config.yaml

@@ -1,4 +1,34 @@
 actions:
+  - modify_release:
+    - suffix: ".alma.1"
+      enabled: true
+
+  - delete_line:
+    - target: "spec"
+      lines:
+      - |
+            Source300:   redhatsecurebootca3.cer
+            Source301:   redhatsecureboot301.cer
+            Source500:   redhatsecurebootca5.cer
+            Source503:   redhatsecureboot503.cer
+
+  - changelog_entry:
+      - name: "Eduard Abdullin"
+        email: "eabdullin@almalinux.org"
+        line:
+          - "Use AlmaLinux cert"
+
+  - add_files:
+      - type: "source"
+        name: "almalinuxsecurebootca0.cer"
+        number: 300
+
+  - delete_files:
+      - file_name: "redhatsecureboot301.cer"
+      - file_name: "redhatsecureboot503.cer"
+      - file_name: "redhatsecurebootca3.cer"
+      - file_name: "redhatsecurebootca5.cer"
+
   - replace:
       - target: "spec"
         find: "%global glib2_version"
@@ -19,53 +49,22 @@ actions:
         count: 1
       - target: "spec"
         find: "-Dfwupd-efi:efi_sbat_distro_url=\"mail:secalert@redhat.com\" \\"
-        replace: "-Dfwupd-efi:efi_sbat_distro_url=\"mail:security@almalinux.org\" \\"
+        replace: "-Dfwupd-efi:efi_sbat_distro_url=\"mailto:security@almalinux.org\" \\"
         count: 1
       - target: "spec"
         find: |
           %pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp -a %{SOURCE300} -c %{SOURCE301} -n redhatsecureboot301
           %pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed -a %{SOURCE500} -c %{SOURCE503} -n redhatsecureboot503
-          rm -fv %{fwup_efi_fn}.tmp
+        replace: |
-        replace: "%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.signed -a %{SOURCE300} -c %{SOURCE301} -n clsecureboot001"
+          %pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp -a %{SOURCE300} -c %{SOURCE301} -n almalinuxsecurebootca0
+          %pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed -a %{SOURCE500} -c %{SOURCE503} -n almalinuxsecurebootca0
         count: 1
       - target: "spec"
         find: |
-          %{_datadir}/fwupd/uefi-capsule-ux.tar.xz
+              Source300: almalinuxsecurebootca0.cer
-          %endif
         replace: |
-          %{_datadir}/fwupd/uefi-capsule-ux.tar.xz
+              Source300: almalinuxsecurebootca0.cer
-          %endif
+              Source301: almalinuxsecurebootca0.cer
-          %if 0%{?have_modem_manager}
+              Source500: almalinuxsecurebootca0.cer
-          %{_libdir}/fwupd-plugins-3/libfu_plugin_modem_manager.so
+              Source503: almalinuxsecurebootca0.cer
-          %endif
         count: 1
-
-  - modify_release:
-    - suffix: ".alma.1"
-      enabled: true
-
-  - delete_line:
-    - target: "spec"
-      lines: 
-      - |
-            Source300:   redhatsecurebootca3.cer
-            Source301:   redhatsecureboot301.cer
-            Source500:   redhatsecurebootca5.cer
-            Source503:   redhatsecureboot503.cer
-
-  - changelog_entry:
-      - name: "Andrei Lukoshko"
-        email: "alukoshko@almalinux.org"
-        line:
-          - "AlmaLinux changes"
-
-  - add_files:
-      - type: "source"
-        name: "almalinuxsecurebootca0.cer"
-        number: 300
-
-  - delete_files:
-      - file_name: "redhatsecureboot301.cer"
-      - file_name: "redhatsecureboot503.cer"
-      - file_name: "redhatsecurebootca3.cer"
-      - file_name: "redhatsecurebootca5.cer"