add aarch64

This commit can be reverted if not used for 9.1

README.md

@@ -1,37 +1,32 @@
-Release package - All PR's should be against original/rpms/rocky-release
+Release package - All PR's should be against staging/src/rocky-release
 
 ## Notes for Packagers/Builders
 
-This package produces multiple variants of `rocky-release`:
+This package can produce multiple variants of `rocky-release`:
 
 * Stable: `rocky-release`, `rocky-repos`, `rocky-gpg-keys`, etc
 * LookAhead: All packages appended with `-lookahead`
-* Beta: All packages appended with `-Beta`
+* Beta: All packages appended with `-beta`
 
-* If `rllh` or `rlbeta` are set to a number higher than 0, those variants are built
-* If `rllh` and `rlbeta` are set at the same time higher than 0, build will fail.
+* If `--with=rllookahead` or `--with=rlbeta` are set in mock, those variants are built
+* If both are set the same time, build will fail
 
-When `rllh` is set  the minor version will typically be `y+1`. So if the current
+When `--with=rllookahead` is set the minor version will typically be `y+1`. So if the current
 stable is `X.0`, the next would be `X.1`.
 
-For pre-releases/beta, both packages should produce `X.0` until changed in the spec.
+For pre-releases/beta, both packages should produce `X.Y` until changed in the spec.
 
-The `rllh` macro may be versioned out for future use.
+The `rllh` macro may be versioned out for future use. It does not have to be explicitly set.
 
 A `rllh_minor` macro may be introduced in the future.
 
 ### How does this benefit us?
 
-It allows us to track future minor releases from Stream and see how it will
-affect us going forward. When a minor release is being branched, the "lookahead"
-files can just be copied and a new "stable" release is made in preparation. The
-beta of each RHEL tends to stick around for a month before a release is done,
-which makes it easier to make sure everything "stays in line" for the most part.
-
-### What about after the five year mark?
-
-LookAhead will no longer be produced as the major version will then be in
-maintenance only mode.
+It provides an opportunity to do self testing of various kinds. In most cases,
+a rocky-release package for the upcoming minor release will be built normally
+and doesn't require the variant release packages. However, the option is at
+least available for those who want to test something in particular and override
+the default rocky-release packages.
 
 ### What is the rloverride macro?
 

SOURCES/85-display-manager.preset

@@ -9,3 +9,4 @@ enable lxdm.service
 enable sddm.service
 enable kdm.service
 enable xdm.service
+

SOURCES/85-display-manager.preset.lh

@@ -9,3 +9,4 @@ enable lxdm.service
 enable sddm.service
 enable kdm.service
 enable xdm.service
+

SOURCES/90-default-user.preset

@@ -20,3 +20,6 @@ enable pipewire-media-session.service
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=2022717
 enable wireplumber.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2181984
+enable obex.service

SOURCES/90-default-user.preset.lh

@@ -17,5 +17,7 @@ enable pipewire-pulse.socket
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1976006
 enable pipewire-media-session.service
+
 # https://bugzilla.redhat.com/show_bug.cgi?id=2022717
 enable wireplumber.service
+

SOURCES/90-default.preset

@@ -37,17 +37,46 @@ enable ladvd.service
 # autostart, but shutdown after 2 mins and socket activated thereafter
 enable virtqemud.service
 
-# Compatibility with libvirtd sockets for old clients and expose TCP sockets
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
 enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
 
 # Secondary drivers providing supporting functionality to main virtualization
-# drivers, socket activated only when required
+# drivers (socket activated only when required)
 enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
 enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
 enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
 enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
 enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
 enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
 
 # Storage
 enable multipathd.service
@@ -213,9 +242,20 @@ enable greenboot-status.service
 enable greenboot-task-runner.service
 enable redboot-auto-reboot.service
 enable redboot-task-runner.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2108625
+enable greenboot-service-monitor.service
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=2013299
 enable low-memory-monitor.service
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=2049627
 enable switcheroo-control.service
+
+# Enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2106811
+enable clevis-luks-askpass.path
+
+# Enable  kernel-bootcfg-boot-successful.service
+# RHEL-21816
+enable kernel-bootcfg-boot-successful.service
+

SOURCES/90-default.preset.lh

@@ -37,17 +37,46 @@ enable ladvd.service
 # autostart, but shutdown after 2 mins and socket activated thereafter
 enable virtqemud.service
 
-# Compatibility with libvirtd sockets for old clients and expose TCP sockets
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
 enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
 
 # Secondary drivers providing supporting functionality to main virtualization
-# drivers, socket activated only when required
+# drivers (socket activated only when required)
 enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
 enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
 enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
 enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
 enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
 enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
 
 # Storage
 enable multipathd.service
@@ -199,6 +228,10 @@ enable iscsid.socket
 enable iscsiuio.socket
 enable iscsi-onboot.service
 
+# Enable logrotate.timer
+# https://bugzilla.redhat.com/show_bug.cgi?id=1977865
+enable logrotate.timer
+
 # Enable greenboot
 # https://bugzilla.redhat.com/show_bug.cgi?id=2005552
 enable greenboot-grub2-set-counter.service
@@ -209,6 +242,16 @@ enable greenboot-status.service
 enable greenboot-task-runner.service
 enable redboot-auto-reboot.service
 enable redboot-task-runner.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2108625
+enable greenboot-service-monitor.service
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=2013299
 enable low-memory-monitor.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2049627
+enable switcheroo-control.service
+
+# Enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2106811
+enable clevis-luks-askpass.path
+

SOURCES/Contributors

@@ -9,7 +9,9 @@ examples of this.
 
 The outpouring support from the community and the amount of people who to
 together to support us, we want to thank you for believing in us and giving us
-a chance. Thank you.
+a chance. And as always, we hope you enjoy this release.
+
+Thank you.
 
 # Special Recognition #
   Mustafa Gezen
@@ -26,6 +28,11 @@ a chance. Thank you.
   Trevor Cooper
   Chris Stackpole
   Steven Spencer
+  Alan Marshall (@alangm)
+  Lukas Magauer
+  Al Bowles (@raktajino)
+  Peter Ajamian (@pj)
+  Scott Shinn
 
 # Rocky Linux Teams and Operations #
 
@@ -37,9 +44,6 @@ Infrastructure and Operations:
   Taylor Goodwill
   Neil Hanlon
   Louis Abel
-  Randolh (@meltro)
-  Patric Roberts
-  Chris Cowley
   Mustafa Gezen
 
 Release Engineering/Core:
@@ -53,14 +57,18 @@ Release Engineering/Core:
 
 Security:
   Rob Felsburg
-  Benjamin Agner
+  Scott Shinn
 
 Documentation:
   Wale Soyinka
 
 Web/Design:
+  Gabriel Graves
   Michael Kinder
 
 Testing:
-  Trevor Cooper
   Chris Stackpole
+  Trevor Cooper
+  Lukas Magauer
+  Alan Marshall (@alangm)
+  Al Bowles (@raktajino)

SOURCES/RPM-GPG-KEY-Rocky-9

@@ -1,29 +1,31 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: resf.keykeeper.v1
+Comment: Keykeeper
 
-mQINBGAof3sBEAC50QnXSLxhE+n0gZkX5d5zyBO+SyblfEye9KGf/nMFRu0nPnhO
-y0WlkP40fg2di9iKlTtvIWJfxs2+7PqA9wcU4vnXJpF5MIGurmDKRhBG07v8zMCg
-aU99c9SWQ+76FvomoVzdfj5sSYHfcqD7gRm6VeUlmVv1twqXBm9bfIIF/skXBS9Y
-Gld1py9zSzWgjkT2fUukV9P9FaUuWu6Sbz4wD/Gr+zaSbobonH7zcQjAMbNuJgD1
-diRL7kS+K8QPEPN94IrWJyFegjRzed0e6FAAHqx2Qlrd/09/Tvlxi+yr7A+FpkjF
-41LWg58MZ78letMqgLJI84Ui5ZqUUNJlOF2likQo85yIUV4shlKSgrVd1xC76pxm
-yLWPxcluyS9AdD1tNqW+vIAcQX7V6WY0Pg4A7rAqi+hhXLNwuckPoOGWkkcMIfXH
-ykHsNp9S7YFqi5QdNaw5NciVHIJWXfgDTyGHf+IPNe5HKZJHU+HAmdoPAO7dSWyZ
-tUDLNog+ssvoIcLz8ZzODS2WO9DsiJ0U7qZen+erto+fri17fHi3mRXGApnAWoBM
-1eTWbXk3xV2q4Xcst9buCAWWoX1G7XYtjAKNLJ6w6HoN4nN+yyot6fNdd8nLEXCR
-huPM1gtRqUj6qpTxcUqSRsyb7wE34N+XO1OE9WUJMDauJLhllYhZqbRBSwARAQAB
-tDNSZWxlYXNlIEVuZ2luZWVyaW5nIDxpbmZyYXN0cnVjdHVyZUByb2NreWxpbnV4
-Lm9yZz6JAk4EEwEIADgWIQQJGkQEfD2LejMfXhhUieQru+LBCAUCYCh/ewIbDwUL
-CQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBUieQru+LBCMVvD/0cJzEtybgN7hPW
-ZHwOVmc0ovgHHpsKJJjY6XpmEqTbPhGiq7ZklxMweHh3MBWymcGaJJZH+8HIwGfD
-m1DrhllJ4ddSz4y27fqbwfuRLx4BexwanxHN2jfp1q2E8KhAbtJYuZHEsChZHGI7
-JCbKYr3h0wat2GSZ9oM2Bc79hoJ73h73nXKLQrGwkRP52RxJA23sSwJp408tPi++
-3kaScIF9Ji+jkXIgX9yCzrBAxmn4r0qOO8x/F/m1xDmLVwRdvKBNvtA9xOH4tQco
-rGu11sDvB6WdlNYyA2yFjbHBPexTBLLovNq45jT7o6DkZyj1ej7D5xXfE7nOA1KF
-sGxoT0Xo1GekIkF17A3EPl8ijw3PJcfF99s+NFE5z9PK5V2nRSelv3AfiL89iIZG
-wcCqRijg/DxWQPNP952wow1MRWZKd6cSFejS+sKYJueH9IVkxxIPr0YRQQi3BD6I
-93Fug8dTLWE6QSIOlrMcvXQZhty57b0WEOzVRLF8j46KOqEN4w3CrrJ3iFKR2ksX
-YeK0Lz+Zm6gVmEgADkLHamQxEU8KQLsLhYh42/qbBicBXjQ7Zt6Y4Y48cUzThfaK
-p0Iy+QGxbC0LMpmnx8arnOh0QLxGkEnCNggoupQI3ql+QYoUA+k0FUlv3lHC1vY8
-sdkkxYa8srjZAmmaO+RoMqB1P38URg==
-=kXX3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==
+=PzIf
 -----END PGP PUBLIC KEY BLOCK-----

SOURCES/RPM-GPG-KEY-Rocky-9-Testing

@@ -0,0 +1,52 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=/Z/i
+-----END PGP PUBLIC KEY BLOCK-----

SOURCES/RPM-GPG-KEY-rockytesting

@@ -1,29 +0,0 @@
------BEGIN PGP PUBLIC KEY BLOCK-----
-
-mQINBGAof3sBEAC50QnXSLxhE+n0gZkX5d5zyBO+SyblfEye9KGf/nMFRu0nPnhO
-y0WlkP40fg2di9iKlTtvIWJfxs2+7PqA9wcU4vnXJpF5MIGurmDKRhBG07v8zMCg
-aU99c9SWQ+76FvomoVzdfj5sSYHfcqD7gRm6VeUlmVv1twqXBm9bfIIF/skXBS9Y
-Gld1py9zSzWgjkT2fUukV9P9FaUuWu6Sbz4wD/Gr+zaSbobonH7zcQjAMbNuJgD1
-diRL7kS+K8QPEPN94IrWJyFegjRzed0e6FAAHqx2Qlrd/09/Tvlxi+yr7A+FpkjF
-41LWg58MZ78letMqgLJI84Ui5ZqUUNJlOF2likQo85yIUV4shlKSgrVd1xC76pxm
-yLWPxcluyS9AdD1tNqW+vIAcQX7V6WY0Pg4A7rAqi+hhXLNwuckPoOGWkkcMIfXH
-ykHsNp9S7YFqi5QdNaw5NciVHIJWXfgDTyGHf+IPNe5HKZJHU+HAmdoPAO7dSWyZ
-tUDLNog+ssvoIcLz8ZzODS2WO9DsiJ0U7qZen+erto+fri17fHi3mRXGApnAWoBM
-1eTWbXk3xV2q4Xcst9buCAWWoX1G7XYtjAKNLJ6w6HoN4nN+yyot6fNdd8nLEXCR
-huPM1gtRqUj6qpTxcUqSRsyb7wE34N+XO1OE9WUJMDauJLhllYhZqbRBSwARAQAB
-tDNSZWxlYXNlIEVuZ2luZWVyaW5nIDxpbmZyYXN0cnVjdHVyZUByb2NreWxpbnV4
-Lm9yZz6JAk4EEwEIADgWIQQJGkQEfD2LejMfXhhUieQru+LBCAUCYCh/ewIbDwUL
-CQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBUieQru+LBCMVvD/0cJzEtybgN7hPW
-ZHwOVmc0ovgHHpsKJJjY6XpmEqTbPhGiq7ZklxMweHh3MBWymcGaJJZH+8HIwGfD
-m1DrhllJ4ddSz4y27fqbwfuRLx4BexwanxHN2jfp1q2E8KhAbtJYuZHEsChZHGI7
-JCbKYr3h0wat2GSZ9oM2Bc79hoJ73h73nXKLQrGwkRP52RxJA23sSwJp408tPi++
-3kaScIF9Ji+jkXIgX9yCzrBAxmn4r0qOO8x/F/m1xDmLVwRdvKBNvtA9xOH4tQco
-rGu11sDvB6WdlNYyA2yFjbHBPexTBLLovNq45jT7o6DkZyj1ej7D5xXfE7nOA1KF
-sGxoT0Xo1GekIkF17A3EPl8ijw3PJcfF99s+NFE5z9PK5V2nRSelv3AfiL89iIZG
-wcCqRijg/DxWQPNP952wow1MRWZKd6cSFejS+sKYJueH9IVkxxIPr0YRQQi3BD6I
-93Fug8dTLWE6QSIOlrMcvXQZhty57b0WEOzVRLF8j46KOqEN4w3CrrJ3iFKR2ksX
-YeK0Lz+Zm6gVmEgADkLHamQxEU8KQLsLhYh42/qbBicBXjQ7Zt6Y4Y48cUzThfaK
-p0Iy+QGxbC0LMpmnx8arnOh0QLxGkEnCNggoupQI3ql+QYoUA+k0FUlv3lHC1vY8
-sdkkxYa8srjZAmmaO+RoMqB1P38URg==
-=kXX3
------END PGP PUBLIC KEY BLOCK-----

SOURCES/rocky-addons.repo

@@ -10,18 +10,18 @@
 
 [highavailability]
 name=Rocky Linux $releasever - High Availability
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[highavailability-debug]
+[highavailability-debuginfo]
 name=Rocky Linux $releasever - High Availability - Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=HighAvailability-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -29,8 +29,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [highavailability-source]
 name=Rocky Linux $releasever - High Availability - Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=HighAvailability-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=HighAvailability-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/HighAvailability/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -38,18 +38,18 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [resilientstorage]
 name=Rocky Linux $releasever - Resilient Storage
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[resilientstorage-debug]
+[resilientstorage-debuginfo]
 name=Rocky Linux $releasever - Resilient Storage - Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=ResilientStorage-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -57,8 +57,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [resilientstorage-source]
 name=Rocky Linux $releasever - Resilient Storage - Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=ResilientStorage-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=ResilientStorage-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/ResilientStorage/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -66,18 +66,18 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [nfv]
 name=Rocky Linux $releasever - NFV
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NFV-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[nfv-debug]
+[nfv-debuginfo]
 name=Rocky Linux $releasever - NFV Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -85,8 +85,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [nfv-source]
 name=Rocky Linux $releasever - NFV Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NFV/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -94,18 +94,18 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [rt]
 name=Rocky Linux $releasever - Realtime
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[rt-debug]
+[rt-debuginfo]
 name=Rocky Linux $releasever - Realtime Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -113,10 +113,65 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [rt-source]
 name=Rocky Linux $releasever - Realtime Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=RT-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/RT/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
+[sap]
+name=Rocky Linux $releasever - SAP
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[sap-debuginfo]
+name=Rocky Linux $releasever - SAP Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[sap-source]
+name=Rocky Linux $releasever - SAP Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAP-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAP/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[saphana]
+name=Rocky Linux $releasever - SAPHANA
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/os/
+gpgcheck=1
+enabled=0
+countme=1
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[saphana-debuginfo]
+name=Rocky Linux $releasever - SAPHANA Debug
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[saphana-source]
+name=Rocky Linux $releasever - SAPHANA Source
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=SAPHANA-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/SAPHANA/source/tree/
+gpgcheck=1
+enabled=0
+metadata_expire=6h
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9

SOURCES/rocky-devel.repo

@@ -3,18 +3,27 @@
 # devel and no-package-left-behind
 
 [devel]
-name=Rocky Linux $releasever - Devel WARNING! FOR BUILDROOT ONLY
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=Devel-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/Devel/$basearch/os/
+name=Rocky Linux $releasever - Devel WARNING! FOR BUILDROOT ONLY DO NOT LEAVE ENABLED
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=devel-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/devel/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[nplb]
-name=Rocky Linux $releasever - NPLB - WARNING! DO NOT LEAVE PERMANENTLY ENABLED
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=NPLB-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/NPLB/$basearch/os/
+[devel-debuginfo]
+name=Rocky Linux $releasever - Devel Debug WARNING! FOR BUILDROOT ONLY DO NOT LEAVE ENABLED
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=devel-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/devel/$basearch/debug/tree/
+gpgcheck=1
+enabled=0
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
+
+[devel-source]
+name=Rocky Linux $releasever - Devel Source WARNING! FOR BUILDROOT ONLY DO NOT LEAVE ENABLED
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=devel-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/devel/source/tree/
 gpgcheck=1
 enabled=0
 countme=1

SOURCES/rocky-driver.cer

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

SOURCES/rocky-extras.repo

@@ -10,18 +10,18 @@
 
 [extras]
 name=Rocky Linux $releasever - Extras
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/os/
 gpgcheck=1
 enabled=1
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[extras-debug]
+[extras-debuginfo]
 name=Rocky Linux $releasever - Extras Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -29,8 +29,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [extras-source]
 name=Rocky Linux $releasever - Extras Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=extras-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/extras/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -38,18 +38,18 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [plus]
 name=Rocky Linux $releasever - Plus
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=plus-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[plus-debug]
+[plus-debuginfo]
 name=Rocky Linux $releasever - Plus - Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=rockyplus-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=plus-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -57,8 +57,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [plus-source]
 name=Rocky Linux $releasever - Plus - Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=rockyplus-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=plus-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/plus/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h

SOURCES/rocky-fwupd-aarch64.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-fwupd.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-grub2-aarch64.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-grub2.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-kernel-aarch64.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-kernel.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-kpatch.cer

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

SOURCES/rocky-shim-aarch64.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFKTCCBBGgAwIBAgIBMDANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgeAxCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMTQwMgYDVQQDDCtSb2NreSBMaW51
+eCBTaGltIFNpZ25pbmcgQ2VydCAxMDEgKGFhcmNoNjQpMSYwJAYJKoZIhvcNAQkB
+FhdzZWN1cml0eUByb2NreWxpbnV4Lm9yZzCCAaIwDQYJKoZIhvcNAQEBBQADggGP
+ADCCAYoCggGBALYM2+8vZV140eUOVe9UsFJHOuOEEgkrW2BS3sZdz37odVmjc3Eo
+edFm6cBX5HPMK+VxIWaPecq3IRe+tqQ2G/6Db1ey6dkom7Iwbwz4OWALkefAuYLe
+TY6977GSR1R66pe5vn895JOJAI5XNrL62HTc3ZqO0zwXtE2RxHPpiSH6+xcKk3An
+p60kOdXwWbJ6iF4MfM1LF0hJS6Ek2N2phOhynu+3ZdS0QrMJ5nv/2ZImEkagD7hZ
+zW6v4SgQMCIXpN6NKuXj2COr5KfBu6Svb8xsM5Tvd0zp1hy0zqSIuQzy7LsB721R
+wisPIojFUio9lnIpR3rxoXVKqSM3ykQLkks5VQEB3OeUYSFNQSCa3vfEsgaI8XoU
+x/93sxO43pA/vEcUWO0QruLU3xCrCszeKUDq8atWNU5b9zkOU/8TGL68x3qJRDCH
+/VHTi7zwN6hHXNAyIOYoYuh/GCrM01m3uAPFsO1kC/GYOb9Q7UYl+tiwvsR5vcSj
++Sw9JG2aWt8k3QIDAQABo3gwdjAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIH
+gDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUa3HUBPuh4jlfrs2h
+SmL1hvtFsZkwHwYDVR0jBBgwFoAUTCxr19ZO6BWByrjphmYfZeIWb8QwDQYJKoZI
+hvcNAQELBQADggEBAEVhORwlgabFhLLOChBW9JbYvx4rSmI9LBgx3Pn31PSXcR3s
+Inr6THc8ThXQIAjboQYLYFt/xSWl7XbN7MuAY/XBWyRAXJf/nw/y8fJ8cSxjHK22
+V/3Dv/3vAv3cASyNkKZ+GqjrGj9e6M1NVZHGCF5VLLK44Jnxmd/ka9CqspkfUHRT
+9VOm6XJmXRX7bxm2j/6e2l8WKtmAnHsvLrJEn40xkVmR3/B+r85v2wo56K9VIuZl
+LhAgB+uZCTCSWjdmMLHUbjIXNg/zhoROxWWwrWc7en0clEGEozNGNtiNnolQ5A9E
+AcUx20NJSeFEyVMIZvaZnUnFt13LIVi8myPGC1U=
+-----END CERTIFICATE-----

SOURCES/rocky-shim.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFHzCCBAegAwIBAgIBJzANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgdYxCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMSowKAYDVQQDDCFSb2NreSBMaW51
+eCBTaGltIFNpZ25pbmcgQ2VydCAxMDExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5
+QHJvY2t5bGludXgub3JnMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA
+va6fzVp5Q9FPmdgpPkwoPxz/x6TalOz4xkBdL5OTEr3nJKG6HUWXEb22pTh9GVmU
+lq6EsdZd5KFHsAy00UTSgTwDD35ZxPDg4yevGRy5ArMY6xABST1QCyC9UdRU0pHo
+ORPZns/ycfvqOLmJ/4hQrS6O21Fexki29ruJe8bMUN/YcqrB6rcFH67U2HwZvihQ
+VquQFM6e7Ma1vQHKsM3Oo9Rl26TmDM6/D835QxlZzaBbXd+Pk4kpP7+wUHKYMUQb
+fDBd5/a4UHFM0hfc6qhBOFYWH1PqK2DKMCHr1Ba5H038XkruJnfX9V1u4LJLOwHc
+UdsWOE3Ab0Rp+cULz/aV18TgwAVs+vH9KWlERjwrP60wpbwxZ5gRUKJedctDcuA9
+nF4K28eH23wVZpANo95Rv9IVcqytchDK+gA89Dy36rkmrsxvvcPkTrenW9S03Ntw
+gtzxoA8mtPfp2lE9DbhShEIQKIhI6V2BJot5u2eW1aLrZy0P19HOdSDOYqAR96ON
+AgMBAAGjeDB2MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgeAMBYGA1UdJQEB
+/wQMMAoGCCsGAQUFBwMDMB0GA1UdDgQWBBS4omfxIr1D2Pa//WSUx7Q5Rlm8SjAf
+BgNVHSMEGDAWgBRMLGvX1k7oFYHKuOmGZh9l4hZvxDANBgkqhkiG9w0BAQsFAAOC
+AQEAnwZ5nUPznkuqwk4zHxHR9OVdb8FD5QSjneTyG2IpxnFNNF5gu9aitFDDyNuO
+2DX36yhgNEBTXJwnmHiQxTS/0iKTQx/9hGFxulKdLeQsYM3c7ukfKX6v5nM3UMs1
+zJfyQnCYN6Fzz1A+ZIBSXY8ITJ45FXWkLCV0gqLyEGn+l5HIrb1iBsO2QgIiT284
+x1GIJFqGy300QSS417RduD4Px72zEca3UCmBwbw0u27hcUBgk2KgtgGWqALUxQpv
+o4gCGpGKCaOJvx18fF/+RgDQ+901oz3rNPV+R4VmdNaRquK4p6urmPvBM2D4c1aZ
+X3pnKWGKQ7b/ApjdEqVhzbX2eQ==
+-----END CERTIFICATE-----

SOURCES/rocky-uki-virt-aarch64.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFNDCCBBygAwIBAgIBMTANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgesxCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMT8wPQYDVQQDDDZSb2NreSBMaW51
+eCBLZXJuZWwgVUtJIFZpcnQgU2lnbmluZyBDZXJ0IDEwMSAoYWFyY2g2NCkxJjAk
+BgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGludXgub3JnMIIBojANBgkqhkiG
+9w0BAQEFAAOCAY8AMIIBigKCAYEA39mQSRAK5Hx7W3vZZLAYk5HU0ndNjBFc5wOO
+/nGqhebYyapiZi8jIH8voYLNpOgwz/futiBUmq0rhOXhIuHcb6CDYdvzGqleNyiK
+lxHbHlusxLd25V49R2WxhvxEPg7gORTJYJ/dUMe5yFDm8MfGt3ghgFHJNxDgcL53
+1L3B4mz3VAjHFpcnC8TD8dR+4AQ9CAXJHVBh/xF3aZfrE1EKytfsoL0TygvIu3eb
+9aNW+dAxWscjLTRNRi2AS/Ge4tHT8BQBpqMVNFcmnO0Uh+D+0qoZuA9pvsLGRITx
+rEUUdpR0DSw8eITsdWkqy3f5OBMbbxvCaftS8mUDLfsaQsBY+uqblmebnn6iPYnf
+Ugcjq2F/koNjK6XDn8jBuBBQEBtZz+YZvo1Hx50K11D4HDFI3C2tLe85oHJltHQW
+8BHAPhi+MK6le+lXRgrRRnHyrXYh3JDlKhHnJHb/PBUzW/QRo6JgPsf0/gr/hZdc
+7eJluu0mK5hlRyzhKREzjGoktO/HAgMBAAGjeDB2MAwGA1UdEwEB/wQCMAAwDgYD
+VR0PAQH/BAQDAgeAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMDMB0GA1UdDgQWBBRt
+qyi+aBN/wr824eS4zAMnl5RDITAfBgNVHSMEGDAWgBRMLGvX1k7oFYHKuOmGZh9l
+4hZvxDANBgkqhkiG9w0BAQsFAAOCAQEAJgklRL/uHuKv+2Ys8HpF1/JV0wZg4mYe
+Pt/wUkAdMh7gnb7FznVZXnZTZIvOKaYtDOZSXXZ2PLp4UNjO89MSo3TVzWNpQRJX
+C4pOb0PcUTZvX1yx9UuLenR+YvqMd/cCC1Y/2YCnHfjsSeZ1hoAGWF1ulm9+dh3c
+k00DzT9joVIcugQMTe5ZZAPmABUm3ZflEELe1oACBegx8n5calo5u2SrDFVdgbY2
+/dgqLme7E+r1FWZSrq++y7eBKljxa1mVk/vj41ewTMB+QS958aUziFfSsXcxfu1d
+7pX3zJNMXX3cBpBmTymzTKrxAjoJjkiMUejjVEEb9vLEeNPcuv9lPg==
+-----END CERTIFICATE-----

SOURCES/rocky-uki-virt.cer

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFKjCCBBKgAwIBAgIBKDANBgkqhkiG9w0BAQsFADCB1DELMAkGA1UEBhMCVVMx
+ETAPBgNVBAgMCERlbGF3YXJlMQ4wDAYDVQQHDAVEb3ZlcjEtMCsGA1UECgwkUm9j
+a3kgRW50ZXJwcmlzZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMSEwHwYDVQQLDBhSZWxl
+YXNlIGVuZ2luZWVyaW5nIHRlYW0xKDAmBgNVBAMMH1JvY2t5IExpbnV4IFNlY3Vy
+ZSBCb290IFJvb3QgQ0ExJjAkBgkqhkiG9w0BCQEWF3NlY3VyaXR5QHJvY2t5bGlu
+dXgub3JnMB4XDTI0MDQwNDAwMzM0OVoXDTI1MDQwNDAwMzM0OVowgeExCzAJBgNV
+BAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwFRG92ZXIxLTArBgNV
+BAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRhdGlvbjEhMB8GA1UE
+CwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMTUwMwYDVQQDDCxSb2NreSBMaW51
+eCBLZXJuZWwgVUtJIFZpcnQgU2lnbmluZyBDZXJ0IDEwMTEmMCQGCSqGSIb3DQEJ
+ARYXc2VjdXJpdHlAcm9ja3lsaW51eC5vcmcwggGiMA0GCSqGSIb3DQEBAQUAA4IB
+jwAwggGKAoIBgQCYcWhdh7NL9544cuh1Q1htAJSV/Rpdub5H49LUJ+WwZV146Fqy
+WXuhebONhweQzx9puAfHBWiRaJoUbC36NlaxtCFaERkHzuT37ix74XPD/dZ7lx/W
+dUnKsetM8CmKe8JylrMZ6bPP2rf8Gh6q6l5LbPXjPBVy/3HQOvplLnkrMLjIgScE
+pX79GPoaPAhUJX7CiicVFlODIgxcJTAP4PptbyK1cuIgWdkZ61AlzhijJZiweW3M
++jEA8s+sMF69i5t8qWbVf2JIHWVwBDMxB+I7L9xGQoU3qF/GCZqo3PA4/b3zCTEv
+aNppguh70W8A+QA0F7HhnT7ttli7kwHEl54AzcY7I5NRY5ED3900F+sPTLkpAvo7
+VZtXp6QPs1hWy1dyXQ48B6c/0xbQzyexeY14OsClmv/ChcIMmfgt49gJFO2ysX7c
+e9bjkT09Ryjh3rlH+Ie0Up2jvxMgKGTJBLYZodDGt4zJCGE0KNn9GeD9iJdhk8BC
+hNvRtZNHdi/HKvsCAwEAAaN4MHYwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMC
+B4AwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwMwHQYDVR0OBBYEFCclQGSNKr6AYGbK
+Uo55uZth91R8MB8GA1UdIwQYMBaAFEwsa9fWTugVgcq46YZmH2XiFm/EMA0GCSqG
+SIb3DQEBCwUAA4IBAQDh/XDvuO/1nUI+mZASY8YrFAf2VdsJ+sa51EQptNu4Yo2C
+nC1TNHIrcCtN4HqetYxWnf2MTWx+MD8DHws7sgQwm0jbfE4EjTcfBpVUrglVL+f6
+sX6nWVm5tRuFzClE0BNENGEcfM32w6PZKOqOJf3/nCOchpPJFKaVT4KVOy2YODFB
+3ewovXlXTc5PGcJg3HNEACcbCjDFqsKWBWvgYU49NdBXbD4NmajJNdm7QWkG8/38
+9Z2BxFkLo9kSca69fvEd6zJbMDoe4QJbsgUYk3WHz1a3t6D0llkVyEtI2gvLA5Wn
+7C2Ri5Lw6wme+qEqyMwzg5RbtvV8TEZQr1cseKH+
+-----END CERTIFICATE-----

SOURCES/rocky.repo

@@ -10,18 +10,18 @@
 
 [baseos]
 name=Rocky Linux $releasever - BaseOS
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/os/
 gpgcheck=1
 enabled=1
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[baseos-debug]
+[baseos-debuginfo]
 name=Rocky Linux $releasever - BaseOS - Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=BaseOS-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -29,8 +29,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [baseos-source]
 name=Rocky Linux $releasever - BaseOS - Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=BaseOS-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=BaseOS-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/BaseOS/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -38,18 +38,18 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [appstream]
 name=Rocky Linux $releasever - AppStream
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/
 gpgcheck=1
 enabled=1
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[appstream-debug]
+[appstream-debuginfo]
 name=Rocky Linux $releasever - AppStream - Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -57,8 +57,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [appstream-source]
 name=Rocky Linux $releasever - AppStream - Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=AppStream-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=AppStream-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -66,18 +66,18 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [crb]
 name=Rocky Linux $releasever - CRB
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/os/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/os/
 gpgcheck=1
 enabled=0
 countme=1
 metadata_expire=6h
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
-[crb-debug]
+[crb-debuginfo]
 name=Rocky Linux $releasever - CRB - Debug
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever-debug&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/debug/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=CRB-$releasever-debug$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/$basearch/debug/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h
@@ -85,8 +85,8 @@ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
 
 [crb-source]
 name=Rocky Linux $releasever - CRB - Source
-#mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=CRB-$releasever-source&rltype=$rltype
-baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/source/tree/
+mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=source&repo=CRB-$releasever-source$rltype
+#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/CRB/source/tree/
 gpgcheck=1
 enabled=0
 metadata_expire=6h

SPECS/rocky-release.spec

@@ -1,8 +1,12 @@
 # Note to packagers/builders:
 #
-# If you wish to build the LookAhead variant of this package, ensure that the
-# rllh macro is set either in your build or in the build system. Please see
-# the git repository readme for more information.
+# If you wish to build the LookAhead or Beta variant of this package, make sure
+# that you are setting --with=rlbeta or --with=rllookahead on your mock
+# command. See the README for more information.
+
+%bcond_with rlbeta
+%bcond_with rllookahead
+%bcond_with rloverride
 
 %define debug_package %{nil}
 
@@ -13,25 +17,33 @@
 
 # Distribution Name and Version
 %define distro_name  Rocky Linux
+%define distro       %{distro_name}
 %define distro_code  Blue Onyx
 %define major        9
-%define minor        0
-%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.10}
+%define minor        4
+%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.5}
 %define rpm_license  BSD-3-Clause
 %define dist         .el%{major}
+%define home_url     https://rockylinux.org/
+%define bug_url      https://bugs.rockylinux.org/
+%define debug_url    https://debuginfod.rockylinux.org/
+%define dist_vendor  RESF
 
 %define contentdir   pub/rocky
-%define rltype       stable
+%define sigcontent   pub/sig
+%define rlosid       rocky
+
+%define os_bug_name  Rocky-Linux-%{major}
+%define support_end  2032-05-31
 
 ################################################################################
 # Rocky LookAhead Section
 #
 # Reset defines for LookAhead variant. Default is stable if 0 or undefined.
-%if 0%{?rllh}
-%define minor        0
+%if %{with rllookahead}
+%define minor        4
 %define contentdir   pub/rocky-lh
-%define rltype       lookahead
-%define rlpkg        -lookahead
+%define rltype       -lookahead
 %define rlstatement  LookAhead
 %endif
 # End Rocky LookAhead Section
@@ -42,10 +54,9 @@
 #
 # Reset defines for Beta variant. Default is stable if 0 or undefined.
 # We do NOT override the minor version number here.
-%if 0%{?rlbeta}
+%if %{with rlbeta}
 %define contentdir   pub/rocky-beta
-%define rltype       beta
-%define rlpkg        -beta
+%define rltype       -beta
 %define rlstatement  Beta
 %endif
 # End Rocky Beta Section
@@ -57,8 +68,9 @@
 # Resets only the dist tag for the override package. All this does is ensure
 # that only the rhel macros and settings are provided - This is useful in the
 # case of a build that cannot be properly debranded (eg dotnet).
-%if 0%{?rloverride}
+%if %{with rloverride}
 %define dist         .el%{major}.override
+%define rlosid       rhel
 %endif
 # End Rocky Override Section
 ################################################################################
@@ -76,7 +88,7 @@
 
 # conditional section for future use
 
-Name:           rocky-release%{?rlpkg}
+Name:           rocky-release%{?rltype}
 Version:        %{full_release_version}
 Release:        %{rocky_rel}%{dist}
 Summary:        %{distro_name} release files
@@ -108,7 +120,7 @@ Requires:       rocky-repos(%{major})
 
 # GPG Keys (100-199)
 Source101:      RPM-GPG-KEY-Rocky-%{major}
-Source102:      RPM-GPG-KEY-rockytesting
+Source102:      RPM-GPG-KEY-Rocky-%{major}-Testing
 
 # Release Sources (200-499)
 Source200:      EULA
@@ -140,43 +152,76 @@ Source1203:     rocky-devel.repo
 Source1300:     rocky.1.gz
 
 # rocky secureboot certs placeholder (1400-1499)
-Source1400:     rockydup1.x509
-Source1401:     rockykpatch1.x509
-Source1402:     rocky-root-ca.der
-Source1403:     rocky-signing.der
-
+# 1400 is the root
+# 1401-1420 are dedicated to the kernel
+# 1421-1440 is dedicated to x86_64
+# 1441-1460 is dedicated to aarch64
+Source1400:     rocky-root-ca.der
+Source1401:     rockydup1.x509
+Source1402:     rockykpatch1.x509
+Source1403:     rockydup1-aarch64.x509
+Source1404:     rockykpatch1-aarch64.x509
+Source1405:     rocky-nvidiagpuoot101.x509
+Source1406:     rocky-nvidiagpuoot101-aarch64.x509
+# x86_64
+Source1421:     rocky-fwupd.cer
+Source1422:     rocky-grub2.cer
+Source1423:     rocky-kernel.cer
+Source1424:     rocky-shim.cer
+Source1425:     rocky-uki-virt.cer
+# x86_64 in der
+Source1426:     rocky-fwupd.der
+Source1427:     rocky-grub2.der
+Source1428:     rocky-kernel.der
+Source1429:     rocky-shim.der
+Source1430:     rocky-uki-virt.der
+# aarch64
+Source1441:     rocky-fwupd-aarch64.cer
+Source1442:     rocky-grub2-aarch64.cer
+Source1443:     rocky-kernel-aarch64.cer
+Source1444:     rocky-shim-aarch64.cer
+Source1445:     rocky-uki-virt-aarch64.cer
+# aarch64 in der
+Source1446:     rocky-fwupd-aarch64.der
+Source1447:     rocky-grub2-aarch64.der
+Source1448:     rocky-kernel-aarch64.der
+Source1449:     rocky-shim-aarch64.der
+Source1450:     rocky-uki-virt-aarch64.der
+ 
 %description
 %{distro_name} release files.
 
-%package     -n rocky-repos%{?rlpkg}
+%package     -n rocky-repos%{?rltype}
 Summary:        %{distro_name} Package Repositories
 License:        %{rpm_license}
 Provides:       system-repos = %{version}-%{release}
 Provides:       rocky-repos(%{major}) = %{full_release_version}
 Requires:       system-release = %{version}-%{release}
-Requires:       rocky-gpg-keys
+Requires:       rocky-gpg-keys%{?rltype}
 Conflicts:      %{name} < 8.0
 
-%description -n rocky-repos%{?rlpkg}
+%description -n rocky-repos%{?rltype}
 %{distro_name} package repository files for yum/dnf
 
-%package     -n rocky-gpg-keys%{?rlpkg}
+%package     -n rocky-gpg-keys%{?rltype}
 Summary:        Rocky RPM GPG Keys
 Conflicts:      %{name} < 8.0
 
-%description -n rocky-gpg-keys%{?rlpkg}
+%description -n rocky-gpg-keys%{?rltype}
 This package provides the RPM signature keys for Rocky.
 
-%package     -n rocky-sb-certs%{?rlpkg}
+%package     -n rocky-sb-certs%{?rltype}
 Summary:        %{distro_name} public secureboot certificates
 Group:          System Environment/Base
 Provides:       system-sb-certs = %{version}-%{release}
+Provides:       redhat-sb-certs = %{version}-%{release}
+Provides:       centos-sb-certs = %{version}-%{release}
 
-%description -n rocky-sb-certs%{?rlpkg}
+%description -n rocky-sb-certs%{?rltype}
 This package contains the %{distro_name} secureboot public certificates.
 
 %prep
-%if 0%{?rllh} && 0%{?rlbeta}
+%if %{with rllookahead} && %{with rlbeta}
 echo "!! WARNING !!"
 echo "Both LookAhead and Beta were enabled. This is not supported."
 echo "As a result: BUILD FAILED."
@@ -207,7 +252,7 @@ install -d -m 0755 %{buildroot}%{_prefix}/lib
 cat > %{buildroot}%{_prefix}/lib/os-release << EOF
 NAME="%{distro_name}"
 VERSION="%{full_release_version} (%{distro_code})"
-ID="%{?rloverride:rhel}%{!?rloverride:rocky}"
+ID="%{rlosid}"
 ID_LIKE="rhel centos fedora"
 VERSION_ID="%{full_release_version}"
 PLATFORM_ID="platform:el%{major}"
@@ -215,10 +260,11 @@ PRETTY_NAME="%{distro_name} %{full_release_version}%{?rlstatement: %{rlstatement
 ANSI_COLOR="0;32"
 LOGO="fedora-logo-icon"
 CPE_NAME="cpe:/o:rocky:rocky:%{major}::baseos"
-HOME_URL="https://rockylinux.org/"
-BUG_REPORT_URL="https://bugs.rockylinux.org/"
-ROCKY_SUPPORT_PRODUCT="%{distro_name}"
-ROCKY_SUPPORT_PRODUCT_VERSION="%{major}%{?rlstatement:-%{rlstatement}}"
+HOME_URL="%{home_url}"
+BUG_REPORT_URL="%{bug_url}"
+SUPPORT_END="%{support_end}"
+ROCKY_SUPPORT_PRODUCT="%{os_bug_name}"
+ROCKY_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement:-%{rlstatement}}"
 REDHAT_SUPPORT_PRODUCT="%{distro_name}"
 REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement: %{rlstatement}}"
 EOF
@@ -237,8 +283,8 @@ echo >> %{buildroot}%{_sysconfdir}/issue
 mkdir -p %{buildroot}%{_sysconfdir}/issue.d
 
 # set up the dist tag macros
-install -d -m 0755 %{buildroot}%{_sysconfdir}/rpm
-cat > %{buildroot}%{_sysconfdir}/rpm/macros.dist << EOF
+mkdir -p %{buildroot}%{_rpmmacrodir}
+cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
 # dist macros.
 
 %%__bootstrap ~bootstrap
@@ -247,8 +293,14 @@ cat > %{buildroot}%{_sysconfdir}/rpm/macros.dist << EOF
 %%centos_ver %{major}
 %%centos %{major}
 %%rhel %{major}
-%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}.el%{major}%%{?with_bootstrap:%{__bootstrap}}
+%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}.el%{major}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
 %%el%{major} 1
+
+%%dist_vendor         %{dist_vendor}
+%%dist_name           %{distro}
+%%dist_home_url       %{home_url}
+%%dist_bug_report_url %{bug_url}
+%%dist_debuginfod_url %{debug_url}
 EOF
 
 # Data directory
@@ -266,7 +318,7 @@ install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/
 
 install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
 install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
 
 # same behavior for both presets
 install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
@@ -284,41 +336,81 @@ install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
 install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
 
 # Backported certs for now
+## root and kernel
 install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
 install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
-
+install -m 0644 %{SOURCE1404} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1405} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1406} %{buildroot}%{_datadir}/pki/sb-certs/
+## x86_64
+# cer
+install -m 0644 %{SOURCE1421} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1422} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1423} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1424} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1425} %{buildroot}%{_datadir}/pki/sb-certs/
+# der
+install -m 0644 %{SOURCE1426} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1427} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1428} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1429} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1430} %{buildroot}%{_datadir}/pki/sb-certs/
+## aarch64
+# cer
+install -m 0644 %{SOURCE1441} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1442} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1443} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1444} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1445} %{buildroot}%{_datadir}/pki/sb-certs/
+# der
+install -m 0644 %{SOURCE1446} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1447} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1448} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1449} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1450} %{buildroot}%{_datadir}/pki/sb-certs/
+ 
 # Placeholders
 # x86_64
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
 
 # aarch64
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt-aarch64.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
 
 # ppc64le
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
 
 # armhfp
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-armhfp.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-armhfp.cer
 
 # s390x
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
-ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-kernel.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-grub2.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-fwupd.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-shim.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-shim-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-uki-virt.cer %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
 
 # symlinks for everybody
 for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do
@@ -339,7 +431,9 @@ install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/
 # dnf stuff
 install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
 echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
-echo "%{rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
+echo "%{sigcontent}" > %{buildroot}%{_sysconfdir}/dnf/vars/sigcontentdir
+echo "%{?rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
+echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
 
 # Copy out GPG keys
 install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
@@ -351,10 +445,11 @@ install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
 ################################################################################
 # lookahead overrides
 # TODO: Is there a cleaner way? 
-%if 0%{?rllh}
+%if %{with rllookahead}
 install -m 0644 %{SOURCE400} %{buildroot}/%{_prefix}/lib/systemd/system-preset/85-display-manager.preset
 install -m 0644 %{SOURCE401} %{buildroot}/%{_prefix}/lib/systemd/system-preset/90-default.preset
-install -m 0644 %{SOURCE402} %{buildroot}/%{_prefix}/lib/systemd/system-preset/90-default-user.preset
+install -m 0644 %{SOURCE402} %{buildroot}/%{_prefix}/lib/systemd/user-preset/90-default-user.preset
+
 install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/system-preset/99-default-disable.preset
 install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/user-preset/99-default-disable.preset
 install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
@@ -375,7 +470,7 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
 %config(noreplace) %{_sysconfdir}/issue
 %config(noreplace) %{_sysconfdir}/issue.net
 %dir %{_sysconfdir}/issue.d
-%{_sysconfdir}/rpm/macros.dist
+%{_rpmmacrodir}/macros.dist
 %{_datadir}/redhat-release
 %{_datadir}/rocky-release
 %{_prefix}/lib/os-release
@@ -384,19 +479,21 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
 %{_prefix}/lib/sysctl.d/50-redhat.conf
 %{_mandir}/man1/rocky.1.gz
 
-%files -n rocky-repos%{?rlpkg}
+%files -n rocky-repos%{?rltype}
 %license docs/LICENSE
 %config(noreplace) %{_sysconfdir}/yum.repos.d/rocky.repo
 %config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-addons.repo
 %config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-extras.repo
 %config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-devel.repo
 %config(noreplace) %{_sysconfdir}/dnf/vars/contentdir
+%config(noreplace) %{_sysconfdir}/dnf/vars/sigcontentdir
 %config(noreplace) %{_sysconfdir}/dnf/vars/rltype
+%config(noreplace) %{_sysconfdir}/dnf/vars/stream
 
-%files -n rocky-gpg-keys%{?rlpkg}
+%files -n rocky-gpg-keys%{?rltype}
 %{_sysconfdir}/pki/rpm-gpg/
 
-%files -n rocky-sb-certs%{?rlpkg}
+%files -n rocky-sb-certs%{?rltype}
 # care: resetting symlinks is intended
 %dir %{_sysconfdir}/pki/sb-certs
 %dir %{_datadir}/pki/sb-certs
@@ -404,15 +501,95 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
 %{_datadir}/pki/sb-certs/*
 
 %changelog
-* Tue Feb 08 2022 Louis Abel <label@rockylinux.org> - 9.0-1.10
+* Tue Apr 30 2024 Louis Abel <label@rockylinux.org> - 9.4-1.5
+- Add nvidia SB certificates
+
+* Sun Apr 07 2024 Louis Abel <label@rockylinux.org> - 9.4-1.3
+- Add additional provides for rocky-sb-certs
+
+* Wed Apr 03 2024 Louis Abel <label@rockylinux.org> - 9.4-1.2
+- Update SB certs
+
+* Wed Mar 27 2024 Louis Abel <label@rockylinux.org> - 9.4-1.1
+- Preparation for 9.4
+
+* Mon Mar 04 2024 Louis Abel <label@rockylinux.org> - 9.4-0.3
+- Add kernel-bootcfg-boot-successful.service
+
+* Fri Jan 12 2024 Louis Abel <label@rockylinux.org> - 9.4-0.2
+- Improve presets for virtualization
+
+* Fri Oct 20 2023 Louis Abel <label@rockylinux.org> - 9.4-0.1
+- Bump to 9.4
+
+* Fri Oct 20 2023 Louis Abel <label@rockylinux.org> - 9.3-0.6
+- Add in true UKI-VIRT certificate
+- Add aarch64 signing certificates
+- Fix date in changelog
+
+* Tue Sep 05 2023 Louis Abel <label@rockylinux.org> - 9.3-0.5
+- Add placeholder certs for UKI-VIRT
+
+* Sat Jun 10 2023 Louis Abel <label@rockylinux.org> - 9.3-0.4
+- Define the distro macro
+
+* Mon May 15 2023 Louis Abel <label@rockylinux.org> - 9.3-0.3
+- Use DER format for ppc64le certificates for now
+
+* Tue Apr 25 2023 Louis Abel <label@rockylinux.org> - 9.3-0.2
+- Update secure boot certificates
+
+* Thu Apr 06 2023 Louis Abel <label@rockylinux.org> - 9.3-0.1
+- Bump main version to 9.3
+- Enable obex
+
+* Sun Jan 01 2023 Louis Abel <label@rockylinux.org> - 9.2-1.2
+- Move macros.dist to a proper location
+
+* Thu Dec 22 2022 Louis Abel <label@rockylinux.org> - 9.2-1.1
+- Update devel repos (RLBT#0001354)
+- Add SUPPORT_END with absolute EOL (See sig_core/#3)
+
+* Wed Oct 19 2022 Louis Abel <label@rockylinux.org> - 9.1-1.10
+- Change secure boot certificates
+
+* Tue Oct 18 2022 Louis Abel <label@rockylinux.org> - 9.1-1.9
+- Bump release version to match upstream
+
+* Wed Sep 07 2022 Louis Abel <label@rockylinux.org> - 9.1-1.1
+- Bump main version and prepare for upcoming beta
+
+* Tue Aug 30 2022 Louis Abel <label@rockylinux.org> - 9.0-3.2
+- Add stream dnf var
+
+* Thu Jul 28 2022 Louis Abel <label@rockylinux.org> - 9.0-3.1
+- Ensure distsuffix is part of disttag
+
+* Wed Jul 20 2022 Louis Abel <label@rockylinux.org> - 9.0-2.2
+- Fix mirrorlist URL for plus repository
+
+* Thu Jun 30 2022 Louis Abel <label@rockylinux.org> - 9.0-2.1
+- Prepare for release
+- Ensure rltype is blank for stable releases
+
+* Wed Jun 22 2022 Louis Abel <label@rockylinux.org> - 9.0-1.22
+- Change to using mirrorlist
+
+* Sun Jun 12 2022 Louis Abel <label@rockylinux.org> - 9.0-1.21
 - Backport current SB certs for now
 - Add logrotate timer and switcheroo
 - Add missing macros
 - Fix CPE values
-- Remove /etc/centos-release
-- Add redhat tags to os-release
+- Remove /etc/centos-release file
+- Add redhat and fix rocky tags in os-release
 - Fix GPG key names to be consistent with SIG requirements
 - Reduce number of repo files
+- Change testing key to "testing" key from build system
+- Add official "stable" key from build system
+- List both GPG keys in repo files
+- Fix rlpkg macro for gpg keys
+- Add sig content dir
+- Remove nplb as devel is technically it
 
 * Mon Jan 10 2022 Louis Abel <label@rockylinux.org> - 9.0-1.1
 - Add LOGO to /etc/os-release

code

@@ -1,4 +1,4 @@
 8:  Green Obsidian
 9:  Blue Onyx
-10: Smoky Quartz
+10: Red Quartz
 11: Lavender Calcite