30 changed files with 1393 additions and 862 deletions
--- a/90-default.preset
+++ b/90-default.preset
@ -1,199 +0,0 @@
-# Also see:
-# https://fedoraproject.org/wiki/Starting_services_by_default
-
-disable systemd-timesyncd.service
-disable systemd-resolved.service
-
-# systemd
-enable remote-fs.target
-enable getty@tty1.service
-
-# System stuff
-enable sshd.service
-enable atd.*
-enable crond.*
-enable chronyd.service
-enable rpcbind.*
-enable NetworkManager.service
-enable NetworkManager-dispatcher.service
-enable ModemManager.service
-enable auditd.service
-enable restorecond.service
-enable bluetooth.*
-enable avahi-daemon.*
-enable cups.*
-
-# The various syslog implementations
-enable rsyslog.*
-enable syslog-ng.*
-enable sysklogd.*
-
-# Network facing
-enable firewalld.service
-enable libvirtd.service
-enable xinetd.service
-enable ladvd.service
-
-# Storage
-enable multipathd.service
-enable libstoragemgmt.service
-enable lvm2-lvmpolld.socket
-enable lvm2-monitor.*
-enable lvm2-lvmetad.*
-enable dm-event.*
-enable dmraid-activation.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=855372
-enable mdmonitor.service
-enable mdmonitor-takeover.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=876237
-enable spice-vdagentd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=885406
-enable qemu-guest-agent.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=928726
-enable dnf-makecache.timer
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=957135
-enable vmtoolsd.service
-
-# mcelog is a utility that collects and decodes Machine Check Exception data
-# on x86-32 and x86-64 systems.
-# https://bugzilla.redhat.com/show_bug.cgi?id=1302179
-enable mcelog.service
-
-#https://bugzilla.redhat.com/show_bug.cgi?id=995987
-enable kdump.service
-
-#https://bugzilla.redhat.com/show_bug.cgi?id=1009970
-enable tuned.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1215645
-enable unbound-anchor.timer
-
-# Enable SSSD Kerberos Credential Cache Server
-# https://bugzilla.redhat.com/show_bug.cgi?id=1558927
-enable sssd-kcm.socket
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1578833
-enable sssd.service
-
-# Hardware
-enable gpm.*
-enable gpsd.*
-enable irqbalance.service
-enable lm_sensors.service
-enable mcelog.*
-enable microcode.service
-enable smartd.service
-enable pcscd.socket
-enable rngd.service
-
-# Other stuff
-enable abrtd.service
-enable abrt-journal-core.service
-enable abrt-oops.service
-enable abrt-xorg.service
-enable abrt-vmcore.service
-enable lttng-sessiond.service
-enable ksm.service
-enable ksmtuned.service
-enable rootfs-resize.service
-enable sysstat.service
-enable uuidd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1193616
-enable hypervfcopyd.service
-enable hypervkvpd.service
-enable hypervvssd.service
-
-# Desktop stuff
-enable accounts-daemon.service
-enable rtkit-daemon.service
-enable upower.service
-enable udisks2.service
-enable packagekit-offline-update.service
-enable PackageKit.service
-
-# Initial Setup reconfiguration service
-enable initial-setup-reconfiguration.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1312446
-enable opal-prd.service
-
-# virtlog.service is sometimes used by VMs started by libvirt.service
-# Enable virtlog.socket to have it socket activated
-# https://bugzilla.redhat.com/show_bug.cgi?id=1325503
-enable virtlogd.socket
-
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1271839
-enable rhsmcertd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1359645
-enable brandbot.*
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1572550
-enable timedatex.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1578870
-enable selinux-autorelabel-mark.service
-enable rhel-configure.service
-enable rhel-dmesg.service
-
-# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808
-enable nis-domainname.service
-enable import-state.service
-enable loadmodules.service
-enable readonly-root.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1630200
-# s390x specific services
-enable cpi.service
-enable device_cio_free.service
-
-# Enable the stratis daemon for managing stratis storage
-# https://bugzilla.redhat.com/show_bug.cgi?id=1632510
-enable stratisd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1817591
-enable mlocate-updatedb.timer
-
-# nvme auto connect
-# https://bugzilla.redhat.com/show_bug.cgi?id=1805466
-enable nvmefc-boot-connections.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1683101
-enable nfs-convert.service
-
-# OSTree based systems need to remount /sysroot and
-# /var as rw via ostree-remount.service
-# ignored by non-OSTree based systems
-# https://bugzilla.redhat.com/show_bug.cgi?id=1848453
-enable ostree-remount.service
-
-# enable greenboot services
-# https://bugzilla.redhat.com/show_bug.cgi?id=1935177
-enable greenboot-grub2-set-counter.service
-enable greenboot-grub2-set-success.service
-enable greenboot-healthcheck.service
-enable greenboot-rpm-ostree-grub2-check-fallback.service
-enable greenboot-status.service
-enable greenboot-task-runner.service
-enable redboot-auto-reboot.service
-enable redboot-task-runner.service
-
-# enable dbus services
-# https://bugzilla.redhat.com/show_bug.cgi?id=1941642
-# https://projects.engineering.redhat.com/browse/RHELBLD-6131
-enable dbus.socket
-enable dbus-daemon.service
-
-# enable nfs-client.target
-# https://bugzilla.redhat.com/show_bug.cgi?id=1967515
-enable nfs-client.target
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=2126605
-enable clevis-luks-askpass.path
--- a/87
+++ b/87
@ -1,87 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1
-
-mQINBF/9iQ4BEADguRE+cjShp7JujKkiVH3+ZYYD5ncX7IMh7Ig0DbDC8ldtm84k
-4vi8266IIBLM3eRgkF9sgHciRikTPow50R+Ww7jJzehV9vjTkRzWr8ikog6X3ZPw
-rh9QAqOdTOIn4bBSS6j5+xdxYKG7yEWXjADbkFVSiLvejp3FrLZGlNFdPCkGKFhC
-vTCgbEKtAkXHx/jFDJCYbnJkzrecCSd+a3yQ4Ehp6TCxnywXdseX4WGyNT3E6Ppu
-JRIXLKrVwP/5pZxqgBS9EDsQpaqxmkS8iJe9j8Bkzm4mL0K4Y8B5vApIyxRO0i0C
-8Eb8UgLSoOwWsZjWpDcYtLgCTNT1CCaOe5lG6qy3HD6Y7LiXinnMgq5uXbfTEKxZ
-rUyQ9Jepxe5hk5GJ1mTbQ6vEj0oYOWYWCwLZKOHucRh8BmvYEbhMBGsgBGcMruql
-Na+gw1eVIMTknGCdGGwceb3DLNHXGolU3GDTKd8d6lEaXkFx9zXWBicOIDyG72tU
-vZMj2RVzmgEhxcw1vKxoJIUOegjpdqBqTJRnM/tnimm4eE65hHhuqRYIngwHWqL0
-K+Daxt+J+4l5Xo56AEYc+2i8JA1nGT/nw13KE/7S79wRVaJPzDccI7/mefDKcF3R
-EGWG7f9jWqoCB+wvXD+0FpHDcp0TPgDcWTObUs3yBoySbgj8IXL3z2R64wARAQAB
-tCJBbG1hTGludXggPHBhY2thZ2VyQGFsbWFsaW51eC5vcmc+iQI+BBMBAgAoBQJf
-/YkOAhsBBQkFo5qABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBIj898Ors0
-+IsjD/9/F/PIu7kSn4P8Ud9j/iyoO8hH53qXKMimarg920ugt2uUyl6SzaJqV0dK
-ACrczvC0VmxrNaJ1jB31TGPpdJZpey5AJbefofu/RgAlxHN6o3QX0Br4bEHahF20
-21q2eIjoMrq8eiz8X5D2wfx6CyOA6RZY96MVQ2whXjQHV+hwo65xyMUyjTuFx5Pb
-nl7gdYr9EkH3EafdNrpuVurp+Zrgur+973nUrzKq8c2rlDiEQz/ZG+bgasTDYkcz
-q6NUPP5OQ5BVpFCkuE9YuziZD+37hxN07P2gyz9NRrfAOZqBXj8er4vqNhpR/lLA
-h5QF1erb0mjcMFEhkV8ETN0ceJzL/t829BlQ7MB7LdQ5v9kc5p5cwcsBly54ouI0
-l9LjSN95Al0VPoWE8zgjnytecu2UN5+0k12bfcj0zjKdAxEVD3y9Id1MJIze7/PA
-6v3LOk+SSs8M0ASmZEnDBTCbDRpXlDDUKEEmMIBRdvpTxjiUnwD2tHwhXR8m6vw6
-749i+mdc8fgljTey8sJLKxTabbYNgTHLi9lCMdmPlKU2QJYsIwIBpqF2/eenNyZT
-LvlW/aBUU7Li3etUnJeP9ig+V2LuDhyT6TlVPsFKCCruoy7faSjW2/2wlVcasGQp
-YqqqqtQJyVDRud6ig7oH3EWSvUySEmywjBp5zfwrMw3jeWkwHbkBjQRf/YnGAQwA
-tk5NBR7SCwYwEsmPDUX/SJ98eGHb1nux/cRaX+K2KgX7Yi3hhlFs/InkiiNKs+Au
-0N5ZBIXltypguo5jE3MwXQxLr2MfJ74bdDXR7z3BmBB92BMaS+tHNJWroYnqiSQ7
-2PXfWRF9PtlChF12NyK6SVrQg58IqJjf5MQ8hodgIk0t21qCvxe/IotktjKHy2Vn
-gvKPjtT05qXpAK0CP8N5wtOc4WnFCxvNTI7e1KkYS4dvXHL6V+WvqL3saGIXY5Iy
-0jYZW5xMxh691C+HvHQ8/Lof3Enenz3hDJR0X9wvzusxBJWwg/vqRIR8+YYKSHj1
-VEFycTabqGLlnPpYpFqDOdqS2gDtdrD6FEsrSpy9pBd98XAzjkn6BW4Rf0PTaJ/z
-b3paHsqxEnWbamANs5GYs1Y/1rEIl66jOhZB9Sua22/wfGd3PvfM6nxi825l4coO
-bbivRY6U4/WtxQUcK8zdoF97zUlvbNNN0LsluZ0tBF44o5vt7f4aCGXZ8XMVIef1
-ABEBAAGJA8QEGAECAA8FAl/9icYCGwIFCQWjmoABqQkQSI/PfDq7NPjA3SAEGQEC
-AAYFAl/9icYACgkQUdZkfsIa1upqtQv/R9oLsG3g4Rg2MKDrXYSa94n1CBY5ESDL
-1N0mZTWQ5nVdfIWWifnpe72VDBR3Y+r5ootnCHq09DbK+K3q82q2UmGEq968mR96
-LKGjWuTS1rY/MCbQbW+jcrnju0T3bCcImggMJoYCzuUnBfIkexObwi/YidqgL92+
-nw3NzqeWnq+gu/1Q2ngzhN8Ft4mwOcFr9H0px0476LLvR+7lrSu2HqGeHk+fUA4c
-ZNwvsgGYgCAJhz8fPwKCoLrxsE82bkZ86JgUJEcMu0ki4UFo3rg6NmkDwnrYO61l
-MOrBCxt/lPJz7d8L9oCLu9pJSBsKH9RNqO10NAoEMppKwnQSz6RQFRJj7WNW+OEs
-mjZt7sNrTr0Y+udx58Sqd0C5k7lGUtYWKKGpLfdz0RLnBTTFmjnB3Y2uyOJFc4FS
-g251yjk9ds1AFjdRThQ2kFpZzQAo5ei6zMBaZATg0E2uk4HAfpQ58CPGj4f1k3py
-1N2hYUA+qksZIVxjFfwYr5LCv4tMZumZl6UP/je7EHh5IGkB1+Bpeyj3dudZblvM
-lE6kdGridxInbiJvgqBSdprIksR8wm1Vy/Z1/lHEM6QnUODGyRAbjQHL3kPKloPj
-lKr8TNAELbmVTZjBRJowsGw27rhYAaji/qEet/0ALfu2l3QuOQ38dyuPpxlDSTLY
-WnajVIgvSJUU3Yl38Lp3UTuHdtdiNWgyHkLOA/11GK14RSWYsjZAamstlSpl24Op
-yKLN5z+q4tNAs+tfQrWNRi3SMG7UDroxztJVkHGvuJ2DT/Q6tANigPzipLzSgOIO
-8Wa2aQmqtQ4V0eB2S4DxcMckHti3+4fbrzBzeN/PFaIVLwUtdsUdBs+TtSZFdN9e
-i0oLUChIYKDvVBGqgmIor6YgenNSSZni3rj+RRA3gQom7jyVrQPgUv7lsv/MLCmg
-Ogpibxs3+SDbbZ6tP0D8uxdRnB4NVeENewlqw/ImacgjLtjBHaq+BebjWErIAkdX
-VnjWoLdZoV3B4ComKsjFNf7sfbzV/T2Xpg/r/u1WkiSjvD0mkSZ+3seDjd6oL20s
-p7jGLnSGZqGsUksJym0tWRvuyspgTELZlcjuMfHKuKmYudYFi+Y48+YsdJ7UetNT
-kAIBinjtZwEEAP4GumNNy7f4l4tt1CBy1EgoYtYCcJC5SGyhWMee3L3hLhHe7Iwd
-72EHtteVBoVn0eg6
-=rEWJ
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----
-
-mQINBGUlFG8BEADc0kEC57b722MbPVkI8aoYFAEWM+lj084H26msZpAYVfW7fCi5
-S7g3n6htVdvvnB6MrJANitZgQhMyC7tchNQz5sjrFffasNkOoI5Q27PSrG676ILP
-diowPWfJkwrN0f0UcJsV3w5KBedvUXJnoa64lP/oBFkbz3SvUTqZFkSBzOfCTdXW
-bvpZonghgm/AEU8wqsdOitXU23Xn4fsPB7aULgR31jz3irnaUDFXUnNqoiQpU6JB
-P6WiFqN/IZMH95HW1WlMBGSOalSbQUlNEND3J0lxK2a33UBmTdR3aLyS+o9P8+7b
-Cdzbkrs1fXXVxxvlaQdSWBSjVULUZjKIZ+HtqhIaTiBELa7JHBEBbEZgNHpymmc8
-hIF6fdTbzbbYx9MbNmpzCcr+SKHubCdvZyX2FsWK1CHvYx6iPc9wcu4x9yh8MIfp
-KpLSJG1SaSCHbUdatpsOSQK2pbIN3THsvFrKPVssLrMgVjwp22Q3vMFL+ldq0vZ5
-6uIIiNRKrX2CKKrUy1kF7FjDNMx4riaCQHs5vp7qOttxv0E/X4Z9B4QZdC02H2Mq
-Ea5LoDxONutv+JMzWFyxIEQvbnfdDSu4QUDkn3H1WkBNmqTUwny5DSxZNjGB8a6P
-ISaIE+kN2pp5v9eB8Q4+4BxbU2G2/Jy/V6bFC8eLL+PIKodPKbpCqoPyGwARAQAB
-tCdBbG1hTGludXggT1MgOCA8cGFja2FnZXJAYWxtYWxpbnV4Lm9yZz6JAk8EEwEI
-ADkWIQS8Xt3K31AsB38Vgogq6B6KztcliwUCZSUUbwIbAwQLCQgHAyICAQQVCgkI
-BBYCAwECHgcCF4AACgkQKugeis7XJYvOeA/9E/hJwfd7UPtvsv+y7Wiei1NCt+OJ
-AzJQPjEzHJNmLAD157AHtpA2yZpB9GlRQkjRu40fn0It20mwjnl0j5oHF9HnQ+/H
-Qtiw9pwgNpZJaTe5YnzETbGqrrOVgWihkJyJhn42vtuirNu7pKJvWilRvz1a81JK
-i/okezXp1KBrgrxR/bG26c8k61AK6n/ExI1MoHZhyaAAebFqG8vTiWTuC2a4t7SD
-pxbzsn5CMuXqVY1gxIdiUGzgrXfSm5WgpSYEG01VN+VF885caPvtMHoLBy/pLGN3
-5TKp4pKiA9JGQxtlZLdO666UbpgbjoxFYxNZEwY3Tdx37zbsP4pHcaN8fOGbk5mG
-h8LwkjppPZzoXONyBfUJ+uHBEzRJEw4KtVRgaZZfCcojRvmyJB4TAM1SYkikaw8F
-0gi3OPRWtVdEogxP0XD/tTrPSKo7pTDEk17HIyKCU0KxF4ZSbxXFMeH5OZUQAQM4
-l7ECGNg3bVhXC66AHE72mz/PN39M2Z0Sww7GWYCf6IDhhkeTxYx+I7VW1Uo9ht5L
-i3ZRMbX/h6NBYTUaPJEx3fwixNv2+RtE3m4JIxg76xBOYGLyIRlaImWNGKTnGz5m
-IBRP5Vm7nRdFOOFhNz+iDIyq0LEyhGU7xCriFaL+ozXLiIzycidgTTZW3WfkHxlr
-ZEzov/wIBeoaIp8=
-=mC/C
-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/50-redhat.conf
+++ b/SOURCES/50-redhat.conf
@ -0,0 +1,7 @@
+# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
+kernel.kptr_restrict = 1
+
+# Source route verification
+net.ipv4.conf.default.rp_filter = 1
+net.ipv4.conf.*.rp_filter = 1
+-net.ipv4.conf.all.rp_filter
--- a/SOURCES/85-display-manager.preset
+++ b/SOURCES/85-display-manager.preset
@ -6,5 +6,6 @@ enable gdm.service
 enable lightdm.service
 enable slim.service
 enable lxdm.service
+enable sddm.service
 enable kdm.service
 enable xdm.service
--- a/SOURCES/90-default-user.preset
+++ b/SOURCES/90-default-user.preset
@ -0,0 +1,30 @@
+# Enable the D-Bus service (including its socket for socket activation)
+# unconditionally. It is used throughout Fedora and required on all machines.
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
+
+# Socket-activated pipewire service for individual user sessions
+# https://bugzilla.redhat.com/show_bug.cgi?id=1592434
+enable pipewire.socket
+
+# Enable the PipeWire PulseAudio compatibility socket interface
+# https://bugzilla.redhat.com/show_bug.cgi?id=1904239
+# https://bugzilla.redhat.com/show_bug.cgi?id=1907906
+# https://fedoraproject.org/wiki/Changes/DefaultPipeWire
+enable pipewire-pulse.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1976006
+enable pipewire-media-session.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1979419
+enable wireplumber.service
+
+# Enable the session agent for snaps
+# https://bugzilla.redhat.com/show_bug.cgi?id=1734371
+enable snapd.session-agent.socket
+
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/80
+enable obex.service
+enable grub-boot-success.timer
+enable pulseaudio.socket
--- a/SOURCES/90-default.preset
+++ b/SOURCES/90-default.preset
@ -0,0 +1,469 @@
+# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
+# for the Fedora policy.
+
+# On Fedora we deviate from some upstream defaults
+disable systemd-timesyncd.service
+disable systemd-networkd.service
+disable systemd-networkd-wait-online.service
+# We want to update systemd-boot from packaging scriptlets after updates.
+disable systemd-boot-update.service
+
+# https://fedoraproject.org/wiki/Changes/systemd-resolved
+enable systemd-resolved.service
+
+# https://fedoraproject.org/wiki/Changes/EnableSystemdOomd
+enable systemd-oomd.service
+
+# These presets were last validated en-masse on 2015-09-09
+# https://fedorahosted.org/fesco/ticket/1472
+
+# System stuff
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
+enable sshd.service
+
+# Locally-running services
+enable atd.*
+enable crond.*
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/636
+enable chronyd.service
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+# https://bugzilla.redhat.com/show_bug.cgi?id=1455704
+enable NetworkManager.service
+enable NetworkManager-wait-online.service
+enable NetworkManager-dispatcher.service
+enable ModemManager.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311
+enable auditd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2258520
+enable audit-rules.service
+
+# Locally-running service
+enable restorecond.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166
+enable bluetooth.*
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable avahi-daemon.*
+
+# Default configuration is locally-running only
+# CUPS is now socket-activatable for local use-cases, so don't enable cups.service
+# https://pagure.io/fesco/issue/1701
+enable cups.socket
+enable cups.path
+
+# RHEL-37762: We need the full service enabled to act as a print server
+enable cups.service
+
+# The various syslog implementations
+enable rsyslog.*
+enable syslog-ng.*
+enable sysklogd.*
+
+# Network facing
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable firewalld.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627
+# Virtualization driver specific daemons. Start by default at boot for VM
+# autostart, but shutdown after 2 mins and socket activated thereafter
+enable virtqemud.service
+enable virtxend.service
+enable virtlxcd.service
+enable virtvboxd.service
+
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+enable virtxend.socket
+enable virtxend-ro.socket
+enable virtxend-admin.socket
+enable virtlxcd.socket
+enable virtlxcd-ro.socket
+enable virtlxcd-admin.socket
+enable virtvboxd.socket
+enable virtvboxd-ro.socket
+enable virtvboxd-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
+enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
+
+# Secondary drivers providing supporting functionality to main virtualization
+# drivers (socket activated only when required)
+enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
+enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
+enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
+enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
+enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
+enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable xinetd.service
+
+# Storage
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/391
+enable multipathd.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/876
+enable libstoragemgmt.service
+
+# Approved by FESCo - https://pagure.io/fesco/issue/2386
+enable iscsid.socket
+enable iscsiuio.socket
+
+# Approved by FESCo - https://pagure.io/fesco/issue/2943
+enable iscsi-starter.service
+
+# iSCSI support for early-boot
+# https://bugzilla.redhat.com/show_bug.cgi?id=1930470
+enable iscsi-onboot.service
+
+# Locally-running services
+enable lvm2-monitor.*
+enable lvm2-lvmetad.*
+enable dm-event.*
+enable dmraid-activation.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=855372
+enable mdmonitor.service
+enable mdmonitor-takeover.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1817491
+enable raid-check.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=876237
+enable spice-vdagentd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=885406
+enable qemu-guest-agent.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=928726
+enable dnf-makecache.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1995495
+enable rpm-ostree-countme.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=957135
+enable vmtoolsd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=976315
+enable dkms.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=961878
+enable ipmi.service
+enable ipmievd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1039351
+enable x509watch.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1060754
+enable dnssec-triggerd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1095353
+enable uuidd.socket
+
+# Hardware
+# Locally-running service
+enable gpm.*
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1066421
+enable gpsd.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1141607
+enable x2gocleansessions.service
+
+# https://issues.redhat.com/browse/RHEL-35582
+enable tuned.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1215641
+enable unbound-anchor.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1222495
+enable lvm2-lvmpolld.*
+
+# https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates
+enable dbxtool.service
+
+# Locally-running services
+enable irqbalance.service
+enable lm_sensors.service
+enable mcelog.*
+enable smartd.service
+enable pcscd.socket
+enable rngd.service
+
+# Other stuff
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/937
+# Note: abrt-ccpp.service is excluded in favor of systemd-coredump.
+enable abrtd.service
+enable abrt-journal-core.service
+enable abrt-oops.service
+enable abrt-xorg.service
+enable abrt-vmcore.service
+
+# Locally-running services
+enable ksm.service
+enable ksmtuned.service
+enable rootfs-resize.service
+enable sysstat.service
+enable sysstat-collect.timer
+enable sysstat-summary.timer
+enable uuidd.service
+enable xendomains.service
+enable xenstored.service
+enable xenconsoled.service
+
+# Desktop stuff
+# Locally-running services
+enable accounts-daemon.service
+enable rtkit-daemon.service
+enable upower.service
+enable udisks2.service
+enable polkit.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1187072
+enable timedatex.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1231745
+enable mlocate-updatedb.timer
+
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/204
+enable plocate-updatedb.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1218999
+enable sa-update.timer
+
+# Hyper-V guest support daemons
+# https://bugzilla.redhat.com/show_bug.cgi?id=1279322
+enable vmtoolsd.service
+
+# mcelog is a utility that collects and decodes Machine Check Exception data
+# on x86-32 and x86-64 systems.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1302179
+enable mcelog.service
+
+# OPAL-prd is a utility specific to ppc64le systems
+# It is the "OPAL Processor Recovery Diagnostics Daemon"
+# https://bugzilla.redhat.com/show_bug.cgi?id=1312018
+enable opal-prd.service
+
+# lircd is the Linux Infrared Control daemon
+# Starting with version 0.9.4, it requires no manual configuration
+# https://bugzilla.redhat.com/show_bug.cgi?id=1340061
+enable lircd.socket
+
+# IPSec management
+# https://bugzilla.redhat.com/show_bug.cgi?id=1276285
+enable pluto.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1367932
+# Automatically refresh installed snaps
+enable snapd.refresh.timer
+# Socket activated daemon to manage snaps
+enable snapd.socket
+
+# Support for dual-GPU systems
+# https://bugzilla.redhat.com/show_bug.cgi?id=1389762
+enable switcheroo-control.service
+
+# Support for the DRBD link-cleaning service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1399387
+enable drbdlinksclean.service
+
+# Enable the System Security Services Daemon
+# https://bugzilla.redhat.com/show_bug.cgi?id=1427649
+enable sssd.service
+
+# Enable ostree-remount on ostree-based systems
+# (Does nothing on non-ostree systems)
+# https://bugzilla.redhat.com/show_bug.cgi?id=1451458
+enable ostree-remount.service
+
+# Enable Performance Co-Pilot services
+# https://bugzilla.redhat.com/show_bug.cgi?id=1472350
+enable pmcd.service
+enable pmlogger.service
+enable pmie.service
+
+# Enable SSSD Kerberos Credential Cache Server
+# https://bugzilla.redhat.com/show_bug.cgi?id=1475999
+enable sssd-kcm.socket
+
+# sssd-secrets.socket was previously enabled, but as of
+# SSSD 2.0 it is not longer needed
+# https://bugzilla.redhat.com/show_bug.cgi?id=1615584
+
+# A mechanism to transfer state between the initramfs and the real
+# system. Obsolete since /run was introduced, but still used by some
+# services.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
+# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
+enable import-state.service
+
+# An initscripts mechanism for readonly root
+# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
+# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
+enable readonly-root.service
+
+# Ensure that any installed kmods are built for the currently-running
+# kernel at boot
+# https://bugzilla.redhat.com/show_bug.cgi?id=1518258
+enable akmods.service
+
+# virtualbox-guest-additions service, yet another virtual-machine guest
+# integration agent, this is a locally-running service, Note this has a
+# "ConditionVirtualization=|oracle" so it will only run under VirtualBox
+# https://bugzilla.redhat.com/show_bug.cgi?id=1534595
+enable vboxservice.service
+
+# Mark the system for SELinux autorelabel when appropriate
+# https://bugzilla.redhat.com/show_bug.cgi?id=1589720
+enable selinux-autorelabel-mark.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1623901
+enable cpi.service
+
+# Initialize persistent devices on s390x
+enable device_cio_free.service
+
+# Enable the stratis daemon for managing stratis storage
+# https://bugzilla.redhat.com/show_bug.cgi?id=1630514
+enable stratisd.service
+
+# Enable a service to finalize staged OSTree changes at shutdown
+# https://bugzilla.redhat.com/show_bug.cgi?id=1639372
+enable ostree-finalize-staged.path
+
+# Enable the Docker daemon socket
+# https://bugzilla.redhat.com/show_bug.cgi?id=1655602
+enable docker.socket
+
+# Enable the service for adding Fedora OCI repos to flatpak
+# https://bugzilla.redhat.com/show_bug.cgi?id=1696225
+enable flatpak-add-fedora-repos.service
+
+# Run fstrim weekly on filesystems listed in fstab
+enable fstrim.timer
+
+# oneshot to generate kata VM appliance at host bootup
+# for the booted kernel
+enable kata-osbuilder-generate.service
+
+# Enable rotation of system log files
+# https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4
+enable logrotate.timer
+
+# Enable regular update of SpamAssassin data files
+# https://bugzilla.redhat.com/show_bug.cgi?id=1651002
+enable sa-update.timer
+
+# Enable service to automatically rebuild the RPM database
+# on startup when /var/lib/rpm/.rebuilddb exists
+# https://bugzilla.redhat.com/show_bug.cgi?id=1826658
+enable rpmdb-rebuild.service
+
+# Enable service to automatically migrate the RPM database to /usr
+# on startup when /var/lib/rpm/.migratedb exists
+# https://bugzilla.redhat.com/show_bug.cgi?id=2044061
+enable rpmdb-migrate.service
+
+# Support services for Google Cloud
+# Approved by FESCo: https://pagure.io/fesco/issue/2578
+enable google-guest-agent.service
+enable google-startup-scripts.service
+enable google-shutdown-scripts.service
+
+# Support service for Azure
+# Approved by FESCo: https://pagure.io/fesco/issue/2849
+enable waagent.service
+
+# Certbot (Let's Encrypt)
+# https://bugzilla.redhat.com/show_bug.cgi?id=1940211
+enable certbot-renew.timer
+
+# enable thermald by default for desktops
+# https://pagure.io/fedora-workstation/issue/71
+enable thermald.service
+
+# enable uresourced by default for desktops
+# https://pagure.io/fesco/issue/2457
+enable uresourced.service
+
+# enable power-profiles-daemon
+# https://pagure.io/fedora-workstation/issue/191
+enable power-profiles-daemon.service
+
+# Enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2101719
+enable clevis-luks-askpass.path
+
+# Enable livesys services for live media
+# https://bugzilla.redhat.com/show_bug.cgi?id=2148790
+enable livesys.service
+enable livesys-late.service
+
+# Enable Waydroid
+# https://bugzilla.redhat.com/show_bug.cgi?id=2157810
+enable waydroid-container.service
+
+# Enable nmstate to apply network configuration from /etc/nmstate/*.yml
+# https://github.com/coreos/fedora-coreos-tracker/issues/1175
+# https://github.com/coreos/fedora-coreos-config/pull/2269
+enable nmstate.service
+
+# Enable nfs-client.target
+# https://bugzilla.redhat.com/show_bug.cgi?id=2218006
+enable nfs-client.target
+
+# Enable cloud-init services
+# https://bugzilla.redhat.com/show_bug.cgi?id=2233948
+enable cloud-config.service
+enable cloud-final.service
+enable cloud-init.service
+enable cloud-init-local.service
+
+# Enable  kernel-bootcfg-boot-successful.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2239607
+enable kernel-bootcfg-boot-successful.service
+
+# Enable pd-mapper service for Thinkpad X13s
+# https://bugzilla.redhat.com/show_bug.cgi?id=2255318
+enable pd-mapper.service
+
+# The Cockpit web-based system management console
+enable cockpit.socket
+
+# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+enable fwupd-refresh.timer
+
--- a/SOURCES/99-default-disable.preset
+++ b/SOURCES/99-default-disable.preset
--- a/SOURCES/Contributors
+++ b/SOURCES/Contributors
@ -0,0 +1,70 @@
+# -*- coding: utf-8 -*-
+
+The CentOS distribution would not be possible without the hard work and
+dedication of a large number of talented people. It's only fair that we
+acknowledge the time and effort that they have put into the distribution.
+
+We are always in need of more volunteers. If you're interested in joining
+the CentOS Project, please join us on irc.freenode.net in #centos-devel or 
+via the mailing list at http://lists.centos.org/pipermail/centos-devel/
+
+
+
+
+## Special Recognition ## 
+
+One of the key reasons we got delayed on the CentOS-6 release was lack of 
+suitable build resources, especially when we had to repeatedly build large
+chunks of code. Norwood S came forward and worked with me to 
+setup a large build machine, then tune the build process and help improve
+the overall build, test and validate process we were using. This build
+machine he donated to the project was about 5 times more capable than the
+entire buildsystem we had. And he did this out of his own pocket, from
+his own time, and has since upgraded the machine as well. It's now a 128GB,
+48 core machine, with 4 SSD's and 4 sata disks : but the key metric is 
+that it can build from source, the entire CentOS-7 distro in under 22 hrs.
+
+Having this capability was key in our ability to build, test and deliver
+CentOS-7 as rapidly as we have been able to.
+
+We'd like to dedicate the CentOS-7 Release to Mr Norwood S, of Phoenix,
+AZ, USA for his continued support for the project.
+
+Contributors:
+  The Red Hat developers, without whom CentOS would look very different
+
+  Akemi Matsuno-Yagi
+  Alain Reguera Delgado
+  Alan Bartlett
+  Andreas Thienemann
+  Anssi Johansson
+  Athmane Madjoudj
+  Bonnie King
+  Brian Stinson
+  Carl Trieloff
+  Christoph Galuschka
+  Fabian Arrotin
+  Jakub Filak
+  James Moger
+  Jeff Sheltren
+  Jim Perrin
+  Johnny Hughes Jr
+  Karanbir Singh
+  Karsten Wade
+  Kay Williams
+  Manuel Wolfshant
+  Matej Habrnal
+  Marcus Moeller
+  Michael Scherer
+  Mike McLean
+  Pablo Sebastián Greco
+  Pat Riehecky
+  Ralph Angenendt
+  Scott Robbins
+  Stephen John Smoogen
+  Trevor Hemsley
+  Tru Huynh
+  Tuomas Kuosmanen
+  Tuomo Soini
+  Tyler Parsons
+
--- a/SOURCES/EULA
+++ b/SOURCES/EULA
@ -1,6 +1,6 @@
-AlmaLinux 8 EULA
+CentOS Stream 10 EULA

-AlmaLinux 8 comes with no guarantees or warranties of any sorts, 
+CentOS Stream 10 comes with no guarantees or warranties of any sorts,
 either written or implied.

 The Distribution is released as GPLv2. Individual packages in the
--- a/SOURCES/LICENSE
+++ b/SOURCES/LICENSE
--- a/SOURCES/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
+++ b/SOURCES/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
@ -0,0 +1,37 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.22 (GNU/Linux)
+
+mQENBGG65jsBCADef7Fspss6f2PKrlrxufWlBaQI+kcdSDbY7o/dyyjpT7dcX8t8
+Ou73irjiShK3q0pdrh1Wy/mXc7RIJwAbCt9OVgyx4PV6AW5LfU7P7xyEAbTgLhz9
+lLPjBGhBvfRpW+7naPqkTcIKxpVR8Khq6fsvThGCNzNkGa46F1srE3mf1zC9wdVR
+VtXO7gHEZ2LrNcl195jZkBQOLcXANcSOFh5eRfhumULmk4XgCGmZQT5UNFofqOmn
+aWQGBq3XaU7RWjl7RH+IS2EW0rAtz9Le+cH+j0aFhzo7jBMOxGYG62rUaHdxssjV
+S1CrfpYT6NeG5i/1hiP4hO9suezJw4yuXNZ3ABEBAAG0VkNlbnRPUyBFeHRyYXMg
+U0lHIChodHRwczovL3dpa2kuY2VudG9zLm9yZy9TcGVjaWFsSW50ZXJlc3RHcm91
+cCkgPHNlY3VyaXR5QGNlbnRvcy5vcmc+iQE5BBMBCgAjAhsvBwsJCAcDAgEGFQgC
+CQoLBBYCAwECHgECF4AFAmIePKwACgkQH/aiFx2ZdmgUpAgAt1Y139EUQOLd013m
+jZx3shUVHRWCU0SaWLuXLupdxqhe/Iygen48aiDWfAtWr9neAJKKZFboDXXPyxDy
+9529aDgJnjwGRSFAcmvsuMaEMse6PZepTFtwhg2A/N0sDLVJSWagbQmTHdpkgEwn
+rrwO/TEaqjJ2+vZG67IIvw2rgtF3sQC28I1z7c1cPH5/NNf7dOZ29vtn44juMFFs
+o2Kd2FjZ0WP4wRmFF646nS5S1WHGS32K0xvDJMXO3MBXhaATVg+5i5ICA6fx6F3Y
+FFLJrXjx/LBtsY3EbJ0OddeZQtaAHFM1Xm6e0UHpnfjG9EGl9QrC5qzLSng0YMrG
+emhIy7kBDQRhuuY7AQgAs+enJDbwE/Iln3BnxodDQ3/1t9ULlMLJLiV+FgS7yREZ
+QvhVQxFWaJqbiPV6EJVxEP5lUHND2DAE2ZTr60y0rI3ZAY52go+QYHXb+M5HC12H
+HbhIDTWaETNo5heq/qyVSRT1u0g/yKCxQdyqnVsL86bro0wgrpj7XuApQifFhy16
+AkDjhcB0C0dXkfvEnHJylWiHpp7upfSgOcGwQ+yRHOZWJnyF+OMrFfNiwD74/zEN
+4RoNFgpqJZ81TF0qCdllTYGAXXUdYsJlg64dH0u84naTOFIuInywCmNyPmC8e8/0
+g56hCV2L7bRJGjBCa6VH+TgvVGnkFsoMM9ijhuTIIQARAQABiQI+BBgBCgAJAhsu
+BQJiHjnNASnAXSAEGQECAAYFAmG65jsACgkQi1yBEfyl0P9m/QgAh2KmBA4h/slx
+aZeWLb2cV53B1jVElsrEAE/a8yKhhcNeNOQsEWwT2/i6mdWchnIQzojKs3ypoRUY
+xsICIb4b4AFzc//aYhaOWThNRHh0UwaueNu0YBqVF3URUlf/Hw1Wv16v4QwkNhHQ
+EohCRltR2PBjAHRHXDImy9OxV/uTnZjTXegj2Jl3ueQ5nF4pleqUctt/V9JjqzO
+YcQZW78s1jyBRzefbPxQHKKp4na6etTmIvgVDjkMChRZPRjZYEVZNi8kJM0aaK4q
+ugGoL6cWBR6RYka+/eEFMd3kSrng9ahbNX0F4ztdZ2alPrrE6BvJ7n/Mt6tZKgL7
+x9V0GpbstAkQH/aiFx2ZdmgN/gf+PEUa1LT98RS28fyNPaXYGx5vLWYxUtAdeN9a
+TfugGHCVhVsowbIEnuFUHE1JmTJ1hDaFYXqkgG9zDo81JVz/yCHpNIQO0YF2h+qX
+BXiKP7PQ+iT/PjQHidlYUuz73hjDwRl3AhLafcwVHeD3cCgo/ZP/Vi9Y9iBFVZDl
+jGHxAIe0PWbEAUuqNJOgrlVmmCtSqVkN1Neihx1zjpw3rqfUQzwvhvcsOfkKfnBs
+Boc66IZ0J5pmSzgJnSbLrr2dv1/jYHaolA24vkMqMxKzJbz+GeQ/SqBZ5/rA37VL
+x90Tu9UVSfbyEbwS9Zj1sVmc3mdm1kn6dmTlOfTDIqehfHBlnQ==
+=jx2B
+-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/RPM-GPG-KEY-centosofficial-SHA256
+++ b/SOURCES/RPM-GPG-KEY-centosofficial-SHA256
@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.22 (GNU/Linux)
+
+mQINBFzMWxkBEADHrskpBgN9OphmhRkc7P/YrsAGSvvl7kfu+e9KAaU6f5MeAVyn
+rIoM43syyGkgFyWgjZM8/rur7EMPY2yt+2q/1ZfLVCRn9856JqTIq0XRpDUe4nKQ
+8BlA7wDVZoSDxUZkSuTIyExbDf0cpw89Tcf62Mxmi8jh74vRlPy1PgjWL5494b3X
+5fxDidH4bqPZyxTBqPrUFuo+EfUVEqiGF94Ppq6ZUvrBGOVo1V1+Ifm9CGEK597c
+aevcGc1RFlgxIgN84UpuDjPR9/zSndwJ7XsXYvZ6HXcKGagRKsfYDWGPkA5cOL/e
+f+yObOnC43yPUvpggQ4KaNJ6+SMTZOKikM8yciyBwLqwrjo8FlJgkv8Vfag/2UR7
+JINbyqHHoLUhQ2m6HXSwK4YjtwidF9EUkaBZWrrskYR3IRZLXlWqeOi/+ezYOW0m
+vufrkcvsh+TKlVVnuwmEPjJ8mwUSpsLdfPJo1DHsd8FS03SCKPaXFdD7ePfEjiYk
+nHpQaKE01aWVSLUiygn7F7rYemGqV9Vt7tBw5pz0vqSC72a5E3zFzIIuHx6aANry
+Gat3aqU3qtBXOrA/dPkX9cWE+UR5wo/A2UdKJZLlGhM2WRJ3ltmGT48V9CeS6N9Y
+m4CKdzvg7EWjlTlFrd/8WJ2KoqOE9leDPeXRPncubJfJ6LLIHyG09h9kKQARAQAB
+tDpDZW50T1MgKENlbnRPUyBPZmZpY2lhbCBTaWduaW5nIEtleSkgPHNlY3VyaXR5
+QGNlbnRvcy5vcmc+iQI3BBMBCAAhAhsDBgsJCAcDAgYVCAIJCgsDFgIBAh4BAheA
+BQJczFsaAAoJEAW1VbOEg8ZdvOgQAMFTGIQokADy5+CynFKjfO7R0VVpJxmYGVr1
+TjnKaHmjxnJaYqoha9ukGgmLu0r+lJ42Kk6nREk1vlxfRAfiWd00Zkm+K3IMq1/D
+E0heC2vX8qqjsLJs3jzq0hgNvo9X0uHDaA4J1BHsD8sE5in/f4SivjbngvFovRGU
+1XLNCgoqpFNcROP18LqKUw8WtqgWdnYBa5i6D5qx+WMRX0NHNwcCMy1lz+sTFxIU
+9mW6cLsMaacPGD8pUXIVli8P9Vlv3jBk1wFIqRgQPW01ph/3bM7pf9hyM9FAfU4X
+AFcyb1oYI4/82EkICUe6jeuZrz67dPeLVAlYrGW4hp/825g0fqJHxPDp25GS4rAa
+4RqyibLzNjSGdXYeLj2NcB/8OqaP+T1hv3JDaqe70QoYa/GIC4rh15NyXVbUP+LG
+V4vUiL7mb9ynzvF5zYHJbcg4R7dOsiZHrMFwy7FZesQaVrXeJlxRcEj65rpm1ZtZ
+mwAE1k2LsRkvLyr9hpZkXnMeOKYIPwpdmBjXNVNVbq7097OxZOYPPos+iZKMWfl4
+UQnMsCVxonZtamdI4qEc3jMkSZPJKgOplGOms5jdY+EdSvsFWEQ0Snd3dChfU7DV
+o4Rbcy5klwHrvuZIOLaovhyxuRPhP6gV9+gzpTK/7vrvDlFbbZE6s212mDZ13RWB
+mTfAxz4h
+=agO/
+-----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/centos-addons.repo
+++ b/SOURCES/centos-addons.repo
@ -0,0 +1,131 @@
+[highavailability]
+name=CentOS Stream $releasever - HighAvailability
+metalink=https://mirrors.centos.org/metalink?repo=centos-highavailability-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=0
+
+[highavailability-debuginfo]
+name=CentOS Stream $releasever - HighAvailability - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-highavailability-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[highavailability-source]
+name=CentOS Stream $releasever - HighAvailability - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-highavailability-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[nfv]
+name=CentOS Stream $releasever - NFV
+metalink=https://mirrors.centos.org/metalink?repo=centos-nfv-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=0
+
+[nfv-debuginfo]
+name=CentOS Stream $releasever - NFV - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-nfv-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[nfv-source]
+name=CentOS Stream $releasever - NFV - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-nfv-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[rt]
+name=CentOS Stream $releasever - RT
+metalink=https://mirrors.centos.org/metalink?repo=centos-rt-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=0
+
+[rt-debuginfo]
+name=CentOS Stream $releasever - RT - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-rt-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[rt-source]
+name=CentOS Stream $releasever - RT - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-rt-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[resilientstorage]
+name=CentOS Stream $releasever - ResilientStorage
+metalink=https://mirrors.centos.org/metalink?repo=centos-resilientstorage-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=0
+
+[resilientstorage-debuginfo]
+name=CentOS Stream $releasever - ResilientStorage - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-resilientstorage-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[resilientstorage-source]
+name=CentOS Stream $releasever - ResilientStorage - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-resilientstorage-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[extras-common]
+name=CentOS Stream $releasever - Extras packages
+metalink=https://mirrors.centos.org/metalink?repo=centos-extras-sig-extras-common-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=0
+
+[extras-common-source]
+name=CentOS Stream $releasever - Extras packages - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-extras-sig-extras-common-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
+gpgcheck=0
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
--- a/SOURCES/centos.repo
+++ b/SOURCES/centos.repo
@ -0,0 +1,83 @@
+[baseos]
+name=CentOS Stream $releasever - BaseOS
+metalink=https://mirrors.centos.org/metalink?repo=centos-baseos-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=1
+
+[baseos-debuginfo]
+name=CentOS Stream $releasever - BaseOS - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-baseos-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[baseos-source]
+name=CentOS Stream $releasever - BaseOS - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-baseos-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[appstream]
+name=CentOS Stream $releasever - AppStream
+metalink=https://mirrors.centos.org/metalink?repo=centos-appstream-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=1
+
+[appstream-debuginfo]
+name=CentOS Stream $releasever - AppStream - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-appstream-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[appstream-source]
+name=CentOS Stream $releasever - AppStream - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-appstream-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[crb]
+name=CentOS Stream $releasever - CRB
+metalink=https://mirrors.centos.org/metalink?repo=centos-crb-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+countme=1
+enabled=0
+
+[crb-debuginfo]
+name=CentOS Stream $releasever - CRB - Debug
+metalink=https://mirrors.centos.org/metalink?repo=centos-crb-debug-$stream&arch=$basearch&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
+
+[crb-source]
+name=CentOS Stream $releasever - CRB - Source
+metalink=https://mirrors.centos.org/metalink?repo=centos-crb-source-$stream&arch=source&protocol=https,http
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
+gpgcheck=1
+repo_gpgcheck=0
+metadata_expire=6h
+enabled=0
--- a/SOURCES/centossecureboot201.cer
+++ b/SOURCES/centossecureboot201.cer
--- a/SOURCES/centossecureboot202.cer
+++ b/SOURCES/centossecureboot202.cer
--- a/SOURCES/centossecureboot203.cer
+++ b/SOURCES/centossecureboot203.cer
--- a/SOURCES/centossecureboot204.cer
+++ b/SOURCES/centossecureboot204.cer
--- a/SOURCES/centossecurebootca2.cer
+++ b/SOURCES/centossecurebootca2.cer
--- a/SPECS/centos-stream-release.spec
+++ b/SPECS/centos-stream-release.spec
@ -0,0 +1,533 @@
+%global distro  CentOS Stream
+%global major   10
+%global minor   0
+
+Name:           centos-stream-release
+Version:        %{major}.%{minor}
+Release:        0.14%{?dist}
+Summary:        %{distro} release files
+License:        GPLv2
+URL:            https://centos.org
+BuildArch:      noarch
+
+Provides:       centos-release = %{version}-%{release}
+
+# When running a compose for ELN, we want to make sure that we pull in the
+# correct templates when lorax is installed. This Suggests: will clue
+# libdnf to use this set of templates instead of lorax-templates-generic.
+Suggests: lorax-templates-rhel
+
+# Required for a lorax run (to generate install media)
+Requires:       centos-stream-repos(%{major})
+Provides:       centos-release-eula
+Provides:       redhat-release-eula
+
+# required by epel-release
+Provides:       redhat-release = %{version}-%{release}
+
+# required by dnf
+# https://github.com/rpm-software-management/dnf/blob/4.2.23/dnf/const.py.in#L26
+Provides:       system-release = %{version}-%{release}
+Provides:       system-release(releasever) = %{major}
+Conflicts:      system-release
+
+# required by libdnf
+# https://github.com/rpm-software-management/libdnf/blob/0.48.0/libdnf/module/ModulePackage.cpp#L472
+Provides:       base-module(platform:el%{major})
+
+Source200:      EULA
+Source201:      LICENSE
+Source202:      Contributors
+
+Source300:      85-display-manager.preset
+Source301:      90-default.preset
+Source302:      90-default-user.preset
+Source303:      99-default-disable.preset
+Source304:      50-redhat.conf
+
+Source400:      centossecurebootca2.cer
+# kernel signing certificate
+Source401:      centossecureboot201.cer
+# grub2 signing certificate
+Source402:      centossecureboot202.cer
+# Fwupd signing certificate
+Source403:      centossecureboot203.cer
+# UKI-VIRT signing certificate
+Source404:      centossecureboot204.cer
+
+Source500:      centos.repo
+Source501:      centos-addons.repo
+
+Source602:      RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
+Source603:      RPM-GPG-KEY-centosofficial-SHA256
+
+
+%package -n centos-sb-certs
+Summary: %{distro} public secureboot certificates
+Group: System Environment/Base
+Provides: system-sb-certs = %{version}-%{release}
+
+%package -n centos-stream-repos
+Summary:        CentOS Stream package repositories
+Provides:       system-repos = %{version}-%{release}
+Provides:       centos-stream-repos(%{major}) = %{version}
+Requires:       centos-gpg-keys = %{version}-%{release}
+
+%package -n centos-gpg-keys
+Summary:        CentOS RPM keys
+
+
+%description
+%{distro} release files.
+
+%description -n centos-sb-certs
+%{distro} secureboot certificates
+
+%description -n centos-stream-repos
+This package provides the package repository files for CentOS Stream.
+
+%description -n centos-gpg-keys
+This package provides the RPM signature keys for CentOS.
+
+
+%install
+# copy license and contributors doc here for %%license and %%doc macros
+mkdir -p ./docs
+cp %{SOURCE201} %{SOURCE202} ./docs
+
+# create /etc/system-release and /etc/redhat-release
+install -d -m 0755 %{buildroot}%{_sysconfdir}
+echo "%{distro} release %{major}" > %{buildroot}%{_sysconfdir}/centos-release
+ln -s centos-release %{buildroot}%{_sysconfdir}/system-release
+ln -s centos-release %{buildroot}%{_sysconfdir}/redhat-release
+
+# -------------------------------------------------------------------------
+# Definitions for /etc/os-release and for macros in macros.dist.  These
+# macros are useful for spec files where distribution-specific identifiers
+# are used to customize packages.
+
+# Name of vendor / name of distribution. Typically used to identify where
+# the binary comes from in --help or --version messages of programs.
+# Examples: gdb.spec, clang.spec
+%global dist_vendor CentOS
+%global dist_name   %{distro}
+
+# URL of the homepage of the distribution
+# Example: gstreamer1-plugins-base.spec
+%global dist_home_url https://centos.org/
+
+# Bugzilla / bug reporting URLs shown to users.
+# Examples: gcc.spec
+%global dist_bug_report_url https://issues.redhat.com/
+
+# debuginfod server, as used in elfutils.spec.
+%global dist_debuginfod_url https://debuginfod.centos.org/
+# -------------------------------------------------------------------------
+
+
+# Create the os-release file
+install -d -m 0755 %{buildroot}%{_prefix}/lib
+cat > %{buildroot}%{_prefix}/lib/os-release << EOF
+NAME="%{dist_name}"
+VERSION="%{major}"
+ID="centos"
+ID_LIKE="rhel fedora"
+VERSION_ID="%{major}"
+PLATFORM_ID="platform:el%{major}"
+PRETTY_NAME="%{distro} %{major}"
+ANSI_COLOR="0;31"
+LOGO="fedora-logo-icon"
+CPE_NAME="cpe:/o:centos:centos:%{major}"
+HOME_URL="%{dist_home_url}"
+BUG_REPORT_URL="%{dist_bug_report_url}"
+REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux %{major}"
+REDHAT_SUPPORT_PRODUCT_VERSION="%{distro}"
+EOF
+
+# Create the symlink for /etc/os-release
+ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
+
+# write cpe to /etc/system/release-cpe
+echo "cpe:/o:centos:centos:%{major}" > %{buildroot}%{_sysconfdir}/system-release-cpe
+
+# create /etc/issue, /etc/issue.net and /etc/issue.d
+echo '\S' > %{buildroot}%{_sysconfdir}/issue
+echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
+cp %{buildroot}%{_sysconfdir}/issue{,.net}
+echo >> %{buildroot}%{_sysconfdir}/issue
+mkdir -p %{buildroot}%{_sysconfdir}/issue.d
+
+# set up the dist tag macros
+mkdir -p %{buildroot}%{_rpmmacrodir}
+cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
+# dist macros.
+
+%%__bootstrap ~bootstrap
+%%centos_ver %{major}
+%%centos %{major}
+%%rhel %{major}
+%%el%{major} 1
+%%distcore            .el%{major}
+%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
+%%dist_vendor         %{dist_vendor}
+%%dist_name           %{dist_name}
+%%dist_home_url       %{dist_home_url}
+%%dist_bug_report_url %{dist_bug_report_url}
+%%dist_debuginfod_url %{dist_debuginfod_url}
+EOF
+
+# use unbranded datadir
+install -d -m 0755 %{buildroot}%{_datadir}/centos-release
+ln -s centos-release %{buildroot}%{_datadir}/redhat-release
+install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/centos-release/
+
+# copy systemd presets
+install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset
+install -p -m 0644 %{SOURCE300} %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE301} %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE302} %{buildroot}%{_prefix}/lib/systemd/user-preset/
+
+# installing the same file for both system and user presets to set the same behavior for both
+install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/user-preset/
+
+# copy sysctl presets
+mkdir -p %{buildroot}/%{_prefix}/lib/sysctl.d/
+install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
+
+# Create stub yum repos
+mkdir %{buildroot}%{_sysconfdir}/yum.repos.d
+touch %{buildroot}%{_sysconfdir}/yum.repos.d/redhat.repo
+
+# Copy secureboot certificates
+install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
+install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
+
+# Install aarch64 certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
+install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
+install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
+install -m 644 %{SOURCE403} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
+
+
+# Install x86_64 certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
+install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
+install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
+install -m 644 %{SOURCE403} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
+
+# Install ppc64le certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
+install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
+install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
+install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
+
+# Install s390x certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
+install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
+install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
+
+# Link x86_64 certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
+
+
+# Link aarch64 certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
+
+# Link ppc64le certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
+
+# Link s390x certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
+
+# copy yum repos
+install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
+install -p -m 0644 %{SOURCE500} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE501} %{buildroot}%{_sysconfdir}/yum.repos.d/
+
+# dnf variables
+install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
+echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
+
+# copy GPG keys
+install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
+install -p -m 0644 %{SOURCE602} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
+install -p -m 0644 %{SOURCE603} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
+
+
+%files
+%license docs/LICENSE
+%doc docs/Contributors
+%{_sysconfdir}/redhat-release
+%{_sysconfdir}/system-release
+%{_sysconfdir}/centos-release
+%config(noreplace) %{_sysconfdir}/os-release
+%config %{_sysconfdir}/system-release-cpe
+%config(noreplace) %{_sysconfdir}/issue
+%config(noreplace) %{_sysconfdir}/issue.net
+%dir %{_sysconfdir}/issue.d
+%dir %{_sysconfdir}/yum.repos.d
+%ghost %{_sysconfdir}/yum.repos.d/redhat.repo
+%{_rpmmacrodir}/macros.dist
+%{_datadir}/redhat-release
+%{_datadir}/centos-release
+%{_prefix}/lib/os-release
+%{_prefix}/lib/systemd/system-preset/*
+%{_prefix}/lib/systemd/user-preset/*
+%{_prefix}/lib/sysctl.d/50-redhat.conf
+
+%files -n centos-sb-certs
+# Note to future packagers:
+# resetting the symlinks in /etc/pki/sb-certs on upgrade is the intended behavior here
+%dir %{_sysconfdir}/pki/sb-certs
+%dir %{_datadir}/pki/sb-certs/
+%{_sysconfdir}/pki/sb-certs/*.cer
+%{_datadir}/pki/sb-certs/*.cer
+
+%files -n centos-stream-repos
+%config(noreplace) %{_sysconfdir}/yum.repos.d/centos.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/centos-addons.repo
+%config(noreplace) %{_sysconfdir}/dnf/vars/stream
+
+%files -n centos-gpg-keys
+%{_sysconfdir}/pki/rpm-gpg
+
+
+%changelog
+* Mon Jun 17 2024 Troy Dawson <tdawson@redhat.com> - 10.0-0.14
+- Change repos to point to the mirrors
+
+* Fri Jun 07 2024 Sandro Bonazzola <sbonazzo@redhat.com> - 10.0-0.13
+- Fix distcore macro initialization
+
+* Thu May 30 2024 Carl George <carl@redhat.com> - 10.0-0.12
+- Add distcore macro to allow dist overrides that don't mask distprefix, distsuffix, or bootstrap macros
+- Resolves: RHEL-38900
+
+* Thu May 30 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.11
+- Restore cups.service patch
+- Resolves: RHEL-37762
+
+* Thu May 30 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.10
+- Temporarily revert cups.service patch
+- Related: RHEL-37762
+
+* Wed May 29 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.9
+- Enable cups.service
+- Resolves: RHEL-37762
+
+* Tue May 28 2024 Adam Samalik <asamalik@redhat.com> - 10.0-0.8
+- Add a re-signed centosofficial keys using SHA256
+- Drop old unused keys
+- Enable signature checks in repos
+
+* Mon May 13 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.7
+- Enable tuned.service
+- Resolves: RHEL-35582
+
+* Tue Mar 26 2024 Troy Dawson <tdawson@redhat.com> - 10.0-0.6
+- Temp change: Change repos to point to production composes
+
+* Wed Mar 20 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.4
+- Update BUG_REPORT_URL to use issues.redhat.com
+- Resolves: RHEL-17456
+
+* Thu Mar 14 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.3
+- Sync presets from Fedora 40
+
+* Tue Nov 28 2023 Troy Dawson <tdawson@redhat.com> - 10.0-0.2
+- Add Suggests: lorax-templates-rhel
+
+* Wed Sep 20 2023 Troy Dawson <tdawson@redhat.com> - 10.0-0.1
+- Update to version 10.0
+
+* Wed Aug 30 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-23
+- Add keys for UKI-VIRT
+- Resolves: RHELBLD-13378
+
+* Fri Jun 30 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-22
+- Fix incorrect symlink path for sbcerts
+- Resolves: RHELPLAN-161305
+
+* Mon Apr 03 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-21
+- Enable obex.service
+- Resolves: rhbz#2181984
+
+* Fri Feb 17 2023 Sayan Paul <saypaul@redhat.com> - 9.0-20
+- Remove ostree-readonly-sysroot-migration service from preset
+- Resolves: rhbz#2170787
+
+* Tue Feb 14 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-19
+- Enable ostree-readonly-sysroot-migration service
+- Resolves: rhbz#2167344
+
+* Tue Sep 06 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-18
+- Enable alternative *-release packages
+
+* Tue Sep 6 2022 Amit Shah <amitshah@fedoraproject.org> - 9.0-17
+- Add new distribution-specific macros for package configurations
+
+* Tue Aug 30 2022 Josh Boyer <jwboyer@redhat.com> - 9.0-16
+- Adjust debuginfo RPM repo names to -debuginfo
+
+* Thu Jul 28 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-15
+- Enable greenboot-service-monitor.service in presets
+- Resolves: rhbz#2108625
+
+* Thu Jul 28 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-14
+- Enable clevis-luks-askpass.path in presets
+- Resolves: rhbz#2106811
+
+* Thu Jun 23 2022 Maxwell G <gotmax@e.email> - 9.0-13
+- Include %%{?distsuffix} in %%dist definition
+- Resolves: rhbz#2100579
+
+* Wed Mar 02 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-12
+- The Extras key was re-signed to get rid of a SHA1 algo.
+  Related: rhbz#2059424
+
+* Fri Feb 04 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-11
+- Enable logrotate.timer
+
+* Wed Feb 02 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-10
+- Enable switcheroo-control.service
+- Resolves: rhbz#2049627
+
+* Sun Jan 30 2022 Neal Gompa <ngompa@datto.com> - 9.0-9
+- Restructure centos-stream-release and centos-stream-repos dependencies
+- Resolves: rhbz#2048268
+
+* Mon Jan 17 2022 Neal Gompa <ngompa@centosproject.org> - 9.0-8
+- Use metalinks for extras-common repos
+- Resolves: rhbz#2037871
+
+* Thu Jan 06 2022 Fabian Arrotin <arrfab@redhat.com> - 9.0-7
+- Adding Extras-common repos for SIGs produced content
+- Resolves: rhbz#2037871
+
+* Mon Dec 13 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-6
+- Add LOGO to os-release(5) data
+  Resolves: rhbz#2031998
+
+* Thu Nov 18 2021 Timothée Ravier <tim@siosm.fr> - 9.0-5
+- Create and own /etc/issue.d directory
+
+* Fri Nov 12 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-4
+- Add preset to enable WirePlumber by default
+- Related: rhbz#2022717
+
+* Mon Oct 04 2021 Carl George <carl@redhat.com> - 9.0-3
+- Specify protocols in metalink URLs
+- Related: rhbz#2006565
+
+* Tue Sep 21 2021 Carl George <carl@redhat.com> - 9.0-2
+- Add repos and gpg-keys subpackages
+- Resolves: rhbz#2006565
+
+* Fri Sep 10 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.12
+- Ship public secureboot certs in a well-known location
+- Related: rhbz#1997343
+- Switch to libvirt modular daemons
+- Related: rhbz#1991965
+
+* Thu Sep 02 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.11
+- Update EULA to refer to CentOS Stream 9 instead of CentOS Linux 8
+- Resolves: CS-798
+
+* Wed Sep 01 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.10
+- Drop nfs-convert.service preset
+- Related: rhbz#1937811
+
+* Fri Aug 06 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.9
+- Add stub yum repo for lorax
+- Fixes: rhbz#1990671
+
+* Mon Jul 26 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-1.0.8
+- Move dist macros from /etc to /usr
+
+* Mon Jul 26 2021 Mikolaj Izdebski <mizdebsk@redhat.com> - 9.0-1.0.7
+- Define __bootstrap macro
+
+* Mon Jul 26 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-1.0.6
+- Add missing systemd user presets to enable PipeWire services
+
+* Fri Jul 23 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-1.0.5
+- Add missing presets for SDDM synced from Fedora
+
+* Mon Apr 05 2021 Brian Stinson <bstinson@redhat.com> - 9.0-1.0.4
+- Add some missing systemd presets
+
+* Tue Mar 23 2021 Josh Boyer <jwboyer@redhat.com> - 9.0-1.0.3
+- Add sysctl.d presets
+
+* Wed Mar 17 2021 Troy Dawson <tdawson@redhat.com> - 9.0-1.0.2
+- Add distprefix to %{dist}
+
+* Fri Mar 12 2021 Troy Dawson <tdawson@redhat.com> - 9.0-1.0.1
+- Relax dependency for centos-repos
+
+* Wed Mar 03 2021 Michal Konecny <mkonecny@redhat.com> - 9.0-1
+- Update to version 9.0
+
+* Mon Sep 28 2020 Carl George <carl@george.computer> - 8.4-1
+- Update to version 8.4
+
+* Wed Sep 02 2020 Carl George <carl@george.computer> - 8.3-1
+- Convert to centos-stream-release
+
+* Fri May 15 2020 Pablo Greco <pgreco@centosproject.org> - 8-2.0.1
+- Relax dependency for centos-repos
+- Remove update_boot, it was never used in 8
+- Add rootfs_expand to aarch64
+- Bump release for 8.2
+
+* Thu Mar 12 2020 bstinson@centosproject.org - 8-1.0.9
+- Add the Devel repo to centos-release
+- Install os-release(5) content to /usr/lib and have /etc/os-release be a symlink (ngompa)pr#9
+
+* Thu Jan 02 2020 Brian Stinson <bstinson@centosproject.org> - 8-1.0.8
+- Add base module platform Provides so DNF can auto-discover modular platform (ngompa)pr#6
+- Switched CR repo to mirrorlist to spread the load (arrfab)pr#5
+
+* Thu Dec 19 2019 bstinson@centosproject.org - 8-1.0.7
+- Typo fixes
+- Disable the HA repo by default
+
+* Wed Dec 18 2019 Pablo Greco <pgreco@centosproject.org> - 8-1.el8
+- Fix requires in armhfp
+
+* Tue Dec 17 2019 bstinson@centosproject.org - 8-1.el8
+- Add the HighAvailability repository
+
+* Wed Aug 14 2019 Neal Gompa <ngompa@centosproject.org> 8-1.el8
+- Split repositories and GPG keys out into subpackages
+
+* Sat Aug 10 2019 Fabian Arrotin <arrfab@centos.org> 8-0.el8
+- modified baseurl paths, even if disabled
+
+* Sat Aug 10 2019 Fabian Arrotin <arrfab@centos.org> 8-0.el8
+- Enabled Extras by default.
+- Fixed sources paths for BaseOS/AppStream
+
+* Sat Aug 10 2019 Brian Stinson <bstinson@centosproject.org> 8-0.el7
+- Update Debuginfo and fasttrack to use releasever
+- Fix CentOS-media.repo to include appstream
+
+* Wed May 08 2019 Pablo Greco <pablo@fliagreco.com.ar> 8-0.el7
+- Initial setup for CentOS-8
--- a/almalinux-ha.repo
+++ b/almalinux-ha.repo
@ -1,28 +0,0 @@
-# almalinux-ha.repo
-
-[ha]
-name=AlmaLinux $releasever - HighAvailability
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/HighAvailability/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[ha-source]
-name=AlmaLinux $releasever - HighAvailability Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[ha-debuginfo]
-name=AlmaLinux $releasever - HighAvailability debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-nfv.repo
+++ b/almalinux-nfv.repo
@ -1,27 +0,0 @@
-# almalinux-nfv.repo
-
-[nfv]
-name=AlmaLinux $releasever - Real Time for NFV
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/NFV/$basearch/os/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[nfv-source]
-name=AlmaLinux $releasever - Real Time for NFV Sources
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/NFV/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[nfv-debuginfo]
-name=AlmaLinux $releasever - Real Time for NFV Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/NFV/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-plus.repo
+++ b/almalinux-plus.repo
@ -1,28 +0,0 @@
-# almalinux-plus.repo
-
-[plus]
-name=AlmaLinux $releasever - Plus
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/plus/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[plus-source]
-name=AlmaLinux $releasever - Plus Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/plus/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[plus-debuginfo]
-name=AlmaLinux $releasever - Plus debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/plus/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-powertools.repo
+++ b/almalinux-powertools.repo
@ -1,28 +0,0 @@
-# almalinux-powertools.repo
-
-[powertools]
-name=AlmaLinux $releasever - PowerTools
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/PowerTools/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[powertools-source]
-name=AlmaLinux $releasever - PowerTools Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/PowerTools/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[powertools-debuginfo]
-name=AlmaLinux $releasever - PowerTools debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/PowerTools/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-release.spec
+++ b/almalinux-release.spec
@ -1,274 +0,0 @@
-%define debug_package %{nil}
-%define product_family AlmaLinux
-%define release_name Cerulean Leopard
-%define contentdir almalinux
-%define infra_var stock
-%define base_release_version 8
-%define full_release_version 8.10
-%define dist_release_version 8
-%define upstream_rel_long 8.10-0.2
-%define upstream_rel 8.10
-%define almalinux_rel 1
-%define dist .el%{dist_release_version}
-%global eol_date 2029-06-01
-
-# The anaconda scripts in %%{_libexecdir} can create false requirements
-%global __requires_exclude_from %{_libexecdir}
-
-Name:           almalinux-release
-Version:        %{upstream_rel}
-Release:        %{almalinux_rel}%{?dist}
-Summary:        %{product_family} release file
-Group:          System Environment/Base
-License:        GPLv2
-Provides:       almalinux-release = %{version}-%{release}
-Provides:       centos-release = %{version}-%{release}
-Provides:       almalinux-release(upstream) = %{upstream_rel}
-Provides:       centos-release(upstream) = %{upstream_rel}
-Provides:       redhat-release = %{upstream_rel_long}
-Provides:       system-release = %{upstream_rel_long}
-Provides:       system-release(releasever) = %{base_release_version}
-Provides:       base-module(platform:el%{base_release_version})
-
-Provides:       almalinux-release-eula
-Provides:       centos-release-eula
-Provides:       redhat-release-eula
-
-Source1:        85-display-manager.preset
-Source2:        90-default.preset
-Source3:        99-default-disable.preset
-Source10:       RPM-GPG-KEY-AlmaLinux
-
-##Source100:      rootfs-expand
-
-Source200:      EULA
-Source201:      GPL
-##Source202:      Contributors
-
-Source300:      almalinux.repo
-Source301:      almalinux-ha.repo
-Source302:      almalinux-powertools.repo
-Source303:      almalinux-resilientstorage.repo
-Source304:      almalinux-plus.repo
-Source305:      almalinux-sap.repo
-Source306:      almalinux-saphana.repo
-
-# Only for x86_64
-Source310:      almalinux-rt.repo
-Source311:      almalinux-nfv.repo
-
-%description
-%{product_family} release files
-
-%prep
-echo OK
-
-%build
-echo OK
-
-%install
-rm -rf %{buildroot}
-
-# create skeleton
-mkdir -p %{buildroot}/etc
-mkdir -p %{buildroot}%{_prefix}/lib
-
-# create /etc/system-release and /etc/redhat-release
-echo "%{product_family} release %{full_release_version}%{?beta: %{beta}} (%{release_name})" > %{buildroot}/etc/almalinux-release
-echo "Derived from Red Hat Enterprise Linux %{upstream_rel} (Source)" > %{buildroot}/etc/almalinux-release-upstream
-ln -s almalinux-release %{buildroot}/etc/system-release
-ln -s almalinux-release %{buildroot}/etc/redhat-release
-ln -s almalinux-release %{buildroot}/etc/centos-release
-
-# Create the os-release file
-cat << EOF >>%{buildroot}%{_prefix}/lib/os-release
-NAME="%{product_family}"
-VERSION="%{full_release_version} (%{release_name})"
-ID="almalinux"
-ID_LIKE="rhel centos fedora"
-VERSION_ID="%{full_release_version}"
-PLATFORM_ID="platform:el%{base_release_version}"
-PRETTY_NAME="%{product_family} %{full_release_version}%{?beta: %{beta}} (%{release_name})"
-ANSI_COLOR="0;34"
-LOGO="fedora-logo-icon"
-CPE_NAME="cpe:/o:almalinux:almalinux:%{base_release_version}::baseos"
-HOME_URL="https://almalinux.org/"
-DOCUMENTATION_URL="https://wiki.almalinux.org/"
-BUG_REPORT_URL="https://bugs.almalinux.org/"
-
-ALMALINUX_MANTISBT_PROJECT="AlmaLinux-%{base_release_version}"
-ALMALINUX_MANTISBT_PROJECT_VERSION="%{full_release_version}"
-REDHAT_SUPPORT_PRODUCT="%{product_family}"
-REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?beta: %{beta}}"
-SUPPORT_END=%{eol_date}
-EOF
-
-# Create the symlink for /etc/os-release
-ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
-
-# write cpe to /etc/system-release-cpe
-echo "cpe:/o:almalinux:almalinux:%{base_release_version}::baseos" | tr [A-Z] [a-z] > %{buildroot}/etc/system-release-cpe
-
-# create /etc/issue and /etc/issue.net
-echo '\S' > %{buildroot}/etc/issue
-echo 'Kernel \r on an \m' >> %{buildroot}/etc/issue
-cp %{buildroot}/etc/issue %{buildroot}/etc/issue.net
-echo >> %{buildroot}/etc/issue
-
-# copy GPG keys
-mkdir -p -m 755 %{buildroot}/etc/pki/rpm-gpg
-install -m 644 %{SOURCE10} %{buildroot}/etc/pki/rpm-gpg
-
-# copy yum repos
-mkdir -p -m 755 %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE300} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE301} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE302} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE303} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE304} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE305} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE306} %{buildroot}/etc/yum.repos.d
-
-# RT and NFV are only for x86_64
-%ifarch x86_64
-install -m 644 %{SOURCE310} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE311} %{buildroot}/etc/yum.repos.d
-%endif
-
-mkdir -p -m 755 %{buildroot}/etc/dnf/vars
-echo "%{infra_var}" > %{buildroot}/etc/dnf/vars/infra
-echo "%{contentdir}" >%{buildroot}/etc/dnf/vars/contentdir
-echo "%{base_release_version}-stream" > %{buildroot}/etc/dnf/vars/stream
-
-# set up the dist tag macros
-install -d -m 755 %{buildroot}/etc/rpm
-cat >> %{buildroot}/etc/rpm/macros.dist << EOF
-# dist macros.
-
-%%almalinux_ver %{base_release_version}
-%%almalinux %{base_release_version}
-%%centos_ver %{base_release_version}
-%%centos %{base_release_version}
-%%rhel %{base_release_version}
-%%dist .el%{base_release_version}
-%%el%{base_release_version} 1
-EOF
-
-# use unbranded datadir
-mkdir -p -m 755 %{buildroot}/%{_datadir}/almalinux-release
-ln -s almalinux-release %{buildroot}/%{_datadir}/redhat-release
-install -m 644 %{SOURCE200} %{buildroot}/%{_datadir}/almalinux-release
-
-# use unbranded docdir
-mkdir -p -m 755 %{buildroot}/%{_docdir}/almalinux-release
-ln -s almalinux-release %{buildroot}/%{_docdir}/redhat-release
-install -m 644 %{SOURCE201} %{buildroot}/%{_docdir}/almalinux-release
-
-# copy systemd presets
-mkdir -p %{buildroot}/%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE1} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE2} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE3} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
-
-
-%clean
-rm -rf %{buildroot}
-
-%files
-%defattr(0644,root,root,0755)
-/etc/redhat-release
-/etc/system-release
-/etc/centos-release
-##/etc/centos-release-upstream
-/etc/almalinux-release
-/etc/almalinux-release-upstream
-/etc/dnf/vars/*
-/etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-%config(noreplace) /etc/yum.repos.d/almalinux.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-ha.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-powertools.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-resilientstorage.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-plus.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-sap.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-saphana.repo
-%ifarch x86_64
-%config(noreplace) /etc/yum.repos.d/almalinux-rt.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-nfv.repo
-%endif
-%config(noreplace) /etc/os-release
-%config /etc/system-release-cpe
-%config(noreplace) /etc/issue
-%config(noreplace) /etc/issue.net
-/etc/rpm/macros.dist
-%{_docdir}/redhat-release
-%{_docdir}/almalinux-release
-%{_datadir}/redhat-release
-%{_datadir}/almalinux-release
-%{_prefix}/lib/os-release
-%{_prefix}/lib/systemd/system-preset/*
-
-%changelog
-* Wed May 22 2024 Andrew Lukoshko <alukoshko@almalinux.org> - 8.10-1
- 8.10 stable release
-
-* Thu Nov 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.9-1
- 8.9 stable release
-
-* Mon Oct 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-3
- Split AlmaLinux OS 8 GPG public keys to fix microdnf
-
-* Tue Oct 10 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-2
- Add new AlmaLinux OS 8 GPG key
-
-* Tue May 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-1
- 8.8 stable release
-
-* Sat Nov 19 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-3
- Fixed ownership of dirs (albz#328)
-
-* Wed Nov 09 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-2
- Add stream dnf variable for CentOS SIG repos compatibility
-
-* Mon Nov 07 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-1
- 8.7 stable release
- Add SAP and SAPHANA repos
-
-* Wed Jun 22 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-2
- Add more compatibility variables to /etc/os-release
-
-* Thu May 19 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-1
- Bump release
-
-* Tue May 10 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.1
- 8.6 stable release
-
-* Thu Mar 31 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.0
- 8.6 beta release
- Add RT and NFV repos for x86_64
-
-* Tue Dec 28 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1.1
- Add RS repo
-
-* Thu Oct 07 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1
- 8.5 beta release
-
-* Thu Jul 29 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-3
- disable fastestmirror dnf plugin for all repos
-
-* Thu May 20 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-2
- 8.4 stable release
- Disable PowerTools repo by default and move it to separate file
-
-* Fri Apr 16 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-1
- 8.4 beta release
-
-* Wed Mar 24 2021 Andrei Lukoshko <alukoshko@almalinux.org> - 8.3-4
- 8.3 stable release
-
-* Wed Feb 10 2021 Andrei Lukoshko <alukoshko@cloudlinux.com> - 8.3-3
- Switch repos to mirrorlists and enable fastestmirror plugin
- Use full release version for ALMALINUX_MANTISBT_PROJECT_VERSION
- Add HighAvailability repo
-
-* Wed Jan 27 2021 Anatholy Scryabin <ascryabin@cloudlinux.com> - 8.3-2
- Initial build for AlmaLinux
--- a/almalinux-resilientstorage.repo
+++ b/almalinux-resilientstorage.repo
@ -1,28 +0,0 @@
-# almalinux-resilientstorage.repo
-
-[resilientstorage]
-name=AlmaLinux $releasever - ResilientStorage
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/ResilientStorage/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[resilientstorage-source]
-name=AlmaLinux $releasever - ResilientStorage Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[resilientstorage-debuginfo]
-name=AlmaLinux $releasever - ResilientStorage debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-rt.repo
+++ b/almalinux-rt.repo
@ -1,27 +0,0 @@
-# almalinux-rt.repo
-
-[rt]
-name=AlmaLinux $releasever - Real Time
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/RT/$basearch/os/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[rt-source]
-name=AlmaLinux $releasever - Real Time Sources
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/RT/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[rt-debuginfo]
-name=AlmaLinux $releasever - Real Time Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/RT/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-sap.repo
+++ b/almalinux-sap.repo
@ -1,28 +0,0 @@
-# almalinux-sap.repo
-
-[sap]
-name=AlmaLinux $releasever - SAP
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/SAP/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[sap-source]
-name=AlmaLinux $releasever - SAP Sources
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/SAP/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[sap-debuginfo]
-name=AlmaLinux $releasever - SAP Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/SAP/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-saphana.repo
+++ b/almalinux-saphana.repo
@ -1,28 +0,0 @@
-# almalinux-saphana.repo
-
-[saphana]
-name=AlmaLinux $releasever - SAP HANA
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/SAPHANA/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[saphana-source]
-name=AlmaLinux $releasever - SAP HANA Sources
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[saphana-debuginfo]
-name=AlmaLinux $releasever - SAP HANA Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux.repo
+++ b/almalinux.repo
@ -1,78 +0,0 @@
-# almalinux.repo
-
-[baseos]
-name=AlmaLinux $releasever - BaseOS
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/BaseOS/$basearch/os/
-enabled=1
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[appstream]
-name=AlmaLinux $releasever - AppStream
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/AppStream/$basearch/os/
-enabled=1
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[extras]
-name=AlmaLinux $releasever - Extras
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/extras/$basearch/os/
-enabled=1
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[baseos-source]
-name=AlmaLinux $releasever - BaseOS Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[appstream-source]
-name=AlmaLinux $releasever - AppStream Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[extras-source]
-name=AlmaLinux $releasever - Extras Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/extras/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[baseos-debuginfo]
-name=AlmaLinux $releasever - BaseOS debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[appstream-debuginfo]
-name=AlmaLinux $releasever - AppStream debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[extras-debuginfo]
-name=AlmaLinux $releasever - Extras debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/extras/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux