enable initial-setup-reconfiguration.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1312446 +enable opal-prd.service + +# virtlog.service is sometimes used by VMs started by libvirt.service +# Enable virtlog.socket to have it socket activated +# https://bugzilla.redhat.com/show_bug.cgi?id=1325503 +enable virtlogd.socket + + +# https://bugzilla.redhat.com/show_bug.cgi?id=1271839 +enable rhsmcertd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1359645 +enable brandbot.* + +# https://bugzilla.redhat.com/show_bug.cgi?id=1572550 +enable timedatex.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1578870 +enable selinux-autorelabel-mark.service +enable rhel-configure.service +enable rhel-dmesg.service + +# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808 +enable nis-domainname.service +enable import-state.service +enable loadmodules.service +enable readonly-root.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1630200 +# s390x specific services +enable cpi.service +enable device_cio_free.service + +# Enable the stratis daemon for managing stratis storage +# https://bugzilla.redhat.com/show_bug.cgi?id=1632510 +enable stratisd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1817591 +enable mlocate-updatedb.timer + +# nvme auto connect +# https://bugzilla.redhat.com/show_bug.cgi?id=1805466 +enable nvmefc-boot-connections.service + +# OSTree based systems need to remount /sysroot and +# /var as rw via ostree-remount.service +# ignored by non-OSTree based systems +# https://bugzilla.redhat.com/show_bug.cgi?id=1848453 +enable ostree-remount.service + +# DBus needed by Anaconda +enable dbus.socket +enable dbus-broker.service + +# Enable iscsi service files +# https://bugzilla.redhat.com/show_bug.cgi?id=1930458 +enable iscsi.service +enable iscsid.socket +enable iscsiuio.socket +enable iscsi-onboot.service + +# Enable logrotate.timer +# https://bugzilla.redhat.com/show_bug.cgi?id=1977865 +enable logrotate.timer + +# Enable greenboot +# https://bugzilla.redhat.com/show_bug.cgi?id=2005552 +enable greenboot-grub2-set-counter.service +enable greenboot-grub2-set-success.service +enable greenboot-healthcheck.service +enable greenboot-rpm-ostree-grub2-check-fallback.service +enable greenboot-status.service +enable greenboot-task-runner.service +enable redboot-auto-reboot.service +enable redboot-task-runner.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=2013299 +enable low-memory-monitor.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=2049627 +enable switcheroo-control.service diff --git a/SOURCES/sb/90-default.preset.lh b/SOURCES/sb/90-default.preset.lh new file mode 100644 index 0000000..14aa72f --- /dev/null +++ b/SOURCES/sb/90-default.preset.lh @@ -0,0 +1,214 @@ +# Also see: +# https://fedoraproject.org/wiki/Starting_services_by_default + +disable systemd-timesyncd.service +disable systemd-resolved.service + +# systemd +enable remote-fs.target +enable getty@tty1.service + +# System stuff +enable sshd.service +enable atd.* +enable crond.* +enable chronyd.service +enable rpcbind.* +enable NetworkManager.service +enable NetworkManager-dispatcher.service +enable ModemManager.service +enable auditd.service +enable restorecond.service +enable bluetooth.* +enable avahi-daemon.* +enable cups.* + +# The various syslog implementations +enable rsyslog.* +enable syslog-ng.* +enable sysklogd.* + +# Network facing +enable firewalld.service +enable xinetd.service +enable ladvd.service + +# Virtualization driver specific daemons. Start by defalt at boot for VM +# autostart, but shutdown after 2 mins and socket activated thereafter +enable virtqemud.service + +# Compatibility with libvirtd sockets for old clients and expose TCP sockets +enable virtproxyd.socket + +# Secondary drivers providing supporting functionality to main virtualization +# drivers, socket activated only when required +enable virtinterfaced.socket +enable virtnetworkd.socket +enable virtnodedevd.socket +enable virtnwfilterd.socket +enable virtsecretd.socket +enable virtstoraged.socket + +# Storage +enable multipathd.service +enable libstoragemgmt.service +enable lvm2-lvmpolld.socket +enable lvm2-monitor.* +enable lvm2-lvmetad.* +enable dm-event.* +enable dmraid-activation.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=855372 +enable mdmonitor.service +enable mdmonitor-takeover.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=876237 +enable spice-vdagentd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=885406 +enable qemu-guest-agent.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=928726 +enable dnf-makecache.timer + +# https://bugzilla.redhat.com/show_bug.cgi?id=957135 +enable vmtoolsd.service + +# mcelog is a utility that collects and decodes Machine Check Exception data +# on x86-32 and x86-64 systems. +# https://bugzilla.redhat.com/show_bug.cgi?id=1302179 +enable mcelog.service + +#https://bugzilla.redhat.com/show_bug.cgi?id=995987 +enable kdump.service + +#https://bugzilla.redhat.com/show_bug.cgi?id=1009970 +enable tuned.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1215645 +enable unbound-anchor.timer + +# Enable SSSD Kerberos Credential Cache Server +# https://bugzilla.redhat.com/show_bug.cgi?id=1558927 +enable sssd-kcm.socket + +# https://bugzilla.redhat.com/show_bug.cgi?id=1578833 +enable sssd.service + +# Hardware +enable gpm.* +enable gpsd.* +enable irqbalance.service +enable lm_sensors.service +enable mcelog.* +enable microcode.service +enable smartd.service +enable pcscd.socket +enable rngd.service + +# Other stuff +enable abrtd.service +enable abrt-journal-core.service +enable abrt-oops.service +enable abrt-xorg.service +enable abrt-vmcore.service +enable lttng-sessiond.service +enable ksm.service +enable ksmtuned.service +enable rootfs-resize.service +enable sysstat.service +enable uuidd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1193616 +enable hypervfcopyd.service +enable hypervkvpd.service +enable hypervvssd.service + +# Desktop stuff +enable accounts-daemon.service +enable rtkit-daemon.service +enable upower.service +enable udisks2.service +enable packagekit-offline-update.service +enable PackageKit.service +# https://bugzilla.redhat.com/show_bug.cgi?id=2011240 +enable power-profiles-daemon.service + +# Initial Setup reconfiguration service +enable initial-setup-reconfiguration.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1312446 +enable opal-prd.service + +# virtlog.service is sometimes used by VMs started by libvirt.service +# Enable virtlog.socket to have it socket activated +# https://bugzilla.redhat.com/show_bug.cgi?id=1325503 +enable virtlogd.socket + + +# https://bugzilla.redhat.com/show_bug.cgi?id=1271839 +enable rhsmcertd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1359645 +enable brandbot.* + +# https://bugzilla.redhat.com/show_bug.cgi?id=1572550 +enable timedatex.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1578870 +enable selinux-autorelabel-mark.service +enable rhel-configure.service +enable rhel-dmesg.service + +# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808 +enable nis-domainname.service +enable import-state.service +enable loadmodules.service +enable readonly-root.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1630200 +# s390x specific services +enable cpi.service +enable device_cio_free.service + +# Enable the stratis daemon for managing stratis storage +# https://bugzilla.redhat.com/show_bug.cgi?id=1632510 +enable stratisd.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=1817591 +enable mlocate-updatedb.timer + +# nvme auto connect +# https://bugzilla.redhat.com/show_bug.cgi?id=1805466 +enable nvmefc-boot-connections.service + +# OSTree based systems need to remount /sysroot and +# /var as rw via ostree-remount.service +# ignored by non-OSTree based systems +# https://bugzilla.redhat.com/show_bug.cgi?id=1848453 +enable ostree-remount.service + +# DBus needed by Anaconda +enable dbus.socket +enable dbus-broker.service + +# Enable iscsi service files +# https://bugzilla.redhat.com/show_bug.cgi?id=1930458 +enable iscsi.service +enable iscsid.socket +enable iscsiuio.socket +enable iscsi-onboot.service + +# Enable greenboot +# https://bugzilla.redhat.com/show_bug.cgi?id=2005552 +enable greenboot-grub2-set-counter.service +enable greenboot-grub2-set-success.service +enable greenboot-healthcheck.service +enable greenboot-rpm-ostree-grub2-check-fallback.service +enable greenboot-status.service +enable greenboot-task-runner.service +enable redboot-auto-reboot.service +enable redboot-task-runner.service + +# https://bugzilla.redhat.com/show_bug.cgi?id=2013299 +enable low-memory-monitor.service diff --git a/SOURCES/sb/99-default-disable.preset b/SOURCES/sb/99-default-disable.preset new file mode 100644 index 0000000..6161454 --- /dev/null +++ b/SOURCES/sb/99-default-disable.preset @@ -0,0 +1,2 @@ +# Final disable all +disable * diff --git a/SOURCES/sb/99-default-disable.preset.lh b/SOURCES/sb/99-default-disable.preset.lh new file mode 100644 index 0000000..6161454 --- /dev/null +++ b/SOURCES/sb/99-default-disable.preset.lh @@ -0,0 +1,2 @@ +# Final disable all +disable * diff --git a/SOURCES/sb/COMMUNITY-CHARTER b/SOURCES/sb/COMMUNITY-CHARTER new file mode 100644 index 0000000..644bb87 --- /dev/null +++ b/SOURCES/sb/COMMUNITY-CHARTER @@ -0,0 +1,113 @@ +# Community Charter + +The Community Charter of the Rocky Enterprise Software Foundation + +### Preamble + +Enterprise organizations are becoming concerned with using open source software +due to recent events where projects have changed licensing or pivoted to limit +usage due to competition, business models, conflicts of interest, or other +motivation. + +We do not assume the open source mindset lightly. It is not a marketing tool, or +a business endeavor. Open source is a development model designed to engage and +foster collaboration and usage. It is a decision which should be carefully +considered, as it should be expected that others, including competitors, will +make use of the technologies that are created by it. + +The Rocky Enterprise Software Foundation (RESF) has been created to organize a +community around enterprise, research, academia, individuals, and other +institutions to collaborate on building and maintaining the open source tools +that these organizations need. + +Our mission is to provide the confidence and stability necessary to build on +open source projects. Together, we can create a stable foundation of open source +software that companies can use internally, or as the basis for their commercial +needs. + +### Purpose + +The purpose of this document is to define the vision, mission, principles, and +values of the Rocky Enterprise Software Foundation. We stand together, +voluntarily accountable to this charter by our peers and the enterprise +community at large. + +### Vision + +A community of individuals and organizations, committed to working together to +provide a stable foundation of open source software within the enterprise. + +### Mission + +- Build a community of individuals and organizations to develop and foster +enterprise-grade, open source solutions. - Work together to provide for the +needs of the enterprise community. - The security, stability, and integrity of +our projects are paramount. - Enable knowledge sharing, inclusiveness, +collaboration, and open communication. - Coordinate with the commercial, +research, academic, and public sectors to help bring their products, +technologies, and support into enterprise environments. - Always make decisions +in the best interest of the enterprise community while being beholden to no +specific organization(s) + +### Principles + +Principles are fundamental truths, immutable, and they guide the decisions we +make and the goals that we set. No action can be made by us that is contrary to +the following principles: + +- Community responsibility. The Rocky Enterprise Software Foundation is +responsible and accountable only to the community that consumes its projects. +RESF shall be structured and governed in a way that ensures that no single +entity, organization, corporation, association, etc. will be permitted to have a +controlling influence over the RESF or its projects. + +- Our projects are free and open source. With few exceptions (branding, legal, +etc.), the work generated by the RESF and its community will be released under +an existing OSI permissive open source license (non-copyleft). + +- Trust is paramount. While decisions may sometimes need to be made that balance +opposing perspectives, at all times we strive toward building and maintaining +the overall trust such that the community feels confident in leveraging and +standardizing on the resulting work of this organization for both commercial and +internal usage. - Remain transparent. To the degree that we are reasonably able, +the RESF will remain transparent to the community as defined by our data security +policy: https://forums.rockylinux.org/t/rfc-data-classification-policy/1513 + +- Equality of Opportunity: The RESF will strive to build and maintain a +collaborative and respectful environment that provides equal access to +opportunities and resources for everyone within the community. + +### Values + +We derive our values from our principles. It is with these values in mind that +we make decisions, always striving to make the best decision possible with the +data we have at hand. + +- Be practical. As open source advocates, our inclination toward solving +problems is to use tools that are themselves permissible open source, but the +best practical solution to a problem may preclude that. We use the right tool +for the right job. + +- Be reasonable. Respect is given and trust is earned. Input from all +contributors are valued, and all perspectives are sought after and considered. +Knowledge and righteousness does not follow seniority. + +- Team ahead of self. Sycophants are not valuable to an organization, but +neither are contrarians. We respectfully vocalize our concerns but pull +together to drive forward once a decision has been reached. +- Enable the enterprise community. While we are starting with creating a stable +downstream enterprise distribution of Linux, our goals are much broader, +including attention to the needs of special interests, project hosting, +education, collaboration, workshops, meetups, and individuals. + +- Consider the human. Rocky Linux is developed and supported by a wide group of +diverse individuals from all walks of life. We are strictly apolitical and will +always assume the best intentions of others. + +### Get Involved + +We welcome feedback for this charter, and we encourage participation and +engagement from the community. As always, you can get in touch with us for this +or other matters on our website (https://rockylinux.org), forums +(https://forums.rockylinux.org), or through chat (https://chat.rockylinux.org). + diff --git a/SOURCES/sb/Contributors b/SOURCES/sb/Contributors new file mode 100644 index 0000000..91b809b --- /dev/null +++ b/SOURCES/sb/Contributors @@ -0,0 +1,66 @@ +# -*- coding: utf-8 -*- + +We want to thank you for installing Rocky Linux. + +The Rocky Linux OS Distribution would not be possible without the hard work and +dedication of the community. Building a distribution is far from easy, but with +unified visions and goals, anything is possible, and Rocky is one of many +examples of this. + +The outpouring support from the community and the amount of people who to +together to support us, we want to thank you for believing in us and giving us +a chance. Thank you. + +# Special Recognition # + Mustafa Gezen + Skip Grube + Sherif Nagy + Pablo Greco + Louis Abel + Neil Hanlon + Taylor Goodwill + Natalie Forde + Alejandro Ramallo + Wale Soyinka + Ezequiel Bruni + Trevor Cooper + Chris Stackpole + Steven Spencer + +# Rocky Linux Teams and Operations # + +Leadership: + Gregory Kurtzer + Brian Clemens + +Infrastructure and Operations: + Taylor Goodwill + Neil Hanlon + Louis Abel + Randolh (@meltro) + Patric Roberts + Chris Cowley + Mustafa Gezen + +Release Engineering/Core: + Louis Abel + Mustafa Gezen + Skip Grube + Sherif Nagy + Pablo Greco + Neil Hanlon + Taylor Goodwill + +Security: + Rob Felsburg + Benjamin Agner + +Documentation: + Wale Soyinka + +Web/Design: + Michael Kinder + +Testing: + Trevor Cooper + Chris Stackpole diff --git a/SOURCES/sb/EULA b/SOURCES/sb/EULA new file mode 100644 index 0000000..7e154bb --- /dev/null +++ b/SOURCES/sb/EULA @@ -0,0 +1,9 @@ +Rocky Linux EULA + +Rocky Linux comes with no warranties or guarantees of any kind, written or +implied. + +The Distribution is released as 3-Clause BSD. Individual packages in the +distribution come with their own licenses which are available on install as well +as the distribution git forge. A copy of the 3-Clause BSD license is included +with the media of this distribution. diff --git a/SOURCES/sb/LICENSE b/SOURCES/sb/LICENSE new file mode 100644 index 0000000..622330a --- /dev/null +++ b/SOURCES/sb/LICENSE @@ -0,0 +1,44 @@ +All elements of the Rocky Linux operating system that are developed +by Contributors to the Rocky Linux project are licensed and made +available to you under the BSD 3-Clause license. + +## Begin 3-Clause BSD License + +Copyright 2021 Rocky Linux Project Authors. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + +1. Redistributions of source code must retain the above copyright notice, +this list of conditions and the following disclaimer. + +2. Redistributions in binary form must reproduce the above copyright notice, +this list of conditions and the following disclaimer in the documentation +and/or other materials provided with the distribution. + +3. Neither the name of the copyright holder nor the names of its contributors +may be used to endorse or promote products derived from this software without +specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" +AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE +FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR +SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER +CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, +OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +## End 3-Clause BSD License + +Note: The Rocky Linux operating system includes a number of pre-existing +software components, each of which is governed by its own open source +license and is made available to you under the terms of such applicable +license. You are responsible for reviewing and complying with the terms +of the licenses for those applicable software components. To obtain a +list of applicable components and their corresponding software licenses, +run the command: + +rpm -qa --qf '%{NAME} - %{LICENSE}\n' diff --git a/SOURCES/sb/RPM-GPG-KEY-Rocky-9 b/SOURCES/sb/RPM-GPG-KEY-Rocky-9 new file mode 100644 index 0000000..6fb617c --- /dev/null +++ b/SOURCES/sb/RPM-GPG-KEY-Rocky-9 @@ -0,0 +1,31 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: resf.keykeeper.v1 +Comment: Keykeeper + +xsFNBGJ5RksBEADF/Lzssm7uryV6+VHAgL36klyCVcHwvx9Bk853LBOuHVEZWsme +kbJF3fQG7i7gfCKGuV5XW15xINToe4fBThZteGJziboSZRpkEQ2z3lYcbg34X7+d +co833lkBNgz1v6QO7PmAdY/x76Q6Hx0J9yiJWd+4j+vRi4hbWuh64vUtTd7rPwk8 +0y3g4oK1YT0NR0Xm/QUO9vWmkSTVflQ6y82HhHIUrG+1vQnSOrWaC0O1lqUI3Nuo +b6jTARCmbaPsi+XVQnBbsnPPq6Tblwc+NYJSqj5d9nT0uEXT7Zovj4Je5oWVFXp9 +P1OWkbo2z5XkKjoeobM/zKDESJR78h+YQAN9IOKFjL/u/Gzrk1oEgByCABXOX+H5 +hfucrq5U3bbcKy4e5tYgnnZxqpELv3fN/2l8iZknHEh5aYNT5WXVHpD/8u2rMmwm +I9YTEMueEtmVy0ZV3opUzOlC+3ZUwjmvAJtdfJyeVW/VMy3Hw3Ih0Fij91rO613V +7n72ggVlJiX25jYyT4AXlaGfAOMndJNVgBps0RArOBYsJRPnvfHlLi5cfjVd7vYx +QhGX9ODYuvyJ/rW70dMVikeSjlBDKS08tvdqOgtiYy4yhtY4ijQC9BmCE9H9gOxU +FN297iLimAxr0EVsED96fP96TbDGILWsfJuxAvoqmpkElv8J+P1/F7to2QARAQAB +zU9Sb2NreSBFbnRlcnByaXNlIFNvZnR3YXJlIEZvdW5kYXRpb24gLSBSZWxlYXNl +IGtleSAyMDIyIDxyZWxlbmdAcm9ja3lsaW51eC5vcmc+wsGKBBMBCAA0BQJieUZL +FiEEIcslauFvxUxuZSlJcC1CbTUNJ10CGwMCHgECGQEDCwkHAhUIAxYAAgIiAQAK +CRBwLUJtNQ0nXWQ5D/9472seOyRO6//bQ2ns3w9lE+aTLlJ5CY0GSTb4xNuyv+AD +IXpgvLSMtTR0fp9GV3vMw6QIWsehDqt7O5xKWi+3tYdaXRpb1cvnh8r/oCcvI4uL +k8kImNgsx+Cj+drKeQo03vFxBTDi1BTQFkfEt32fA2Aw5gYcGElM717sNMAMQFEH +P+OW5hYDH4kcLbtUypPXFbcXUbaf6jUjfiEp5lLjqquzAyDPLlkzMr5RVa9n3/rI +R6OQp5loPVzCRZMgDLALBU2TcFXLVP+6hAW8qM77c+q/rOysP+Yd+N7GAd0fvEvA +mfeA4Y6dP0mMRu96EEAJ1qSKFWUul6K6nuqy+JTxktpw8F/IBAz44na17Tf02MJH +GCUWyM0n5vuO5kK+Ykkkwd+v43ZlqDnwG7akDkLwgj6O0QNx2TGkdgt3+C6aHN5S +MiF0pi0qYbiN9LO0e05Ai2r3zTFC/pCaBWlG1ph2jx1pDy4yUVPfswWFNfe5I+4i +CMHPRFsZNYxQnIA2Prtgt2YMwz3VIGI6DT/Z56Joqw4eOfaJTTQSXCANts/gD7qW +D3SZXPc7wQD63TpDEjJdqhmepaTECbxN7x/p+GwIZYWJN+AYhvrfGXfjud3eDu8/ +i+YIbPKH1TAOMwiyxC106mIL705p+ORf5zATZMyB8Y0OvRIz5aKkBDFZM2QN6A== +=PzIf +-----END PGP PUBLIC KEY BLOCK----- diff --git a/SOURCES/sb/RPM-GPG-KEY-Rocky-9-Testing b/SOURCES/sb/RPM-GPG-KEY-Rocky-9-Testing new file mode 100644 index 0000000..d8475de --- /dev/null +++ b/SOURCES/sb/RPM-GPG-KEY-Rocky-9-Testing @@ -0,0 +1,52 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +xsFNBGJnjEMBEADX1mxmmZXhjeayhSmCYFJ17WbuuJd79Jqxk5EXzW3toS3fK9p/ +ta3SH/2Tt6Upb/OUCCsA5RDUXjYfcfSX17Bed6swxLR4BZNTwGVc6uWOQxCPjq6/ +Rv552BxJsBc4D0DpbDtrGmKKIJqfie7f8V8WM9h+smnl1ntzTy98vefjnfnURnjZ +f20pti8HBm20uk4lg0m55xVp5iIWRF89KhdhbhWl76M2gQYBg/Vp1pNXC61GnhWI +NDu6qK145ViVxZMmU7M4Y4oA0yvmIoW+4mwHqsdN9tAPJ5YI/pzaUhAfkCP1CNjg +D6oF7Qc1O8Lls3ZasK0nJQJrzfHzFMxCRWsP8/l7slAztXc37qiW4Jmz8v83b3S9 +9+ot6goW3EADTWcCkUyHK4L9Ect3cExM5jMYroMI9X91ehPCqoYUDX+25DY/PozZ +V+dmssEjoAjMjaHPYI0sBUxVd+gmzJWdbdAeYuCMZjQj5x3jP2oNqgBg0VT6NXq4 +Mv9vOLNR58KYPJwO/38tLYBvDls7oe4Ym41hOp1gOfiMoP/ARLZ8Bpv5eYyeBHtj +eBrklUKAa75a6elNUtwOIEEo94oeBeSWYIAIivC71nVmzLN1VqAZt1zgq/oj9N8k +Pkt4ThuOpkgWqczMCXgxdVrOmViKSvVPZ8mSE2dVccan7M1xyB/+K9zU6QARAQAB +zThSb2NreSBMaW51eCA5IC0gQmV0YSBLZXkgVjEvMjAyMiA8cmVsZW5nQHJvY2t5 +bGludXgub3JnPsLBigQTAQgAPgUCYmeMQwmQraKGCJWuPZEWoQQGdb0Z9P/jrQst +b+utooYIla49kQIbAwIeAQIZAQMLCQcCFQgDFgACAiIBAABM8g/8C1V/4Q3xgAAr +W1bMDO9+agIpmmUHYCG8WB5t4sQWP4K2T1dP8+8MyEV+YpMa3l/E6voV3bVva4tV +bw7cWT8kIJQJwxqfHhGrZdaG01BubGQeo0XQGafmgLZAjJitvMrRBP/FyHFR97Um +YkiWT1Zup74HKIP43Uu7d2GsjGjZkSZSoKZjS8+95VWgW8ppNH3SF5dPA+RxmRsn +x8+4gMWQ+SAfKyS5zcXOcLo+fyS1vbGjTfb7dhRyKGw3il+0nnD0ZrtFpGT/oeeA +WAYNl7NNkdaTfIhEeQjxAOeUtgnKiTt4MNBoeo6vZ53ouQfc3ciqFsh5zVZaqKKi +usVnKkvcjRbHctU1yG1IbynA8XiYQVXHz3wTakkd+DXagA924Zoyp5G8eP2Nag8R +XjX2gpuG4qDazr2IoHeHO4QyJy20rOeVdRKeLjzd4a8iCA4FdaaaAokFoSpugLSL +a8V7GyLBGcGCiLc8Rz7DsYVvNXeW/AXPjJWgHU6fvdoo/KLF1A8fS/NZZtJqpuKE +RF32WDykHMbpAKJyKZXRxIcLHfOqRYmqWB2KguCJ50PsG7UmQutGklE7eiqscHA1 +emqv/UHNyo1v/Tzu5WrLUnx4949tbcjaR/+Ip71MbGC/ESOaebL8SHPjMe4t5HI7 +3MPjevME0+T05RixaTgKdVhBIgmUZ/POwU0EYmeMQwEQAM27Lxq9mxiliGFzh19a +AWO1AFBjtVGGSUy4s0djcLBZd1m8zO+QVUFx74PigLkk4GwpBqZEMWAcsKCDtagT +TbnjYqWUDX5birWKaqfj7qP9sjvCgieEwHpXEkKHaM+G7mT7vpCXV+AKkjsWJdQ1 +SwzuJ47tJ0vpirlchL9o7YuHMqmddyT6KIPmaxj/RArbGX/rzNqGvMZxHaPOsCCW +12RU8E3sHVdzRdNpU1/i3mDVLd/eZBuqeTAT0c+MzyfJxdZS9JmUNk48ASMUcETG +kVBxc+XVpSVAmUFXvEisUi79+wS+GDwinSoeOF4OX/9YwwX2VDo7A8MVIcGyxmMJ +M8+KaOclBMBTUt6hu2tjzfYKDcaZX82n1t+2Xy+AMrtDOnm90mv4whS3IgFqy2HY +jjPp4qpSAdV7KT98arSgtzskLfC3wS40mZ3bsy1NNWNNEljpq4h8DKQdEfh1LsxV +m7rR+dWbdNEKUxk60yQZ3qCImo3a1S+N51kywFAcM8pNq/bIZrM5BR9bWkoVmQCg +Dexvj0xToaA+vJa4tylm+wCIALebWp1FQLZWTuwXbYbS1wlBZi7hg7ZeK7ZCzBEm +1tk3MKnE6t+EUW9a1NIy4/OTN9VQsd00a38NuTJjedvsOjzqBk/JD98gs4pmuU7S +HiV7kWgeWtG75Lycl/CWArcTABEBAAHCwXYEGAEIACoFAmJnjEMJkK2ihgiVrj2R +FqEEBnW9GfT/460LLW/rraKGCJWuPZECGwwAAA49D/4nQaaaKub/gp/Iu620Aubq +GcTB6yPkvR0Hz2pRVRC9Zv/yCefbHCHsTO+E6sI9DfmlQp3x+zohBBqZIJLmhr1o +zzBwwSOTPdFqFHpOnQyHPWkuwG16IpCmCaaANupSSdcB3tPBSaD9PHo1cDWG4pEG +EZYYdlMUnIHHe3Nu9DwDmV+LC5UICi/5NTCfn1UwC8Y1YTZX9f9un23Q2rVwwyjX +bLziokg8zv3nnydcNS+rYwPWkCDbw7muGXDHsK2YNNu/lqeAHfGmHvIIV6g2aq1A +x6JzvzWuEVHVLD9u1Q5sO2gTifz/Y6mLd8PuwdS8JOROeF9vq6BnEa2QSuedsz63 +JAl0o20GAIjONl4O+0Un3cw1cJSbN/+iZCgcezMLE7g7q2ZSnMddP+FxA+qy6b63 +BOOTbuY4EwdPk1eKfmZevoPpw6765zEYzrA1I090Mc+JnBALGgKj9gJujqEtSiqb +riItjjBJcLPthUeh80BZyDBms72+DtjIDpHrTvIhFhEDdzspdxF5nAtc8b8aIqaq +0VGuQGuEVkOjWQTwVen9djuNEZS5NbgUWFhuXpkQSMPUDzhQ/XCSSDPwvFGniW4C +5T1HrCc+eQ4ig+VzXWYJDlTHBmmfzIp+AAjugP9kZ4QXAEa66lF6uwccayQFtBO3 +5fv/TZLO1kBYmYnl2rwA3A== +=/Z/i +-----END PGP PUBLIC KEY BLOCK----- diff --git a/SOURCES/sb/rocky-addons.repo b/SOURCES/sb/rocky-addons.repo new file mode 100644 index 0000000..4c19c3d --- /dev/null +++ b/SOURCES/sb/rocky-addons.repo @@ -0,0 +1,195 @@ +# rocky-addons.repo +# +# The mirrorlist system uses the connecting IP address of the client and the +# update status of each mirror to pick current mirrors that are geographically +# close to the client. You should use this for Rocky updates unless you are +# manually picking other mirrors. +# +# If the mirrorlist does not work for you, you can try the commented out +# baseurl line instead. + +[highavailability] +name=Rocky Linux $releasever - High Availability +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[highavailability-debug] +name=Rocky Linux $releasever - High Availability - Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[highavailability-source] +name=Rocky Linux $releasever - High Availability - Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=HighAvailability-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[resilientstorage] +name=Rocky Linux $releasever - Resilient Storage +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[resilientstorage-debug] +name=Rocky Linux $releasever - Resilient Storage - Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[resilientstorage-source] +name=Rocky Linux $releasever - Resilient Storage - Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=ResilientStorage-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[nfv] +name=Rocky Linux $releasever - NFV +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[nfv-debug] +name=Rocky Linux $releasever - NFV Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[nfv-source] +name=Rocky Linux $releasever - NFV Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[rt] +name=Rocky Linux $releasever - Realtime +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[rt-debug] +name=Rocky Linux $releasever - Realtime Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[rt-source] +name=Rocky Linux $releasever - Realtime Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[sap] +name=Rocky Linux $releasever - SAP +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[sap-debug] +name=Rocky Linux $releasever - SAP Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[sap-source] +name=Rocky Linux $releasever - SAP Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[saphana] +name=Rocky Linux $releasever - SAPHANA +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[saphana-debug] +name=Rocky Linux $releasever - SAPHANA Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[saphana-source] +name=Rocky Linux $releasever - SAPHANA Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing diff --git a/SOURCES/sb/rocky-devel.repo b/SOURCES/sb/rocky-devel.repo new file mode 100644 index 0000000..2825a64 --- /dev/null +++ b/SOURCES/sb/rocky-devel.repo @@ -0,0 +1,23 @@ +# rocky-devel.repo +# +# devel and no-package-left-behind + +[devel] +name=Rocky Linux $releasever - Devel WARNING! FOR BUILDROOT ONLY +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=Devel-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/Devel/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[nplb] +name=Rocky Linux $releasever - NPLB - WARNING! DO NOT LEAVE PERMANENTLY ENABLED +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NPLB-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NPLB/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing diff --git a/SOURCES/sb/rocky-extras.repo b/SOURCES/sb/rocky-extras.repo new file mode 100644 index 0000000..0defceb --- /dev/null +++ b/SOURCES/sb/rocky-extras.repo @@ -0,0 +1,71 @@ +# rocky-extras.repo +# +# The mirrorlist system uses the connecting IP address of the client and the +# update status of each mirror to pick current mirrors that are geographically +# close to the client. You should use this for Rocky updates unless you are +# manually picking other mirrors. +# +# If the mirrorlist does not work for you, you can try the commented out +# baseurl line instead. + +[extras] +name=Rocky Linux $releasever - Extras +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/ +gpgcheck=1 +enabled=1 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[extras-debug] +name=Rocky Linux $releasever - Extras Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[extras-source] +name=Rocky Linux $releasever - Extras Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[plus] +name=Rocky Linux $releasever - Plus +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/os/ +gpgcheck=1 +enabled=0 +countme=1 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[plus-debug] +name=Rocky Linux $releasever - Plus - Debug +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever-debug&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/debug/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing + +[plus-source] +name=Rocky Linux $releasever - Plus - Source +#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=rockyplus-$releasever-source&rltype=$rltype +baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/source/tree/ +gpgcheck=1 +enabled=0 +metadata_expire=6h +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 + file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9-Testing diff --git a/SOURCES/sb/rocky-root-ca.der b/SOURCES/sb/rocky-root-ca.der new file mode 100644 index 0000000000000000000000000000000000000000..9d3a8079a91f3b1cd33d3fab888088905ba2f812 GIT binary patch literal 1177 zcmXqLVwq~t#9X_8nTe5!NkkwgT;|<+O_c+yTA!}k(&{v83Wqu`cbnwOGTl9``psAwP$QqIjI5tN#f zng~>tnwOrLmzr9XnU}6mlA4%ns9~T6Qo_t54>8dvGq1ElAviU;6lj!FetwBU5QuPg zG*mNCfxDlRQB1rTq$abZ(xC|ClpK&gz5Jqd137VCBSQl-BLhQI15*RTC~;n6AlJ|W z${nuWZemnIj$lSs2IeM4eg=akMlPl%Mn;CmN3!{&IsV=b{PV!m^5u%)*>WGk*WJ=# zHIC2MT~aphcCtfT`7#A>)1#%Q?!K;;=tVzJE!k6n>sJWNcHNHDRUW3;?8GS&I>Ck zx}qd);^rc9NJPBju-KYcvwpUIWcYoPZ^47}7j1P^E=5jRvXqILk%4h>tUgO90rU4Mh5>)#S_*Fv;US)V@>TASWUYT`LS>*&E9M#W6!)CmaG|s*Xve!x-t7_#IM+=UOnjTv+jDwe zB$4+{cUN^Detwulb{M_oG_L)DU~8rz^en3}?*JlH}X| c_V7=yQ^`A=4^OV%tr8$5>Jf5ymKM7)07Xo*0ssI2 literal 0 HcmV?d00001 diff --git a/SOURCES/sb/rocky-signing.der b/SOURCES/sb/rocky-signing.der new file mode 100644 index 0000000000000000000000000000000000000000..51d2aacff23f7244c5d0b0b0cbcb42cfa429f770 GIT binary patch literal 1183 zcmXqLVwr8w#N51qnTe5!iILNQmyJ`a&72u@8d1sdg)pI@R71R|Ur4b==(;O^&S6caB7smUy%_X~1K*7s-PT=r{*_6j zDy#hI%w3tDH=HECRZZ(!Aei!MTe;Zdd`0^o-aEH?KMN5x(%v2Mn`x7F=bYF3Zm-mM z+z_T$+iA$|7B8zEZ^6-)app=xwM+Drb_M1MSN2Svwf1*$*`8m?r*f1pCwwsYJ~vB@ zX?A+_C-=ly$wx&o`YG;b-CGS0gzC4MpM6=h^0+|M&V>`p_cP5qqw!<1j+YXr<6EaQ z*3GS=vPaC*#gdm^d9_v4ZrhbZ)e^gJ-ArQ_G)!N=+j{eEM(56ZtB=i>@Hy<2;Oww> z&f%DIO$Rg+UoOLCXp= zGX7^_GGH*^1IB_ZKZwV|%*5VcAO_;Ag7`cJTx=ZLY>cd|?99vtvLJCj7BLo)6Be6W z*Ze!5FVy*0b!SHtQ`YS#9pGdxtIQ%{Al4w_qmzC8n%@i2##1|9wx!9ZJ`&46f*d!% ztOtx6Mg|>5JLOf^1=A+abxx@hHM{Sr&D*@wo4usN?eI8 z7rG`fCobOb^T>HSw;ubD){s>{qlER|8-%bNF@MZ7w}Z*D^!3A-T`yu*v>y|VwEM38 VW8TXBb%#w~FO|;-{p3>`2LS(ztiAvM literal 0 HcmV?d00001 diff --git a/SOURCES/sb/rocky.1.gz b/SOURCES/sb/rocky.1.gz new file mode 100644 index 0000000000000000000000000000000000000000..95b8ccdac3326b0a7aecd1c96ef40dbe5794ea7d GIT binary patch literal 2753 zcmV;y3O@B8iwFp9H7;TR19ER;Yk4j)0F_u_ZyUK0{jOiZ`aakOWGT6}z%^)_lXXrc z#I_7chakWK1+`0Q8F9%ya%n~W^?fs>q*c<~p&t@UD{?sV=FOYo4we&9ODkTBi&uXa zv!WG0zWVX?g}8V;2BWrME20{$8-Tqe$nd^te<>1&rrqB zkeZs(y>Ze|Xe&h=`3{M?29lFUR=`gS??Nk$VM@ioK4O9P!sso`CO41;1B({qdQM6B z4pqd}d~$bxEu6}SEx&rFXUN)Ni!cEpHQD_>}7`ogQAq%Ww1 z3!qu+BAIRC%IJc^Y@O#^RLV4BMQ&wkHe63F+-g-(S!divtB|&b*fh?!gof(^s_e7& z&enKzo}!W2$$da$*rHfep_xP2&JM3sU{hcvKKwzNAQ0N9T#74IIa2~1xBz_#4a}|) zQOD9lM_cfr=I5kIIGpl#GG1hgv(5?GQV$u%;D?khH7s2*^i&@=UKu5W z8jfcV55GQ6m!EFNlhJ&6H}3%(+Euk}6W$Eda>Eh?uZG8?Zt_vXq)XY(c*LEH_?OEQ zeH1YhaHMD?Bqt_(mGDgCF6Ptu_>IuM7#O`mj~n37cKE}|r|#MZ3H|!==ID9N-v_N5 z{xJNDpFBU!)Q69cx3f=+4@-UP-{jvB)!Sz+|8@HMl~Dv)qp(kg$%(-^F5NBfoR4)l zEnoBZKiB|`EOp1e=kEhRGW0{1voruO&>ttC-u8N*T)d=O^=^f_1i+5k8c}MOl$*%G zdPp59i3;JLc%i{iD0NXlU~EeoOuy|YWfcma%#iGWAS`E_4GN(*ZMoU*iEtAAO+o}} z94q%Jix3%G#wLB4Cwf8CHyX-Co(;rDmCit?DIz2|l_>;=IN*}!I~O6sm{fim{Ef?$ zo?PveHh1(N(gS|zi0_?ItqS=rnqb;ZI)oS!tvhp;Cjo6^WDOuARU`&m69oy)+ z%WW|UwA`~J^=NIk+$&cuwp}1tnqyWCI-=V)2jbDuR>b9;D7<`u;(m@HITLDXpZt3m zh$a8ck*FMZ1*tqikc*h4PWehUfkl^Mth~ca!?phm8Fp~_OkYK)0!>}bl97&{jbUWrwtv6LmKFh$k z5lezH>pn@z@F23LyTBczm@$VwHGMh@pS z=mZq^3>oa%OUhY7977Lg4(i`!HcuobjI!7TrXUz#^b1g=53uxm)WsHm519xR<1b4z zF3U4a0H$HR7ie)Mb($+~YDC1N{GSw<&8RO8p@#j}eIA^YED1a?r%fXm`xg*?f`u$1 z`8>koAsw7(u-06!@SNKQTQ{I1wP`K^2uW&gNIk;o0WxBlj~F`;&023FQAX#|BETw4 zwiH(mk+`T%s0HMRR>}36VxZ{O(H4{mY4XtUE%BFpy{KR=v^2}+skdep;TZ~77hoAR zF$4j2**%xSaR3Ln>~Sg*;&;nlGYy##L^?)_x-ZrGDO*&M1e&&|`ILo_sx?%^gq`#l zWYhVI!sJniczm3(YWW$TplyL?6z1;7YL8GEHzGP$GbfLuTY**tA~#-Hv_uJ>Jku0< zE6vJD&^z_Q##&qU(7$Ox{Va*YMJC-nl z^r97)sCKHSoS(czahp(WyJrylxRX(#9g}sn|4-Gv+{t6j{psfy+1qht9|w^d@Djn7 zebRQ7DlW7vMr4{qGqVh=GlfFE(qu0JW_+Hia*&`=$#g(w3XSJiLD$+yzF**CNCQ2N z#~lUArLObIF+@(}8oUEC)LC#Zh2#(;jNB8&$tD4iw^ZDTaiUQMC1J}90!@1`zR9Fn z8Ch&ucoN&_mb_1f`e|%PD^lAhhtrhIY^DvQvLrS~Boj*71-f@Lf z=c4;L-D2_$flsH;xbpW?E5kq|4XUo(9~L5%6&;!0z`%RH_yp=d>S#eymu%>=f{O!R z1&q-fWedeun1*Wpa0>&T7JcXN1!ThnLUPDgs7A>`t)ofba2W#zJVv`b{G!(DHG+Pxa)v#e=rG$XmK? zk0`)_99}vpqmke8a7Ae_4@8|_L;2jVQ-3%axk+mJ?R$W3r|I=>)tXd%O7+ee+c@et zJ86^NgP_i4Es}Pd=U#t!fkB6NU#!q17S7*(q}FR4Pc)6gsCsx)Mq);RSJX^sYV4!Z z%RF`EYpLY73kMc`G4PWzq9C1Zhf7VdDc!BINI2u@8d1sdg)pI@R71R|Ur4b==(;O^&S6caB7smUyL!Opwyf9sHZv69tFzCqV5oX_Q> zos1M$e?ZH%h0?;p%aw~KOZ>V0G@tu##S;#VQ>uJ^XJ^fn`~JZrC9&LRkA9AfoJZgt z8|_WjhrXQ)ntkHls~!9Uahx!b1J7(Nv=e5vhzDz)}vSs7c(v1Kmta}z~Mf&^!OznQ0e}UY>6M*g8u2 z%WSp_i#=Zl?&-8Cnj6EGa;s2nC)@daHL+Pb;n%j>aroSEnDvnHyrr`1>|f?@7e5nm zyLLr?;m#Sx(}fqEej~iRY3booMsxq6xh1uQOF8(b&t84j z#P{Rxxo_T|nW$U5b#kfPjTef3OYgm3&&YR|iJ6gsadCn{95`pm3NtePXJIm6FyI3w z2U&g)kA<0uy}>{h#OGrXV-eYW(*Mk^$Lg*dWzWuc=KP5%*Sw(qq`tDK*K@_q#Z5_ZlNENk-d>W)4MY8Ju z+wE?-v$&pLwrOnuU)!qhPiKVoy@`!K@Pf0nYTpK@*1xsfw@wuq)riFAKT7m1XH%S) zYvbeg^GUy|+A0Bon>ylwV#Y1=R!)6>d%~$*r&Mcm7{%n@-tJ5NZXJo^= r_B8EU{{Gm!PdXnj8R@Tusd literal 0 HcmV?d00001 diff --git a/SOURCES/sb/rockykpatch1.x509 b/SOURCES/sb/rockykpatch1.x509 new file mode 100644 index 0000000000000000000000000000000000000000..860f8c91635b8604a9b4996470f69c5cd1fb26cc GIT binary patch literal 1289 zcmXqLVr4aGVt%`TnTe5!iIL5KmyJ`a&72u@8d1sdg)pI@R71R|Ur4b==(;O^&S6caB7smUyOwR)akaKEL3DMqe zVqAnA!Hld7%uS5_3M;;C<-t%6Jb`eW;XGf$4# z#RnYBG>KkVTqLVT=4nfji1qXmYnPK7 zR>#X9vk|EdnsC@sqx4^+;!4Fyn@Zm8TBqF3|JuXRQ|slir4Oc-wX!H|-!wPv>M@P! zCC@%jJ3Tv5wVGqg{5doILQmB6KP!a=w|wp zQp59db0e-lw_2yid%>-7QiYWJpA8IRe2?1s+h2y=CAyltwQ^n`W+pX zP0?f*`0HZnu|xJa6Eh2h|k9& z#v)QY>3dJe+t&LVEv4NyS&7`${8K6d&QP+-ED{D{4I(}|+1Ic6y%23Ywc}-5ntbXb zvHT;*X#kkXfoXt|;dEj~ND{x!``3pX8Gk1Q#B;s#byJ$(ZZtJfcy`fB z(3NkWEvNFU=sFp0ZV4YLSxsJsu%@)f`($fsuYYVS)Ct%&r|s3B$XoMxcbN7C1y6jl zZ2A2elYa_tib;B5==)|(>=o;tZlyrQztjIQzHs_i>GJdwYx%Q*rd#D~bwfuWkLBmA9^gW#NN#iwkFhvbz@>i&@7d auem-u$n3zynSo1kTHGzy|308%wgdoR?(MMv literal 0 HcmV?d00001 diff --git a/SPECS/rocky-release.spec b/SPECS/rocky-release.spec index 28b7fad..5496db7 100644 --- a/SPECS/rocky-release.spec +++ b/SPECS/rocky-release.spec @@ -20,12 +20,13 @@ %define distro_code Blue Onyx %define major 9 %define minor 0 -%define rocky_rel 1%{?rllh:.%{rllh}}%{!?rllh:.14} +%define rocky_rel 1%{?rllh:.%{rllh}}%{!?rllh:.15} %define rpm_license BSD-3-Clause %define dist .el%{major} %define contentdir pub/rocky %define rltype stable +%define rlosid rocky %define os_bug_name Rocky-Linux-%{major} @@ -63,8 +64,9 @@ # Resets only the dist tag for the override package. All this does is ensure # that only the rhel macros and settings are provided - This is useful in the # case of a build that cannot be properly debranded (eg dotnet). -%if 0%{?rloverride} +%if %{with rloverride} %define dist .el%{major}.override +%define rlosid rhel %endif # End Rocky Override Section ################################################################################ @@ -213,7 +215,7 @@ install -d -m 0755 %{buildroot}%{_prefix}/lib cat > %{buildroot}%{_prefix}/lib/os-release << EOF NAME="%{distro_name}" VERSION="%{full_release_version} (%{distro_code})" -ID="%{?rloverride:rhel}%{!?rloverride:rocky}" +ID="%{rlosid}" ID_LIKE="rhel centos fedora" VERSION_ID="%{full_release_version}" PLATFORM_ID="platform:el%{major}" @@ -410,7 +412,7 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf %{_datadir}/pki/sb-certs/* %changelog -* Sun May 01 2022 Louis Abel - 9.0-1.14 +* Sun May 01 2022 Louis Abel - 9.0-1.15 - Backport current SB certs for now - Add logrotate timer and switcheroo - Add missing macros