add aarch64

add file
Add cert
2024-04-30 17:25:24 -07:00 · 2024-04-30 16:57:07 -07:00 · 2024-04-30 16:55:48 -07:00 · 2024-04-07 17:33:24 -07:00 · 2024-04-03 18:59:48 -07:00 · 2024-04-03 10:14:20 -07:00
72 changed files with 1800 additions and 566 deletions
--- a/.gitignore
+++ b/.gitignore
@ -3,7 +3,6 @@ BUILDROOT/
 RPMS/
 SRPMS/
 SOURCES/*.xz
-SOURCES/*.gz
 SOURCES/*.bz2
 SOURCES/*.rpm
 SOURCES/*.orig
--- a/README.md
+++ b/README.md
@ -1 +1,40 @@
-Release package - All PR's should be against original/rpms/rocky-release
+Release package - All PR's should be against staging/src/rocky-release
+
+## Notes for Packagers/Builders
+
+This package can produce multiple variants of `rocky-release`:
+
+* Stable: `rocky-release`, `rocky-repos`, `rocky-gpg-keys`, etc
+* LookAhead: All packages appended with `-lookahead`
+* Beta: All packages appended with `-beta`
+
+* If `--with=rllookahead` or `--with=rlbeta` are set in mock, those variants are built
+* If both are set the same time, build will fail
+
+When `--with=rllookahead` is set the minor version will typically be `y+1`. So if the current
+stable is `X.0`, the next would be `X.1`.
+
+For pre-releases/beta, both packages should produce `X.Y` until changed in the spec.
+
+The `rllh` macro may be versioned out for future use. It does not have to be explicitly set.
+
+A `rllh_minor` macro may be introduced in the future.
+
+### How does this benefit us?
+
+It provides an opportunity to do self testing of various kinds. In most cases,
+a rocky-release package for the upcoming minor release will be built normally
+and doesn't require the variant release packages. However, the option is at
+least available for those who want to test something in particular and override
+the default rocky-release packages.
+
+### What is the rloverride macro?
+
+This simply sets the dist tag to `.el%{major}.override` and changes the ID="..."
+tag in `/etc/os-release` to read as `rhel` rather than `rocky`. This helps us
+perform very specific builds that cannot otherwise be debranded properly, eg
+dotnet. This should also change the initial macros to only provide `%rhel` and
+not CentOS or any other derivative macro name, as some packages specifically
+look for these macros being set as well and *also* applies to those packages
+that cannot be properly debranded or when debranding has not visual or
+functional benefit.
--- a/SOURCES/50-redhat.conf
+++ b/SOURCES/50-redhat.conf
@ -0,0 +1,8 @@
+# These defaults are from upstream and are not patched into systemd like in el8
+# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
+kernel.kptr_restrict = 1
+
+# Source route verification
+net.ipv4.conf.default.rp_filter = 1
+net.ipv4.conf.*.rp_filter = 1
+-net.ipv4.conf.all.rp_filter
--- a/SOURCES/50-redhat.conf.lh
+++ b/SOURCES/50-redhat.conf.lh
@ -0,0 +1,8 @@
+# These defaults are from upstream and are not patched into systemd like in el8
+# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
+kernel.kptr_restrict = 1
+
+# Source route verification
+net.ipv4.conf.default.rp_filter = 1
+net.ipv4.conf.*.rp_filter = 1
+-net.ipv4.conf.all.rp_filter
--- a/SOURCES/85-display-manager.preset
+++ b/SOURCES/85-display-manager.preset
@ -6,5 +6,7 @@ enable gdm.service
 enable lightdm.service
 enable slim.service
 enable lxdm.service
+enable sddm.service
 enable kdm.service
 enable xdm.service
+
--- a/SOURCES/85-display-manager.preset.lh
+++ b/SOURCES/85-display-manager.preset.lh
@ -0,0 +1,12 @@
+# We enable all display managers by default. Since only one can
+# actually be enabled at the same time the one which is installed
+# first wins
+
+enable gdm.service
+enable lightdm.service
+enable slim.service
+enable lxdm.service
+enable sddm.service
+enable kdm.service
+enable xdm.service
+
--- a/SOURCES/90-default-user.preset
+++ b/SOURCES/90-default-user.preset
@ -0,0 +1,25 @@
+# Enable the D-Bus service (including its socket for socket activation)
+# unconditionally. It is used throughout Fedora and required on all machines.
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
+
+# Socket-activated pipewire service for individual user sessions
+# https://bugzilla.redhat.com/show_bug.cgi?id=1592434
+enable pipewire.socket
+
+# Enable the PipeWire PulseAudio compatibility socket interface
+# https://bugzilla.redhat.com/show_bug.cgi?id=1904239
+# https://bugzilla.redhat.com/show_bug.cgi?id=1907906
+# https://fedoraproject.org/wiki/Changes/DefaultPipeWire
+enable pipewire-pulse.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1976006
+enable pipewire-media-session.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2022717
+enable wireplumber.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2181984
+enable obex.service
--- a/SOURCES/90-default-user.preset.lh
+++ b/SOURCES/90-default-user.preset.lh
@ -0,0 +1,23 @@
+# Enable the D-Bus service (including its socket for socket activation)
+# unconditionally. It is used throughout Fedora and required on all machines.
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
+
+# Socket-activated pipewire service for individual user sessions
+# https://bugzilla.redhat.com/show_bug.cgi?id=1592434
+enable pipewire.socket
+
+# Enable the PipeWire PulseAudio compatibility socket interface
+# https://bugzilla.redhat.com/show_bug.cgi?id=1904239
+# https://bugzilla.redhat.com/show_bug.cgi?id=1907906
+# https://fedoraproject.org/wiki/Changes/DefaultPipeWire
+enable pipewire-pulse.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1976006
+enable pipewire-media-session.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2022717
+enable wireplumber.service
+
--- a/SOURCES/90-default.preset
+++ b/SOURCES/90-default.preset
@ -30,10 +30,54 @@ enable sysklogd.*

 # Network facing
 enable firewalld.service
-enable libvirtd.service
 enable xinetd.service
 enable ladvd.service

+# Virtualization driver specific daemons. Start by defalt at boot for VM
+# autostart, but shutdown after 2 mins and socket activated thereafter
+enable virtqemud.service
+
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
+enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
+
+# Secondary drivers providing supporting functionality to main virtualization
+# drivers (socket activated only when required)
+enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
+enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
+enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
+enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
+enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
+enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
+
 # Storage
 enable multipathd.service
 enable libstoragemgmt.service
@ -93,7 +137,7 @@ enable rngd.service

 # Other stuff
 enable abrtd.service
-enable abrt-ccpp.service
+enable abrt-journal-core.service
 enable abrt-oops.service
 enable abrt-xorg.service
 enable abrt-vmcore.service
@ -114,9 +158,10 @@ enable accounts-daemon.service
 enable rtkit-daemon.service
 enable upower.service
 enable udisks2.service
-enable polkit.service
 enable packagekit-offline-update.service
 enable PackageKit.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2011240
+enable power-profiles-daemon.service

 # Initial Setup reconfiguration service
 enable initial-setup-reconfiguration.service
@ -158,3 +203,59 @@ enable device_cio_free.service
 # Enable the stratis daemon for managing stratis storage
 # https://bugzilla.redhat.com/show_bug.cgi?id=1632510
 enable stratisd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1817591
+enable mlocate-updatedb.timer
+
+# nvme auto connect
+# https://bugzilla.redhat.com/show_bug.cgi?id=1805466
+enable nvmefc-boot-connections.service
+
+# OSTree based systems need to remount /sysroot and
+# /var as rw via ostree-remount.service
+# ignored by non-OSTree based systems
+# https://bugzilla.redhat.com/show_bug.cgi?id=1848453
+enable ostree-remount.service
+
+# DBus needed by Anaconda
+enable dbus.socket
+enable dbus-broker.service
+
+# Enable iscsi service files
+# https://bugzilla.redhat.com/show_bug.cgi?id=1930458
+enable iscsi.service
+enable iscsid.socket
+enable iscsiuio.socket
+enable iscsi-onboot.service
+
+# Enable logrotate.timer
+# https://bugzilla.redhat.com/show_bug.cgi?id=1977865
+enable logrotate.timer
+
+# Enable greenboot
+# https://bugzilla.redhat.com/show_bug.cgi?id=2005552
+enable greenboot-grub2-set-counter.service
+enable greenboot-grub2-set-success.service
+enable greenboot-healthcheck.service
+enable greenboot-rpm-ostree-grub2-check-fallback.service
+enable greenboot-status.service
+enable greenboot-task-runner.service
+enable redboot-auto-reboot.service
+enable redboot-task-runner.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2108625
+enable greenboot-service-monitor.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2013299
+enable low-memory-monitor.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2049627
+enable switcheroo-control.service
+
+# Enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2106811
+enable clevis-luks-askpass.path
+
+# Enable  kernel-bootcfg-boot-successful.service
+# RHEL-21816
+enable kernel-bootcfg-boot-successful.service
+
--- a/SOURCES/90-default.preset.lh
+++ b/SOURCES/90-default.preset.lh
@ -0,0 +1,257 @@
+# Also see:
+# https://fedoraproject.org/wiki/Starting_services_by_default
+
+disable systemd-timesyncd.service
+disable systemd-resolved.service
+
+# systemd
+enable remote-fs.target
+enable getty@tty1.service
+
+# System stuff
+enable sshd.service
+enable atd.*
+enable crond.*
+enable chronyd.service
+enable rpcbind.*
+enable NetworkManager.service
+enable NetworkManager-dispatcher.service
+enable ModemManager.service
+enable auditd.service
+enable restorecond.service
+enable bluetooth.*
+enable avahi-daemon.*
+enable cups.*
+
+# The various syslog implementations
+enable rsyslog.*
+enable syslog-ng.*
+enable sysklogd.*
+
+# Network facing
+enable firewalld.service
+enable xinetd.service
+enable ladvd.service
+
+# Virtualization driver specific daemons. Start by defalt at boot for VM
+# autostart, but shutdown after 2 mins and socket activated thereafter
+enable virtqemud.service
+
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
+enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
+
+# Secondary drivers providing supporting functionality to main virtualization
+# drivers (socket activated only when required)
+enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
+enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
+enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
+enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
+enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
+enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
+
+# Storage
+enable multipathd.service
+enable libstoragemgmt.service
+enable lvm2-lvmpolld.socket
+enable lvm2-monitor.*
+enable lvm2-lvmetad.*
+enable dm-event.*
+enable dmraid-activation.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=855372
+enable mdmonitor.service
+enable mdmonitor-takeover.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=876237
+enable spice-vdagentd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=885406
+enable qemu-guest-agent.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=928726
+enable dnf-makecache.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=957135
+enable vmtoolsd.service
+
+# mcelog is a utility that collects and decodes Machine Check Exception data
+# on x86-32 and x86-64 systems.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1302179
+enable mcelog.service
+
+#https://bugzilla.redhat.com/show_bug.cgi?id=995987
+enable kdump.service
+
+#https://bugzilla.redhat.com/show_bug.cgi?id=1009970
+enable tuned.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1215645
+enable unbound-anchor.timer
+
+# Enable SSSD Kerberos Credential Cache Server
+# https://bugzilla.redhat.com/show_bug.cgi?id=1558927
+enable sssd-kcm.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1578833
+enable sssd.service
+
+# Hardware
+enable gpm.*
+enable gpsd.*
+enable irqbalance.service
+enable lm_sensors.service
+enable mcelog.*
+enable microcode.service
+enable smartd.service
+enable pcscd.socket
+enable rngd.service
+
+# Other stuff
+enable abrtd.service
+enable abrt-journal-core.service
+enable abrt-oops.service
+enable abrt-xorg.service
+enable abrt-vmcore.service
+enable lttng-sessiond.service
+enable ksm.service
+enable ksmtuned.service
+enable rootfs-resize.service
+enable sysstat.service
+enable uuidd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1193616
+enable hypervfcopyd.service
+enable hypervkvpd.service
+enable hypervvssd.service
+
+# Desktop stuff
+enable accounts-daemon.service
+enable rtkit-daemon.service
+enable upower.service
+enable udisks2.service
+enable packagekit-offline-update.service
+enable PackageKit.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2011240
+enable power-profiles-daemon.service
+
+# Initial Setup reconfiguration service
+enable initial-setup-reconfiguration.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1312446
+enable opal-prd.service
+
+# virtlog.service is sometimes used by VMs started by libvirt.service
+# Enable virtlog.socket to have it socket activated
+# https://bugzilla.redhat.com/show_bug.cgi?id=1325503
+enable virtlogd.socket
+
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1271839
+enable rhsmcertd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1359645
+enable brandbot.*
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1572550
+enable timedatex.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1578870
+enable selinux-autorelabel-mark.service
+enable rhel-configure.service
+enable rhel-dmesg.service
+
+# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808
+enable nis-domainname.service
+enable import-state.service
+enable loadmodules.service
+enable readonly-root.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1630200
+# s390x specific services
+enable cpi.service
+enable device_cio_free.service
+
+# Enable the stratis daemon for managing stratis storage
+# https://bugzilla.redhat.com/show_bug.cgi?id=1632510
+enable stratisd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1817591
+enable mlocate-updatedb.timer
+
+# nvme auto connect
+# https://bugzilla.redhat.com/show_bug.cgi?id=1805466
+enable nvmefc-boot-connections.service
+
+# OSTree based systems need to remount /sysroot and
+# /var as rw via ostree-remount.service
+# ignored by non-OSTree based systems
+# https://bugzilla.redhat.com/show_bug.cgi?id=1848453
+enable ostree-remount.service
+
+# DBus needed by Anaconda
+enable dbus.socket
+enable dbus-broker.service
+
+# Enable iscsi service files
+# https://bugzilla.redhat.com/show_bug.cgi?id=1930458
+enable iscsi.service
+enable iscsid.socket
+enable iscsiuio.socket
+enable iscsi-onboot.service
+
+# Enable logrotate.timer
+# https://bugzilla.redhat.com/show_bug.cgi?id=1977865
+enable logrotate.timer
+
+# Enable greenboot
+# https://bugzilla.redhat.com/show_bug.cgi?id=2005552
+enable greenboot-grub2-set-counter.service
+enable greenboot-grub2-set-success.service
+enable greenboot-healthcheck.service
+enable greenboot-rpm-ostree-grub2-check-fallback.service
+enable greenboot-status.service
+enable greenboot-task-runner.service
+enable redboot-auto-reboot.service
+enable redboot-task-runner.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2108625
+enable greenboot-service-monitor.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2013299
+enable low-memory-monitor.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2049627
+enable switcheroo-control.service
+
+# Enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2106811
+enable clevis-luks-askpass.path
+
--- a/SOURCES/99-default-disable.preset.lh
+++ b/SOURCES/99-default-disable.preset.lh
@ -0,0 +1,2 @@
+# Final disable all
+disable *
--- a/SOURCES/Contributors
+++ b/SOURCES/Contributors
@ -9,11 +9,11 @@ examples of this.

 The outpouring support from the community and the amount of people who to
 together to support us, we want to thank you for believing in us and giving us
-a chance. Thank you.
+a chance. And as always, we hope you enjoy this release.
+
+Thank you.

 # Special Recognition #
-
-Contributors, in no particular order:
  Mustafa Gezen
  Skip Grube
  Sherif Nagy
@ -21,56 +21,54 @@ Contributors, in no particular order:
  Louis Abel
  Neil Hanlon
  Taylor Goodwill
-  R. Leigh Hennig
-  Hayden Young
-  @jkwong
-  @glenjarvis
-  Michael Young
-  Anthony Staunton
-  Rich Alloway
-  Hayden Young
-  Rob Felsburg
-  Benjamin Agner
+  Natalie Forde
+  Alejandro Ramallo
+  Wale Soyinka
+  Ezequiel Bruni
+  Trevor Cooper
+  Chris Stackpole
+  Steven Spencer
+  Alan Marshall (@alangm)
+  Lukas Magauer
+  Al Bowles (@raktajino)
+  Peter Ajamian (@pj)
+  Scott Shinn
+
+# Rocky Linux Teams and Operations #
+
+Leadership:
  Gregory Kurtzer
-  Daniel Tharp
-  Chris Cowley
  Brian Clemens
-  @darkbat91
-  @rkm
-  @raven_kg
-  T.J. Yang (@tjyang)
-  Sébastien Poher (@sjpp)

 Infrastructure and Operations:
-  R. Leigh Hennig
  Taylor Goodwill
  Neil Hanlon
  Louis Abel
-  Randolph (@meltro)
-  Patrick Roberts
-  Daniel Tharp
-  Chris Cowley
+  Mustafa Gezen

-Release Engineering:
+Release Engineering/Core:
  Louis Abel
  Mustafa Gezen
  Skip Grube
  Sherif Nagy
  Pablo Greco
+  Neil Hanlon
+  Taylor Goodwill

 Security:
  Rob Felsburg
-  Benjamin Agner
+  Scott Shinn

 Documentation:
  Wale Soyinka

-Web:
-  Hayden Young
+Web/Design:
+  Gabriel Graves
  Michael Kinder

-Design:
-  Hayden Young
-
-Community and Outreach:
-  Jordan Pisaniello
+Testing:
+  Chris Stackpole
+  Trevor Cooper
+  Lukas Magauer
+  Alan Marshall (@alangm)
+  Al Bowles (@raktajino)
--- a/SOURCES/EULA
+++ b/SOURCES/EULA
@ -1,9 +1,9 @@
-Rocky Linux 8 EULA
+Rocky Linux EULA

-Rocky Linux 8 comes with no warranties or guarantees of any kind, written or
+Rocky Linux comes with no warranties or guarantees of any kind, written or
 implied.

-The Distribution is released as GPLv2. Individual packages in the distribution
-come with their own licenses which are available on install as well as the
-distribution git forge. A copy of the GPLv2 license is included with the media
-of this distribution.
+The Distribution is released as 3-Clause BSD. Individual packages in the
+distribution come with their own licenses which are available on install as well
+as the distribution git forge. A copy of the 3-Clause BSD license is included
+with the media of this distribution.
--- a/SOURCES/LICENSE
+++ b/SOURCES/LICENSE
@ -1,31 +1,6 @@
 All elements of the Rocky Linux operating system that are developed
 by Contributors to the Rocky Linux project are licensed and made
-available to you under a dual MIT and BSD 3-Clause license.
-
-## Begin MIT License
-
-Copyright 2021 Rocky Linux Project Authors.
-
-Permission is hereby granted, free of charge, to any person obtaining
-a copy of this software and associated documentation files (the
-"Software"), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:
-
-The above copyright notice and this permission notice shall be included
-in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-## End MIT License
+available to you under the BSD 3-Clause license.

 ## Begin 3-Clause BSD License

--- a/SOURCES/RPM-GPG-KEY-Rocky-9
+++ b/SOURCES/RPM-GPG-KEY-Rocky-9
@ -0,0 +1,31 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: resf.keykeeper.v1
+Comment: Keykeeper
+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==
+=PzIf
+-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/RPM-GPG-KEY-Rocky-9-Testing
+++ b/SOURCES/RPM-GPG-KEY-Rocky-9-Testing
@ -0,0 +1,52 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=/Z/i
+-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/RPM-GPG-KEY-rockyofficial
+++ b/SOURCES/RPM-GPG-KEY-rockyofficial
@ -1,29 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
-
-mQINBGAofzYBEAC6yS1azw6f3wmaVd//3aSy6O2c9+jeetulRQvg2LvhRRS1eNqp
-/x9tbBhfohu/tlDkGpYHV7diePgMml9SZDy1sKlI3tDhx6GZ3xwF0fd1vWBZpmNk
-D9gRkUmYBeLotmcXQZ8ZpWLicosFtDpJEYpLUhuIgTKwt4gxJrHvkWsGQiBkJxKD
-u3/RlL4IYA3Ot9iuCBflc91EyAw1Yj0gKcDzbOqjvlGtS3ASXgxPqSfU0uLC9USF
-uKDnP2tcnlKKGfj0u6VkqISliSuRAzjlKho9Meond+mMIFOTT6qp4xyu+9Dj3IjZ
-IC6rBXRU3xi8z0qYptoFZ6hx70NV5u+0XUzDMXdjQ5S859RYJKijiwmfMC7gZQAf
-OkdOcicNzen/TwD/slhiCDssHBNEe86Wwu5kmDoCri7GJlYOlWU42Xi0o1JkVltN
-D8ZId+EBDIms7ugSwGOVSxyZs43q2IAfFYCRtyKHFlgHBRe9/KTWPUrnsfKxGJgC
-Do3Yb63/IYTvfTJptVfhQtL1AhEAeF1I+buVoJRmBEyYKD9BdU4xQN39VrZKziO3
-hDIGng/eK6PaPhUdq6XqvmnsZ2h+KVbyoj4cTo2gKCB2XA7O2HLQsuGduHzYKNjf
-QR9j0djjwTrsvGvzfEzchP19723vYf7GdcLvqtPqzpxSX2FNARpCGXBw9wARAQAB
-tDNSZWxlYXNlIEVuZ2luZWVyaW5nIDxpbmZyYXN0cnVjdHVyZUByb2NreWxpbnV4
-Lm9yZz6JAk4EEwEIADgWIQRwUcRwqSn0VM6+N7cVr12sbXRaYAUCYCh/NgIbDwUL
-CQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRAVr12sbXRaYLFmEACSMvoO1FDdyAbu
-1m6xEzDhs7FgnZeQNzLZECv2j+ggFSJXezlNVOZ5I1I8umBan2ywfKQD8M+IjmrW
-k9/7h9i54t8RS/RN7KNo7ECGnKXqXDPzBBTs1Gwo1WzltAoaDKUfXqQ4oJ4aCP/q
-/XPVWEzgpJO1XEezvCq8VXisutyDiXEjjMIeBczxb1hbamQX+jLTIQ1MDJ4Zo1YP
-zlUqrHW434XC2b1/WbSaylq8Wk9cksca5J+g3FqTlgiWozyy0uxygIRjb6iTzKXk
-V7SYxeXp3hNTuoUgiFkjh5/0yKWCwx7aQqlHar9GjpxmBDAO0kzOlgtTw//EqTwR
-KnYZLig9FW0PhwvZJUigr0cvs/XXTTb77z/i/dfHkrjVTTYenNyXogPtTtSyxqca
-61fbPf0B/S3N43PW8URXBRS0sykpX4SxKu+PwKCqf+OJ7hMEVAapqzTt1q9T7zyB
-QwvCVx8s7WWvXbs2d6ZUrArklgjHoHQcdxJKdhuRmD34AuXWCLW+gH8rJWZpuNl3
-+WsPZX4PvjKDgMw6YMcV7zhWX6c0SevKtzt7WP3XoKDuPhK1PMGJQqQ7spegGB+5
-DZvsJS48Ip0S45Qfmj82ibXaCBJHTNZE8Zs+rdTjQ9DS5qvzRA1sRA1dBb/7OLYE
-JmeWf4VZyebm+gc50szsg6Ut2yT8hw==
-=AiP8
-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/RPM-GPG-KEY-rockytesting
+++ b/SOURCES/RPM-GPG-KEY-rockytesting
@ -1,29 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
-
-mQINBGAof3sBEAC50QnXSLxhE+n0gZkX5d5zyBO+SyblfEye9KGf/nMFRu0nPnhO
-y0WlkP40fg2di9iKlTtvIWJfxs2+7PqA9wcU4vnXJpF5MIGurmDKRhBG07v8zMCg
-aU99c9SWQ+76FvomoVzdfj5sSYHfcqD7gRm6VeUlmVv1twqXBm9bfIIF/skXBS9Y
-Gld1py9zSzWgjkT2fUukV9P9FaUuWu6Sbz4wD/Gr+zaSbobonH7zcQjAMbNuJgD1
-diRL7kS+K8QPEPN94IrWJyFegjRzed0e6FAAHqx2Qlrd/09/Tvlxi+yr7A+FpkjF
-41LWg58MZ78letMqgLJI84Ui5ZqUUNJlOF2likQo85yIUV4shlKSgrVd1xC76pxm
-yLWPxcluyS9AdD1tNqW+vIAcQX7V6WY0Pg4A7rAqi+hhXLNwuckPoOGWkkcMIfXH
-ykHsNp9S7YFqi5QdNaw5NciVHIJWXfgDTyGHf+IPNe5HKZJHU+HAmdoPAO7dSWyZ
-tUDLNog+ssvoIcLz8ZzODS2WO9DsiJ0U7qZen+erto+fri17fHi3mRXGApnAWoBM
-1eTWbXk3xV2q4Xcst9buCAWWoX1G7XYtjAKNLJ6w6HoN4nN+yyot6fNdd8nLEXCR
-huPM1gtRqUj6qpTxcUqSRsyb7wE34N+XO1OE9WUJMDauJLhllYhZqbRBSwARAQAB
-tDNSZWxlYXNlIEVuZ2luZWVyaW5nIDxpbmZyYXN0cnVjdHVyZUByb2NreWxpbnV4
-Lm9yZz6JAk4EEwEIADgWIQQJGkQEfD2LejMfXhhUieQru+LBCAUCYCh/ewIbDwUL
-CQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBUieQru+LBCMVvD/0cJzEtybgN7hPW
-ZHwOVmc0ovgHHpsKJJjY6XpmEqTbPhGiq7ZklxMweHh3MBWymcGaJJZH+8HIwGfD
-m1DrhllJ4ddSz4y27fqbwfuRLx4BexwanxHN2jfp1q2E8KhAbtJYuZHEsChZHGI7
-JCbKYr3h0wat2GSZ9oM2Bc79hoJ73h73nXKLQrGwkRP52RxJA23sSwJp408tPi++
-3kaScIF9Ji+jkXIgX9yCzrBAxmn4r0qOO8x/F/m1xDmLVwRdvKBNvtA9xOH4tQco
-rGu11sDvB6WdlNYyA2yFjbHBPexTBLLovNq45jT7o6DkZyj1ej7D5xXfE7nOA1KF
-sGxoT0Xo1GekIkF17A3EPl8ijw3PJcfF99s+NFE5z9PK5V2nRSelv3AfiL89iIZG
-wcCqRijg/DxWQPNP952wow1MRWZKd6cSFejS+sKYJueH9IVkxxIPr0YRQQi3BD6I
-93Fug8dTLWE6QSIOlrMcvXQZhty57b0WEOzVRLF8j46KOqEN4w3CrrJ3iFKR2ksX
-YeK0Lz+Zm6gVmEgADkLHamQxEU8KQLsLhYh42/qbBicBXjQ7Zt6Y4Y48cUzThfaK
-p0Iy+QGxbC0LMpmnx8arnOh0QLxGkEnCNggoupQI3ql+QYoUA+k0FUlv3lHC1vY8
-sdkkxYa8srjZAmmaO+RoMqB1P38URg==
-=kXX3
-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/Rocky-AppStream.repo
+++ b/SOURCES/Rocky-AppStream.repo
@ -1,17 +0,0 @@
-# Rocky-AppStream.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[appstream]
-name=Rocky Linux $releasever - AppStream
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/
-gpgcheck=1
-enabled=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-BaseOS.repo
+++ b/SOURCES/Rocky-BaseOS.repo
@ -1,17 +0,0 @@
-# Rocky-BaseOS.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[baseos]
-name=Rocky Linux $releasever - BaseOS
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/os/
-gpgcheck=1
-enabled=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-ContinuousRelease.repo
+++ b/SOURCES/Rocky-ContinuousRelease.repo
@ -1,24 +0,0 @@
-# Rocky-ContinuousRelease.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-#
-# The Continuous Release (CR) repository contains packages for the next minor
-# release of Rocky Linux.  This repository only has content in the time period
-# between an upstream release and the official Rocky Linux release.  These
-# packages have not been fully tested yet and should be considered beta
-# quality.  They are made available for people willing to test and provide
-# feedback for the next release.
-
-[cr]
-name=Rocky Linux $releasever - ContinuousRelease
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=cr-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/cr/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-Debuginfo.repo
+++ b/SOURCES/Rocky-Debuginfo.repo
@ -1,11 +0,0 @@
-# Rocky-Debuginfo.repo
-#
-# All debug packages are merged into a single repo, split by basearch, and are
-# not signed.
-
-[debuginfo]
-name=Rocky Linux $releasever - Debuginfo
-baseurl=http://dl.rockylinux.org/$contentdir/debuginfo/$releasever/$basearch/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-Devel.repo
+++ b/SOURCES/Rocky-Devel.repo
@ -1,17 +0,0 @@
-# Rocky-Devel.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[devel]
-name=Rocky Linux $releasever - Devel WARNING! FOR BUILDROOT USE ONLY!
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=Devel-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/Devel/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-Extras.repo
+++ b/SOURCES/Rocky-Extras.repo
@ -1,17 +0,0 @@
-# Rocky-Extras.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[extras]
-name=Rocky Linux $releasever - Extras
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/
-gpgcheck=1
-enabled=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-FastTrack.repo
+++ b/SOURCES/Rocky-FastTrack.repo
@ -1,17 +0,0 @@
-# Rocky-FastTrack.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[fasttrack]
-name=Rocky Linux $releasever - FastTrack
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=fasttrack-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/fasttrack/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-HighAvailability.repo
+++ b/SOURCES/Rocky-HighAvailability.repo
@ -1,17 +0,0 @@
-# Rocky-HighAvailability.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[ha]
-name=Rocky Linux $releasever - HighAvailability
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-Media.repo
+++ b/SOURCES/Rocky-Media.repo
@ -1,22 +0,0 @@
-# Rocky-Media.repo
-#
-# You can use this repo to install items directly off the installation media.
-# Verify your mount point matches one of the below file:// paths.
-
-[media-baseos]
-name=Rocky Linux $releasever - Media - BaseOS
-baseurl=file:///media/Rocky/BaseOS
-        file:///media/cdrom/BaseOS
-        file:///media/cdrecorder/BaseOS
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
-
-[media-appstream]
-name=Rocky Linux $releasever - Media - AppStream
-baseurl=file:///media/Rocky/AppStream
-        file:///media/cdrom/AppStream
-        file:///media/cdrecorder/AppStream
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-NFV.repo
+++ b/SOURCES/Rocky-NFV.repo
@ -1,17 +0,0 @@
-# Rocky-NFV.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[nfv]
-name=Rocky Linux $releasever - NFV
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-Plus.repo
+++ b/SOURCES/Rocky-Plus.repo
@ -1,17 +0,0 @@
-# Rocky-Plus.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[plus]
-name=Rocky Linux $releasever - Plus
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/rockyplus/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-PowerTools.repo
+++ b/SOURCES/Rocky-PowerTools.repo
@ -1,17 +0,0 @@
-# Rocky-PowerTools.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[powertools]
-name=Rocky Linux $releasever - PowerTools
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=PowerTools-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/PowerTools/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-RT.repo
+++ b/SOURCES/Rocky-RT.repo
@ -1,17 +0,0 @@
-# Rocky-RT.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[rt]
-name=Rocky Linux $releasever - Realtime
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-ResilientStorage.repo
+++ b/SOURCES/Rocky-ResilientStorage.repo
@ -1,17 +0,0 @@
-# Rocky-ResilientStorage.repo
-#
-# The mirrorlist system uses the connecting IP address of the client and the
-# update status of each mirror to pick current mirrors that are geographically
-# close to the client.  You should use this for Rocky updates unless you are
-# manually picking other mirrors.
-#
-# If the mirrorlist does not work for you, you can try the commented out
-# baseurl line instead.
-
-[resilient-storage]
-name=Rocky Linux $releasever - ResilientStorage
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/os/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-Sources.repo
+++ b/SOURCES/Rocky-Sources.repo
@ -1,34 +0,0 @@
-# Rocky-Sources.repo
-
-
-[baseos-source]
-name=Rocky Linux $releasever - BaseOS - Source
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=baseos-source-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/sources/$releasever/BaseOS/Source/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
-
-[appstream-source]
-name=Rocky Linux $releasever - AppStream - Source
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=appstream-source-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/sources/$releasever/AppStream/Source/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
-
-[extras-source]
-name=Rocky Linux $releasever - Extras - Source
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-source-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/sources/$releasever/extras/Source/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
-
-[plus-source]
-name=Rocky Linux $releasever - Plus - Source
-mirrorlist=http://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=plus-source-$releasever
-#baseurl=http://dl.rockylinux.org/$contentdir/sources/$releasever/rockyplus/Source/
-gpgcheck=1
-enabled=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial
--- a/SOURCES/Rocky-issue
+++ b/SOURCES/Rocky-issue
@ -1,21 +0,0 @@
-    [0;32m`.-/+++++++++/-.`
- `-+++++++++++++++++-`
-.+++++++++++++++++++++.
-+++++++++++++++++++++++.
-+++++++++++++++/-/+++++++
-+++++++++++++/.   ./+++++
-+++++++++++:.       ./+++
-+++++++++:`   `:/:`   .:/
-++++++:`   .:+++++:`
- .+++-`   ./+++++++++:`
-  `-`   ./+++++++++++-
-       -+++++++++:-.`
-[0m
-[1;31mWARNING: THIS RELEASE IS NOT FOR PRODUCTION. YOU SHOULD NOT UPDATE FROM THIS
-         INSTALLATION. THIS INSTALLATION IS NOT SUPPORTED.[0m
-
-         [1;32mPLEASE REPORT ALL PRE-PRODUCTION BUGS OR ISSUES TO OUR BUG TRACKER AT:[0m
-         https://bugs.rockylinux.org
-
-\S -- TEST RELEASE -- EVALUATION ONLY
-Kernel \r on an \m
--- a/SOURCES/rocky-addons.repo
+++ b/SOURCES/rocky-addons.repo
@ -0,0 +1,177 @@
+# rocky-addons.repo
+#
+# The mirrorlist system uses the connecting IP address of the client and the
+# update status of each mirror to pick current mirrors that are geographically
+# close to the client.  You should use this for Rocky updates unless you are
+# manually picking other mirrors.
+#
+# If the mirrorlist does not work for you, you can try the commented out
+# baseurl line instead.
+
+[highavailability]
+name=Rocky Linux $releasever - High Availability
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[highavailability-debuginfo]
+name=Rocky Linux $releasever - High Availability - Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[highavailability-source]
+name=Rocky Linux $releasever - High Availability - Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=HighAvailability-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[resilientstorage]
+name=Rocky Linux $releasever - Resilient Storage
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[resilientstorage-debuginfo]
+name=Rocky Linux $releasever - Resilient Storage - Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[resilientstorage-source]
+name=Rocky Linux $releasever - Resilient Storage - Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=ResilientStorage-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[nfv]
+name=Rocky Linux $releasever - NFV
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[nfv-debuginfo]
+name=Rocky Linux $releasever - NFV Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[nfv-source]
+name=Rocky Linux $releasever - NFV Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[rt]
+name=Rocky Linux $releasever - Realtime
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[rt-debuginfo]
+name=Rocky Linux $releasever - Realtime Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[rt-source]
+name=Rocky Linux $releasever - Realtime Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[sap]
+name=Rocky Linux $releasever - SAP
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[sap-debuginfo]
+name=Rocky Linux $releasever - SAP Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[sap-source]
+name=Rocky Linux $releasever - SAP Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[saphana]
+name=Rocky Linux $releasever - SAPHANA
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[saphana-debuginfo]
+name=Rocky Linux $releasever - SAPHANA Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[saphana-source]
+name=Rocky Linux $releasever - SAPHANA Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
--- a/SOURCES/rocky-devel.repo
+++ b/SOURCES/rocky-devel.repo
@ -0,0 +1,30 @@
+# rocky-devel.repo
+#
+# devel and no-package-left-behind
+
+[devel]
+name=Rocky Linux $releasever - Devel WARNING! FOR BUILDROOT ONLY DO NOT LEAVE ENABLED
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=devel-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/devel/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[devel-debuginfo]
+name=Rocky Linux $releasever - Devel Debug WARNING! FOR BUILDROOT ONLY DO NOT LEAVE ENABLED
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=devel-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/devel/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[devel-source]
+name=Rocky Linux $releasever - Devel Source WARNING! FOR BUILDROOT ONLY DO NOT LEAVE ENABLED
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=devel-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/devel/source/tree/
+gpgcheck=1
+enabled=0
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
--- a/SOURCES/rocky-driver.cer
+++ b/SOURCES/rocky-driver.cer
@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
--- a/SOURCES/rocky-extras.repo
+++ b/SOURCES/rocky-extras.repo
@ -0,0 +1,65 @@
+# rocky-extras.repo
+#
+# The mirrorlist system uses the connecting IP address of the client and the
+# update status of each mirror to pick current mirrors that are geographically
+# close to the client.  You should use this for Rocky updates unless you are
+# manually picking other mirrors.
+#
+# If the mirrorlist does not work for you, you can try the commented out
+# baseurl line instead.
+
+[extras]
+name=Rocky Linux $releasever - Extras
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/
+gpgcheck=1
+enabled=1
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[extras-debuginfo]
+name=Rocky Linux $releasever - Extras Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[extras-source]
+name=Rocky Linux $releasever - Extras Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[plus]
+name=Rocky Linux $releasever - Plus
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=plus-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[plus-debuginfo]
+name=Rocky Linux $releasever - Plus - Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=plus-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[plus-source]
+name=Rocky Linux $releasever - Plus - Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=plus-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
--- a/SOURCES/rocky-fwupd-aarch64.cer
+++ b/SOURCES/rocky-fwupd-aarch64.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-fwupd-aarch64.der
+++ b/SOURCES/rocky-fwupd-aarch64.der
--- a/SOURCES/rocky-fwupd.cer
+++ b/SOURCES/rocky-fwupd.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFIDCCBAigAwIBAgIBIzANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgdcxCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMSswKQYDVQQDDCJSb2NreSBMaW51
+eCBGd3VwZCBTaWduaW5nIENlcnQgMTAxMSYwJAYJKoZIhvcNAQkBFhdzZWN1cml0
+eUByb2NreWxpbnV4Lm9yZzCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGB
+ALRGl+5WVDUwqFfaj7xdn+lpXg9huqtADwKYGlZQo5zAepxiYBDB7mzCI2lBOO6K
+sFGOwhYVS8XGEnFvw8uNDZuFjo1k4cwdqhBwmU93gSpVcrsmupdNdZRkSWelmJ5
+bDBz15DU9za4KMNCs1Ymn0EDI+Vr9QgX0igYUTKJu8ariMJWw+Rvej9D2T0EFVd5
+7pW/Se0cXns38A9yoqo5CH5CRSl2WydYotxj310/KCrwGi1QBlcvdyL1EGHOQcbJ
+gcnGsEyzrtsU1r8xUvYZQxpdXptQS90mkdhx7GfnNleMZD6BrQu7AANh0Gvn1n6n
+z2k3hp8LenfPeATIHxF/V60ts3j5dOv2KPwCEJ5wLSJ/IB/rZiHgmguCmaRzcxVC
+nzLnELeaO9zz6aXSxWf/1AWJm1kDoddFjQpgRNywzAwhBvrlM4/EteuF2Ytj/puK
+/mb/UQo3YCQLzocJc0Do2drDQXsJDivTbfy7QRZREhRyIXs3NTBvnQH/GYFMTouc
+ZwIDAQABo3gwdjAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIHgDAWBgNVHSUB
+Af8EDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUpOlUSfT3so5OBpQSUKHO9o09344w
+HwYDVR0jBBgwFoAUTCxr19ZO6BWByrjphmYfZeIWb8QwDQYJKoZIhvcNAQELBQAD
+ggEBAIDA/KzmwqhOtWAvzNyXwHNXLlk3sRwLuqp5sdpLF+X6KSnRulSPqatC5NRe
+zJajLzIryS2IbYVb2X8jVOUiJk1gTXeMsED6aEEoWURUW3empmEFK63REukZdrBT
+nnJwPS7HaGVnNMCXAb6CFB1OoEApZBP1th4/C0HXUFnCEk4o608mj1R+41c7H4UF
+gZb6fllP26cVk5fCX+ufGoBGh5v1CeESPdCFEpSuu6jCMZOmYr+K7z25QcSiZaWH
+LVQkDmq1llKHJlKZ2mcJKVdzbEgYDrIhE7BIlSJqnVTTW+7lvMgBOJ2XKRQdbEc0
+Eo/KoPSuOMqno8+bgObUZWCAlUs=
+-----END CERTIFICATE-----
--- a/SOURCES/rocky-fwupd.der
+++ b/SOURCES/rocky-fwupd.der
--- a/SOURCES/rocky-grub2-aarch64.cer
+++ b/SOURCES/rocky-grub2-aarch64.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-grub2-aarch64.der
+++ b/SOURCES/rocky-grub2-aarch64.der
--- a/SOURCES/rocky-grub2.cer
+++ b/SOURCES/rocky-grub2.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-grub2.der
+++ b/SOURCES/rocky-grub2.der
--- a/SOURCES/rocky-kernel-aarch64.cer
+++ b/SOURCES/rocky-kernel-aarch64.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-kernel-aarch64.der
+++ b/SOURCES/rocky-kernel-aarch64.der
--- a/SOURCES/rocky-kernel.cer
+++ b/SOURCES/rocky-kernel.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFITCCBAmgAwIBAgIBJTANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgdgxCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMSwwKgYDVQQDDCNSb2NreSBMaW51
+eCBLZXJuZWwgU2lnbmluZyBDZXJ0IDEwMTEmMCQGCSqGSIb3DQEJARYXc2VjdXJp
+dHlAcm9ja3lsaW51eC5vcmcwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIB
+gQDA27rW8p7tVaKJLHEsiRoEl3F7vpcGT5/PljpBeD3lasKZ+IJSd3QlflB5KZ7S
+t/IETA2ieo2CBsAe5HPcL4LIJTMjPz/w5s+SnDzmjQtH18kKqIyxXD8GZZFAJ/xK
+z/L5GF9UaUH7ZnE5TkKMz0HQp1B8Pmm/6Gw8d+3oNmjgksNIl1TszSklv1dhYwoD
+uoH8065ymIi55jwifu9rWByvpwL9HO8zHyxXHmdoSAYBe62mY1cn1OChT78uF2YJ
+4xDg9tVoOO/fEqanjzqDwmWXMsKII/H/qcj3ZbMMXqm7sScld2YanF3X2VvfQgi2
+guQKdfv8k0YHxeRwnRSGBxS9dDYNnz7Tl9Iz/8NwH996TEDu2erykQeJ+wpToLAG
+SggVHHGWvQ9w0jS4BWrZI49TJAgvRTplF1UiSiaVw5SzdHclYJ0smUD07IPCae+t
+MmkKmXLJ9YnZ0zp8u9Z++Jsw6URzBk/HBWd1Ll8sz6rLHYF5jHpN20a63iBUZ965
+k8MCAwEAAaN4MHYwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCB4AwFgYDVR0l
+AQH/BAwwCgYIKwYBBQUHAwMwHQYDVR0OBBYEFAYFt/XYVERxhAFQEKNGpjaoDWUf
+MB8GA1UdIwQYMBaAFEwsa9fWTugVgcq46YZmH2XiFm/EMA0GCSqGSIb3DQEBCwUA
+A4IBAQAzcqGVzja2droS3VFGiOoeVJNDbAad5xnBjXR22bOXHnGxQXwsjUkQlI9X
+xsatiNwXAObHFPQSz4qEF+QoSgAoQKCVxgKD/PiMJFDYGWZKfpZ51Ewnuv3kD06D
+pOKWcddZdfxjPpKQDglQg079yea9pDPQisA+8rRZyQnm0ga/k9RZ9GY7U+fuT0jQ
+jnuODENAiQpQyRoQYbMW2c+dcbGrVomlwimjhja13VnkU70bBYq0S6YO7MKZNXPI
+4nRR/2FcNMH99QmJAiyIMaYRJwb0pWLPT+/rgRtbsAtT8hWgvfTq/JE0KzBiWHKy
+sPDV0abopwkrNkHSsJGuXJQlGPc/
+-----END CERTIFICATE-----
--- a/SOURCES/rocky-kernel.der
+++ b/SOURCES/rocky-kernel.der
--- a/SOURCES/rocky-kpatch.cer
+++ b/SOURCES/rocky-kpatch.cer
@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
--- a/SOURCES/rocky-nvidiagpuoot101-aarch64.x509
+++ b/SOURCES/rocky-nvidiagpuoot101-aarch64.x509
--- a/SOURCES/rocky-nvidiagpuoot101.x509
+++ b/SOURCES/rocky-nvidiagpuoot101.x509
--- a/SOURCES/rocky-root-ca.der
+++ b/SOURCES/rocky-root-ca.der
--- a/SOURCES/rocky-shim-aarch64.cer
+++ b/SOURCES/rocky-shim-aarch64.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-shim-aarch64.der
+++ b/SOURCES/rocky-shim-aarch64.der
--- a/SOURCES/rocky-shim.cer
+++ b/SOURCES/rocky-shim.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-shim.der
+++ b/SOURCES/rocky-shim.der
--- a/SOURCES/rocky-signing.der
+++ b/SOURCES/rocky-signing.der
--- a/SOURCES/rocky-uki-virt-aarch64.cer
+++ b/SOURCES/rocky-uki-virt-aarch64.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFNDCCBBygAwIBAgIBMTANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgesxCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMT8wPQYDVQQDDDZSb2NreSBMaW51
+eCBLZXJuZWwgVUtJIFZpcnQgU2lnbmluZyBDZXJ0IDEwMSAoYWFyY2g2NCkxJjAk
+BgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGludXgub3JnMIIBojANBgkqhkiG
+9w0BAQEFAAOCAY8AMIIBigKCAYEA39mQSRAK5Hx7W3vZZLAYk5HU0ndNjBFc5wOO
+/nGqhebYyapiZi8jIH8voYLNpOgwz/futiBUmq0rhOXhIuHcb6CDYdvzGqleNyiK
+lxHbHlusxLd25V49R2WxhvxEPg7gORTJYJ/dUMe5yFDm8MfGt3ghgFHJNxDgcL53
+1L3B4mz3VAjHFpcnC8TD8dR+4AQ9CAXJHVBh/xF3aZfrE1EKytfsoL0TygvIu3eb
+9aNW+dAxWscjLTRNRi2AS/Ge4tHT8BQBpqMVNFcmnO0Uh+D+0qoZuA9pvsLGRITx
+rEUUdpR0DSw8eITsdWkqy3f5OBMbbxvCaftS8mUDLfsaQsBY+uqblmebnn6iPYnf
+Ugcjq2F/koNjK6XDn8jBuBBQEBtZz+YZvo1Hx50K11D4HDFI3C2tLe85oHJltHQW
+8BHAPhi+MK6le+lXRgrRRnHyrXYh3JDlKhHnJHb/PBUzW/QRo6JgPsf0/gr/hZdc
+7eJluu0mK5hlRyzhKREzjGoktO/HAgMBAAGjeDB2MAwGA1UdEwEB/wQCMAAwDgYD
+VR0PAQH/BAQDAgeAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMDMB0GA1UdDgQWBBRt
+qyi+aBN/wr824eS4zAMnl5RDITAfBgNVHSMEGDAWgBRMLGvX1k7oFYHKuOmGZh9l
+4hZvxDANBgkqhkiG9w0BAQsFAAOCAQEAJgklRL/uHuKv+2Ys8HpF1/JV0wZg4mYe
+Pt/wUkAdMh7gnb7FznVZXnZTZIvOKaYtDOZSXXZ2PLp4UNjO89MSo3TVzWNpQRJX
+C4pOb0PcUTZvX1yx9UuLenR+YvqMd/cCC1Y/2YCnHfjsSeZ1hoAGWF1ulm9+dh3c
+k00DzT9joVIcugQMTe5ZZAPmABUm3ZflEELe1oACBegx8n5calo5u2SrDFVdgbY2
+/dgqLme7E+r1FWZSrq++y7eBKljxa1mVk/vj41ewTMB+QS958aUziFfSsXcxfu1d
+7pX3zJNMXX3cBpBmTymzTKrxAjoJjkiMUejjVEEb9vLEeNPcuv9lPg==
+-----END CERTIFICATE-----
--- a/SOURCES/rocky-uki-virt-aarch64.der
+++ b/SOURCES/rocky-uki-virt-aarch64.der
--- a/SOURCES/rocky-uki-virt.cer
+++ b/SOURCES/rocky-uki-virt.cer
@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/SOURCES/rocky-uki-virt.der
+++ b/SOURCES/rocky-uki-virt.der
--- a/SOURCES/rocky.1.gz
+++ b/SOURCES/rocky.1.gz
--- a/SOURCES/rocky.repo
+++ b/SOURCES/rocky.repo
@ -0,0 +1,93 @@
+# rocky.repo
+#
+# The mirrorlist system uses the connecting IP address of the client and the
+# update status of each mirror to pick current mirrors that are geographically
+# close to the client.  You should use this for Rocky updates unless you are
+# manually picking other mirrors.
+#
+# If the mirrorlist does not work for you, you can try the commented out
+# baseurl line instead.
+
+[baseos]
+name=Rocky Linux $releasever - BaseOS
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/os/
+gpgcheck=1
+enabled=1
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[baseos-debuginfo]
+name=Rocky Linux $releasever - BaseOS - Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[baseos-source]
+name=Rocky Linux $releasever - BaseOS - Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=BaseOS-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[appstream]
+name=Rocky Linux $releasever - AppStream
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/
+gpgcheck=1
+enabled=1
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[appstream-debuginfo]
+name=Rocky Linux $releasever - AppStream - Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[appstream-source]
+name=Rocky Linux $releasever - AppStream - Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=AppStream-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[crb]
+name=Rocky Linux $releasever - CRB
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[crb-debuginfo]
+name=Rocky Linux $releasever - CRB - Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[crb-source]
+name=Rocky Linux $releasever - CRB - Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=CRB-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
--- a/SOURCES/rockydup1-aarch64.x509
+++ b/SOURCES/rockydup1-aarch64.x509
--- a/SOURCES/rockydup1.x509
+++ b/SOURCES/rockydup1.x509
--- a/SOURCES/rockykpatch1-aarch64.x509
+++ b/SOURCES/rockykpatch1-aarch64.x509
--- a/SOURCES/rockykpatch1.x509
+++ b/SOURCES/rockykpatch1.x509
--- a/SPECS/rocky-release.spec
+++ b/SPECS/rocky-release.spec
@ -1,3 +1,13 @@
+# Note to packagers/builders:
+#
+# If you wish to build the LookAhead or Beta variant of this package, make sure
+# that you are setting --with=rlbeta or --with=rllookahead on your mock
+# command. See the README for more information.
+
+%bcond_with rlbeta
+%bcond_with rllookahead
+%bcond_with rloverride
+
 %define debug_package %{nil}

 # Product information
@ -6,15 +16,68 @@
 %define variant_lowercase server

 # Distribution Name and Version
-%define distro  Rocky Linux
-%define major   8
-%define minor   4
-%define rocky_rel 15
-%define upstream_rel %{major}.%{minor}
+%define distro_name  Rocky Linux
+%define distro       %{distro_name}
+%define distro_code  Blue Onyx
+%define major        9
+%define minor        4
+%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.5}
+%define rpm_license  BSD-3-Clause
+%define dist         .el%{major}
+%define home_url     https://rockylinux.org/
+%define bug_url      https://bugs.rockylinux.org/
+%define debug_url    https://debuginfod.rockylinux.org/
+%define dist_vendor  RESF
+
+%define contentdir   pub/rocky
+%define sigcontent   pub/sig
+%define rlosid       rocky
+
+%define os_bug_name  Rocky-Linux-%{major}
+%define support_end  2032-05-31
+
+################################################################################
+# Rocky LookAhead Section
+#
+# Reset defines for LookAhead variant. Default is stable if 0 or undefined.
+%if %{with rllookahead}
+%define minor        4
+%define contentdir   pub/rocky-lh
+%define rltype       -lookahead
+%define rlstatement  LookAhead
+%endif
+# End Rocky LookAhead Section
+################################################################################
+
+################################################################################
+# Rocky Beta Section
+#
+# Reset defines for Beta variant. Default is stable if 0 or undefined.
+# We do NOT override the minor version number here.
+%if %{with rlbeta}
+%define contentdir   pub/rocky-beta
+%define rltype       -beta
+%define rlstatement  Beta
+%endif
+# End Rocky Beta Section
+################################################################################
+
+################################################################################
+# Rocky Override Section
+#
+# Resets only the dist tag for the override package. All this does is ensure
+# that only the rhel macros and settings are provided - This is useful in the
+# case of a build that cannot be properly debranded (eg dotnet).
+%if %{with rloverride}
+%define dist         .el%{major}.override
+%define rlosid       rhel
+%endif
+# End Rocky Override Section
+################################################################################

 %define base_release_version %{major}
-%define full_release_version %{major}
 %define dist_release_version %{major}
+%define full_release_version %{major}.%{minor}

 %ifarch ppc64le
 %define tuned_profile :server
@ -23,152 +86,221 @@
 # Avoids a weird anaconda problem
 %global __requires_exclude_from %{_libexecdir}

-Name:           rocky-release
-Version:        %{major}.%{minor}
-Release:        %{rocky_rel}.el8
-Summary:        %{distro} release files
-License:        GPLv2
+# conditional section for future use
+
+Name:           rocky-release%{?rltype}
+Version:        %{full_release_version}
+Release:        %{rocky_rel}%{dist}
+Summary:        %{distro_name} release files
+Group:          System Environment/Base
+License:        %{rpm_license}
 URL:            https://rockylinux.org
 BuildArch:      noarch

-# What do we provide?
+# What do we provide? Some of these needs are a necesity (think comps and
+# groups) and things like EPEL need it.
 Provides:       rocky-release = %{version}-%{release}
-Provides:       rocky-release(upstream) = %{upstream_rel}
+Provides:       rocky-release(upstream) = %{full_release_version}
 Provides:       redhat-release = %{version}-%{release}
 Provides:       system-release = %{version}-%{release}
 Provides:       system-release(releasever) = %{major}
+Provides:       centos-release = %{version}-%{release}
+Provides:       centos-release(upstream) = %{full_release_version}

 ## Required by libdnf
 Provides:       base-module(platform:el%{major})

 ## This makes lorax/pungi/anaconda happy
-Provides:       rocky-release-eula
-Provides:       redhat-release-eula
+Provides:       rocky-release-eula  = %{version}-%{release}
+Provides:       redhat-release-eula = %{version}-%{release}
+Provides:       centos-release-eula = %{version}-%{release}

 # What are our requirements?
-Requires:       rocky-repos(%{base_release_version})
+Requires:       rocky-repos(%{major})

-# GPG Keys
-Source101:      RPM-GPG-KEY-rockyofficial
-Source102:      RPM-GPG-KEY-rockytesting
+# GPG Keys (100-199)
+Source101:      RPM-GPG-KEY-Rocky-%{major}
+Source102:      RPM-GPG-KEY-Rocky-%{major}-Testing

-# Release Sources
+# Release Sources (200-499)
 Source200:      EULA
 Source201:      LICENSE
 Source202:      Contributors
 Source203:      COMMUNITY-CHARTER
+
+# !! Stable !!
 Source300:      85-display-manager.preset
 Source301:      90-default.preset
-Source302:      99-default-disable.preset
+Source302:      90-default-user.preset
+Source303:      99-default-disable.preset
+Source304:      50-redhat.conf

-# Repo Sources
-Source1200:     Rocky-BaseOS.repo
-Source1201:     Rocky-AppStream.repo
-Source1202:     Rocky-PowerTools.repo
-Source1203:     Rocky-Extras.repo
+# !! LookAhead !!
+Source400:      85-display-manager.preset.lh
+Source401:      90-default.preset.lh
+Source402:      90-default-user.preset.lh
+Source403:      99-default-disable.preset.lh
+Source404:      50-redhat.conf.lh

-# Rocky Add-ons
-Source1210:     Rocky-HighAvailability.repo
-Source1211:     Rocky-ResilientStorage.repo
-#Source1212:     Rocky-RT.repo
-#Source1213:     Rocky-NFV.repo
+# Repo Sources (1200-1299)
+Source1200:     rocky.repo
+Source1201:     rocky-addons.repo
+Source1202:     rocky-extras.repo
+Source1203:     rocky-devel.repo

-# Rocky Special Stuff
-Source1220:     Rocky-Media.repo
-#Source1221:     Rocky-Debuginfo.repo
-Source1222:     Rocky-Sources.repo
-Source1223:     Rocky-Devel.repo
-#Source1224:     Rocky-ContinuousRelease.repo
-#Source1225:     Rocky-FastTrack.repo
-Source1226:     Rocky-Plus.repo
-
-# Remove once testing is done
-Source4000:     Rocky-issue
+# Add ons (1300-1399)
+Source1300:     rocky.1.gz

+# rocky secureboot certs placeholder (1400-1499)
+# 1400 is the root
+# 1401-1420 are dedicated to the kernel
+# 1421-1440 is dedicated to x86_64
+# 1441-1460 is dedicated to aarch64
+Source1400:     rocky-root-ca.der
+Source1401:     rockydup1.x509
+Source1402:     rockykpatch1.x509
+Source1403:     rockydup1-aarch64.x509
+Source1404:     rockykpatch1-aarch64.x509
+Source1405:     rocky-nvidiagpuoot101.x509
+Source1406:     rocky-nvidiagpuoot101-aarch64.x509
+# x86_64
+Source1421:     rocky-fwupd.cer
+Source1422:     rocky-grub2.cer
+Source1423:     rocky-kernel.cer
+Source1424:     rocky-shim.cer
+Source1425:     rocky-uki-virt.cer
+# x86_64 in der
+Source1426:     rocky-fwupd.der
+Source1427:     rocky-grub2.der
+Source1428:     rocky-kernel.der
+Source1429:     rocky-shim.der
+Source1430:     rocky-uki-virt.der
+# aarch64
+Source1441:     rocky-fwupd-aarch64.cer
+Source1442:     rocky-grub2-aarch64.cer
+Source1443:     rocky-kernel-aarch64.cer
+Source1444:     rocky-shim-aarch64.cer
+Source1445:     rocky-uki-virt-aarch64.cer
+# aarch64 in der
+Source1446:     rocky-fwupd-aarch64.der
+Source1447:     rocky-grub2-aarch64.der
+Source1448:     rocky-kernel-aarch64.der
+Source1449:     rocky-shim-aarch64.der
+Source1450:     rocky-uki-virt-aarch64.der
+ 
 %description
-%{distro} release files.
+%{distro_name} release files.

-%package -n rocky-repos
-Summary:        %{distro} Package Repositories
-License:        GPLv2
-Provides:       rocky-repos(%{major}) = %{upstream_rel}
-Requires:       system-release = %{upstream_rel}
-Requires:       rocky-gpg-keys
+%package     -n rocky-repos%{?rltype}
+Summary:        %{distro_name} Package Repositories
+License:        %{rpm_license}
+Provides:       system-repos = %{version}-%{release}
+Provides:       rocky-repos(%{major}) = %{full_release_version}
+Requires:       system-release = %{version}-%{release}
+Requires:       rocky-gpg-keys%{?rltype}
 Conflicts:      %{name} < 8.0

-%description -n rocky-repos
-%{distro} package repository files for yum/dnf
+%description -n rocky-repos%{?rltype}
+%{distro_name} package repository files for yum/dnf

-%package -n rocky-gpg-keys
+%package     -n rocky-gpg-keys%{?rltype}
 Summary:        Rocky RPM GPG Keys
 Conflicts:      %{name} < 8.0

-%description -n rocky-gpg-keys
+%description -n rocky-gpg-keys%{?rltype}
 This package provides the RPM signature keys for Rocky.

+%package     -n rocky-sb-certs%{?rltype}
+Summary:        %{distro_name} public secureboot certificates
+Group:          System Environment/Base
+Provides:       system-sb-certs = %{version}-%{release}
+Provides:       redhat-sb-certs = %{version}-%{release}
+Provides:       centos-sb-certs = %{version}-%{release}
+
+%description -n rocky-sb-certs%{?rltype}
+This package contains the %{distro_name} secureboot public certificates.
+
 %prep
+%if %{with rllookahead} && %{with rlbeta}
+echo "!! WARNING !!"
+echo "Both LookAhead and Beta were enabled. This is not supported."
+echo "As a result: BUILD FAILED."
+exit 1
+%endif
 echo Good.

 %build
 echo Good.

 %install
-# copy license and contributors doc here for %%license and %%doc macros
-cp %{SOURCE201} %{SOURCE202} %{SOURCE203} .
+# docs dir for license and contributors
+mkdir ./docs
+cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs

-# create /etc/system-release and /etc/redhat-release
+################################################################################
+# system-release data
 install -d -m 0755 %{buildroot}%{_sysconfdir}
-echo "%{distro} release %{version}" > %{buildroot}%{_sysconfdir}/rocky-release
-echo "Derived from Red Hat Enterprise Linux %{version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream
+echo "%{distro_name} release %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})" > %{buildroot}%{_sysconfdir}/rocky-release
+echo "Derived from Red Hat Enterprise Linux %{full_release_version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream
 ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release
 ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release
+mkdir -p %{buildroot}%{_mandir}/man1
+install -p -m 0644 %{SOURCE1300} %{buildroot}%{_mandir}/man1/

 # Create the os-release file
 install -d -m 0755 %{buildroot}%{_prefix}/lib
 cat > %{buildroot}%{_prefix}/lib/os-release << EOF
-NAME="%{distro}"
-VERSION="%{major}.%{minor}"
-ID="rocky"
-ID_LIKE="rhel fedora"
-VERSION_ID="%{major}.%{minor}"
+NAME="%{distro_name}"
+VERSION="%{full_release_version} (%{distro_code})"
+ID="%{rlosid}"
+ID_LIKE="rhel centos fedora"
+VERSION_ID="%{full_release_version}"
 PLATFORM_ID="platform:el%{major}"
-PRETTY_NAME="%{distro} %{major}.%{minor}"
-ANSI_COLOR="0;31"
-CPE_NAME="cpe:/o:rocky:rocky:%{major}"
-HOME_URL="https://rockylinux.org/"
-BUG_REPORT_URL="https://bugs.rockylinux.org/"
-ROCKY_SUPPORT_PRODUCT="Rocky Linux"
-ROCKY_SUPPORT_PRODUCT_VERSION="%{major}"
+PRETTY_NAME="%{distro_name} %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})"
+ANSI_COLOR="0;32"
+LOGO="fedora-logo-icon"
+CPE_NAME="cpe:/o:rocky:rocky:%{major}::baseos"
+HOME_URL="%{home_url}"
+BUG_REPORT_URL="%{bug_url}"
+SUPPORT_END="%{support_end}"
+ROCKY_SUPPORT_PRODUCT="%{os_bug_name}"
+ROCKY_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement:-%{rlstatement}}"
+REDHAT_SUPPORT_PRODUCT="%{distro_name}"
+REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement: %{rlstatement}}"
 EOF

 # Create the symlink for /etc/os-release
 ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release

 # write cpe to /etc/system/release-cpe
-echo "cpe:/o:rocky:rocky:%{major}" > %{buildroot}%{_sysconfdir}/system-release-cpe
-
-# create /etc/issue and /etc/issue.net
-#echo '\S' > %{buildroot}%{_sysconfdir}/issue
-#echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
-#cp %{buildroot}%{_sysconfdir}/issue{,.net}
-
-# Remove these once we are no longer testing
-install -m 0644 %{SOURCE4000} %{buildroot}%{_sysconfdir}/issue
-install -m 0644 %{SOURCE4000} %{buildroot}%{_sysconfdir}/issue.net
-# End
+echo "cpe:/o:rocky:rocky:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe

+# create /etc/issue and /etc/issue.net, /etc/issue.d
+echo '\S' > %{buildroot}%{_sysconfdir}/issue
+echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
+cp %{buildroot}%{_sysconfdir}/issue{,.net}
 echo >> %{buildroot}%{_sysconfdir}/issue
+mkdir -p %{buildroot}%{_sysconfdir}/issue.d

 # set up the dist tag macros
-install -d -m 0755 %{buildroot}%{_sysconfdir}/rpm
-cat > %{buildroot}%{_sysconfdir}/rpm/macros.dist << EOF
+mkdir -p %{buildroot}%{_rpmmacrodir}
+cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
 # dist macros.

+%%__bootstrap ~bootstrap
 %%rocky_ver %{major}
 %%rocky %{major}
+%%centos_ver %{major}
+%%centos %{major}
 %%rhel %{major}
-%%dist .el%{major}
+%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}.el%{major}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
 %%el%{major} 1
+
+%%dist_vendor         %{dist_vendor}
+%%dist_name           %{distro}
+%%dist_home_url       %{home_url}
+%%dist_bug_report_url %{bug_url}
+%%dist_debuginfod_url %{debug_url}
 EOF

 # Data directory
@ -176,40 +308,159 @@ install -d -m 0755 %{buildroot}%{_datadir}/rocky-release
 ln -s rocky-release %{buildroot}%{_datadir}/redhat-release
 install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/

-# systemd presets
+# end system-release data
+################################################################################
+
+################################################################################
+# systemd section
 install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/
+
 install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
 install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/user-preset/

-# dnf stuff
-install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
-echo "stock" > %{buildroot}%{_sysconfdir}/dnf/vars/infra
-echo "pub/rocky" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
+# same behavior for both presets
+install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/

-# Copy out GPG keys
-install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
-install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
-install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
+# sysctl presets
+install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/
+install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
+# systemd section
+################################################################################

-# Copy our yum repos
+################################################################################
+# start secureboot section
+install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
+install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
+
+# Backported certs for now
+## root and kernel
+install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
+## x86_64
+# cer
+install -m 0644 %{SOURCE1421} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1422} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1423} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1424} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1425} %{buildroot}%{_datadir}/pki/sb-certs/
+# der
+install -m 0644 %{SOURCE1426} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1427} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1428} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1429} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1430} %{buildroot}%{_datadir}/pki/sb-certs/
+## aarch64
+# cer
+install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1443} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1444} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1445} %{buildroot}%{_datadir}/pki/sb-certs/
+# der
+install -m 0644 %{SOURCE1446} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1447} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1448} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1449} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1450} %{buildroot}%{_datadir}/pki/sb-certs/
+ 
+# Placeholders
+# x86_64
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
+
+# aarch64
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
+
+# ppc64le
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
+
+# armhfp
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-armhfp.cer
+
+# s390x
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
+
+# symlinks for everybody
+for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do
+  ln -sr %{buildroot}%{_datadir}/pki/sb-certs/${x} %{buildroot}%{_sysconfdir}/pki/sb-certs/${x}
+done
+
+# end secureboot section
+################################################################################
+
+################################################################################
+# dnf repo section
 install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
 install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/
 install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/
 install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/
 install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/
-install -p -m 0644 %{SOURCE1210} %{buildroot}%{_sysconfdir}/yum.repos.d/
-install -p -m 0644 %{SOURCE1211} %{buildroot}%{_sysconfdir}/yum.repos.d/
-#install -p -m 0644 %{SOURCE1212} %{buildroot}%{_sysconfdir}/yum.repos.d/
-#install -p -m 0644 %{SOURCE1213} %{buildroot}%{_sysconfdir}/yum.repos.d/
-install -p -m 0644 %{SOURCE1220} %{buildroot}%{_sysconfdir}/yum.repos.d/
-install -p -m 0644 %{SOURCE1222} %{buildroot}%{_sysconfdir}/yum.repos.d/
-install -p -m 0644 %{SOURCE1223} %{buildroot}%{_sysconfdir}/yum.repos.d/
-install -p -m 0644 %{SOURCE1226} %{buildroot}%{_sysconfdir}/yum.repos.d/
+
+# dnf stuff
+install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
+echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
+echo "%{sigcontent}" > %{buildroot}%{_sysconfdir}/dnf/vars/sigcontentdir
+echo "%{?rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
+echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
+
+# Copy out GPG keys
+install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
+install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
+install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
+# end dnf repo section
+################################################################################
+
+################################################################################
+# lookahead overrides
+# TODO: Is there a cleaner way? 
+%if %{with rllookahead}
+install -m 0644 %{SOURCE400} %{buildroot}/%{_prefix}/lib/systemd/system-preset/85-display-manager.preset
+install -m 0644 %{SOURCE401} %{buildroot}/%{_prefix}/lib/systemd/system-preset/90-default.preset
+install -m 0644 %{SOURCE402} %{buildroot}/%{_prefix}/lib/systemd/user-preset/90-default-user.preset
+
+install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/system-preset/99-default-disable.preset
+install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/user-preset/99-default-disable.preset
+install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
+%endif
+# lookahead replacements
+################################################################################

 %files
-%license LICENSE
-%doc Contributors COMMUNITY-CHARTER
+%license docs/LICENSE
+%doc docs/Contributors docs/COMMUNITY-CHARTER
+%dir %{_sysconfdir}/yum.repos.d
 %{_sysconfdir}/redhat-release
 %{_sysconfdir}/system-release
 %{_sysconfdir}/rocky-release
@ -218,54 +469,135 @@ install -p -m 0644 %{SOURCE1226} %{buildroot}%{_sysconfdir}/yum.repos.d/
 %config %{_sysconfdir}/system-release-cpe
 %config(noreplace) %{_sysconfdir}/issue
 %config(noreplace) %{_sysconfdir}/issue.net
-%{_sysconfdir}/rpm/macros.dist
+%dir %{_sysconfdir}/issue.d
+%{_rpmmacrodir}/macros.dist
 %{_datadir}/redhat-release
 %{_datadir}/rocky-release
 %{_prefix}/lib/os-release
 %{_prefix}/lib/systemd/system-preset/*
+%{_prefix}/lib/systemd/user-preset/*
+%{_prefix}/lib/sysctl.d/50-redhat.conf
+%{_mandir}/man1/rocky.1.gz

-%files -n rocky-repos
-%license LICENSE
-%config(noreplace) %{_sysconfdir}/yum.repos.d/Rocky-*.repo
+%files -n rocky-repos%{?rltype}
+%license docs/LICENSE
+%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-addons.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-extras.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-devel.repo
 %config(noreplace) %{_sysconfdir}/dnf/vars/contentdir
-%config(noreplace) %{_sysconfdir}/dnf/vars/infra
+%config(noreplace) %{_sysconfdir}/dnf/vars/sigcontentdir
+%config(noreplace) %{_sysconfdir}/dnf/vars/rltype
+%config(noreplace) %{_sysconfdir}/dnf/vars/stream

-%files -n rocky-gpg-keys
+%files -n rocky-gpg-keys%{?rltype}
 %{_sysconfdir}/pki/rpm-gpg/

+%files -n rocky-sb-certs%{?rltype}
+# care: resetting symlinks is intended
+%dir %{_sysconfdir}/pki/sb-certs
+%dir %{_datadir}/pki/sb-certs
+%{_sysconfdir}/pki/sb-certs/*
+%{_datadir}/pki/sb-certs/*
+
 %changelog
-* Sat May 08 2021 Louis Abel <label@rockylinux.org> - 8.4-15
- Release for 8.4
+* Tue Apr 30 2024 Louis Abel <label@rockylinux.org> - 9.4-1.5
+- Add nvidia SB certificates

-* Wed May 05 2021 Louis Abel <label@rockylinux.org> - 8.3-14
- Add RT, Plus, and NFV repo files
+* Sun Apr 07 2024 Louis Abel <label@rockylinux.org> - 9.4-1.3
+- Add additional provides for rocky-sb-certs

-* Mon May 03 2021 Louis Abel <label@rockylinux.org> - 8.3-13
- Add minor version to /etc/os-release to resolve issues
-  with products that provide the "full version"
+* Wed Apr 03 2024 Louis Abel <label@rockylinux.org> - 9.4-1.2
+- Update SB certs

-* Sat May 01 2021 Louis Abel <label@rockylinux.org> - 8.3-12
- Add resilient storage varient
- Fix vars
+* Wed Mar 27 2024 Louis Abel <label@rockylinux.org> - 9.4-1.1
+- Preparation for 9.4

-* Wed Apr 28 2021 Louis Abel <label@rockylinux.org> - 8.3-11
- Fix repo URL's where needed
- Change contentdir var
+* Mon Mar 04 2024 Louis Abel <label@rockylinux.org> - 9.4-0.3
+- Add kernel-bootcfg-boot-successful.service

-* Sun Apr 25 2021 Louis Abel <label@rockylinux.org> - 8.3-9
- Remove and add os-release references
+* Fri Jan 12 2024 Louis Abel <label@rockylinux.org> - 9.4-0.2
+- Improve presets for virtualization

-* Sun Apr 18 2021 Louis Abel <label@rockylinux.org> - 8.3-8
- Emphasize that this is not a production ready release
- rpmlint
+* Fri Oct 20 2023 Louis Abel <label@rockylinux.org> - 9.4-0.1
+- Bump to 9.4

-* Wed Apr 14 2021 Louis Abel <label@rockylinux.org> - 8.3-7
- Fix mantis links
+* Fri Oct 20 2023 Louis Abel <label@rockylinux.org> - 9.3-0.6
+- Add in true UKI-VIRT certificate
+- Add aarch64 signing certificates
+- Fix date in changelog

-* Thu Apr 08 2021 Louis Abel <label@rockylinux.org> - 8.3-5
- Combine release, repos, and keys together to simplify
+* Tue Sep 05 2023 Louis Abel <label@rockylinux.org> - 9.3-0.5
+- Add placeholder certs for UKI-VIRT

-* Mon Feb 01 2021 Louis Abel <label@rockylinux.org> - 8.3-4
- Initial Rocky Release 8.3 based on CentOS 8.3
- Keep centos rpm macro to reduce package modification burden
- Update /etc/issue
+* Sat Jun 10 2023 Louis Abel <label@rockylinux.org> - 9.3-0.4
+- Define the distro macro
+
+* Mon May 15 2023 Louis Abel <label@rockylinux.org> - 9.3-0.3
+- Use DER format for ppc64le certificates for now
+
+* Tue Apr 25 2023 Louis Abel <label@rockylinux.org> - 9.3-0.2
+- Update secure boot certificates
+
+* Thu Apr 06 2023 Louis Abel <label@rockylinux.org> - 9.3-0.1
+- Bump main version to 9.3
+- Enable obex
+
+* Sun Jan 01 2023 Louis Abel <label@rockylinux.org> - 9.2-1.2
+- Move macros.dist to a proper location
+
+* Thu Dec 22 2022 Louis Abel <label@rockylinux.org> - 9.2-1.1
+- Update devel repos (RLBT#0001354)
+- Add SUPPORT_END with absolute EOL (See sig_core/#3)
+
+* Wed Oct 19 2022 Louis Abel <label@rockylinux.org> - 9.1-1.10
+- Change secure boot certificates
+
+* Tue Oct 18 2022 Louis Abel <label@rockylinux.org> - 9.1-1.9
+- Bump release version to match upstream
+
+* Wed Sep 07 2022 Louis Abel <label@rockylinux.org> - 9.1-1.1
+- Bump main version and prepare for upcoming beta
+
+* Tue Aug 30 2022 Louis Abel <label@rockylinux.org> - 9.0-3.2
+- Add stream dnf var
+
+* Thu Jul 28 2022 Louis Abel <label@rockylinux.org> - 9.0-3.1
+- Ensure distsuffix is part of disttag
+
+* Wed Jul 20 2022 Louis Abel <label@rockylinux.org> - 9.0-2.2
+- Fix mirrorlist URL for plus repository
+
+* Thu Jun 30 2022 Louis Abel <label@rockylinux.org> - 9.0-2.1
+- Prepare for release
+- Ensure rltype is blank for stable releases
+
+* Wed Jun 22 2022 Louis Abel <label@rockylinux.org> - 9.0-1.22
+- Change to using mirrorlist
+
+* Sun Jun 12 2022 Louis Abel <label@rockylinux.org> - 9.0-1.21
+- Backport current SB certs for now
+- Add logrotate timer and switcheroo
+- Add missing macros
+- Fix CPE values
+- Remove /etc/centos-release file
+- Add redhat and fix rocky tags in os-release
+- Fix GPG key names to be consistent with SIG requirements
+- Reduce number of repo files
+- Change testing key to "testing" key from build system
+- Add official "stable" key from build system
+- List both GPG keys in repo files
+- Fix rlpkg macro for gpg keys
+- Add sig content dir
+- Remove nplb as devel is technically it
+
+* Mon Jan 10 2022 Louis Abel <label@rockylinux.org> - 9.0-1.1
+- Add LOGO to /etc/os-release
+
+* Tue Nov 30 2021 Louis Abel <label@rockylinux.org> - 9.0-1.0
+- Init for Rocky Linux 9 (Blue Onyx)
+- Sync with upstream
+- Add direct LookAhead support
+- Add direct Beta support
+- Add spec file notes for packagers
+- Add countme=1 to all base repos
--- a/4
+++ b/4
@ -0,0 +1,4 @@
+8:  Green Obsidian
+9:  Blue Onyx
+10: Red Quartz
+11: Lavender Calcite
--- a/2
+++ b/2
@ -1,2 +1,2 @@
-Signing: 6d745a60
+Signing: None
 Testing: bbe2c108
Author	SHA1	Message	Date
Louis Abel	e519eb201e	add aarch64	2024-04-30 17:25:24 -07:00
Louis Abel	7edb85aa25	add file	2024-04-30 16:57:07 -07:00
Louis Abel	6c47baafd2	Add cert	2024-04-30 16:55:48 -07:00
Louis Abel	cff4aaf092	add additional provides to sb-certs package	2024-04-07 17:33:24 -07:00
Louis Abel	39fb43f4d5	update certs	2024-04-03 18:59:48 -07:00
Louis Abel	c6723ce681	prepare spec for sb update	2024-04-03 10:14:20 -07:00
Louis Abel	8991b61c76	bump to 9.4-1.1	2024-03-27 11:04:20 -07:00
Louis Abel	efaebae09b	fix changelog date	2024-03-04 10:54:54 -07:00
Louis Abel	fa6b5177f9	update preset	2024-03-04 10:42:24 -07:00
Louis Abel	26f9f9c2bc	update readme	2024-02-21 00:00:26 -07:00
Louis Abel	65458c7ee0	update presets	2024-01-12 14:03:40 -07:00
Louis Abel	ed76809b44	fix debuginfo	2023-12-22 13:46:56 -07:00
Louis Abel	9f0e6894bf	update contributors	2023-11-29 19:53:13 -07:00
Louis Abel	dbe9a3e2ff	use support end macro	2023-11-20 18:50:04 -07:00
Louis Abel	e6ac61142c	bump to 9.4	2023-10-20 13:22:17 -07:00
Louis Abel	bff0df4476	add aarch64 certs and uki	2023-10-20 13:20:42 -07:00
Louis Abel	8b267461e4	add uki-virt placeholders	2023-09-05 19:07:21 -07:00
Louis Abel	7811696618	Become red quartz	2023-09-04 22:35:02 -07:00
Louis Abel	37b10ddcf2	fix distro macro	2023-06-10 13:36:33 -07:00
Louis Abel	574568bcfc	update gz	2023-05-16 18:41:11 -07:00
Louis Abel	87161cd1c3	update to der for ppc	2023-05-15 09:45:08 -07:00
Louis Abel	9ad51595f1	fix installs	2023-04-26 22:30:31 -07:00
Louis Abel	2d24b13026	update secureboot certificates	2023-04-25 12:14:47 -07:00
Louis Abel	3da21e7ea6	enable obex	2023-04-06 09:40:15 -07:00
Louis Abel	c5eca25bbd	bump to 9.3	2023-03-29 10:23:51 -07:00
Louis Abel	fa84f52f32	fix version	2023-02-01 02:01:10 -07:00
Louis Abel	061e46f780	move macros	2023-02-01 01:56:08 -07:00
Louis Abel	42eebc851c	add support end	2022-12-22 19:24:21 -07:00
Louis Abel	9966e352d8	update debug repos	2022-12-09 09:59:46 -07:00
Louis Abel	09328a043d	update sb certs	2022-10-20 08:32:29 -07:00
Louis Abel	08ebe84c2c	bump to 1.9	2022-10-18 17:49:47 -07:00
Louis Abel	cdfb1e6c55	bump to 1.8	2022-09-27 10:20:36 -07:00
Louis Abel	9983d1a0e9	bump to 9.1-1.1	2022-09-07 18:01:28 -07:00
Louis Abel	aa0947c6d4	add missing file in spec	2022-08-30 01:02:58 -07:00
Louis Abel	62a596c20d	add dnf stream var	2022-08-30 00:58:17 -07:00
Louis Abel	156bb3bd32	Backport fedora-release type of macros This commit can be reverted if not used for 9.1	2022-08-01 20:59:14 -07:00
Louis Abel	0bb446aa2b	refresh presets	2022-07-29 08:43:42 -07:00
Louis Abel	f9802de322	update lookahead disttag	2022-07-28 09:02:06 -07:00
Louis Abel	59aef94268	fix mirrorlist url for plus	2022-07-20 10:00:05 -07:00
Louis Abel	5607c0ba4b	use rltype for everything	2022-07-01 11:46:44 -07:00
Louis Abel	f904857211	rltype will be a value for repo	2022-07-01 11:33:27 -07:00
Louis Abel	5dbba1e39b	Bump to 9.0-2.1 to prepare for release	2022-06-30 14:45:40 -07:00
Louis Abel	af0c8369bd	remove testing key from repo files	2022-06-30 14:39:52 -07:00
Louis Abel	56e0cc1122	adjust contributors file	2022-06-30 14:32:44 -07:00
nazunalika	0ea47e4fbc	change to using mirror list	2022-06-22 08:59:44 -07:00
nazunalika	47ca703373	fix presets	2022-06-14 08:08:09 -07:00
nazunalika	bd1011738b	update spec	2022-06-12 10:09:18 -07:00
nazunalika	73d636820d	update contributors	2022-06-12 10:08:35 -07:00
nazunalika	049fb1ad9b	remove nplb	2022-06-11 08:00:03 -07:00
nazunalika	94ca47d5ef	update contributors	2022-06-01 17:05:31 -07:00
nazunalika	9512b4acc0	add sig var	2022-05-20 10:36:39 -07:00
nazunalika	c728a1011f	bump to 16	2022-05-19 22:59:21 -07:00
nazunalika	264970e3db	remove sb directory	2022-05-13 11:52:44 -07:00
nazunalika	adfbd1abde	fix rloverride settings	2022-05-13 11:50:52 -07:00
nazunalika	9650f1ff1c	fix rlpkg macro	2022-05-10 04:07:39 -07:00
nazunalika	a4fccc3206	add official signing key and bump to .13	2022-05-09 09:53:06 -07:00
nazunalika	c019bc1075	fix language	2022-05-08 08:40:59 -07:00
nazunalika	7e341ec641	use conditionals instead	2022-05-08 08:40:04 -07:00
nazunalika	f51f6a21b4	add testing key to gpg list	2022-05-04 19:30:45 -07:00
nazunalika	f1e7acc71b	fix up os-release	2022-05-01 18:15:04 -07:00
nazunalika	631ea01daa	change testing to beta, 9 beta key added	2022-05-01 16:45:04 -07:00
nazunalika	96b74f4cea	include SAP in repo files for future use	2022-04-25 13:07:23 -07:00
nazunalika	65c31b5fb2	prepare for 9.1 lookahead variant	2022-04-22 20:15:13 -07:00
nazunalika	8b3e329de2	reduce repo number	2022-04-22 19:04:30 -07:00
nazunalika	7d70fa5c18	remove centos-release	2022-04-15 21:17:49 -07:00
nazunalika	d5a68e35d0	fix sb dir	2022-04-15 21:07:11 -07:00
nazunalika	f4b920aa2b	fix up files section	2022-04-13 10:44:38 -07:00
nazunalika	d2411926f8	change crt to cer	2022-04-13 10:42:56 -07:00
nazunalika	4bd1a9f81d	add other symlinks	2022-04-13 10:19:07 -07:00
nazunalika	6221c979a8	placeholders are symlinks	2022-04-13 09:46:28 -07:00
nazunalika	e6a27b7b5d	fix gpg names to match sig reqs	2022-04-05 18:03:31 -07:00
nazunalika	42d36c73a2	fix os-release	2022-03-29 14:04:01 -07:00
nazunalika	b4df823055	remove /etc/centos-release	2022-03-29 12:51:13 -07:00
nazunalika	7cea9c3a6b	fix up CPE values	2022-03-23 17:53:04 -07:00
nazunalika	020f29769e	modify man page and contribs	2022-03-13 11:18:39 -07:00
nazunalika	ab7beafe3e	Fix up macros	2022-02-14 01:52:17 -07:00
nazunalika	ed0d0aea63	fix requires and provides	2022-02-08 17:46:12 -07:00
nazunalika	cbe3c14aba	bump to .3	2022-02-08 17:35:47 -07:00
nazunalika	a75aa21e98	backport current sb certs for testing	2022-01-27 12:05:01 -07:00
nazunalika	01c6fd83af	incremental changes	2022-01-10 21:09:37 -07:00
nazunalika	cdf75c2b46	add fedora logo to os-release	2022-01-10 21:05:20 -07:00
nazunalika	ab8245de17	countme in	2021-12-21 19:34:34 -07:00
nazunalika	de6d0b09a5	reduce CPE	2021-12-11 16:54:26 -07:00
nazunalika	67818c4232	clarification, fixes	2021-11-30 14:52:40 -07:00
nazunalika	db752a4424	clarification and pre-release	2021-11-30 12:47:46 -07:00
nazunalika	4a50b386f9	clarify	2021-11-30 12:40:42 -07:00
nazunalika	49f0f7152e	rllh readme and release	2021-11-30 12:32:03 -07:00
nazunalika	b4565a483c	rllh readme and release	2021-11-30 12:31:12 -07:00
nazunalika	8f8309a6c3	sync with upstream and lookahead	2021-11-30 11:53:24 -07:00
nazunalika	3c4814464d	lookahead stuff - commit #1	2021-11-30 01:24:40 -07:00
nazunalika	c5c7de6566	lookahead testing	2021-11-29 21:10:39 -07:00
nazunalika	9e254fc9bb	lh idea	2021-11-29 20:20:28 -07:00
nazunalika	b1647829fc	couple up eula again	2021-11-29 19:55:46 -07:00
nazunalika	559386605b	separate eula from primary package	2021-11-29 19:37:33 -07:00
nazunalika	7ddd15aa07	Syncing Sync with upstream, remove two repo files not in use, modify comments.	2021-11-29 18:10:25 -07:00
nazunalika	0dcfcb690b	look ahead stuff	2021-11-02 13:12:43 -07:00
nazunalika	4f24ea2a17	add LH	2021-11-01 12:38:56 -07:00
nazunalika	0ca27dc28d	spec updates	2021-10-20 16:21:00 -07:00
nazunalika	20a0f7a0b3	Consolidate debug and source repos	2021-10-19 20:10:35 -07:00
nazunalika	dd605c8eac	reorganizing and adding context	2021-10-19 01:39:56 -07:00
nazunalika	7facf3d534	fix license for repos package	2021-10-18 22:03:01 -07:00
nazunalika	5787b58690	simple updates for blue onyx	2021-10-18 21:47:21 -07:00
nazunalika	b0dc115e45	change powertools to CRB	2021-10-12 15:09:30 -07:00
nazunalika	0b78fe6512	init rocky 9	2021-10-05 00:52:23 -07:00
nazunalika	cb4020ac7d	add missing macros	2021-09-13 16:05:19 -07:00
nazunalika	451c5d3522	add code	2021-09-13 15:35:30 -07:00
nazunalika	8c2ca12c5c	update to -34	2021-09-13 15:28:39 -07:00
nazunalika	4f8f0db103	add centos as an id_like	2021-09-09 10:20:38 -07:00
nazunalika	92eab90536	fix bogus date and macros	2021-07-10 15:01:25 -07:00
nazunalika	a086400998	repo signing key (future state)	2021-07-09 22:15:16 -07:00
nazunalika	3c831c371a	fix urls	2021-07-06 22:04:04 -07:00
nazunalika	99cbad6cd6	fix URL for debug	2021-07-05 22:46:41 -07:00
nazunalika	d58f19db64	bump to -29	2021-06-29 23:07:04 -07:00
nazunalika	159a89d1ac	Fix URL and add debuginfo	2021-06-25 12:50:09 -07:00
nazunalika	a8407bfa81	update URLs	2021-06-25 00:43:23 -07:00
Mustafa Gezen	0be0f79d67	Add Chris Heath to contributors	2021-06-19 14:18:34 +00:00
Mustafa Gezen	af3ecd2287	Revert "Update rocky-release.spec" This reverts commit `5efea2d381`	2021-06-17 02:58:15 +00:00
Mustafa Gezen	5efea2d381	Update rocky-release.spec	2021-06-17 02:56:28 +00:00
Mustafa Gezen	000aee4120	Update Contributors	2021-06-17 02:51:24 +00:00
Mustafa Gezen	9dc09b8e6b	Update Contributors	2021-06-17 02:06:55 +00:00
Mustafa Gezen	29418e06fe	Update Contributors	2021-06-17 02:03:44 +00:00
Mustafa Gezen	4b3696a431	Add Leadership	2021-06-17 02:02:52 +00:00
Mustafa Gezen	f9d10a3afb	Update Contributors	2021-06-17 01:45:50 +00:00
Mustafa Gezen	0caafa9219	Use @stack's real name	2021-06-17 01:43:54 +00:00
nazunalika	3fc52cd8f8	fix stuff	2021-06-16 17:12:37 -07:00
nazunalika	88a23d3f9f	change to https	2021-06-05 08:47:07 -07:00
nazunalika	24f58fde6e	update	2021-05-27 22:29:55 -07:00
nazunalika	06fcb090a1	minor fixes	2021-05-26 08:38:21 -07:00
nazunalika	0ae0905607	minor fixes	2021-05-26 08:33:36 -07:00
nazunalika	c4e38a8f96	minor fixes	2021-05-26 08:09:34 -07:00
nazunalika	410d66c391	spelling fixes	2021-05-26 02:29:34 -07:00
nazunalika	88f73f277b	fix macro	2021-05-25 20:23:29 -07:00
nazunalika	9368249786	fix .gitignore	2021-05-25 20:14:20 -07:00
nazunalika	f911d94c3c	update to -20	2021-05-25 20:07:44 -07:00
nazunalika	838362dcd3	fix up os-release	2021-05-24 18:47:13 -07:00
nazunalika	0f7145463c	remove erroneous line	2021-05-24 18:30:32 -07:00
nazunalika	3637189091	change license	2021-05-24 18:23:37 -07:00
nazunalika	b39e095544	add version code	2021-05-24 17:36:03 -07:00
nazunalika	af9ad915ca	add version codename	2021-05-24 15:19:45 -07:00
nazunalika	f00a793023	remove annoying banner	2021-05-19 17:06:30 -07:00
nazunalika	c7d6108dbd	fix up sources url	2021-05-16 07:49:34 -07:00
nazunalika	bca884c4c0	fix EULA	2021-05-11 16:08:22 -07:00
nazunalika	c6f017646c	update license	2021-05-10 09:48:29 -07:00