From b609b3fa7acb949effe1e833113c4d753c7f24bb Mon Sep 17 00:00:00 2001
From: Sofia Boldyreva <mooresofia81@gmail.com>
Date: Fri, 31 Jan 2025 15:27:29 +0100
Subject: [PATCH] Initial commit

---
 config.yaml                      |  77 +++++++++++++++++++++++++++++++
 files/almalinuxsecurebootca0.cer | Bin 0 -> 1787 bytes
 2 files changed, 77 insertions(+)
 create mode 100644 config.yaml
 create mode 100644 files/almalinuxsecurebootca0.cer

diff --git a/config.yaml b/config.yaml
new file mode 100644
index 0000000..b025b68
--- /dev/null
+++ b/config.yaml
@@ -0,0 +1,77 @@
+actions:
+  - replace:
+      - target: ".shim.metadata"
+        find: |
+              9ca9cfa834aedfaf3efe2216bfa1cb7c286ee1c0 SOURCES/fbx64.efi
+              5eb0ac78eee6aeeaf44a3f11d002b4fe00af6916 SOURCES/mmx64.efi
+              4312f246b6ba692040383f10358ac9a5927207de SOURCES/shimaa64.efi
+              783fb77783e9d0c4c400b723dfd0f02f006616ae SOURCES/shimx64.efi
+        replace: |
+              4591a3da03f337b27e963b69202f7109496c0ef8 SOURCES/fbaa64.efi
+              403a4e918a00f5e90551085c7ba545969feee26e SOURCES/fbx64.efi
+              48fe2246bcc52729315e7db8361d753ab6be1633 SOURCES/mmaa64.efi
+              08fa765dbe8902c022fe0d5b5803c14bc1e44a5c SOURCES/mmx64.efi
+              206b13df7ccae83bf2f961da7010e16eac372b28 SOURCES/shimaa64.efi
+              1208043ca28f8566c115d8a15ba9bd8163b6badb SOURCES/shimx64.efi
+        count: 1
+      - target: "shim.rpmmacros"
+        find: |
+              %global shimveraa64 15.8-2.el9
+              %global shimverx64 15.8-2.el9
+        replace: |
+              %global shimveraa64 15.8-2.el9.alma.1
+              %global shimverx64 15.8-2.el9.alma.1
+        count: 1
+      - target: "shim.rpmmacros"
+        find: "Requires: dbxtool >= 0.6-3						\\"
+        replace: |
+              %{expand:%ifarch x86_64						\
+              # SecureBoot keys dependencies						\
+              Requires: almalinux(grub2-sig-key) >= 202303				\
+              Requires: almalinux(kernel-sig-key) >= 202303				\
+              %endif}
+        count: 1
+      - target: "shim.rpmmacros"
+        find: |
+              %ifarch aarch64
+              %global is_signed no
+        replace: |
+              %ifarch aarch64
+              %global is_signed yes
+        count: 1
+      - target: "spec"
+        find: "Name:		shim"
+        replace: |
+              %global efi_vendor almalinux
+              %global efidir almalinux
+              %global efi_esp_dir /boot/efi/EFI/%{efidir}
+              
+              Name:		shim
+        count: 1
+        
+  - delete_line:
+      - target: "spec"
+        lines:
+          - |
+            Source1:	redhatsecureboot501.cer
+            Source2:	redhatsecurebootca5.cer
+
+  - modify_release:
+    - suffix: ".alma.2"
+      enabled: true
+
+  - changelog_entry:
+      - name: "Eduard Abdullin"
+        email: "eabdullin@almalinux.org"
+        line:
+          - "Add SB for aarch64"
+          - "Use AlmaLinux cert"
+
+  - add_files:
+      - type: "source"
+        name: "almalinuxsecurebootca0"
+        number: 1
+
+  - delete_files:
+      - file_name: "redhatsecureboot501.cer"
+      - file_name: "redhatsecurebootca5.cer"
diff --git a/files/almalinuxsecurebootca0.cer b/files/almalinuxsecurebootca0.cer
new file mode 100644
index 0000000000000000000000000000000000000000..6a4e99b9ed921c4af3db55a619260f1ab76110dc
GIT binary patch
literal 1787
zcmb7Edpy%?9NzEu+YQ4qp+X~z$h<!#p$oRjtthe5I<;n4v1uk{onoRAK8{FoFx^gc
z)hd-rIu)nr?ozG9NGF_fI7Am`6X*En{BeH&J@5N`pZ9&<&+mDF3_l2DxOH*_hG3YC
zc63{K)Mc`VR1X->NhS)Qi`TME^-dksg&-Xq2Cz{bpoK?*v3Lr+#1l0EMjD_^(GTMD
zB!UPL)n5=TknqD$I+(55K`6BGoxr#aQ34*7AqwMDg9H&mfiQx~@Sw6ns4M2o1LnrM
zj*bAGgM!g7R1KZf5ID|pa&dAA1xdG2GSJgV;wS_sr+Fwqoly#ygx9gdLs&@Wya0v}
z3LG4SP65Uf7hwvK$&cd3bH#kr3{2A~=u->>#eywd37;Auj^GLf30#RlB%EMPEi-l+
zkwox{5{U(2T$BpTN6nIqJ))wy{sLj#R%$>H)k_p74EruH#z6j)0c5b{#3zMt7(@o^
zW7O-~undMU6>I1J?%P(;)EDT<J`&<=PqZm?Eh+Gdc^{X>d~@7#vAD%qZ-ufkhh?j~
zapii8FZ6l4l2j4>$6Kvd%=FCfQ#Hi8bqZPzauDLVg0k(jF6nNqtfiz|Wxur8bX2ad
zdVcV5sacnCY_nO@_S&kodX}Gu=_h9qjw-&C&Q?YW8|~hwL@-lYMZxo*mT|n_rq!Dq
zNO?Kr*Z&ajuCl*+CptA}bH}3+sZUn7lNIOqU@O10Y8v~wWKcZqMh{nDsrrHAqC?Fn
zC5Od?^TaPN9vZwE>ENKiT9WIkzve%`+%Pg-+wtWhW?EoI?ykMo1m;;krtqoqrdY(Z
z>AG~nTPIVAdtr9e$os^OcI}Pat4B7uw#bZr_Ev0CoO20G4yS!W8C%*eNtWAYpL#d*
zedparl{a8zs7XrL79O+)cgO3rRq(Xe?bv+=_YavC&C0sI{5@^Is<rr7Q~oQL=9Ko_
zd&TbxFV50?)oW08?yPU9{?yXi;q$0tf$3uhOWxNtF#$EN9$(nj61mrZXRg<?fO5Aq
z{IFK_+_a`mJHJLPzOu2$``0#6NiXkuM_k_1)xDklhX*R_Aot#YOpZ%PWJx`Hvwv(+
zUSn91q<LmM;ZwJ8FJ8nt5r4k_e%;mzeMQkS+dKS(UD8v&r=*?B&+x(vVcja{*!1E*
zR`nr|@2-+JzzBqaj>w>gKnC3h)7Af**$k{YWr>DKj@ce|HuYY$w-4X7busAnE?sO0
z%rpc&tP$2Q5p}pRNtx`QBY$$Hy}hi^EzC7xG%sfQ5Hy0tA}}ElkTi6P2EzaYC>lh=
zl7Kdzs16YhM?esDptRPfdPAw7JRwLkg(U+Y4UdZT1n$5IPa2Kec@%;nJOpT9#`r7@
z85u`PBr&nB4i2&3%Ye=kMLRG8g8%`Ki%23t2=LQLO~*2UT1>u3z97|AGoqg0iKFNf
zr^ZU-duM1WW2`Y49;^^`UC`BhARRwieNz#L243SBz!P*O|5I1;uO$Gbj#^URPsEFj
znJ5J48Yh#m)_^Ae=Lv|2+!#zIQG$c)nJj+~w#N#V{a95^486KX5gC+(`LS(LuYLx&
zmK=g#7W3C{btC1qgXHu|&hAt1mVpg9@qz7)LQjirTbE=%tB>VaJ{w|W+SRlqtM=qq
z`BZ#(0JZP>i7X28yp;YFwn*+V^|hB(LiOc)PaARBXXK%~jS_tFjUyY$QX;*+r0V45
zkE=pT=tBm1C+#j}43w`s`%TdlzpX-LE<>U=F6|4*<{yn&V-xIkW##-D?u9_i{=os1
zQ~fq=HHqcUdPH1KbNZa$#kq3WF+jPXnVa;%`a)vjg(LknHdCYpovzocJ`VZSGQKX%
z9VuvTNmoc+L-8N(4b3q2QAF;sQhj@I<v<*0Ht?VN<knFg<}yq{?haG<fv+xMZkq1G
zfMeB!j>*nzv-=TicK8=0<z{!5STDIQowYE}{M!p%v*XagiZ@#a*rpBp-pFlw$j1cA
zMbdL^7Fn6pu1Ds+4F;K(`~A_^c|ytX^;TAfXxKtf>_FUZQQx>WuhjaYMX_P|t&zHv
TseG#v;Fg#3=RT@0&At3@_pP4Z

literal 0
HcmV?d00001