384 lines
14 KiB
YAML
384 lines
14 KiB
YAML
actions:
|
|
- add_files:
|
|
- type: "patch"
|
|
name: "0001-Enable-all-disabled-pci-devices-by-moving-to-unmaint.patch"
|
|
number: 2001
|
|
- type: "patch"
|
|
name: "0002-Bring-back-deprecated-pci-ids-to-mptsas-mptspi-drive.patch"
|
|
number: 2002
|
|
- type: "patch"
|
|
name: "0003-Bring-back-deprecated-pci-ids-to-hpsa-driver.patch"
|
|
number: 2003
|
|
- type: "patch"
|
|
name: "0004-Bring-back-deprecated-pci-ids-to-qla2xxx-driver.patch"
|
|
number: 2004
|
|
- type: "patch"
|
|
name: "0005-Bring-back-deprecated-pci-ids-to-lpfc-driver.patch"
|
|
number: 2005
|
|
- type: "patch"
|
|
name: "0006-Bring-back-deprecated-pci-ids-to-qla4xxx-driver.patch"
|
|
number: 2006
|
|
- type: "patch"
|
|
name: "0007-Bring-back-deprecated-pci-ids-to-be2iscsi-driver.patch"
|
|
number: 2007
|
|
- type: "source"
|
|
name: "almalinuxdup1.x509"
|
|
number: 100
|
|
- type: "source"
|
|
name: "almalinuxima.x509"
|
|
number: 103
|
|
- type: "source"
|
|
name: "almalinuximaca1.x509"
|
|
number: 102
|
|
- type: "source"
|
|
name: "almalinuxkpatch1.x509"
|
|
number: 101
|
|
|
|
- replace:
|
|
- target: "kernel-aarch64-64k-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-aarch64-64k-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-aarch64-64k-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-aarch64-64k-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
count: 1
|
|
- target: "kernel-aarch64-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-aarch64-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-aarch64-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-aarch64-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-aarch64-rt-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-aarch64-rt-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-aarch64-rt-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-aarch64-rt-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-ppc64le-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-ppc64le-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-ppc64le-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-ppc64le-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-s390x-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-s390x-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-s390x-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-s390x-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-s390x-zfcpdump-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-s390x-zfcpdump-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-x86_64-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-x86_64-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-x86_64-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-x86_64-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-x86_64-rt-debug-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-x86_64-rt-debug-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "kernel-x86_64-rt-rhel.config"
|
|
find: |
|
|
# CONFIG_BE2NET_BE2 is not set
|
|
# CONFIG_BE2NET_BE3 is not set
|
|
replace: |
|
|
CONFIG_BE2NET_BE2=y
|
|
CONFIG_BE2NET_BE3=y
|
|
count: 1
|
|
- target: "kernel-x86_64-rt-rhel.config"
|
|
find: "# CONFIG_MLX4_CORE_GEN2 is not set"
|
|
replace: "CONFIG_MLX4_CORE_GEN2=y"
|
|
count: 1
|
|
- target: "x509.genkey.centos"
|
|
find: |
|
|
O = The CentOS Project
|
|
CN = CentOS Stream kernel signing key
|
|
emailAddress = security@centos.org
|
|
replace: |
|
|
O = AlmaLinux
|
|
CN = AlmaLinux kernel signing key
|
|
emailAddress = security@almalinux.org
|
|
count: 1
|
|
- target: "x509.genkey.rhel"
|
|
find: |
|
|
O = Red Hat
|
|
CN = Red Hat Enterprise Linux kernel signing key
|
|
emailAddress = secalert@redhat.com
|
|
replace: |
|
|
O = AlmaLinux
|
|
CN = AlmaLinux kernel signing key
|
|
emailAddress = security@almalinux.org
|
|
count: 1
|
|
- target: "spec"
|
|
find: "%ifnarch noarch"
|
|
replace: "%ifnarch x86_64"
|
|
count: 2
|
|
- target: "spec"
|
|
find: |
|
|
%if 0%{?centos}
|
|
%define pesign_name_0 centossecureboot201
|
|
%else
|
|
%ifarch x86_64 aarch64
|
|
%define pesign_name_0 redhatsecureboot501
|
|
%endif
|
|
%ifarch s390x
|
|
%define pesign_name_0 redhatsecureboot302
|
|
%endif
|
|
%ifarch ppc64le
|
|
%define pesign_name_0 redhatsecureboot701
|
|
%endif
|
|
%endif
|
|
replace: "%define pesign_name_0 almalinuxsecurebootca0"
|
|
count: 1
|
|
- target: "spec"
|
|
find: "Source103: almalinuxima.x509"
|
|
replace: |
|
|
Source103: almalinuxima.x509
|
|
Source104: almalinuxima.x509
|
|
count: 1
|
|
- target: "spec"
|
|
find: "Summary: Various documentation bits found in the kernel source"
|
|
replace: |
|
|
Summary: Various documentation bits found in the kernel source
|
|
BuildArch: noarch
|
|
count: 1
|
|
- target: "spec"
|
|
find: "Summary: The Red Hat Enterprise Linux kernel ABI symbol stablelists"
|
|
replace: |
|
|
Summary: The AlmaLinux kernel ABI symbol stablelists
|
|
BuildArch: noarch
|
|
count: 1
|
|
- target: "spec"
|
|
find: |
|
|
The kABI package contains information pertaining to the Red Hat Enterprise
|
|
Linux kernel ABI, including lists of kernel symbols that are needed by
|
|
replace: |
|
|
The kABI package contains information pertaining to the AlmaLinux
|
|
kernel ABI, including lists of kernel symbols that are needed by
|
|
count: 1
|
|
- target: "spec"
|
|
find: |
|
|
The package contains data describing the current ABI of the Red Hat Enterprise
|
|
Linux kernel, suitable for the kabi-dw tool.
|
|
replace: |
|
|
The package contains data describing the current ABI of the AlmaLinux
|
|
kernel, suitable for the kabi-dw tool.
|
|
count: 1
|
|
- target: "spec"
|
|
find: "This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat internal usage.\\"
|
|
replace: "This package provides kernel modules for the %{?2:%{2} }kernel package for AlmaLinux internal usage.\\"
|
|
count: 1
|
|
- target: "spec"
|
|
find: "%{expand:%%kernel_reqprovconf %{?1:%{1}} %{-o:%{-o}}}\\"
|
|
replace: |
|
|
%if "%{1}" == "rt" || "%{?1}" == ""\
|
|
Provides: almalinux(kernel-sig-key) = 202303\
|
|
Conflicts: shim-ia32 <= 15.6-1.el9.alma\
|
|
Conflicts: shim-x64 <= 15.6-1.el9.alma\
|
|
%endif\
|
|
%{expand:%%kernel_reqprovconf %{?1:%{1}} %{-o:%{-o}}}\
|
|
count: 1
|
|
- target: "spec"
|
|
find: " sed -i 's/CONFIG_CRYPTO_FIPS_NAME=.*/CONFIG_CRYPTO_FIPS_NAME=\"Red Hat Enterprise Linux %{rhel} - Kernel Cryptographic API\"/' $i"
|
|
replace: " sed -i 's/CONFIG_CRYPTO_FIPS_NAME=.*/CONFIG_CRYPTO_FIPS_NAME=\"AlmaLinux %{rhel} - Kernel Cryptographic API\"/' $i"
|
|
count: 1
|
|
- target: "spec"
|
|
find: "SBATsuffix=\"centos\""
|
|
replace: "SBATsuffix=\"rhel\""
|
|
count: 1
|
|
- target: "spec"
|
|
find: |
|
|
linux,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
|
|
linux.$SBATsuffix,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
|
|
kernel-uki-virt.$SBATsuffix,1,Red Hat,kernel-uki-virt,$KernelVer,mailto:secalert@redhat.com
|
|
replace: |
|
|
linux,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
|
|
linux,1,AlmaLinux,linux,$KernelVer,mailto:security@almalinux.org
|
|
linux.$SBATsuffix,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
|
|
linux.almalinux,1,AlmaLinux,linux,$KernelVer,mailto:security@almalinux.org
|
|
kernel-uki-virt.$SBATsuffix,1,Red Hat,kernel-uki-virt,$KernelVer,mailto:secalert@redhat.com
|
|
kernel-uki-virt.almalinux,1,AlmaLinux,kernel-uki-virt,$KernelVer,mailto:security@almalinux.org
|
|
count: 1
|
|
- target: "spec"
|
|
find: "UKI_secureboot_name=centossecureboot204"
|
|
replace: "UKI_secureboot_name=alsecureboot001"
|
|
count: 1
|
|
- target: "spec"
|
|
find: "UKI_secureboot_name=redhatsecureboot504"
|
|
replace: "UKI_secureboot_name=alsecureboot001"
|
|
count: 1
|
|
- target: "spec"
|
|
find: "# Red Hat UEFI Secure Boot CA cert, which can be used to authenticate the kernel"
|
|
replace: "# AlmaLinux UEFI Secure Boot CA cert, which can be used to authenticate the kernel"
|
|
count: 1
|
|
|
|
- delete_line:
|
|
- target: "spec"
|
|
lines:
|
|
- |
|
|
Source100: rheldup3.x509
|
|
Source101: rhelkpatch1.x509
|
|
Source102: rhelimaca1.x509
|
|
Source103: rhelima.x509
|
|
Source104: rhelima_centos.x509
|
|
- |
|
|
# We may want to override files from the primary target in case of building
|
|
# against a flavour of it (eg. centos not rhel), thus override it here if
|
|
# necessary
|
|
if [ "%{primary_target}" == "rhel" ]; then
|
|
%if 0%{?centos}
|
|
echo "Updating scripts/sources to centos version"
|
|
RPM_SOURCE_DIR=$RPM_SOURCE_DIR ./update_scripts.sh centos
|
|
%else
|
|
echo "Not updating scripts/sources to centos version"
|
|
%endif
|
|
fi
|
|
- |
|
|
if [ "$KernelExtension" == "gz" ]; then
|
|
gzip -f9 $SignImage
|
|
fi
|
|
|
|
- changelog_entry:
|
|
- name: "Andrei Lukoshko"
|
|
email: "alukoshko@almalinux.org"
|
|
line:
|
|
- "hpsa: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
- "mptsas: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
- "megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
- "qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024"
|
|
- "qla4xxx: bring back deprecated PCI ids"
|
|
- "lpfc: bring back deprecated PCI ids"
|
|
- "be2iscsi: bring back deprecated PCI ids"
|
|
- "kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained"
|
|
- name: "Eduard Abdullin"
|
|
email: "eabdullin@almalinux.org"
|
|
line:
|
|
- "Use AlmaLinux OS secure boot cert"
|
|
- "Debrand for AlmaLinux OS"
|