2025-01-22 16:54:40 +00:00
|
|
|
actions:
|
|
|
|
|
- replace:
|
2025-01-27 12:40:00 +00:00
|
|
|
- target: "kernel*.config"
|
2025-01-22 16:54:40 +00:00
|
|
|
find: |
|
|
|
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
|
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
|
|
|
replace: |
|
|
|
|
|
CONFIG_BE2NET_BE2=y
|
|
|
|
|
CONFIG_BE2NET_BE3=y
|
|
|
|
|
count: 1
|
2025-01-27 12:40:00 +00:00
|
|
|
- target: "kernel*.config"
|
2025-01-22 16:54:40 +00:00
|
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
|
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "x509.genkey"
|
|
|
|
|
find: |
|
|
|
|
|
O = Red Hat
|
|
|
|
|
CN = Red Hat Enterprise Linux kernel signing key
|
|
|
|
|
emailAddress = secalert@redhat.com
|
|
|
|
|
replace: |
|
|
|
|
|
O = AlmaLinux
|
|
|
|
|
CN = AlmaLinux kernel signing key
|
|
|
|
|
emailAddress = security@almalinux.org
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: "%ifnarch noarch"
|
|
|
|
|
replace: "%ifnarch x86_64"
|
|
|
|
|
count: 2
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
%define make_target Image.gz
|
|
|
|
|
%define kernel_image arch/arm64/boot/Image.gz
|
|
|
|
|
replace: |
|
|
|
|
|
%define make_target Image
|
|
|
|
|
%define kernel_image arch/arm64/boot/Image
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
Source10: redhatsecurebootca3.cer
|
|
|
|
|
Source11: centossecurebootca2.cer
|
|
|
|
|
Source12: centossecureboot201.cer
|
|
|
|
|
Source13: redhatsecureboot501.cer
|
|
|
|
|
Source14: redhatsecureboot302.cer
|
|
|
|
|
Source15: redhatsecureboot303.cer
|
|
|
|
|
Source16: redhatsecurebootca7.cer
|
|
|
|
|
%if 0%{?centos}
|
|
|
|
|
%define secureboot_ca_0 %{SOURCE11}
|
|
|
|
|
%define secureboot_key_0 %{SOURCE12}
|
|
|
|
|
%define pesign_name_0 centossecureboot201
|
|
|
|
|
%else
|
|
|
|
|
replace: |
|
|
|
|
|
Source10: almalinuxsecurebootca0.cer
|
|
|
|
|
Source11: almalinuxsecurebootca0.cer
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
%ifarch x86_64 aarch64
|
|
|
|
|
%define secureboot_ca_0 %{SOURCE10}
|
|
|
|
|
%define secureboot_key_0 %{SOURCE13}
|
|
|
|
|
%define pesign_name_0 redhatsecureboot501
|
|
|
|
|
%endif
|
|
|
|
|
replace: |
|
|
|
|
|
%define secureboot_ca_0 %{SOURCE10}
|
|
|
|
|
%define secureboot_ca_1 %{SOURCE11}
|
|
|
|
|
%define secureboot_ca_2 %{SOURCE11}
|
|
|
|
|
|
|
|
|
|
%define secureboot_key_0 %{SOURCE10}
|
|
|
|
|
%define pesign_name_0 almalinuxsecurebootca0
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
Source100: rheldup3.x509
|
2025-01-23 09:57:45 +00:00
|
|
|
Source101: rhelkpatch1.x509
|
2025-01-22 16:54:40 +00:00
|
|
|
replace: |
|
|
|
|
|
# Source100: rheldup3.x509
|
|
|
|
|
# Source101: rhelkpatch1.x509
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
This is the package which provides the Linux %{name} for Red Hat Enterprise
|
|
|
|
|
Linux. It is based on upstream Linux at version %{version} and maintains kABI
|
|
|
|
|
replace: |
|
|
|
|
|
This is the package which provides the Linux %{name} for AlmaLinux.
|
|
|
|
|
It is based on upstream Linux at version %{version} and maintains kABI
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: "Red Hat Enterprise Linux"
|
|
|
|
|
replace: "AlmaLinux"
|
|
|
|
|
count: 2
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
The kABI package contains information pertaining to the Red Hat Enterprise
|
|
|
|
|
Linux kernel ABI, including lists of kernel symbols that are needed by
|
|
|
|
|
replace: |
|
|
|
|
|
The kABI package contains information pertaining to the AlmaLinux
|
|
|
|
|
kernel ABI, including lists of kernel symbols that are needed by
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
The package contains data describing the current ABI of the Red Hat Enterprise
|
|
|
|
|
Linux kernel, suitable for the kabi-dw tool.
|
|
|
|
|
replace: |
|
|
|
|
|
The package contains data describing the current ABI of the AlmaLinux
|
|
|
|
|
kernel, suitable for the kabi-dw tool.
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: "This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat internal usage.\\"
|
|
|
|
|
replace: "This package provides kernel modules for the %{?2:%{2} }kernel package for AlmaLinux internal usage.\\"
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
2025-01-23 09:57:45 +00:00
|
|
|
find: |
|
|
|
|
|
Summary: %{variant_summary}\
|
|
|
|
|
Group: System Environment/Kernel\
|
|
|
|
|
Provides: %{name}-%{?1:%{1}-}core-uname-r = %{KVERREL}%{?variant}%{?1:+%{1}}\
|
|
|
|
|
Provides: installonlypkg(kernel)\
|
2025-01-22 16:54:40 +00:00
|
|
|
replace: |
|
2025-01-23 09:57:45 +00:00
|
|
|
Summary: %{variant_summary}\
|
|
|
|
|
Group: System Environment/Kernel\
|
|
|
|
|
Provides: %{name}-%{?1:%{1}-}core-uname-r = %{KVERREL}%{?variant}%{?1:+%{1}}\
|
2025-01-22 16:54:40 +00:00
|
|
|
Provides: installonlypkg(kernel)\
|
|
|
|
|
%if "%{?1}" == ""\
|
|
|
|
|
Provides: almalinux(kernel-sig-key) = 202303\
|
2025-02-06 09:39:56 +00:00
|
|
|
Conflicts: shim-ia32 < 15.8-4.el8_9.alma.2\
|
|
|
|
|
Conflicts: shim-x64 < 15.8-4.el8_9.alma.2\
|
2025-01-22 16:54:40 +00:00
|
|
|
%endif\
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: "%setup -q -n %{name}-%{specversion}-%{pkgrelease} -c"
|
|
|
|
|
replace: |
|
|
|
|
|
%setup -q -n %{name}-%{specversion}-%{pkgrelease} -c
|
|
|
|
|
cp -v %{SOURCE9000} linux-%{specversion}-%{pkgrelease}/certs/rhel.pem
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem
|
|
|
|
|
openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem
|
|
|
|
|
cat rheldup3.pem rhelkpatch1.pem > ../certs/rhel.pem
|
|
|
|
|
replace: |
|
|
|
|
|
# openssl x509 -inform der -in %{SOURCE100} -out rheldup3.pem
|
|
|
|
|
# openssl x509 -inform der -in %{SOURCE101} -out rhelkpatch1.pem
|
|
|
|
|
# cat rheldup3.pem rhelkpatch1.pem > ../certs/rhel.pem
|
|
|
|
|
count: 1
|
2025-01-23 09:57:45 +00:00
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
Summary: The AlmaLinux kernel ABI symbol stablelists
|
|
|
|
|
Group: System Environment/Kernel
|
|
|
|
|
AutoReqProv: no
|
|
|
|
|
replace: |
|
|
|
|
|
Summary: The AlmaLinux kernel ABI symbol stablelists
|
|
|
|
|
Group: System Environment/Kernel
|
|
|
|
|
AutoReqProv: no
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
count: 1
|
|
|
|
|
- target: "spec"
|
|
|
|
|
find: |
|
|
|
|
|
Summary: Various documentation bits found in the kernel source
|
|
|
|
|
Group: Documentation
|
|
|
|
|
replace: |
|
|
|
|
|
Summary: Various documentation bits found in the kernel source
|
|
|
|
|
Group: Documentation
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
count: 1
|
2025-01-22 16:54:40 +00:00
|
|
|
|
|
|
|
|
- delete_line:
|
|
|
|
|
- target: "spec"
|
|
|
|
|
lines:
|
|
|
|
|
- |
|
|
|
|
|
%ifarch s390x
|
|
|
|
|
%define secureboot_ca_0 %{SOURCE10}
|
|
|
|
|
%define secureboot_key_0 %{SOURCE14}
|
|
|
|
|
%define pesign_name_0 redhatsecureboot302
|
|
|
|
|
%endif
|
2025-01-22 19:53:22 +00:00
|
|
|
- |
|
2025-01-22 16:58:57 +00:00
|
|
|
%ifarch ppc64le
|
|
|
|
|
%define secureboot_ca_0 %{SOURCE16}
|
|
|
|
|
%define secureboot_key_0 %{SOURCE15}
|
|
|
|
|
%define pesign_name_0 redhatsecureboot701
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
2025-01-22 16:54:40 +00:00
|
|
|
- |
|
|
|
|
|
if [ "$KernelExtension" == "gz" ]; then
|
|
|
|
|
gzip -f9 $SignImage
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
- changelog_entry:
|
|
|
|
|
- name: "Andrei Lukoshko"
|
|
|
|
|
email: "alukoshko@almalinux.org"
|
|
|
|
|
line:
|
|
|
|
|
- "hpsa: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
|
|
|
- "mptsas: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
|
|
|
- "megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
|
|
|
- "qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
|
|
|
- "qla4xxx: bring back deprecated PCI ids"
|
|
|
|
|
- "lpfc: bring back deprecated PCI ids"
|
|
|
|
|
- "be2iscsi: bring back deprecated PCI ids"
|
|
|
|
|
- "kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained"
|
|
|
|
|
- name: "Eduard Abdullin"
|
|
|
|
|
email: "eabdullin@almalinux.org"
|
|
|
|
|
line:
|
|
|
|
|
- "Use AlmaLinux OS secure boot cert"
|
|
|
|
|
- "Debrand for AlmaLinux OS"
|
|
|
|
|
|
|
|
|
|
- add_files:
|
2025-01-23 09:57:45 +00:00
|
|
|
- type: "patch"
|
|
|
|
|
name: "debrand-single-cpu.patch"
|
|
|
|
|
number: 1000
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "debrand-rh-i686-cpu.patch"
|
|
|
|
|
number: 1002
|
2025-01-22 16:54:40 +00:00
|
|
|
- type: "patch"
|
|
|
|
|
name: "0001-Enable-all-disabled-pci-devices-by-moving-to-unmaint.patch"
|
|
|
|
|
number: 2001
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0002-Bring-back-deprecated-pci-ids-to-megaraid_sas-driver.patch"
|
|
|
|
|
number: 2002
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0003-Bring-back-deprecated-pci-ids-to-mptsas-mptspi-drive.patch"
|
|
|
|
|
number: 2003
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0004-Bring-back-deprecated-pci-ids-to-hpsa-driver.patch"
|
|
|
|
|
number: 2004
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0005-Bring-back-deprecated-pci-ids-to-qla2xxx-driver.patch"
|
|
|
|
|
number: 2005
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0006-Bring-back-deprecated-pci-ids-to-lpfc-driver.patch"
|
|
|
|
|
number: 2006
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0007-Bring-back-deprecated-pci-ids-to-qla4xxx-driver.patch"
|
|
|
|
|
number: 2007
|
|
|
|
|
- type: "patch"
|
|
|
|
|
name: "0008-Bring-back-deprecated-pci-ids-to-be2iscsi-driver.patch"
|
|
|
|
|
number: 2008
|
|
|
|
|
- type: "source"
|
|
|
|
|
name: "almalinux.pem"
|
|
|
|
|
number: 9000
|
|
|
|
|
- type: "source"
|
|
|
|
|
name: "almalinuxsecurebootca0.cer"
|
|
|
|
|
number: "Latest"
|
