Initial release of AL10

This commit is contained in:
eabdullin 2024-11-25 13:35:27 +03:00
parent dae39a14f7
commit c06a22aaf1
16 changed files with 466 additions and 286 deletions

View File

@ -17,9 +17,14 @@ enable pipewire-pulse.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1976006
enable pipewire-media-session.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2022717
# https://bugzilla.redhat.com/show_bug.cgi?id=1979419
enable wireplumber.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2181984
# Enable the session agent for snaps
# https://bugzilla.redhat.com/show_bug.cgi?id=1734371
enable snapd.session-agent.socket
# https://src.fedoraproject.org/rpms/fedora-release/pull-request/80
enable obex.service
enable grub-boot-success.timer
enable pulseaudio.socket

View File

@ -1,27 +1,63 @@
# Also see:
# https://fedoraproject.org/wiki/Starting_services_by_default
# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
# for the Fedora policy.
# On Fedora we deviate from some upstream defaults
disable systemd-timesyncd.service
disable systemd-resolved.service
disable systemd-networkd.service
disable systemd-networkd-wait-online.service
# We want to update systemd-boot from packaging scriptlets after updates.
disable systemd-boot-update.service
# systemd
enable remote-fs.target
enable getty@tty1.service
# https://fedoraproject.org/wiki/Changes/EnableSystemdOomd
enable systemd-oomd.service
# These presets were last validated en-masse on 2015-09-09
# https://fedorahosted.org/fesco/ticket/1472
# System stuff
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable dbus.socket
enable dbus-broker.service
enable sshd.service
# Locally-running services
enable atd.*
enable crond.*
enable chronyd.service
enable rpcbind.*
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/636
enable chronyd.service
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
# https://bugzilla.redhat.com/show_bug.cgi?id=1455704
enable NetworkManager.service
enable NetworkManager-wait-online.service
enable NetworkManager-dispatcher.service
enable ModemManager.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311
enable auditd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2258520
enable audit-rules.service
# Locally-running service
enable restorecond.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166
enable bluetooth.*
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable avahi-daemon.*
enable cups.*
# Default configuration is locally-running only
# CUPS is now socket-activatable for local use-cases, so don't enable cups.service
# https://pagure.io/fesco/issue/1701
enable cups.socket
enable cups.path
# RHELBLD-15232: We need the full service enabled to act as a print server
enable cups.service
# The various syslog implementations
enable rsyslog.*
@ -29,19 +65,31 @@ enable syslog-ng.*
enable sysklogd.*
# Network facing
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable firewalld.service
enable xinetd.service
enable ladvd.service
# Virtualization driver specific daemons. Start by defalt at boot for VM
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627
# Virtualization driver specific daemons. Start by default at boot for VM
# autostart, but shutdown after 2 mins and socket activated thereafter
enable virtqemud.service
enable virtxend.service
enable virtlxcd.service
enable virtvboxd.service
# Sockets for the services listed above, to support socket activation
# after the initial timeout
enable virtqemud.socket
enable virtqemud-ro.socket
enable virtqemud-admin.socket
enable virtxend.socket
enable virtxend-ro.socket
enable virtxend-admin.socket
enable virtlxcd.socket
enable virtlxcd-ro.socket
enable virtlxcd-admin.socket
enable virtvboxd.socket
enable virtvboxd-ro.socket
enable virtvboxd-admin.socket
# Compatibility with libvirtd sockets for old clients (socket activated
# only when required). Note that the -tcp and -tls sockets are kept disabled
@ -78,10 +126,28 @@ enable virtlogd-admin.socket
enable virtlockd.socket
enable virtlockd-admin.socket
# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
enable xinetd.service
# Storage
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/391
enable multipathd.service
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/876
enable libstoragemgmt.service
enable lvm2-lvmpolld.socket
# Approved by FESCo - https://pagure.io/fesco/issue/2386
enable iscsid.socket
enable iscsiuio.socket
# Approved by FESCo - https://pagure.io/fesco/issue/2943
enable iscsi-starter.service
# iSCSI support for early-boot
# https://bugzilla.redhat.com/show_bug.cgi?id=1930470
enable iscsi-onboot.service
# Locally-running services
enable lvm2-monitor.*
enable lvm2-lvmetad.*
enable dm-event.*
@ -91,6 +157,9 @@ enable dmraid-activation.service
enable mdmonitor.service
enable mdmonitor-takeover.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1817491
enable raid-check.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=876237
enable spice-vdagentd.service
@ -100,161 +169,299 @@ enable qemu-guest-agent.service
# https://bugzilla.redhat.com/show_bug.cgi?id=928726
enable dnf-makecache.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1995495
enable rpm-ostree-countme.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=957135
enable vmtoolsd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=976315
enable dkms.service
# https://bugzilla.redhat.com/show_bug.cgi?id=961878
enable ipmi.service
enable ipmievd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1039351
enable x509watch.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1060754
enable dnssec-triggerd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1095353
enable uuidd.socket
# Hardware
# Locally-running service
enable gpm.*
# https://bugzilla.redhat.com/show_bug.cgi?id=1066421
enable gpsd.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1141607
enable x2gocleansessions.service
# https://issues.redhat.com/browse/RHEL-35582
enable tuned.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1215641
enable unbound-anchor.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1222495
enable lvm2-lvmpolld.*
# https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates
enable dbxtool.service
# Locally-running services
enable irqbalance.service
enable lm_sensors.service
enable mcelog.*
enable smartd.service
enable pcscd.socket
enable rngd.service
# Other stuff
# Approved by FESCo - https://fedorahosted.org/fesco/ticket/937
# Note: abrt-ccpp.service is excluded in favor of systemd-coredump.
enable abrtd.service
enable abrt-journal-core.service
enable abrt-oops.service
enable abrt-xorg.service
enable abrt-vmcore.service
# Locally-running services
enable kdump.service
enable ksm.service
enable ksmtuned.service
enable rootfs-resize.service
enable sysstat.service
enable sysstat-collect.timer
enable sysstat-summary.timer
enable uuidd.service
enable xendomains.service
enable xenstored.service
enable xenconsoled.service
# Desktop stuff
# Locally-running services
enable accounts-daemon.service
enable rtkit-daemon.service
enable upower.service
enable udisks2.service
enable polkit.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1187072
enable timedatex.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1231745
enable mlocate-updatedb.timer
# https://src.fedoraproject.org/rpms/fedora-release/pull-request/204
enable plocate-updatedb.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1218999
enable sa-update.timer
# Hyper-V guest support daemons
# https://bugzilla.redhat.com/show_bug.cgi?id=1279322
enable vmtoolsd.service
# mcelog is a utility that collects and decodes Machine Check Exception data
# on x86-32 and x86-64 systems.
# https://bugzilla.redhat.com/show_bug.cgi?id=1302179
enable mcelog.service
#https://bugzilla.redhat.com/show_bug.cgi?id=995987
enable kdump.service
#https://bugzilla.redhat.com/show_bug.cgi?id=1009970
enable tuned.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1215645
enable unbound-anchor.timer
# Enable SSSD Kerberos Credential Cache Server
# https://bugzilla.redhat.com/show_bug.cgi?id=1558927
enable sssd-kcm.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1578833
enable sssd.service
# Hardware
enable gpm.*
enable gpsd.*
enable irqbalance.service
enable lm_sensors.service
enable mcelog.*
enable microcode.service
enable smartd.service
enable pcscd.socket
enable rngd.service
# Other stuff
enable abrtd.service
enable abrt-journal-core.service
enable abrt-oops.service
enable abrt-xorg.service
enable abrt-vmcore.service
enable lttng-sessiond.service
enable ksm.service
enable ksmtuned.service
enable rootfs-resize.service
enable sysstat.service
enable uuidd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1193616
enable hypervfcopyd.service
enable hypervkvpd.service
enable hypervvssd.service
# Desktop stuff
enable accounts-daemon.service
enable rtkit-daemon.service
enable upower.service
enable udisks2.service
enable packagekit-offline-update.service
enable PackageKit.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2011240
enable power-profiles-daemon.service
# Initial Setup reconfiguration service
enable initial-setup-reconfiguration.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1312446
# OPAL-prd is a utility specific to ppc64le systems
# It is the "OPAL Processor Recovery Diagnostics Daemon"
# https://bugzilla.redhat.com/show_bug.cgi?id=1312018
enable opal-prd.service
# virtlog.service is sometimes used by VMs started by libvirt.service
# Enable virtlog.socket to have it socket activated
# https://bugzilla.redhat.com/show_bug.cgi?id=1325503
enable virtlogd.socket
# lircd is the Linux Infrared Control daemon
# Starting with version 0.9.4, it requires no manual configuration
# https://bugzilla.redhat.com/show_bug.cgi?id=1340061
enable lircd.socket
# IPSec management
# https://bugzilla.redhat.com/show_bug.cgi?id=1276285
enable pluto.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1271839
enable rhsmcertd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1367932
# Automatically refresh installed snaps
enable snapd.refresh.timer
# Socket activated daemon to manage snaps
enable snapd.socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1359645
enable brandbot.*
# Support for dual-GPU systems
# https://bugzilla.redhat.com/show_bug.cgi?id=1389762
enable switcheroo-control.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1572550
enable timedatex.service
# Support for the DRBD link-cleaning service
# https://bugzilla.redhat.com/show_bug.cgi?id=1399387
enable drbdlinksclean.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1578870
enable selinux-autorelabel-mark.service
enable rhel-configure.service
enable rhel-dmesg.service
# Enable the System Security Services Daemon
# https://bugzilla.redhat.com/show_bug.cgi?id=1427649
enable sssd.service
# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808
enable nis-domainname.service
# Enable ostree-remount on ostree-based systems
# (Does nothing on non-ostree systems)
# https://bugzilla.redhat.com/show_bug.cgi?id=1451458
enable ostree-remount.service
# Enable Performance Co-Pilot services
# https://bugzilla.redhat.com/show_bug.cgi?id=1472350
enable pmcd.service
enable pmlogger.service
enable pmie.service
# Enable SSSD Kerberos Credential Cache Server
# https://bugzilla.redhat.com/show_bug.cgi?id=1475999
enable sssd-kcm.socket
# sssd-secrets.socket was previously enabled, but as of
# SSSD 2.0 it is not longer needed
# https://bugzilla.redhat.com/show_bug.cgi?id=1615584
# A mechanism to transfer state between the initramfs and the real
# system. Obsolete since /run was introduced, but still used by some
# services.
# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
enable import-state.service
enable loadmodules.service
# An initscripts mechanism for readonly root
# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
enable readonly-root.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1630200
# s390x specific services
# Ensure that any installed kmods are built for the currently-running
# kernel at boot
# https://bugzilla.redhat.com/show_bug.cgi?id=1518258
enable akmods.service
# virtualbox-guest-additions service, yet another virtual-machine guest
# integration agent, this is a locally-running service, Note this has a
# "ConditionVirtualization=|oracle" so it will only run under VirtualBox
# https://bugzilla.redhat.com/show_bug.cgi?id=1534595
enable vboxservice.service
# Mark the system for SELinux autorelabel when appropriate
# https://bugzilla.redhat.com/show_bug.cgi?id=1589720
enable selinux-autorelabel-mark.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1623901
enable cpi.service
# Initialize persistent devices on s390x
enable device_cio_free.service
# Enable the stratis daemon for managing stratis storage
# https://bugzilla.redhat.com/show_bug.cgi?id=1632510
# https://bugzilla.redhat.com/show_bug.cgi?id=1630514
enable stratisd.service
# https://bugzilla.redhat.com/show_bug.cgi?id=1817591
enable mlocate-updatedb.timer
# Enable a service to finalize staged OSTree changes at shutdown
# https://bugzilla.redhat.com/show_bug.cgi?id=1639372
enable ostree-finalize-staged.path
# nvme auto connect
# https://bugzilla.redhat.com/show_bug.cgi?id=1805466
enable nvmefc-boot-connections.service
# Enable the Docker daemon socket
# https://bugzilla.redhat.com/show_bug.cgi?id=1655602
enable docker.socket
# OSTree based systems need to remount /sysroot and
# /var as rw via ostree-remount.service
# ignored by non-OSTree based systems
# https://bugzilla.redhat.com/show_bug.cgi?id=1848453
enable ostree-remount.service
# Enable the service for adding Fedora OCI repos to flatpak
# https://bugzilla.redhat.com/show_bug.cgi?id=1696225
enable flatpak-add-fedora-repos.service
# DBus needed by Anaconda
enable dbus.socket
enable dbus-broker.service
# Run fstrim weekly on filesystems listed in fstab
enable fstrim.timer
# Enable iscsi service files
# https://bugzilla.redhat.com/show_bug.cgi?id=1930458
enable iscsi.service
enable iscsid.socket
enable iscsiuio.socket
enable iscsi-onboot.service
# oneshot to generate kata VM appliance at host bootup
# for the booted kernel
enable kata-osbuilder-generate.service
# Enable logrotate.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=1977865
# Enable rotation of system log files
# https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4
enable logrotate.timer
# Enable greenboot
# https://bugzilla.redhat.com/show_bug.cgi?id=2005552
enable greenboot-grub2-set-counter.service
enable greenboot-grub2-set-success.service
enable greenboot-healthcheck.service
enable greenboot-rpm-ostree-grub2-check-fallback.service
enable greenboot-status.service
enable greenboot-task-runner.service
enable redboot-auto-reboot.service
enable redboot-task-runner.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2108625
enable greenboot-service-monitor.service
# Enable regular update of SpamAssassin data files
# https://bugzilla.redhat.com/show_bug.cgi?id=1651002
enable sa-update.timer
# https://bugzilla.redhat.com/show_bug.cgi?id=2013299
enable low-memory-monitor.service
# Enable service to automatically rebuild the RPM database
# on startup when /var/lib/rpm/.rebuilddb exists
# https://bugzilla.redhat.com/show_bug.cgi?id=1826658
enable rpmdb-rebuild.service
# https://bugzilla.redhat.com/show_bug.cgi?id=2049627
enable switcheroo-control.service
# Enable service to automatically migrate the RPM database to /usr
# on startup when /var/lib/rpm/.migratedb exists
# https://bugzilla.redhat.com/show_bug.cgi?id=2044061
enable rpmdb-migrate.service
# Support services for Google Cloud
# Approved by FESCo: https://pagure.io/fesco/issue/2578
enable google-guest-agent.service
enable google-startup-scripts.service
enable google-shutdown-scripts.service
# Support service for Azure
# Approved by FESCo: https://pagure.io/fesco/issue/2849
enable waagent.service
# Certbot (Let's Encrypt)
# https://bugzilla.redhat.com/show_bug.cgi?id=1940211
enable certbot-renew.timer
# enable thermald by default for desktops
# https://pagure.io/fedora-workstation/issue/71
enable thermald.service
# enable uresourced by default for desktops
# https://pagure.io/fesco/issue/2457
enable uresourced.service
# enable power-profiles-daemon
# https://pagure.io/fedora-workstation/issue/191
enable power-profiles-daemon.service
# Enable clevis-luks-askpass.path
# https://bugzilla.redhat.com/show_bug.cgi?id=2106811
# https://bugzilla.redhat.com/show_bug.cgi?id=2101719
enable clevis-luks-askpass.path
# Enable livesys services for live media
# https://bugzilla.redhat.com/show_bug.cgi?id=2148790
enable livesys.service
enable livesys-late.service
# Enable Waydroid
# https://bugzilla.redhat.com/show_bug.cgi?id=2157810
enable waydroid-container.service
# Enable nmstate to apply network configuration from /etc/nmstate/*.yml
# https://github.com/coreos/fedora-coreos-tracker/issues/1175
# https://github.com/coreos/fedora-coreos-config/pull/2269
enable nmstate.service
# Enable nfs-client.target
# https://bugzilla.redhat.com/show_bug.cgi?id=2218006
enable nfs-client.target
# Enable cloud-init services
# https://bugzilla.redhat.com/show_bug.cgi?id=2233948
enable cloud-config.service
enable cloud-final.service
enable cloud-init.service
enable cloud-init-local.service
# Enable kernel-bootcfg-boot-successful.service
# RHEL-21816
# https://bugzilla.redhat.com/show_bug.cgi?id=2239607
enable kernel-bootcfg-boot-successful.service
# Enable pd-mapper service for Thinkpad X13s
# https://bugzilla.redhat.com/show_bug.cgi?id=2255318
enable pd-mapper.service
# The Cockpit web-based system management console
enable cockpit.socket
# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
enable fwupd-refresh.timer

29
RPM-GPG-KEY-AlmaLinux-10 Normal file
View File

@ -0,0 +1,29 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=tJCw
-----END PGP PUBLIC KEY BLOCK-----

View File

@ -1,52 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGHmnykBEACuIcqcNYTmu2q58XI5NRZowdJGAxxs+6ExX7qsa4vbPp6St7lB
JmLpwf5p6czIBhLL4b8E7zJpu57tVDo7Ejw6Hv584rbI8vw7pnMTe6XUFhMTL8FT
lyAmn8xAIlcyM+SzshnxAc5b8E0p/egMonr3J1QnvMSfixMQ59GrmLVyece7Vv3J
4fREh6k31kg7eQdEkzRQhRdO2KyxWYLR0A6haXSXVaiBOjFF7iUs7anlJSfeD3FO
afPq0Ix8oWi+mUc4txkABMdsGpdkE/MHOwN90FB8EG5XVrdv3emm3yzKMMzb53Yd
jcf0fovIeRloQyl9+CrVCnkBjFcIFBZZddsB43kM7eTflmAQ+tanOZ8OKBRPMtmI
56b/vk31ozHUoST/NmjbEI5tu+QYCuFSZ++mC06qJg0Bkw821DTAsM7Kynuj7K2f
WWQjlDL9ZsFifLqDXRymL+sn6g142hHQOa5KSHtT7cAcrm6L48gEL3fPntVSOU/H
BlTnODiSSTIsIRNA7kBkbSP3wWoYC1JQPmNYbUtZ7va2uXNb9dGT2k7Ae0465WND
wqRQJDxsr6TLYFpti+JRaOpSMNclXz4kRSP263Y4ZzQvkMGgSgwqg7JU00Uahk2p
KTlJAA8AiaMBdShlo/QXvL29Lyg0Y5klq2HCNziJDupWhXto5j5pjixrpwARAQAB
tCdBbG1hTGludXggT1MgOSA8cGFja2FnZXJAYWxtYWxpbnV4Lm9yZz6JAk4EEwEI
ADgWIQS/GKwodheJCNbnEmfTbLhsuGs3FgUCYeafKQIbAwULCQgHAgYVCgkICwIE
FgIDAQIeAQIXgAAKCRDTbLhsuGs3FrvnD/9X1wDM/C214t3UVsMVjTLdIJDGG+iU
E7Uk7QGeyeNif19rRatzXUHBBGjiAwpxe2rkveWBHCHPSUKqsAR9Arv3nMKiaGfA
0nomzDndLEDIgv35xzaU6OhX95mZzvj+9PThuxDxUnsNoA+7vGkaiRw+cyyDdTJQ
bKwum8bx1gS8Kbqo9mqrMekQ4NHCodq9bb2hI6pAxlYa472QuwFAXFAzbE3LIMIK
hzLkew7nxwP0txP/zzqPw4lYN38fg9AlHL2qgf0twCFO4N/ftkw25qwoiBhiwaWT
Ca8Z9wUJx35Z/ufscbNrtRrIGYNXTDFJdGY/WxKDp7QsyOx/sclcsSksKoC/52tL
2yFLQrMXsqnLjAQajA6adaeCAAwvp2/8VP8R65O4KMuKghMneCGwXVlVVYyRUXJD
Kjg7EvmmMGuh/Lj2A/vj+mQMmlS2kAl0qOsK9DtUIA7Z9m98zI3UmN/5BMb/HdqW
KADagOW9IPyo6IaSIT+A+7npTN1Y7m1aIrL1vsAKrus4MrCvAs1vYqzqIikv88Di
EWYVFCWTsTWf7jxBCVTLn1Lr7Mj08i+7OgRgguQGpcnvKsbwq1v2whQrs+YKR9hP
vVaW5DmGJ5brPykJUaQS6p5Esp1q3HBk0HbBxiiGIwGsKbLp0pKsk5TLzMIJwIG/
lEolCV+fJ0P4nLkCDQRh5p8pARAAvXTL29arJ5Dl9FXVpE4Km1jJLaK2WfbQARJz
ygQKps9QNqS1yz7C7mYdTtgRxeK2eqcX5oA83w3ppJ0DTsxfAkY3nqAXS8+QRORU
ffSFvhdsU1G/qpvhX0Aq62gr4y1bkIMr9GlLq86uVKIQrNdmto4NDfQc1bDD5e4j
KaNMmNLXxq/s67AxFW/yLchYYZ7cMqQd6Ab4lacqpGdYFIAkBkVMmj3GUSo+FLpl
+4c50AZ8O0aB+xkrjch+4PoVyIpIC1IuqNYBYn2wMYFB414QY2iDopzpZXUhpCqx
NP4Zyhl1noUcOtH/wUfH1JsIcYRn0ixWF6JnE9KmjpkqBuM2/4Ot/bl67iPiN/if
vf3Z1kYjNPaszoMW3kmJj8MlBCSH9w6nQRG/eikihbeUDBB6rh2O7Dz8ltFqlt8N
asbngRoNZMnWMnItRV67Fo0pfn/DZA8VvI029apE21sNp6l7MUa8Z2/I/PNq10E8
rPMQM//k9y2kgxz52i6iCyesobPvun6UC4xuFoYKUTQMgKQgqOhyZ4evkepFhmHg
Gzx+F8EmwN1FtxfNxfLtQZSUT3kxuUDizwpaH/LkSkRXpJOQyHJL6VBINNTjB4j1
3+0jD+lCV6xIt88NYkGJL9rtKwZLQHSDPiI0ooCJ69GKy8SmSx04AwSsY67In1q8
+FQjT20AEQEAAYkCNgQYAQgAIBYhBL8YrCh2F4kI1ucSZ9NsuGy4azcWBQJh5p8p
AhsMAAoJENNsuGy4azcW0KkP/i0YLRv+pDiSC4034oboczAnNrzJnBhqTi9cUEGn
Xpqvf/Zz3opqvRQiqZAgVcCtxfW+P9J3Vb/mBJ6OkR/jywAlY5il2dzK08YfVXmP
cEf6RF4M0KNtlYJmPlnQCZjMJaisrPmYD3Yy8ER1qJ5JQZ7n0REHZCbBCqH8w+5r
j4ohEHY7xXbd7+tvWTCk2MkHaide/UV/04WiO064AoZSUze/vaAx8Ll4AyFpxuIk
ktXZXbq7MaVzqYYJptiRB6TljzMwIbblLm9A7T7YTA/1rNe12OhDT8VoR3gG2C/l
Mtf37EmYq3QVqFlbj4+ouQWIiQmp5dQenH5ugf+Bob7IiENpxzF1cIu6wd4p5Y64
3cdYUoxrjhsCM6W1lSqECoN8yXJnRTxpBwwm65SVk477KS2h77aJfa+v5UnBhpSt
eVlAhs0A8Qp/hX3o7qMO1jWca3zdJwXppLlFEYTVaFUOUrc4Lhlbi0gAnn8aBwSx
xF1r5GhPGIBzHtRgulwZkmS6VwtDMuC6KlrASu9f93D5gLZqVk22Oar9LpgCEACd
8Gw/+BFbdANqo9IKmDrWf7k/YuEqZ3h+eoyKI/2z7dKh/fcVEydMTn3LB4nFRvSD
AZ27tvC0IUXCUNx7iJdrD5kDsMhZRl5/dXbe539G4y2W00QYuJC0DpUvGdtOuaFx
1WKL
=jk2t
-----END PGP PUBLIC KEY BLOCK-----

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=1
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-source
# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=1
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-source
# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/crb
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/crb-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/CRB/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/crb-source
# baseurl=https://repo.almalinux.org/vault/$releasever/CRB/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras
enabled=1
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/extras/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-source
# baseurl=https://repo.almalinux.org/vault/$releasever/extras/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/highavailability
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/highavailability
# baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/highavailability
# baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/NFV/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-source
# baseurl=https://repo.almalinux.org/vault/$releasever/NFV/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/plus/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-source
# baseurl=https://repo.almalinux.org/vault/$releasever/plus/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -1,17 +1,22 @@
%global distro AlmaLinux
%global release_name Teal Serval
%global major 9
%global minor 5
%global eol_date 2032-06-01
%define release_name Purple Lion
%global major 10
%global minor 0
%global eol_date 2035-06-01
%global beta Beta
Name: almalinux-release
Version: %{major}.%{minor}
Release: 1%{?dist}
Release: 14.4%{?dist}
Summary: %{distro} release files
License: GPLv2
License: GPL-2.0-or-later
URL: https://almalinux.org
Provides: centos-release = %{version}-%{release}
# When running a compose for ELN, we want to make sure that we pull in the
# correct templates when lorax is installed. This Suggests: will clue
# libdnf to use this set of templates instead of lorax-templates-generic.
Suggests: lorax-templates-almalinux
# Required for a lorax run (to generate install media)
Requires: almalinux-repos = %{version}-%{release}
@ -25,6 +30,7 @@ Provides: redhat-release = %{version}-%{release}
# https://github.com/rpm-software-management/dnf/blob/4.2.23/dnf/const.py.in#L26
Provides: system-release = %{version}-%{release}
Provides: system-release(releasever) = %{major}
Conflicts: system-release
# required by libdnf
# https://github.com/rpm-software-management/libdnf/blob/0.48.0/libdnf/module/ModulePackage.cpp#L472
@ -40,14 +46,6 @@ Source303: 99-default-disable.preset
Source304: 50-redhat.conf
Source400: alsecureboot001.cer
# kernel signing certificate
Source401: alsecureboot001.cer
# grub2 signing certificate
Source402: alsecureboot001.cer
# Fwupd signing certificate
Source403: alsecureboot001.cer
# UKI signing certificate
Source404: alsecureboot001.cer
Source500: almalinux-appstream.repo
Source501: almalinux-baseos.repo
@ -57,12 +55,11 @@ Source504: almalinux-highavailability.repo
Source505: almalinux-resilientstorage.repo
Source506: almalinux-sap.repo
Source507: almalinux-saphana.repo
Source508: almalinux-plus.repo
# Only for x86_64
Source510: almalinux-nfv.repo
Source511: almalinux-rt.repo
Source600: RPM-GPG-KEY-AlmaLinux-9
Source600: RPM-GPG-KEY-AlmaLinux-10
%package -n almalinux-sb-certs
Summary: %{distro} public secureboot certificates
@ -70,15 +67,19 @@ Group: System Environment/Base
Provides: system-sb-certs = %{version}-%{release}
Provides: redhat-sb-certs = %{version}-%{release}
Provides: centos-sb-certs = %{version}-%{release}
Provides: almalinux-sb-certs = %{version}-%{release}
%package -n almalinux-repos
Summary: %{distro} package repositories
Requires: almalinux-release = %{version}-%{release}
Requires: almalinux-gpg-keys = %{version}-%{release}
# Required by CentOS SIGs release packages
Provides: centos-stream-repos = %{version}-%{release}
%package -n almalinux-gpg-keys
Summary: %{distro} RPM keys
# Required by CentOS SIGs release packages
Provides: centos-gpg-keys = %{version}-%{release}
%description
%{distro} release files.
@ -92,7 +93,6 @@ This package provides the package repository files for %{distro}.
%description -n almalinux-gpg-keys
This package provides the RPM signature keys for %{distro}.
%install
# copy license and contributors doc here for %%license and %%doc macros
mkdir -p ./docs
@ -124,13 +124,14 @@ ln -s almalinux-release %{buildroot}%{_sysconfdir}/redhat-release
%global dist_bug_report_url https://bugs.almalinux.org/
# debuginfod server, as used in elfutils.spec.
# %global dist_debuginfod_url %{nil}
# %global dist_debuginfod_url https://debuginfod.centos.org/
# -------------------------------------------------------------------------
# Create the os-release file
install -d -m 0755 %{buildroot}%{_prefix}/lib
cat > %{buildroot}%{_prefix}/lib/os-release << EOF
NAME="%{distro}"
NAME="%{dist_name}"
VERSION="%{major}.%{minor} (%{release_name})"
ID="almalinux"
ID_LIKE="rhel centos fedora"
@ -142,6 +143,8 @@ LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:almalinux:almalinux:%{major}::baseos"
HOME_URL="%{dist_home_url}"
DOCUMENTATION_URL="https://wiki.almalinux.org/"
VENDOR_NAME="AlmaLinux"
VENDOR_URL="%{dist_home_url}"
BUG_REPORT_URL="%{dist_bug_report_url}"
ALMALINUX_MANTISBT_PROJECT="AlmaLinux-%{major}"
@ -175,8 +178,9 @@ cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
%%centos_ver %{major}
%%centos %{major}
%%rhel %{major}
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}.el%{major}%%{?with_bootstrap:%{__bootstrap}}
%%el%{major} 1
%%distcore .el%{major}
%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
%%dist_vendor %{dist_vendor}
%%dist_name %{dist_name}
%%dist_home_url %{dist_home_url}
@ -213,28 +217,29 @@ install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
# Install aarch64 certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
install -m 644 %{SOURCE403} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
# Install x86_64 certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
install -m 644 %{SOURCE403} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
# Install ppc64le certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
# Install s390x certs
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
# Link x86_64 certs
ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-x86_64.cer
@ -271,13 +276,18 @@ install -p -m 0644 %{SOURCE504} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE505} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE506} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE507} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE508} %{buildroot}%{_sysconfdir}/yum.repos.d/
# RT and NFV are only for x86_64
%ifarch x86_64
install -p -m 0644 %{SOURCE510} %{buildroot}%{_sysconfdir}/yum.repos.d/
install -p -m 0644 %{SOURCE511} %{buildroot}%{_sysconfdir}/yum.repos.d/
%endif
# Replace basearch to x86_64_v2
%ifarch x86_64_v2
sed -i "s/\$basearch/x86_64_v2/g" %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
sed -i '/^mirrorlist=/ s|$|?arch=x86_64_v2|g' %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
%endif
# dnf variables
install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
@ -286,6 +296,13 @@ echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
install -p -m 0644 %{SOURCE600} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
# These variables should be set in the build environment to change rpm names
mkdir -p %{buildroot}%{_sysconfdir}/rpm
%ifarch x86_64_v2
echo '%%_target_platform x86_64-%%{_vendor}-%%{_target_os}%%{?_gnu}' >> %{buildroot}%{_sysconfdir}/rpm/macros.x86_64_v2
echo '%%x86_64_v2 1' >> %{buildroot}%{_sysconfdir}/rpm/macros.x86_64_v2
%endif
%files
%license docs/LICENSE
@ -306,6 +323,9 @@ install -p -m 0644 %{SOURCE600} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
%{_prefix}/lib/systemd/system-preset/*
%{_prefix}/lib/systemd/user-preset/*
%{_prefix}/lib/sysctl.d/50-redhat.conf
%ifarch x86_64_v2
%config(noreplace) %{_sysconfdir}/rpm/macros.x86_64_v2
%endif
%files -n almalinux-sb-certs
# Note to future packagers:
@ -319,12 +339,11 @@ install -p -m 0644 %{SOURCE600} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-appstream.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-baseos.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-crb.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-extras.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-extras-common.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-highavailability.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-resilientstorage.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-sap.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-saphana.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-plus.repo
%ifarch x86_64
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-nfv.repo
%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-rt.repo
@ -334,34 +353,6 @@ install -p -m 0644 %{SOURCE600} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
%files -n almalinux-gpg-keys
%{_sysconfdir}/pki/rpm-gpg
%changelog
* Tue Nov 12 2024 Eduard Abdullin <eabdullin@almalinux.org> - 9.5-1
- 9.5 stable
* Tue Apr 30 2024 Andrew Lukoshko <alukoshko@almalinux.org> - 9.4-1
- 9.4 stable
* Tue Nov 07 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 9.3-1
- 9.3 stable
* Tue May 02 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 9.2-1
- 9.2 stable
* Tue Nov 15 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 9.1-1.9
- 9.1 stable
* Wed Jun 22 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 9.0-4
- Fix AlmaLinux version in EULA
* Mon May 23 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 9.0-3
- 9.0 stable
- Split repo files
- Add SAP and SAPHANA repos
* Thu Apr 21 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 9.0-2
- Update repo URLs
- Remove centos-stream-release from provides
* Mon Jan 24 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 9.0-1
- Initial release for 9.0 beta
* Mon Nov 25 2024 Eduard Abdullin <eabdullin@almalinux.org> - 10.0-14.4
- Initial release

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
# baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
# baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/RT/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-source
# baseurl=https://repo.almalinux.org/vault/$releasever/RT/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/SAP/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-source
# baseurl=https://repo.almalinux.org/vault/$releasever/SAP/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0

View File

@ -5,7 +5,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana
enabled=0
gpgcheck=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -15,7 +15,7 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-debug
# baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/debug/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0
@ -25,6 +25,6 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-source
# baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/Source/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
metadata_expire=86400
enabled_metadata=0