436 lines
17 KiB
RPMSpec
436 lines
17 KiB
RPMSpec
# Note to packagers/builders:
|
|
#
|
|
# If you wish to build the LookAhead or Beta variant of this package, sure
|
|
# that you are setting --with=rlbeta or --with=rllookahead on your mock
|
|
# command. See the README for more information.
|
|
|
|
%bcond_with rlbeta
|
|
%bcond_with rllookahead
|
|
%bcond_with rloverride
|
|
|
|
%define debug_package %{nil}
|
|
|
|
# Product information
|
|
%define product_family Rocky Linux
|
|
%define variant_titlecase Server
|
|
%define variant_lowercase server
|
|
|
|
# Distribution Name and Version
|
|
%define distro_name Rocky Linux
|
|
%define distro_code Blue Onyx
|
|
%define major 9
|
|
%define minor 0
|
|
%define rocky_rel 1%{?rllh:.%{rllh}}%{!?rllh:.12}
|
|
%define rpm_license BSD-3-Clause
|
|
%define dist .el%{major}
|
|
|
|
%define contentdir pub/rocky
|
|
%define rltype stable
|
|
|
|
%define os_bug_name Rocky-Linux-%{major}
|
|
|
|
################################################################################
|
|
# Rocky LookAhead Section
|
|
#
|
|
# Reset defines for LookAhead variant. Default is stable if 0 or undefined.
|
|
%if %{with rllookahead}
|
|
%define minor 1
|
|
%define contentdir pub/rocky-lh
|
|
%define rltype lookahead
|
|
%define rlpkg -lookahead
|
|
%define rlstatement LookAhead
|
|
%endif
|
|
# End Rocky LookAhead Section
|
|
################################################################################
|
|
|
|
################################################################################
|
|
# Rocky Beta Section
|
|
#
|
|
# Reset defines for Beta variant. Default is stable if 0 or undefined.
|
|
# We do NOT override the minor version number here.
|
|
%if %{with rlbeta}
|
|
%define contentdir pub/rocky-beta
|
|
%define rltype beta
|
|
%define rlpkg -beta
|
|
%define rlstatement Beta
|
|
%endif
|
|
# End Rocky Beta Section
|
|
################################################################################
|
|
|
|
################################################################################
|
|
# Rocky Override Section
|
|
#
|
|
# Resets only the dist tag for the override package. All this does is ensure
|
|
# that only the rhel macros and settings are provided - This is useful in the
|
|
# case of a build that cannot be properly debranded (eg dotnet).
|
|
%if 0%{?rloverride}
|
|
%define dist .el%{major}.override
|
|
%endif
|
|
# End Rocky Override Section
|
|
################################################################################
|
|
|
|
%define base_release_version %{major}
|
|
%define dist_release_version %{major}
|
|
%define full_release_version %{major}.%{minor}
|
|
|
|
%ifarch ppc64le
|
|
%define tuned_profile :server
|
|
%endif
|
|
|
|
# Avoids a weird anaconda problem
|
|
%global __requires_exclude_from %{_libexecdir}
|
|
|
|
# conditional section for future use
|
|
|
|
Name: rocky-release%{?rlpkg}
|
|
Version: %{full_release_version}
|
|
Release: %{rocky_rel}%{dist}
|
|
Summary: %{distro_name} release files
|
|
Group: System Environment/Base
|
|
License: %{rpm_license}
|
|
URL: https://rockylinux.org
|
|
BuildArch: noarch
|
|
|
|
# What do we provide? Some of these needs are a necesity (think comps and
|
|
# groups) and things like EPEL need it.
|
|
Provides: rocky-release = %{version}-%{release}
|
|
Provides: rocky-release(upstream) = %{full_release_version}
|
|
Provides: redhat-release = %{version}-%{release}
|
|
Provides: system-release = %{version}-%{release}
|
|
Provides: system-release(releasever) = %{major}
|
|
Provides: centos-release = %{version}-%{release}
|
|
Provides: centos-release(upstream) = %{full_release_version}
|
|
|
|
## Required by libdnf
|
|
Provides: base-module(platform:el%{major})
|
|
|
|
## This makes lorax/pungi/anaconda happy
|
|
Provides: rocky-release-eula = %{version}-%{release}
|
|
Provides: redhat-release-eula = %{version}-%{release}
|
|
Provides: centos-release-eula = %{version}-%{release}
|
|
|
|
# What are our requirements?
|
|
Requires: rocky-repos(%{major})
|
|
|
|
# GPG Keys (100-199)
|
|
Source101: RPM-GPG-KEY-Rocky-%{major}
|
|
Source102: RPM-GPG-KEY-Rocky-%{major}-Testing
|
|
|
|
# Release Sources (200-499)
|
|
Source200: EULA
|
|
Source201: LICENSE
|
|
Source202: Contributors
|
|
Source203: COMMUNITY-CHARTER
|
|
|
|
# !! Stable !!
|
|
Source300: 85-display-manager.preset
|
|
Source301: 90-default.preset
|
|
Source302: 90-default-user.preset
|
|
Source303: 99-default-disable.preset
|
|
Source304: 50-redhat.conf
|
|
|
|
# !! LookAhead !!
|
|
Source400: 85-display-manager.preset.lh
|
|
Source401: 90-default.preset.lh
|
|
Source402: 90-default-user.preset.lh
|
|
Source403: 99-default-disable.preset.lh
|
|
Source404: 50-redhat.conf.lh
|
|
|
|
# Repo Sources (1200-1299)
|
|
Source1200: rocky.repo
|
|
Source1201: rocky-addons.repo
|
|
Source1202: rocky-extras.repo
|
|
Source1203: rocky-devel.repo
|
|
|
|
# Add ons (1300-1399)
|
|
Source1300: rocky.1.gz
|
|
|
|
# rocky secureboot certs placeholder (1400-1499)
|
|
Source1400: rockydup1.x509
|
|
Source1401: rockykpatch1.x509
|
|
Source1402: rocky-root-ca.der
|
|
Source1403: rocky-signing.der
|
|
|
|
%description
|
|
%{distro_name} release files.
|
|
|
|
%package -n rocky-repos%{?rlpkg}
|
|
Summary: %{distro_name} Package Repositories
|
|
License: %{rpm_license}
|
|
Provides: system-repos = %{version}-%{release}
|
|
Provides: rocky-repos(%{major}) = %{full_release_version}
|
|
Requires: system-release = %{version}-%{release}
|
|
Requires: rocky-gpg-keys
|
|
Conflicts: %{name} < 8.0
|
|
|
|
%description -n rocky-repos%{?rlpkg}
|
|
%{distro_name} package repository files for yum/dnf
|
|
|
|
%package -n rocky-gpg-keys%{?rlpkg}
|
|
Summary: Rocky RPM GPG Keys
|
|
Conflicts: %{name} < 8.0
|
|
|
|
%description -n rocky-gpg-keys%{?rlpkg}
|
|
This package provides the RPM signature keys for Rocky.
|
|
|
|
%package -n rocky-sb-certs%{?rlpkg}
|
|
Summary: %{distro_name} public secureboot certificates
|
|
Group: System Environment/Base
|
|
Provides: system-sb-certs = %{version}-%{release}
|
|
|
|
%description -n rocky-sb-certs%{?rlpkg}
|
|
This package contains the %{distro_name} secureboot public certificates.
|
|
|
|
%prep
|
|
%if %{with rllookahead} && %{with rlbeta}
|
|
echo "!! WARNING !!"
|
|
echo "Both LookAhead and Beta were enabled. This is not supported."
|
|
echo "As a result: BUILD FAILED."
|
|
exit 1
|
|
%endif
|
|
echo Good.
|
|
|
|
%build
|
|
echo Good.
|
|
|
|
%install
|
|
# docs dir for license and contributors
|
|
mkdir ./docs
|
|
cp %{SOURCE201} %{SOURCE202} %{SOURCE203} ./docs
|
|
|
|
################################################################################
|
|
# system-release data
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}
|
|
echo "%{distro_name} release %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})" > %{buildroot}%{_sysconfdir}/rocky-release
|
|
echo "Derived from Red Hat Enterprise Linux %{full_release_version}" > %{buildroot}%{_sysconfdir}/rocky-release-upstream
|
|
ln -s rocky-release %{buildroot}%{_sysconfdir}/system-release
|
|
ln -s rocky-release %{buildroot}%{_sysconfdir}/redhat-release
|
|
mkdir -p %{buildroot}%{_mandir}/man1
|
|
install -p -m 0644 %{SOURCE1300} %{buildroot}%{_mandir}/man1/
|
|
|
|
# Create the os-release file
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib
|
|
cat > %{buildroot}%{_prefix}/lib/os-release << EOF
|
|
NAME="%{distro_name}"
|
|
VERSION="%{full_release_version} (%{distro_code})"
|
|
ID="%{?rloverride:rhel}%{!?rloverride:rocky}"
|
|
ID_LIKE="rhel centos fedora"
|
|
VERSION_ID="%{full_release_version}"
|
|
PLATFORM_ID="platform:el%{major}"
|
|
PRETTY_NAME="%{distro_name} %{full_release_version}%{?rlstatement: %{rlstatement}} (%{distro_code})"
|
|
ANSI_COLOR="0;32"
|
|
LOGO="fedora-logo-icon"
|
|
CPE_NAME="cpe:/o:rocky:rocky:%{major}::baseos"
|
|
HOME_URL="https://rockylinux.org/"
|
|
BUG_REPORT_URL="https://bugs.rockylinux.org/"
|
|
ROCKY_SUPPORT_PRODUCT="%{os_bug_name}"
|
|
ROCKY_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement:-%{rlstatement}}"
|
|
REDHAT_SUPPORT_PRODUCT="%{distro_name}"
|
|
REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?rlstatement: %{rlstatement}}"
|
|
EOF
|
|
|
|
# Create the symlink for /etc/os-release
|
|
ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
|
|
|
|
# write cpe to /etc/system/release-cpe
|
|
echo "cpe:/o:rocky:rocky:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe
|
|
|
|
# create /etc/issue and /etc/issue.net, /etc/issue.d
|
|
echo '\S' > %{buildroot}%{_sysconfdir}/issue
|
|
echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
|
|
cp %{buildroot}%{_sysconfdir}/issue{,.net}
|
|
echo >> %{buildroot}%{_sysconfdir}/issue
|
|
mkdir -p %{buildroot}%{_sysconfdir}/issue.d
|
|
|
|
# set up the dist tag macros
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/rpm
|
|
cat > %{buildroot}%{_sysconfdir}/rpm/macros.dist << EOF
|
|
# dist macros.
|
|
|
|
%%__bootstrap ~bootstrap
|
|
%%rocky_ver %{major}
|
|
%%rocky %{major}
|
|
%%centos_ver %{major}
|
|
%%centos %{major}
|
|
%%rhel %{major}
|
|
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}.el%{major}%%{?with_bootstrap:%{__bootstrap}}
|
|
%%el%{major} 1
|
|
EOF
|
|
|
|
# Data directory
|
|
install -d -m 0755 %{buildroot}%{_datadir}/rocky-release
|
|
ln -s rocky-release %{buildroot}%{_datadir}/redhat-release
|
|
install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/rocky-release/
|
|
|
|
# end system-release data
|
|
################################################################################
|
|
|
|
################################################################################
|
|
# systemd section
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset/
|
|
|
|
install -m 0644 %{SOURCE300} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
install -m 0644 %{SOURCE301} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
install -m 0644 %{SOURCE302} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
|
|
# same behavior for both presets
|
|
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
|
|
install -m 0644 %{SOURCE303} %{buildroot}/%{_prefix}/lib/systemd/user-preset/
|
|
|
|
# sysctl presets
|
|
install -d -m 0755 %{buildroot}%{_prefix}/lib/sysctl.d/
|
|
install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
|
|
# systemd section
|
|
################################################################################
|
|
|
|
################################################################################
|
|
# start secureboot section
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
|
|
install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
# Backported certs for now
|
|
install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
|
|
|
|
# Placeholders
|
|
# x86_64
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
|
|
|
|
# aarch64
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
|
|
|
|
# ppc64le
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-ppc64le.cer
|
|
|
|
# armhfp
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-armhfp.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-armhfp.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-armhfp.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-armhfp.cer
|
|
|
|
# s390x
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-root-ca.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-s390x.cer
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/rocky-signing.der %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-s390x.cer
|
|
|
|
# symlinks for everybody
|
|
for x in $(ls %{buildroot}%{_datadir}/pki/sb-certs); do
|
|
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/${x} %{buildroot}%{_sysconfdir}/pki/sb-certs/${x}
|
|
done
|
|
|
|
# end secureboot section
|
|
################################################################################
|
|
|
|
################################################################################
|
|
# dnf repo section
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
|
|
install -p -m 0644 %{SOURCE1200} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
install -p -m 0644 %{SOURCE1201} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
install -p -m 0644 %{SOURCE1202} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
install -p -m 0644 %{SOURCE1203} %{buildroot}%{_sysconfdir}/yum.repos.d/
|
|
|
|
# dnf stuff
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
|
|
echo "%{contentdir}" > %{buildroot}%{_sysconfdir}/dnf/vars/contentdir
|
|
echo "%{rltype}" > %{buildroot}%{_sysconfdir}/dnf/vars/rltype
|
|
|
|
# Copy out GPG keys
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
|
|
install -p -m 0644 %{SOURCE101} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
|
|
install -p -m 0644 %{SOURCE102} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
|
|
# end dnf repo section
|
|
################################################################################
|
|
|
|
################################################################################
|
|
# lookahead overrides
|
|
# TODO: Is there a cleaner way?
|
|
%if %{with rllookahead}
|
|
install -m 0644 %{SOURCE400} %{buildroot}/%{_prefix}/lib/systemd/system-preset/85-display-manager.preset
|
|
install -m 0644 %{SOURCE401} %{buildroot}/%{_prefix}/lib/systemd/system-preset/90-default.preset
|
|
install -m 0644 %{SOURCE402} %{buildroot}/%{_prefix}/lib/systemd/system-preset/90-default-user.preset
|
|
install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/system-preset/99-default-disable.preset
|
|
install -m 0644 %{SOURCE403} %{buildroot}/%{_prefix}/lib/systemd/user-preset/99-default-disable.preset
|
|
install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
|
|
%endif
|
|
# lookahead replacements
|
|
################################################################################
|
|
|
|
%files
|
|
%license docs/LICENSE
|
|
%doc docs/Contributors docs/COMMUNITY-CHARTER
|
|
%dir %{_sysconfdir}/yum.repos.d
|
|
%{_sysconfdir}/redhat-release
|
|
%{_sysconfdir}/system-release
|
|
%{_sysconfdir}/rocky-release
|
|
%{_sysconfdir}/rocky-release-upstream
|
|
%config(noreplace) %{_sysconfdir}/os-release
|
|
%config %{_sysconfdir}/system-release-cpe
|
|
%config(noreplace) %{_sysconfdir}/issue
|
|
%config(noreplace) %{_sysconfdir}/issue.net
|
|
%dir %{_sysconfdir}/issue.d
|
|
%{_sysconfdir}/rpm/macros.dist
|
|
%{_datadir}/redhat-release
|
|
%{_datadir}/rocky-release
|
|
%{_prefix}/lib/os-release
|
|
%{_prefix}/lib/systemd/system-preset/*
|
|
%{_prefix}/lib/systemd/user-preset/*
|
|
%{_prefix}/lib/sysctl.d/50-redhat.conf
|
|
%{_mandir}/man1/rocky.1.gz
|
|
|
|
%files -n rocky-repos%{?rlpkg}
|
|
%license docs/LICENSE
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky.repo
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-addons.repo
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-extras.repo
|
|
%config(noreplace) %{_sysconfdir}/yum.repos.d/rocky-devel.repo
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/contentdir
|
|
%config(noreplace) %{_sysconfdir}/dnf/vars/rltype
|
|
|
|
%files -n rocky-gpg-keys%{?rlpkg}
|
|
%{_sysconfdir}/pki/rpm-gpg/
|
|
|
|
%files -n rocky-sb-certs%{?rlpkg}
|
|
# care: resetting symlinks is intended
|
|
%dir %{_sysconfdir}/pki/sb-certs
|
|
%dir %{_datadir}/pki/sb-certs
|
|
%{_sysconfdir}/pki/sb-certs/*
|
|
%{_datadir}/pki/sb-certs/*
|
|
|
|
%changelog
|
|
* Sun May 01 2022 Louis Abel <label@rockylinux.org> - 9.0-1.12
|
|
- Backport current SB certs for now
|
|
- Add logrotate timer and switcheroo
|
|
- Add missing macros
|
|
- Fix CPE values
|
|
- Remove /etc/centos-release file
|
|
- Add redhat and fix rocky tags in os-release
|
|
- Fix GPG key names to be consistent with SIG requirements
|
|
- Reduce number of repo files
|
|
- Change testing key to "testing" key from build system
|
|
- Add official "stable" key from build system
|
|
- List both GPG keys in repo files
|
|
|
|
* Mon Jan 10 2022 Louis Abel <label@rockylinux.org> - 9.0-1.1
|
|
- Add LOGO to /etc/os-release
|
|
|
|
* Tue Nov 30 2021 Louis Abel <label@rockylinux.org> - 9.0-1.0
|
|
- Init for Rocky Linux 9 (Blue Onyx)
|
|
- Sync with upstream
|
|
- Add direct LookAhead support
|
|
- Add direct Beta support
|
|
- Add spec file notes for packagers
|
|
- Add countme=1 to all base repos
|