Update secure boot certs: ca0 as Source2, boot0 as Source1

config.yaml

@@ -20,7 +20,6 @@ actions:
               e2bd0ba50614457483a298097b2252b6f18c0a1b SOURCES/BOOTAA64.CSV
               46bef68f0c2f722f4bb59385a8917c18210d4c4f SOURCES/BOOTIA32.CSV
               cca8dd0b9b2e2d3a5e693087a926cb63150a0b2f SOURCES/BOOTX64.CSV
-              077f737b9a26b59d2517ee390879f02ab464a284 SOURCES/almalinuxsecurebootca0.cer
               4591a3da03f337b27e963b69202f7109496c0ef8 SOURCES/fbaa64.efi
               0bbc4ac41e7ed2fb284f76995dac4be4f86f18a1 SOURCES/fbia32.efi
               403a4e918a00f5e90551085c7ba545969feee26e SOURCES/fbx64.efi
@@ -75,17 +74,32 @@ actions:
         find: |
               Source1:	redhatsecureboot501.cer
               Source2:	redhatsecurebootca5.cer
-        replace: "Source1:	almalinuxsecurebootca0.cer"
-      - target: ".gitignore"
-        find: |
-            SOURCES/redhatsecureboot501.cer
-            SOURCES/redhatsecurebootca5.cer
-        replace: "SOURCES/almalinuxsecurebootca0.cer"
+        replace: |
+              Source1:	almalinuxsecureboot0.cer
+              Source2:	almalinuxsecurebootca0.cer
+      - target: "shim.rpmmacros"
+        find: "-n redhatsecureboot501 -a %{SOURCE2} -c %{SOURCE1}"
+        replace: "-n almalinuxsecureboot0 -a %{SOURCE2} -c %{SOURCE1}"
+        count: 1
 
   - modify_release:
     - suffix: ".alma.2"
       enabled: true
 
+  - delete_line:
+      - target: ".gitignore"
+        lines:
+          - "SOURCES/redhatsecureboot501.cer"
+          - "SOURCES/redhatsecurebootca5.cer"
+
+  - add_files:
+      - type: "source"
+        name: "almalinuxsecurebootca0.cer"
+        number: 2
+      - type: "source"
+        name: "almalinuxsecureboot0.cer"
+        number: 1
+
   - changelog_entry:
       - name: "Eduard Abdullin"
         email: "eabdullin@almalinux.org"