prepare spec for sb update

SPECS/rocky-release.spec

@@ -21,7 +21,7 @@
 %define distro_code  Blue Onyx
 %define major        9
 %define minor        3
-%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.2}
+%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.3}
 %define rpm_license  BSD-3-Clause
 %define dist         .el%{major}
 %define home_url     https://rockylinux.org/
@@ -151,31 +151,39 @@ Source1203:     rocky-devel.repo
 Source1300:     rocky.1.gz
 
 # rocky secureboot certs placeholder (1400-1499)
-Source1400:     rockydup1.x509
+# 1400 is the root
-Source1401:     rockykpatch1.x509
+# 1401-1420 are dedicated to the kernel
-Source1402:     rocky-root-ca.der
+# 1421-1440 is dedicated to x86_64
-#
+# 1441-1460 is dedicated to aarch64
-Source1403:     rocky-fwupd.cer
+Source1400:     rocky-root-ca.der
-Source1404:     rocky-grub2.cer
+Source1401:     rockydup1.x509
-Source1405:     rocky-kernel.cer
+Source1402:     rockykpatch1.x509
-Source1406:     rocky-shim.cer
+Source1403:     rockydup1-aarch64.x509
-Source1407:     rocky-uki-virt.cer
+Source1404:     rockykpatch1-aarch64.x509
-Source1408:     rocky-fwupd-aarch64.cer
+# x86_64
-Source1409:     rocky-grub2-aarch64.cer
+Source1421:     rocky-fwupd.cer
-Source1410:     rocky-kernel-aarch64.cer
+Source1422:     rocky-grub2.cer
-Source1411:     rocky-shim-aarch64.cer
+Source1423:     rocky-kernel.cer
-Source1412:     rocky-uki-virt-aarch64.cer
+Source1424:     rocky-shim.cer
-# all certs in DER format
+Source1425:     rocky-uki-virt.cer
-Source1433:     rocky-fwupd.der
+# x86_64 in der
-Source1434:     rocky-grub2.der
+Source1426:     rocky-fwupd.der
-Source1435:     rocky-kernel.der
+Source1427:     rocky-grub2.der
-Source1436:     rocky-shim.der
+Source1428:     rocky-kernel.der
-Source1437:     rocky-uki-virt.der
+Source1429:     rocky-shim.der
-Source1438:     rocky-fwupd-aarch64.der
+Source1430:     rocky-uki-virt.der
-Source1439:     rocky-grub2-aarch64.der
+# aarch64
-Source1440:     rocky-kernel-aarch64.der
+Source1441:     rocky-fwupd-aarch64.cer
-Source1441:     rocky-shim-aarch64.der
+Source1442:     rocky-grub2-aarch64.cer
-Source1442:     rocky-uki-virt-aarch64.der
+Source1443:     rocky-kernel-aarch64.cer
+Source1444:     rocky-shim-aarch64.cer
+Source1445:     rocky-uki-virt-aarch64.cer
+# aarch64 in der
+Source1446:     rocky-fwupd-aarch64.der
+Source1447:     rocky-grub2-aarch64.der
+Source1448:     rocky-kernel-aarch64.der
+Source1449:     rocky-shim-aarch64.der
+Source1450:     rocky-uki-virt-aarch64.der
 
 %description
 %{distro_name} release files.
@@ -323,31 +331,38 @@ install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
 install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
 
 # Backported certs for now
-## all cer
+## root and kernel
 install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
+## x86_64
-install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
+# cer
-install -m 0644 %{SOURCE1407} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1421} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1408} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1422} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1409} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1423} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1410} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1424} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1411} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1425} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1412} %{buildroot}%{_datadir}/pki/sb-certs/
+# der
-## all der
+install -m 0644 %{SOURCE1426} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1433} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1427} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1434} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1428} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1435} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1429} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1436} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1430} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1437} %{buildroot}%{_datadir}/pki/sb-certs/
+## aarch64
-install -m 0644 %{SOURCE1438} %{buildroot}%{_datadir}/pki/sb-certs/
+# cer
-install -m 0644 %{SOURCE1439} %{buildroot}%{_datadir}/pki/sb-certs/
-install -m 0644 %{SOURCE1440} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1443} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1444} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1445} %{buildroot}%{_datadir}/pki/sb-certs/
+# der
+install -m 0644 %{SOURCE1446} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1447} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1448} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1449} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1450} %{buildroot}%{_datadir}/pki/sb-certs/
 
 # Placeholders
 # x86_64
@@ -479,6 +494,9 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
 %{_datadir}/pki/sb-certs/*
 
 %changelog
+* Wed Apr 03 2024 Louis Abel <label@rockylinux.org - 9.3-1.3
+- Update SB certs
+
 * Fri Dec 22 2023 Louis Abel <label@rockylinux.org> - 9.3-1.2
 - Fix debuginfo repo names