From 09355ea6cef7fccbc240c3b01ff1baa199ace8ab Mon Sep 17 00:00:00 2001 From: Jonathan Wright Date: Wed, 11 Mar 2026 16:13:11 -0500 Subject: [PATCH] Use local GPG key path instead of URL, Update URL of CUDA repo --- CDF6BA43.pub | 28 +++++++++++++++++++++++++++ D42D0685.pub | 29 ++++++++++++++++++++++++++++ almalinux-nvidia.repo | 4 ++-- almalinux-release-nvidia-driver.spec | 28 +++++++++++++++++---------- 4 files changed, 77 insertions(+), 12 deletions(-) create mode 100644 CDF6BA43.pub create mode 100644 D42D0685.pub diff --git a/CDF6BA43.pub b/CDF6BA43.pub new file mode 100644 index 0000000..4b7deb5 --- /dev/null +++ b/CDF6BA43.pub @@ -0,0 +1,28 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBGh5i9sBEADauODwoSqJfuUpu+n84QOIQILlI0j0s3sek78guxHpcu1h8tSv +OSHMGNpdaOOGFiNXVIeMe3To44RNOGOeMYwclKvZuXMcYJkeWFp/sUkO4IJ0wgW+ +OA2Ia4x2X3lWyeXavQVBwo/IXqa0fbUVQHrz44S7mGb93PX2dXPZN8qnLZWcJSGk +FIDi4yGlfSK9lfAbDK1nuXeQYFxfuNTLp1q5KesYwcAIbDyFZRFqgiXujsHrdRgA +jXQ6MZzhr/etOKfvbbaMrsGfFUB6p1DPGdBEGkDTXrzQZPPbhRtH32bjz8VvqBU+ +cy8zYLdEpjy9ASO4iUevnnbArQ19L3yRulYVevdE3BzWL/EkPA9MojUbwZjWufs1 +z4nKydkiyK8ElHMncXX7PM3Qs4yWjnj1Muy9lD5FqAhJS8eRFFqVitNoRss7RUop +mZhaaUlp6pc2Sv3bZfIAyDxylNUx9lbFOvCNpo5bhOj9xZQ+m2UEOpa3AWy9VBnl +aYu6/UvM4CoaVBRBGnt/2OiVnuQ6EtSyQESN4ISjyYlu9i34EE9Qqkoj8pCUduG/ +3RMm1JTpbK6AE72IMTWcHrnR5XiJwT/xkLtaf8bPQx7Jiz4fqAcNII5Fdg1EgMFh +aR7wMUciOamH2DWmODT9oJt5LEpf4kkEyAukP6LOtsr0yYaz77sabMIQJwARAQAB +tCZLaXRtYWtlciAoRUwgMTApIDxraXRtYWtlckBudmlkaWEuY29tPokCRQQTAQgA +LxYhBDJ/xddqdtwgma73H3q8QkHN9rpDBQJoeYvbAhsvAgsJAhUKAhYCAh4FAheA +AAoJEHq8QkHN9rpDIGoQAL7lOEKbTXtFrCzdh8foCiJyI5V5guN5b4MkBXyMKjL6 +XUftIXx8JiTUOz6267U2bnHo5kvfyuK68LBgQZFFfJEEy5dGLuUBRnCde7UGRNd5 +Dp7O9kRrGnd27JYXYZ2mho2RwwDP9ko36/tVZaW5ymLW+YdEDW/xS+8sARI5nLzD +YqqdyOnoTRk4ig5LZFkXxe6LjhGWlUk24iV32MkdtxnFk9SlPIO5b87TnX5vrYWi +GwjAlIFK1+7/uKq4WGHDpQMh/ejXLc/l1lFITVlirB50J0YxlxOS9mjQVHSS6hyZ +qNSrYtPb6qDcC2J5IBECsjeUMmohi5pPxvWR+n/rznA+RibwfSv76niZqgp9A8nW +gYTchCgOdQBfkGAxVgsz/xUs9TXyMe7UVM9vmWZtk93cOnoPOt0RSXS434gkqlya +yP6wSgSYhU5Gf5oVdFybDpUxkf839TeakMjBviPxjNG86tIdKfysdcZ4Lp/trsch +p4IYlLV93Jy63v8+ZnmGJrm46NBuwFDUOIrOAI6T7dk51e/z837905+tnfB/hg3Q +QgVzv+MZVH18eIq18EqeY0tiur5tddRDIZMWnvNuMIPDciqSTd6Prz8mqo1veiHb +RrpPkHYHBHJtcsvE0KTTmqAXAnTnkYjIOwQ/W4T7hjZhUUUJ0DS0uzLn0pUrJxv1 +=V9PE +-----END PGP PUBLIC KEY BLOCK----- diff --git a/D42D0685.pub b/D42D0685.pub new file mode 100644 index 0000000..9ec4fbd --- /dev/null +++ b/D42D0685.pub @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.22 (GNU/Linux) + +mQINBGJYmlEBEACWTlLInNFRO4j0kcXNwaqsFs48ov6rIBXHAip/mRQa4bQQOpLh +Fjx02ubhV/2zoyz6a0uRPYRd7bxLLNUABSFfT/hp14m+jbY0rzO/Y8S42oXUFlbR +2rItp6pQsX5KivAs2FNpXVbEHeojx6XJFDhZkjfOEyoGiMmMgmFZTfiCOU6nGInW +a4JvzPN6hj6GmQMHI2jYim5by2kXYeUg9LlrteV31RzvpyB3chkqeCGgL+bzaRXn +wNZhMZJOAGI+I+wX0kHLFI+T4TU61VxL6RkDrGFJZBXp0Enzq0IcxPA0KoZk4UK5 +WG6oth4/eEEcyxFnzIWm1wAJhSOyo1Xxm3475UcP2wEDkW3S0IZt14ZTT1YluUY6 +dwiUD8SCInYAfU9CYzHjkBsswiGy47mJTaVnWfjFF+Nk6RJXAN/bcnu6VsZPqM54 +mrhWLl34kCorzWKqY1tGIFwo/9wVJ6JXPDs27zq2mX5OpPqcnD/7xdRhar4A/rJ9 +dgcwzdhH0ChoFf92Ij+x48tght+NTSHNGysZbdNIFBS1VFg68vgR4vSOSIkiPOU5 +gTd2gmVrusrFOPBx+4dq6sxUALb67Z1cS1areq/gCYm5T0eGlX8+KvkLv+temLUj +rscJW0iNibYQJdigPNx66LshdgodTTG+CInc4c4h9USMJZSYwiwhiGqmewARAQAB +tCBjdWRhdG9vbHMgPGN1ZGF0b29sc0BudmlkaWEuY29tPokCOQQTAQIAIwUCYlia +UQIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEJzQpJPULQaFN3AP/RZF +HuO8P1YZhNGl0EpyJkBXlufextNfz2KnjoJNj0+1E8pfR+P1SjROjE6doywVY8DF +XzB1tnp0HVhIxEo/iLMe8AiJDyz/2uHsp+mzc2ZzONxcvB09BTOkCPO7tfbVgsMb +ZFVNIWqiCYEfHjivwymV77Sh9nJYvWfPEPp84V/YVB9lTrBrOUh7G8rjitG3nTbI +ZG6+pkWi3Q9z5GjgtpbnV8AdRNBBPaSTnnZ3gk5cgkJk3CHVf6/6BXvLLicM8k5v +qQhq2MtPExIIAfr8hmg1PLWGLEfAA+3INGTSWXu0HbJNW8bRiVi62wAQFkq5gZLo +wTx6bgQc05dTX+aqBS071KTrICffjlRfrH05JL8HgwWeYC0jG3cGE1cVWSPspCmp +ecnH0CZGrpyCBDUIYho6BXW3IJetSH1WZ8rslYhgIXCPeGpbOQy6//GJzspePZ8M +9gZk9efWfMscwkeGHz10KIdeCacppSeYtOO8CJIBeh79hdW54UO5uadQt/xd+dy6 +CSoK7IXjZcVRXbYN11NS4y8B+Q1KHImJj69bQczI4xqibkDJFylUq4NGEYNkH3pL +wuWNVDbw3KpaErRE06bnZHi46u3upICFMpcrSONTX2JYHWnwf8hWKTi/AeMt5TqU +2yZ9xVhsreSa6Wy1VES1sj+6B/ewQTCzRxXqTk3K +=fyUA +-----END PGP PUBLIC KEY BLOCK----- diff --git a/almalinux-nvidia.repo b/almalinux-nvidia.repo index 75e4ff2..2036dbb 100644 --- a/almalinux-nvidia.repo +++ b/almalinux-nvidia.repo @@ -3,11 +3,11 @@ [almalinux-nvidia] name=AlmaLinux $releasever - NVIDIA Driver & CUDA # mirrorlist= -baseurl=https://nvidia.repo.almalinux.org/$releasever/$basearch/ +baseurl=https://nvidia.repo.almalinux.org/cuda/$releasever/$basearch/ gpgcheck=1 enabled=1 countme=1 -gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-$releasever,https://developer.download.nvidia.com/compute/cuda/repos/rhel$releasever/$basearch/$gpgkey +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-$releasever,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-NVIDIA-CUDA-$releasever metadata_expire=6h ## Sources diff --git a/almalinux-release-nvidia-driver.spec b/almalinux-release-nvidia-driver.spec index b38ac98..838d4b2 100644 --- a/almalinux-release-nvidia-driver.spec +++ b/almalinux-release-nvidia-driver.spec @@ -1,7 +1,7 @@ Name: almalinux-release-nvidia-driver Summary: AlmaLinux NVIDIA driver & CUDA repository configuration Version: %{?rhel} -Release: 4%{?dist} +Release: 5%{?dist} License: GPL-2.0-only URL: https://almalinux.org/ ExclusiveArch: x86_64 %{arm64} @@ -12,21 +12,22 @@ Requires(post): epel-release Provides: almalinux-release-nvidia-driver = %{version} Conflicts: epel-nvidia +# nvidia rhel9 key. URL reflects x86_64 but it is used by all arches +Source109: https://developer.download.nvidia.com/compute/cuda/repos/rhel9/x86_64/D42D0685.pub +# nvidia rhel10 key. URL reflects x86_64 but it is used by all arches +Source110: https://developer.download.nvidia.com/compute/cuda/repos/rhel10/x86_64/CDF6BA43.pub %description DNF configuration for AlmaLinux NVIDIA driver repository -%prep -%if %{?rhel} == 9 -sed -i "s/\$gpgkey/D42D0685.pub/g" %{SOURCE0} -%endif -%if %{?rhel} == 10 -sed -i "s/\$gpgkey/CDF6BA43.pub/g" %{SOURCE0} -%endif - %install -install -D -m 644 %{SOURCE0} %{buildroot}%{_sysconfdir}/yum.repos.d/almalinux-nvidia.repo +install -D -m 0644 %{SOURCE0} %{buildroot}%{_sysconfdir}/yum.repos.d/almalinux-nvidia.repo +%if %{?rhel} == 9 +install -D -m 0644 %{SOURCE109} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-NVIDIA-CUDA-9 +%elif %{?rhel} == 10 +install -D -m 0644 %{SOURCE110} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-NVIDIA-CUDA-10 +%endif %post @@ -37,9 +38,16 @@ fi %files %config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-nvidia.repo +%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-NVIDIA-CUDA-%{?rhel} %changelog +* Wed Mar 11 2026 Jonathan Wright - %{?rhel}-5 +- Add NVIDIA GPG key in package +- Use local path to NVIDIA GPG key instead of URL +- Explicitly set leading 0 in repo file permissions +- Update URL of CUDA repo + * Thu Feb 26 2026 Jonathan Wright - %{?rhel}-4 - Update mirror URLs/names to AlmaLinux-hosted CUDA repo - Remove x86_64_v2 code/macros -- 2.47.3