autopatch/kernel
5
0
Fork 1
Code Issues Pull Requests Releases Activity

fix(autopatch): Updated two find strings in config.yaml to match upstream cert number changes from 201/204 to 801/804. #12

Closed
eabdullin wants to merge 1 commits from agent-fix/a9-beta-20260824-131841 into a9-beta
pull from: agent-fix/a9-beta-20260824-131841
merge into: autopatch:a9-beta
Conversation 0 Commits 1 Files Changed 1 +2 -2
eabdullin commented 2026-08-24 13:18:41 +00:00
Owner
Copy Link

Automated fix by autopatch agent.

Summary: Updated two find strings in config.yaml to match upstream cert number changes from 201/204 to 801/804.

Root cause

The upstream kernel spec updated its CentOS secure boot certificate names:

  • %define pesign_name_0 centossecureboot201 became centossecureboot801 (line 820 of kernel.spec)
  • UKI_secureboot_name=centossecureboot204 became centossecureboot804 (line 2523 of kernel.spec)

The ReplaceAction for the pesign_name_0 block failed because the find string still referenced the old cert name centossecureboot201. A second action targeting UKI_secureboot_name=centossecureboot204 would have also failed for the same reason.

The reference branch (a9) had the same outdated values, so no fix was available there.

Changes made to config.yaml:

  • Updated find in the pesign block: centossecureboot201 → centossecureboot801
  • Updated find for UKI secureboot name: centossecureboot204 → centossecureboot804

After the fix, autopatch_validate_config passed and autopatch ran successfully, producing %define pesign_name_0 almalinuxsecureboot0 and UKI_secureboot_name=almalinuxsecureboot0 in the resulting spec — preserving the intended debranding.

Original error

Type: ActionNotAppliedError

Traceback (most recent call last):
  File "/root/autopatch-tool/src/webserv.py", line 95, in debrand_packages
    result = apply_modifications(
  File "/root/autopatch-tool/src/debranding.py", line 138, in apply_modifications
    config.apply_actions(rpms_working_dir + f"/{package}")
  File "/root/autopatch-tool/src/actions_handler.py", line 938, in apply_actions
    action.execute(Path(package_path))
  File "/root/autopatch-tool/src/actions_handler.py", line 475, in execute
    process_lines(
  File "/root/autopatch-tool/src/actions_handler.py", line 236, in process_lines
    raise ActionNotAppliedError(
actions_handler.ActionNotAppliedError: Action 'ReplaceAction' was not applied successfully: No changes made for '['%if 0%{?centos}', '%define pesign_name_0 centossecureboot201', '%else', '%ifarch x86_64 aarch64', '%define pesign_name_0 redhatsecureboot801', '%endif', '%ifarch s390x', '%define pesign_name_0 redhatsecureboot302', '%endif', '%ifarch ppc64le', '%define pesign_name_0 redhatsecureboot701', '%endif', '%endif']' in /root/autopatch-tool/src/autopatch-kernel-vz3_6jtn/rpms-namespace/kernel/SPECS/kernel.spec

Package: kernel | Webhook branch: c9-beta

Automated fix by autopatch agent. **Summary:** Updated two `find` strings in config.yaml to match upstream cert number changes from 201/204 to 801/804. ### Root cause The upstream kernel spec updated its CentOS secure boot certificate names: - `%define pesign_name_0 centossecureboot201` became `centossecureboot801` (line 820 of `kernel.spec`) - `UKI_secureboot_name=centossecureboot204` became `centossecureboot804` (line 2523 of `kernel.spec`) The `ReplaceAction` for the `pesign_name_0` block failed because the `find` string still referenced the old cert name `centossecureboot201`. A second action targeting `UKI_secureboot_name=centossecureboot204` would have also failed for the same reason. The reference branch (`a9`) had the same outdated values, so no fix was available there. **Changes made to `config.yaml`:** - Updated `find` in the pesign block: `centossecureboot201` → `centossecureboot801` - Updated `find` for UKI secureboot name: `centossecureboot204` → `centossecureboot804` After the fix, `autopatch_validate_config` passed and `autopatch` ran successfully, producing `%define pesign_name_0 almalinuxsecureboot0` and `UKI_secureboot_name=almalinuxsecureboot0` in the resulting spec — preserving the intended debranding. ### Original error **Type:** `ActionNotAppliedError` ``` Traceback (most recent call last): File "/root/autopatch-tool/src/webserv.py", line 95, in debrand_packages result = apply_modifications( File "/root/autopatch-tool/src/debranding.py", line 138, in apply_modifications config.apply_actions(rpms_working_dir + f"/{package}") File "/root/autopatch-tool/src/actions_handler.py", line 938, in apply_actions action.execute(Path(package_path)) File "/root/autopatch-tool/src/actions_handler.py", line 475, in execute process_lines( File "/root/autopatch-tool/src/actions_handler.py", line 236, in process_lines raise ActionNotAppliedError( actions_handler.ActionNotAppliedError: Action 'ReplaceAction' was not applied successfully: No changes made for '['%if 0%{?centos}', '%define pesign_name_0 centossecureboot201', '%else', '%ifarch x86_64 aarch64', '%define pesign_name_0 redhatsecureboot801', '%endif', '%ifarch s390x', '%define pesign_name_0 redhatsecureboot302', '%endif', '%ifarch ppc64le', '%define pesign_name_0 redhatsecureboot701', '%endif', '%endif']' in /root/autopatch-tool/src/autopatch-kernel-vz3_6jtn/rpms-namespace/kernel/SPECS/kernel.spec ``` --- Package: `kernel` | Webhook branch: `c9-beta`
eabdullin added 1 commit 2026-08-24 13:18:41 +00:00 
Updated two `find` strings in config.yaml to match upstream cert number changes from 201/204 to 801/804.
eabdullin force-pushed agent-fix/a9-beta-20260824-131841 from d343ca158b to f8cc0e9b91 2026-08-24 14:38:01 +00:00 Compare
eabdullin closed this pull request 2026-08-24 14:39:00 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: autopatch/kernel#12
No description provided.
Delete Branch "agent-fix/a9-beta-20260824-131841"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?