config.yaml

@@ -48,31 +48,24 @@ actions:
               %define secureboot_key_0 %{SOURCE12}
               %define pesign_name_0 centossecureboot201
               %else
-
+        replace: |
+              Source10: almalinuxsecurebootca0.cer
+              Source11: almalinuxsecurebootca0.cer
+        count: 1
+      - target: "spec"
+        find: |
               %ifarch x86_64 aarch64
               %define secureboot_ca_0 %{SOURCE10}
               %define secureboot_key_0 %{SOURCE13}
               %define pesign_name_0 redhatsecureboot501
               %endif
-
-              %ifarch s390x
-              %define secureboot_ca_0 %{SOURCE10}
-              %define secureboot_key_0 %{SOURCE14}
-              %define pesign_name_0 redhatsecureboot302
-              %endif
-
-              %ifarch ppc64le
-              %define secureboot_ca_0 %{SOURCE16}
-              %define secureboot_key_0 %{SOURCE15}
-              %define pesign_name_0 redhatsecureboot701
-              %endif
-              %endif
         replace: |
-              Source10: almalinuxsecurebootca0.cer
-              Source11: almalinuxsecureboot0.cer
-              %define secureboot_ca_0  %{SOURCE10}
-              %define secureboot_key_0 %{SOURCE11}
-              %define pesign_name_0 almalinuxsecureboot0
+              %define secureboot_ca_0 %{SOURCE10}
+              %define secureboot_ca_1 %{SOURCE11}
+              %define secureboot_ca_2 %{SOURCE11}
+
+              %define secureboot_key_0 %{SOURCE10}
+              %define pesign_name_0 almalinuxsecurebootca0
         count: 1
       - target: "spec"
         find: |
@@ -171,6 +164,19 @@ actions:
   - delete_line:
       - target: "spec"
         lines:
+          - |
+             %ifarch s390x
+             %define secureboot_ca_0 %{SOURCE10}
+             %define secureboot_key_0 %{SOURCE14}
+             %define pesign_name_0 redhatsecureboot302
+             %endif
+          - |
+             %ifarch ppc64le
+             %define secureboot_ca_0 %{SOURCE16}
+             %define secureboot_key_0 %{SOURCE15}
+             %define pesign_name_0 redhatsecureboot701
+             %endif
+             %endif
           - |
             if [ "$KernelExtension" == "gz" ]; then
                   gzip -f9 $SignImage
@@ -230,7 +236,4 @@ actions:
         number: 9000
       - type: "source"
         name: "almalinuxsecurebootca0.cer"
-        modify_spec: false
-      - type: "source"
-        name: "almalinuxsecureboot0.cer"
-        modify_spec: false
+        number: "Latest"