Add conditional to help prevent shipping unsigned (secure boot) packages

update to 575.64.03

kmp-local-override.macros

@@ -59,7 +59,7 @@ redhat_kmp_has_post_hooks	1
 	%global kmodtool %{-s*}%{!-s:/usr/lib/rpm/redhat/kmodtool} \
 	%global kmod_version %{-v*}%{!-v:%{version}} \
 	%global kmod_release %{-r*}%{!-r:%{release}} \
-	%global latest_kernel %({ rpm -q --qf '%%{VERSION}-%%{RELEASE}.%%{ARCH}\\\\n' `rpm -qa | egrep "^kernel(-64k|-rt|-aarch64)?-devel" | /usr/lib/rpm/redhat/rpmsort -r | head -n 1`; echo '%%%%{nil}'; } | head -n 1) \
+	%global latest_kernel %({ rpm -q --qf '%%{VERSION}-%%{RELEASE}.%%{ARCH}\\\\n' `rpm -qa | grep -E "^kernel(-64k|-rt|-aarch64)?-devel" | /usr/lib/rpm/redhat/rpmsort -r | head -n 1`; echo '%%%%{nil}'; } | head -n 1) \
 	%{!?kernel_version:%{expand:%%global kernel_version %{latest_kernel}}} \
 	%global kverrel %(%{kmodtool} verrel %{?kernel_version} 2>/dev/null) \
 	flavors="default" \

nvidia-open-kmod.spec

@@ -21,7 +21,7 @@
 
 
 Name:           %{kmodname}-kmod
-Version:        570.153.02
+Version:        575.64.03
 Release:        1%{?dist}
 Summary:        Kernel module (kmod) for NVIDIA GPU hardware
 
@@ -46,7 +46,7 @@ BuildRequires:  kernel-rpm-macros
 # kmod dependencies
 BuildRequires:  %kernel_module_package_buildreqs
 %{?kernel_extra_flavor_devel_packages:BuildRequires:  %kernel_extra_flavor_devel_packages}
-BuildRequires:  gettext-envsubst
+BuildRequires:  %{_bindir}/envsubst
 BuildRequires:  gcc
 BuildRequires:  gcc-c++
 BuildRequires:  make
@@ -69,8 +69,12 @@ and newer models of GPU hardware.
 
 
 %prep
-%autosetup -n open-gpu-kernel-modules-%{version} -S git_am
+# let's make sure we don't publish unsigned builds, that would be bad
+%if "%{modsign_os}" != "almalinux-nvidia-signing"
+%{error:modsign_os macro not set to almalinux-nvidia-signing, exiting}
+%endif
 
+%autosetup -n open-gpu-kernel-modules-%{version} -S git_am
 
 for flavor in %{flavors_to_build}; do
     cp -a ../open-gpu-kernel-modules-%{version} ../%{name}-%{version}-kmodbuild-$flavor
@@ -108,6 +112,20 @@ done
 
 
 %changelog
+* Fri Jul 04 2025 Jonathan Wright <jonathan@almalinux.org> - 575.64.03-1
+- Add conditional to help prevent shipping unsigned (secure boot) packages
+- update to 575.64.03
+
+* Thu Jul 03 2025 Jonathan Wright <jonathan@almalinux.org> - 575.64-2
+- rebuild for packaging error
+
+* Fri Jun 27 2025 Jonathan Wright <jonathan@almalinux.org> - 575.64-1
+- update to 575.64
+
+* Fri May 30 2025 Jonathan Wright <jonathan@almalinux.org> - 570.153.02-2
+- Update BR envsubst for EL9 compatibility
+- Replace "egrep" with "grep -E" in build macros
+
 * Mon May 26 2025 Neal Gompa <ngompa@almalinux.org> - 570.153.02-1
 - Initial package
 

sources

@@ -1 +1 @@
-SHA512 (open-gpu-kernel-modules-570.153.02.tar.gz) = 719d46c5ffe10af872ea0ebbf03adb53cd7cbb2d2dfef883fa14a662941e6670a2b42c0131b2b942bf78052f4b43e52d8f6646e4b29d4f48707f76f449381847
+SHA512 (open-gpu-kernel-modules-575.64.03.tar.gz) = 43651b3f2f646c2f3b395c2790025d1f39765e8dfe6ccf2c3d4e8a7a8f75827f50b7ef45d05c890c24f7e032a0aaf02583943b3c62191fcdb34d424abb3610c2