Add conditional to help prevent shipping unsigned (secure boot) packages

update to 575.64.03
Merge pull request 'rebuild for packaging error' (#5 ) from jonathan/nvidia-open-kmod:a10s into a10s
2025-07-04 09:38:41 -05:00 · 2025-07-03 15:39:16 +00:00 · 2025-07-03 10:19:58 -05:00 · 2025-06-27 14:45:53 -05:00 · 2025-05-30 08:19:05 -05:00 · 2025-05-30 08:18:15 -05:00
3 changed files with 22 additions and 7 deletions
--- a/kmp-local-override.macros
+++ b/kmp-local-override.macros
@ -59,7 +59,7 @@ redhat_kmp_has_post_hooks	1
 	%global kmodtool %{-s*}%{!-s:/usr/lib/rpm/redhat/kmodtool} \
 	%global kmod_version %{-v*}%{!-v:%{version}} \
 	%global kmod_release %{-r*}%{!-r:%{release}} \
-	%global latest_kernel %({ rpm -q --qf '%%{VERSION}-%%{RELEASE}.%%{ARCH}\\\\n' `rpm -qa | egrep "^kernel(-64k|-rt|-aarch64)?-devel" | /usr/lib/rpm/redhat/rpmsort -r | head -n 1`; echo '%%%%{nil}'; } | head -n 1) \
+	%global latest_kernel %({ rpm -q --qf '%%{VERSION}-%%{RELEASE}.%%{ARCH}\\\\n' `rpm -qa | grep -E "^kernel(-64k|-rt|-aarch64)?-devel" | /usr/lib/rpm/redhat/rpmsort -r | head -n 1`; echo '%%%%{nil}'; } | head -n 1) \
 	%{!?kernel_version:%{expand:%%global kernel_version %{latest_kernel}}} \
 	%global kverrel %(%{kmodtool} verrel %{?kernel_version} 2>/dev/null) \
 	flavors="default" \
--- a/nvidia-open-kmod.spec
+++ b/nvidia-open-kmod.spec
@ -21,8 +21,8 @@


 Name:           %{kmodname}-kmod
-Version:        570.153.02
-Release:        2%{?dist}
+Version:        575.64.03
+Release:        1%{?dist}
 Summary:        Kernel module (kmod) for NVIDIA GPU hardware

 License:        GPL-2.0-only and MIT
@ -69,8 +69,12 @@ and newer models of GPU hardware.


 %prep
-%autosetup -n open-gpu-kernel-modules-%{version} -S git_am
+# let's make sure we don't publish unsigned builds, that would be bad
+%if "%{modsign_os}" != "almalinux-nvidia-signing"
+%{error:modsign_os macro not set to almalinux-nvidia-signing, exiting}
+%endif

+%autosetup -n open-gpu-kernel-modules-%{version} -S git_am

 for flavor in %{flavors_to_build}; do
    cp -a ../open-gpu-kernel-modules-%{version} ../%{name}-%{version}-kmodbuild-$flavor
@ -108,8 +112,19 @@ done


 %changelog
-* Mon May 26 2025 Jonathan Wright <jonathan@almalinux.org> - 570.153.02-2
- Update BR for envsubst to filesystem path to work between major AlmaLinux versions
+* Fri Jul 04 2025 Jonathan Wright <jonathan@almalinux.org> - 575.64.03-1
+- Add conditional to help prevent shipping unsigned (secure boot) packages
+- update to 575.64.03
+
+* Thu Jul 03 2025 Jonathan Wright <jonathan@almalinux.org> - 575.64-2
+- rebuild for packaging error
+
+* Fri Jun 27 2025 Jonathan Wright <jonathan@almalinux.org> - 575.64-1
+- update to 575.64
+
+* Fri May 30 2025 Jonathan Wright <jonathan@almalinux.org> - 570.153.02-2
+- Update BR envsubst for EL9 compatibility
+- Replace "egrep" with "grep -E" in build macros

 * Mon May 26 2025 Neal Gompa <ngompa@almalinux.org> - 570.153.02-1
 - Initial package
--- a/2
+++ b/2
@ -1 +1 @@
-SHA512 (open-gpu-kernel-modules-570.153.02.tar.gz) = 719d46c5ffe10af872ea0ebbf03adb53cd7cbb2d2dfef883fa14a662941e6670a2b42c0131b2b942bf78052f4b43e52d8f6646e4b29d4f48707f76f449381847
+SHA512 (open-gpu-kernel-modules-575.64.03.tar.gz) = 43651b3f2f646c2f3b395c2790025d1f39765e8dfe6ccf2c3d4e8a7a8f75827f50b7ef45d05c890c24f7e032a0aaf02583943b3c62191fcdb34d424abb3610c2
Author	SHA1	Message	Date
Jonathan Wright	88d534689c	Add conditional to help prevent shipping unsigned (secure boot) packages update to 575.64.03	2025-07-04 09:38:41 -05:00
Andrew Lukoshko	634ee7c10b	Merge pull request 'rebuild for packaging error' (#5 ) from jonathan/nvidia-open-kmod:a10s into a10s Reviewed-on: rpms/nvidia-open-kmod#5	2025-07-03 15:39:16 +00:00
Jonathan Wright	989de37ace	rebuild for packaging error	2025-07-03 10:19:58 -05:00
Jonathan Wright	aefc65909c	update to 575.64	2025-06-27 14:45:53 -05:00
Jonathan Wright	367cbd58b5	Replace "egrep" with "grep -E" in build macros	2025-05-30 08:19:05 -05:00
Jonathan Wright	541c7f5731	Update BR envsubst for EL9 compatibility	2025-05-30 08:18:15 -05:00