30 changed files with 1393 additions and 862 deletions
--- a/90-default.preset
+++ b/90-default.preset
@ -1,199 +0,0 @@
 # Also see:
 # https://fedoraproject.org/wiki/Starting_services_by_default
 disable systemd-timesyncd.service
 disable systemd-resolved.service
 # systemd
 enable remote-fs.target
 enable getty@tty1.service
 # System stuff
 enable sshd.service
 enable atd.*
 enable crond.*
 enable chronyd.service
 enable rpcbind.*
 enable NetworkManager.service
 enable NetworkManager-dispatcher.service
 enable ModemManager.service
 enable auditd.service
 enable restorecond.service
 enable bluetooth.*
 enable avahi-daemon.*
 enable cups.*
 # The various syslog implementations
 enable rsyslog.*
 enable syslog-ng.*
 enable sysklogd.*
 # Network facing
 enable firewalld.service
 enable libvirtd.service
 enable xinetd.service
 enable ladvd.service
 # Storage
 enable multipathd.service
 enable libstoragemgmt.service
 enable lvm2-lvmpolld.socket
 enable lvm2-monitor.*
 enable lvm2-lvmetad.*
 enable dm-event.*
 enable dmraid-activation.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=855372
 enable mdmonitor.service
 enable mdmonitor-takeover.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=876237
 enable spice-vdagentd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=885406
 enable qemu-guest-agent.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=928726
 enable dnf-makecache.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=957135
 enable vmtoolsd.service
 # mcelog is a utility that collects and decodes Machine Check Exception data
 # on x86-32 and x86-64 systems.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1302179
 enable mcelog.service
 #https://bugzilla.redhat.com/show_bug.cgi?id=995987
 enable kdump.service
 #https://bugzilla.redhat.com/show_bug.cgi?id=1009970
 enable tuned.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1215645
 enable unbound-anchor.timer
 # Enable SSSD Kerberos Credential Cache Server
 # https://bugzilla.redhat.com/show_bug.cgi?id=1558927
 enable sssd-kcm.socket
 # https://bugzilla.redhat.com/show_bug.cgi?id=1578833
 enable sssd.service
 # Hardware
 enable gpm.*
 enable gpsd.*
 enable irqbalance.service
 enable lm_sensors.service
 enable mcelog.*
 enable microcode.service
 enable smartd.service
 enable pcscd.socket
 enable rngd.service
 # Other stuff
 enable abrtd.service
 enable abrt-journal-core.service
 enable abrt-oops.service
 enable abrt-xorg.service
 enable abrt-vmcore.service
 enable lttng-sessiond.service
 enable ksm.service
 enable ksmtuned.service
 enable rootfs-resize.service
 enable sysstat.service
 enable uuidd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1193616
 enable hypervfcopyd.service
 enable hypervkvpd.service
 enable hypervvssd.service
 # Desktop stuff
 enable accounts-daemon.service
 enable rtkit-daemon.service
 enable upower.service
 enable udisks2.service
 enable packagekit-offline-update.service
 enable PackageKit.service
 # Initial Setup reconfiguration service
 enable initial-setup-reconfiguration.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1312446
 enable opal-prd.service
 # virtlog.service is sometimes used by VMs started by libvirt.service
 # Enable virtlog.socket to have it socket activated
 # https://bugzilla.redhat.com/show_bug.cgi?id=1325503
 enable virtlogd.socket
 # https://bugzilla.redhat.com/show_bug.cgi?id=1271839
 enable rhsmcertd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1359645
 enable brandbot.*
 # https://bugzilla.redhat.com/show_bug.cgi?id=1572550
 enable timedatex.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1578870
 enable selinux-autorelabel-mark.service
 enable rhel-configure.service
 enable rhel-dmesg.service
 # https://github.com/fedora-sysv/initscripts/commit/37109fdf9808
 enable nis-domainname.service
 enable import-state.service
 enable loadmodules.service
 enable readonly-root.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1630200
 # s390x specific services
 enable cpi.service
 enable device_cio_free.service
 # Enable the stratis daemon for managing stratis storage
 # https://bugzilla.redhat.com/show_bug.cgi?id=1632510
 enable stratisd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1817591
 enable mlocate-updatedb.timer
 # nvme auto connect
 # https://bugzilla.redhat.com/show_bug.cgi?id=1805466
 enable nvmefc-boot-connections.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1683101
 enable nfs-convert.service
 # OSTree based systems need to remount /sysroot and
 # /var as rw via ostree-remount.service
 # ignored by non-OSTree based systems
 # https://bugzilla.redhat.com/show_bug.cgi?id=1848453
 enable ostree-remount.service
 # enable greenboot services
 # https://bugzilla.redhat.com/show_bug.cgi?id=1935177
 enable greenboot-grub2-set-counter.service
 enable greenboot-grub2-set-success.service
 enable greenboot-healthcheck.service
 enable greenboot-rpm-ostree-grub2-check-fallback.service
 enable greenboot-status.service
 enable greenboot-task-runner.service
 enable redboot-auto-reboot.service
 enable redboot-task-runner.service
 # enable dbus services
 # https://bugzilla.redhat.com/show_bug.cgi?id=1941642
 # https://projects.engineering.redhat.com/browse/RHELBLD-6131
 enable dbus.socket
 enable dbus-daemon.service
 # enable nfs-client.target
 # https://bugzilla.redhat.com/show_bug.cgi?id=1967515
 enable nfs-client.target
 # https://bugzilla.redhat.com/show_bug.cgi?id=2126605
 enable clevis-luks-askpass.path
--- a/87
+++ b/87
@ -1,87 +0,0 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 Version: GnuPG v1
 mQINBF/9iQ4BEADguRE+cjShp7JujKkiVH3+ZYYD5ncX7IMh7Ig0DbDC8ldtm84k
 4vi8266IIBLM3eRgkF9sgHciRikTPow50R+Ww7jJzehV9vjTkRzWr8ikog6X3ZPw
 rh9QAqOdTOIn4bBSS6j5+xdxYKG7yEWXjADbkFVSiLvejp3FrLZGlNFdPCkGKFhC
 vTCgbEKtAkXHx/jFDJCYbnJkzrecCSd+a3yQ4Ehp6TCxnywXdseX4WGyNT3E6Ppu
 JRIXLKrVwP/5pZxqgBS9EDsQpaqxmkS8iJe9j8Bkzm4mL0K4Y8B5vApIyxRO0i0C
 8Eb8UgLSoOwWsZjWpDcYtLgCTNT1CCaOe5lG6qy3HD6Y7LiXinnMgq5uXbfTEKxZ
 rUyQ9Jepxe5hk5GJ1mTbQ6vEj0oYOWYWCwLZKOHucRh8BmvYEbhMBGsgBGcMruql
 Na+gw1eVIMTknGCdGGwceb3DLNHXGolU3GDTKd8d6lEaXkFx9zXWBicOIDyG72tU
 vZMj2RVzmgEhxcw1vKxoJIUOegjpdqBqTJRnM/tnimm4eE65hHhuqRYIngwHWqL0
 K+Daxt+J+4l5Xo56AEYc+2i8JA1nGT/nw13KE/7S79wRVaJPzDccI7/mefDKcF3R
 EGWG7f9jWqoCB+wvXD+0FpHDcp0TPgDcWTObUs3yBoySbgj8IXL3z2R64wARAQAB
 tCJBbG1hTGludXggPHBhY2thZ2VyQGFsbWFsaW51eC5vcmc+iQI+BBMBAgAoBQJf
 /YkOAhsBBQkFo5qABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBIj898Ors0
 +IsjD/9/F/PIu7kSn4P8Ud9j/iyoO8hH53qXKMimarg920ugt2uUyl6SzaJqV0dK
 ACrczvC0VmxrNaJ1jB31TGPpdJZpey5AJbefofu/RgAlxHN6o3QX0Br4bEHahF20
 21q2eIjoMrq8eiz8X5D2wfx6CyOA6RZY96MVQ2whXjQHV+hwo65xyMUyjTuFx5Pb
 nl7gdYr9EkH3EafdNrpuVurp+Zrgur+973nUrzKq8c2rlDiEQz/ZG+bgasTDYkcz
 q6NUPP5OQ5BVpFCkuE9YuziZD+37hxN07P2gyz9NRrfAOZqBXj8er4vqNhpR/lLA
 h5QF1erb0mjcMFEhkV8ETN0ceJzL/t829BlQ7MB7LdQ5v9kc5p5cwcsBly54ouI0
 l9LjSN95Al0VPoWE8zgjnytecu2UN5+0k12bfcj0zjKdAxEVD3y9Id1MJIze7/PA
 6v3LOk+SSs8M0ASmZEnDBTCbDRpXlDDUKEEmMIBRdvpTxjiUnwD2tHwhXR8m6vw6
 749i+mdc8fgljTey8sJLKxTabbYNgTHLi9lCMdmPlKU2QJYsIwIBpqF2/eenNyZT
 LvlW/aBUU7Li3etUnJeP9ig+V2LuDhyT6TlVPsFKCCruoy7faSjW2/2wlVcasGQp
 YqqqqtQJyVDRud6ig7oH3EWSvUySEmywjBp5zfwrMw3jeWkwHbkBjQRf/YnGAQwA
 tk5NBR7SCwYwEsmPDUX/SJ98eGHb1nux/cRaX+K2KgX7Yi3hhlFs/InkiiNKs+Au
 0N5ZBIXltypguo5jE3MwXQxLr2MfJ74bdDXR7z3BmBB92BMaS+tHNJWroYnqiSQ7
 2PXfWRF9PtlChF12NyK6SVrQg58IqJjf5MQ8hodgIk0t21qCvxe/IotktjKHy2Vn
 gvKPjtT05qXpAK0CP8N5wtOc4WnFCxvNTI7e1KkYS4dvXHL6V+WvqL3saGIXY5Iy
 0jYZW5xMxh691C+HvHQ8/Lof3Enenz3hDJR0X9wvzusxBJWwg/vqRIR8+YYKSHj1
 VEFycTabqGLlnPpYpFqDOdqS2gDtdrD6FEsrSpy9pBd98XAzjkn6BW4Rf0PTaJ/z
 b3paHsqxEnWbamANs5GYs1Y/1rEIl66jOhZB9Sua22/wfGd3PvfM6nxi825l4coO
 bbivRY6U4/WtxQUcK8zdoF97zUlvbNNN0LsluZ0tBF44o5vt7f4aCGXZ8XMVIef1
 ABEBAAGJA8QEGAECAA8FAl/9icYCGwIFCQWjmoABqQkQSI/PfDq7NPjA3SAEGQEC
 AAYFAl/9icYACgkQUdZkfsIa1upqtQv/R9oLsG3g4Rg2MKDrXYSa94n1CBY5ESDL
 1N0mZTWQ5nVdfIWWifnpe72VDBR3Y+r5ootnCHq09DbK+K3q82q2UmGEq968mR96
 LKGjWuTS1rY/MCbQbW+jcrnju0T3bCcImggMJoYCzuUnBfIkexObwi/YidqgL92+
 nw3NzqeWnq+gu/1Q2ngzhN8Ft4mwOcFr9H0px0476LLvR+7lrSu2HqGeHk+fUA4c
 ZNwvsgGYgCAJhz8fPwKCoLrxsE82bkZ86JgUJEcMu0ki4UFo3rg6NmkDwnrYO61l
 MOrBCxt/lPJz7d8L9oCLu9pJSBsKH9RNqO10NAoEMppKwnQSz6RQFRJj7WNW+OEs
 mjZt7sNrTr0Y+udx58Sqd0C5k7lGUtYWKKGpLfdz0RLnBTTFmjnB3Y2uyOJFc4FS
 g251yjk9ds1AFjdRThQ2kFpZzQAo5ei6zMBaZATg0E2uk4HAfpQ58CPGj4f1k3py
 1N2hYUA+qksZIVxjFfwYr5LCv4tMZumZl6UP/je7EHh5IGkB1+Bpeyj3dudZblvM
 lE6kdGridxInbiJvgqBSdprIksR8wm1Vy/Z1/lHEM6QnUODGyRAbjQHL3kPKloPj
 lKr8TNAELbmVTZjBRJowsGw27rhYAaji/qEet/0ALfu2l3QuOQ38dyuPpxlDSTLY
 WnajVIgvSJUU3Yl38Lp3UTuHdtdiNWgyHkLOA/11GK14RSWYsjZAamstlSpl24Op
 yKLN5z+q4tNAs+tfQrWNRi3SMG7UDroxztJVkHGvuJ2DT/Q6tANigPzipLzSgOIO
 8Wa2aQmqtQ4V0eB2S4DxcMckHti3+4fbrzBzeN/PFaIVLwUtdsUdBs+TtSZFdN9e
 i0oLUChIYKDvVBGqgmIor6YgenNSSZni3rj+RRA3gQom7jyVrQPgUv7lsv/MLCmg
 Ogpibxs3+SDbbZ6tP0D8uxdRnB4NVeENewlqw/ImacgjLtjBHaq+BebjWErIAkdX
 VnjWoLdZoV3B4ComKsjFNf7sfbzV/T2Xpg/r/u1WkiSjvD0mkSZ+3seDjd6oL20s
 p7jGLnSGZqGsUksJym0tWRvuyspgTELZlcjuMfHKuKmYudYFi+Y48+YsdJ7UetNT
 kAIBinjtZwEEAP4GumNNy7f4l4tt1CBy1EgoYtYCcJC5SGyhWMee3L3hLhHe7Iwd
 72EHtteVBoVn0eg6
 =rEWJ
 -----END PGP PUBLIC KEY BLOCK-----
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 mQINBGUlFG8BEADc0kEC57b722MbPVkI8aoYFAEWM+lj084H26msZpAYVfW7fCi5
 S7g3n6htVdvvnB6MrJANitZgQhMyC7tchNQz5sjrFffasNkOoI5Q27PSrG676ILP
 diowPWfJkwrN0f0UcJsV3w5KBedvUXJnoa64lP/oBFkbz3SvUTqZFkSBzOfCTdXW
 bvpZonghgm/AEU8wqsdOitXU23Xn4fsPB7aULgR31jz3irnaUDFXUnNqoiQpU6JB
 P6WiFqN/IZMH95HW1WlMBGSOalSbQUlNEND3J0lxK2a33UBmTdR3aLyS+o9P8+7b
 Cdzbkrs1fXXVxxvlaQdSWBSjVULUZjKIZ+HtqhIaTiBELa7JHBEBbEZgNHpymmc8
 hIF6fdTbzbbYx9MbNmpzCcr+SKHubCdvZyX2FsWK1CHvYx6iPc9wcu4x9yh8MIfp
 KpLSJG1SaSCHbUdatpsOSQK2pbIN3THsvFrKPVssLrMgVjwp22Q3vMFL+ldq0vZ5
 6uIIiNRKrX2CKKrUy1kF7FjDNMx4riaCQHs5vp7qOttxv0E/X4Z9B4QZdC02H2Mq
 Ea5LoDxONutv+JMzWFyxIEQvbnfdDSu4QUDkn3H1WkBNmqTUwny5DSxZNjGB8a6P
 ISaIE+kN2pp5v9eB8Q4+4BxbU2G2/Jy/V6bFC8eLL+PIKodPKbpCqoPyGwARAQAB
 tCdBbG1hTGludXggT1MgOCA8cGFja2FnZXJAYWxtYWxpbnV4Lm9yZz6JAk8EEwEI
 ADkWIQS8Xt3K31AsB38Vgogq6B6KztcliwUCZSUUbwIbAwQLCQgHAyICAQQVCgkI
 BBYCAwECHgcCF4AACgkQKugeis7XJYvOeA/9E/hJwfd7UPtvsv+y7Wiei1NCt+OJ
 AzJQPjEzHJNmLAD157AHtpA2yZpB9GlRQkjRu40fn0It20mwjnl0j5oHF9HnQ+/H
 Qtiw9pwgNpZJaTe5YnzETbGqrrOVgWihkJyJhn42vtuirNu7pKJvWilRvz1a81JK
 i/okezXp1KBrgrxR/bG26c8k61AK6n/ExI1MoHZhyaAAebFqG8vTiWTuC2a4t7SD
 pxbzsn5CMuXqVY1gxIdiUGzgrXfSm5WgpSYEG01VN+VF885caPvtMHoLBy/pLGN3
 5TKp4pKiA9JGQxtlZLdO666UbpgbjoxFYxNZEwY3Tdx37zbsP4pHcaN8fOGbk5mG
 h8LwkjppPZzoXONyBfUJ+uHBEzRJEw4KtVRgaZZfCcojRvmyJB4TAM1SYkikaw8F
 0gi3OPRWtVdEogxP0XD/tTrPSKo7pTDEk17HIyKCU0KxF4ZSbxXFMeH5OZUQAQM4
 l7ECGNg3bVhXC66AHE72mz/PN39M2Z0Sww7GWYCf6IDhhkeTxYx+I7VW1Uo9ht5L
 i3ZRMbX/h6NBYTUaPJEx3fwixNv2+RtE3m4JIxg76xBOYGLyIRlaImWNGKTnGz5m
 IBRP5Vm7nRdFOOFhNz+iDIyq0LEyhGU7xCriFaL+ozXLiIzycidgTTZW3WfkHxlr
 ZEzov/wIBeoaIp8=
 =mC/C
 -----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/50-redhat.conf
+++ b/SOURCES/50-redhat.conf
@ -0,0 +1,7 @@
 # https://bugzilla.redhat.com/show_bug.cgi?id=1689346
 kernel.kptr_restrict = 1
 # Source route verification
 net.ipv4.conf.default.rp_filter = 1
 net.ipv4.conf.*.rp_filter = 1
 -net.ipv4.conf.all.rp_filter
--- a/SOURCES/85-display-manager.preset
+++ b/SOURCES/85-display-manager.preset
@ -6,5 +6,6 @@ enable gdm.service
 enable lightdm.service
 enable slim.service
 enable lxdm.service
 enable sddm.service
 enable kdm.service
 enable xdm.service
--- a/SOURCES/90-default-user.preset
+++ b/SOURCES/90-default-user.preset
@ -0,0 +1,30 @@
 # Enable the D-Bus service (including its socket for socket activation)
 # unconditionally. It is used throughout Fedora and required on all machines.
 # https://src.fedoraproject.org/rpms/fedora-release/pull-request/4
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable dbus.socket
 enable dbus-broker.service
 # Socket-activated pipewire service for individual user sessions
 # https://bugzilla.redhat.com/show_bug.cgi?id=1592434
 enable pipewire.socket
 # Enable the PipeWire PulseAudio compatibility socket interface
 # https://bugzilla.redhat.com/show_bug.cgi?id=1904239
 # https://bugzilla.redhat.com/show_bug.cgi?id=1907906
 # https://fedoraproject.org/wiki/Changes/DefaultPipeWire
 enable pipewire-pulse.socket
 # https://bugzilla.redhat.com/show_bug.cgi?id=1976006
 enable pipewire-media-session.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1979419
 enable wireplumber.service
 # Enable the session agent for snaps
 # https://bugzilla.redhat.com/show_bug.cgi?id=1734371
 enable snapd.session-agent.socket
 # https://src.fedoraproject.org/rpms/fedora-release/pull-request/80
 enable obex.service
 enable grub-boot-success.timer
 enable pulseaudio.socket
--- a/SOURCES/90-default.preset
+++ b/SOURCES/90-default.preset
@ -0,0 +1,469 @@
 # See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
 # for the Fedora policy.
 # On Fedora we deviate from some upstream defaults
 disable systemd-timesyncd.service
 disable systemd-networkd.service
 disable systemd-networkd-wait-online.service
 # We want to update systemd-boot from packaging scriptlets after updates.
 disable systemd-boot-update.service
 # https://fedoraproject.org/wiki/Changes/systemd-resolved
 enable systemd-resolved.service
 # https://fedoraproject.org/wiki/Changes/EnableSystemdOomd
 enable systemd-oomd.service
 # These presets were last validated en-masse on 2015-09-09
 # https://fedorahosted.org/fesco/ticket/1472
 # System stuff
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable dbus.socket
 enable dbus-broker.service
 enable sshd.service
 # Locally-running services
 enable atd.*
 enable crond.*
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/636
 enable chronyd.service
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 # https://bugzilla.redhat.com/show_bug.cgi?id=1455704
 enable NetworkManager.service
 enable NetworkManager-wait-online.service
 enable NetworkManager-dispatcher.service
 enable ModemManager.service
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311
 enable auditd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=2258520
 enable audit-rules.service
 # Locally-running service
 enable restorecond.service
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166
 enable bluetooth.*
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable avahi-daemon.*
 # Default configuration is locally-running only
 # CUPS is now socket-activatable for local use-cases, so don't enable cups.service
 # https://pagure.io/fesco/issue/1701
 enable cups.socket
 enable cups.path
 # RHEL-37762: We need the full service enabled to act as a print server
 enable cups.service
 # The various syslog implementations
 enable rsyslog.*
 enable syslog-ng.*
 enable sysklogd.*
 # Network facing
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable firewalld.service
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627
 # Virtualization driver specific daemons. Start by default at boot for VM
 # autostart, but shutdown after 2 mins and socket activated thereafter
 enable virtqemud.service
 enable virtxend.service
 enable virtlxcd.service
 enable virtvboxd.service
 # Sockets for the services listed above, to support socket activation
 # after the initial timeout
 enable virtqemud.socket
 enable virtqemud-ro.socket
 enable virtqemud-admin.socket
 enable virtxend.socket
 enable virtxend-ro.socket
 enable virtxend-admin.socket
 enable virtlxcd.socket
 enable virtlxcd-ro.socket
 enable virtlxcd-admin.socket
 enable virtvboxd.socket
 enable virtvboxd-ro.socket
 enable virtvboxd-admin.socket
 # Compatibility with libvirtd sockets for old clients (socket activated
 # only when required). Note that the -tcp and -tls sockets are kept disabled
 # by default, as they require additional configuration before they can work
 enable virtproxyd.socket
 enable virtproxyd-ro.socket
 enable virtproxyd-admin.socket
 # Secondary drivers providing supporting functionality to main virtualization
 # drivers (socket activated only when required)
 enable virtinterfaced.socket
 enable virtinterfaced-ro.socket
 enable virtinterfaced-admin.socket
 enable virtnetworkd.socket
 enable virtnetworkd-ro.socket
 enable virtnetworkd-admin.socket
 enable virtnodedevd.socket
 enable virtnodedevd-ro.socket
 enable virtnodedevd-admin.socket
 enable virtnwfilterd.socket
 enable virtnwfilterd-ro.socket
 enable virtnwfilterd-admin.socket
 enable virtsecretd.socket
 enable virtsecretd-ro.socket
 enable virtsecretd-admin.socket
 enable virtstoraged.socket
 enable virtstoraged-ro.socket
 enable virtstoraged-admin.socket
 # Non-driver support services (socket activated only when required, no
 # read-only socket)
 enable virtlogd.socket
 enable virtlogd-admin.socket
 enable virtlockd.socket
 enable virtlockd-admin.socket
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable xinetd.service
 # Storage
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/391
 enable multipathd.service
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/876
 enable libstoragemgmt.service
 # Approved by FESCo - https://pagure.io/fesco/issue/2386
 enable iscsid.socket
 enable iscsiuio.socket
 # Approved by FESCo - https://pagure.io/fesco/issue/2943
 enable iscsi-starter.service
 # iSCSI support for early-boot
 # https://bugzilla.redhat.com/show_bug.cgi?id=1930470
 enable iscsi-onboot.service
 # Locally-running services
 enable lvm2-monitor.*
 enable lvm2-lvmetad.*
 enable dm-event.*
 enable dmraid-activation.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=855372
 enable mdmonitor.service
 enable mdmonitor-takeover.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1817491
 enable raid-check.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=876237
 enable spice-vdagentd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=885406
 enable qemu-guest-agent.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=928726
 enable dnf-makecache.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=1995495
 enable rpm-ostree-countme.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=957135
 enable vmtoolsd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=976315
 enable dkms.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=961878
 enable ipmi.service
 enable ipmievd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1039351
 enable x509watch.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=1060754
 enable dnssec-triggerd.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1095353
 enable uuidd.socket
 # Hardware
 # Locally-running service
 enable gpm.*
 # https://bugzilla.redhat.com/show_bug.cgi?id=1066421
 enable gpsd.socket
 # https://bugzilla.redhat.com/show_bug.cgi?id=1141607
 enable x2gocleansessions.service
 # https://issues.redhat.com/browse/RHEL-35582
 enable tuned.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1215641
 enable unbound-anchor.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=1222495
 enable lvm2-lvmpolld.*
 # https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates
 enable dbxtool.service
 # Locally-running services
 enable irqbalance.service
 enable lm_sensors.service
 enable mcelog.*
 enable smartd.service
 enable pcscd.socket
 enable rngd.service
 # Other stuff
 # Approved by FESCo - https://fedorahosted.org/fesco/ticket/937
 # Note: abrt-ccpp.service is excluded in favor of systemd-coredump.
 enable abrtd.service
 enable abrt-journal-core.service
 enable abrt-oops.service
 enable abrt-xorg.service
 enable abrt-vmcore.service
 # Locally-running services
 enable ksm.service
 enable ksmtuned.service
 enable rootfs-resize.service
 enable sysstat.service
 enable sysstat-collect.timer
 enable sysstat-summary.timer
 enable uuidd.service
 enable xendomains.service
 enable xenstored.service
 enable xenconsoled.service
 # Desktop stuff
 # Locally-running services
 enable accounts-daemon.service
 enable rtkit-daemon.service
 enable upower.service
 enable udisks2.service
 enable polkit.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1187072
 enable timedatex.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1231745
 enable mlocate-updatedb.timer
 # https://src.fedoraproject.org/rpms/fedora-release/pull-request/204
 enable plocate-updatedb.timer
 # https://bugzilla.redhat.com/show_bug.cgi?id=1218999
 enable sa-update.timer
 # Hyper-V guest support daemons
 # https://bugzilla.redhat.com/show_bug.cgi?id=1279322
 enable vmtoolsd.service
 # mcelog is a utility that collects and decodes Machine Check Exception data
 # on x86-32 and x86-64 systems.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1302179
 enable mcelog.service
 # OPAL-prd is a utility specific to ppc64le systems
 # It is the "OPAL Processor Recovery Diagnostics Daemon"
 # https://bugzilla.redhat.com/show_bug.cgi?id=1312018
 enable opal-prd.service
 # lircd is the Linux Infrared Control daemon
 # Starting with version 0.9.4, it requires no manual configuration
 # https://bugzilla.redhat.com/show_bug.cgi?id=1340061
 enable lircd.socket
 # IPSec management
 # https://bugzilla.redhat.com/show_bug.cgi?id=1276285
 enable pluto.socket
 # https://bugzilla.redhat.com/show_bug.cgi?id=1367932
 # Automatically refresh installed snaps
 enable snapd.refresh.timer
 # Socket activated daemon to manage snaps
 enable snapd.socket
 # Support for dual-GPU systems
 # https://bugzilla.redhat.com/show_bug.cgi?id=1389762
 enable switcheroo-control.service
 # Support for the DRBD link-cleaning service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1399387
 enable drbdlinksclean.service
 # Enable the System Security Services Daemon
 # https://bugzilla.redhat.com/show_bug.cgi?id=1427649
 enable sssd.service
 # Enable ostree-remount on ostree-based systems
 # (Does nothing on non-ostree systems)
 # https://bugzilla.redhat.com/show_bug.cgi?id=1451458
 enable ostree-remount.service
 # Enable Performance Co-Pilot services
 # https://bugzilla.redhat.com/show_bug.cgi?id=1472350
 enable pmcd.service
 enable pmlogger.service
 enable pmie.service
 # Enable SSSD Kerberos Credential Cache Server
 # https://bugzilla.redhat.com/show_bug.cgi?id=1475999
 enable sssd-kcm.socket
 # sssd-secrets.socket was previously enabled, but as of
 # SSSD 2.0 it is not longer needed
 # https://bugzilla.redhat.com/show_bug.cgi?id=1615584
 # A mechanism to transfer state between the initramfs and the real
 # system. Obsolete since /run was introduced, but still used by some
 # services.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1493479
 # https://bugzilla.redhat.com/show_bug.cgi?id=1584645
 enable import-state.service
 # An initscripts mechanism for readonly root
 # https://bugzilla.redhat.com/show_bug.cgi?id=1493479
 # https://bugzilla.redhat.com/show_bug.cgi?id=1584645
 enable readonly-root.service
 # Ensure that any installed kmods are built for the currently-running
 # kernel at boot
 # https://bugzilla.redhat.com/show_bug.cgi?id=1518258
 enable akmods.service
 # virtualbox-guest-additions service, yet another virtual-machine guest
 # integration agent, this is a locally-running service, Note this has a
 # "ConditionVirtualization=|oracle" so it will only run under VirtualBox
 # https://bugzilla.redhat.com/show_bug.cgi?id=1534595
 enable vboxservice.service
 # Mark the system for SELinux autorelabel when appropriate
 # https://bugzilla.redhat.com/show_bug.cgi?id=1589720
 enable selinux-autorelabel-mark.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=1623901
 enable cpi.service
 # Initialize persistent devices on s390x
 enable device_cio_free.service
 # Enable the stratis daemon for managing stratis storage
 # https://bugzilla.redhat.com/show_bug.cgi?id=1630514
 enable stratisd.service
 # Enable a service to finalize staged OSTree changes at shutdown
 # https://bugzilla.redhat.com/show_bug.cgi?id=1639372
 enable ostree-finalize-staged.path
 # Enable the Docker daemon socket
 # https://bugzilla.redhat.com/show_bug.cgi?id=1655602
 enable docker.socket
 # Enable the service for adding Fedora OCI repos to flatpak
 # https://bugzilla.redhat.com/show_bug.cgi?id=1696225
 enable flatpak-add-fedora-repos.service
 # Run fstrim weekly on filesystems listed in fstab
 enable fstrim.timer
 # oneshot to generate kata VM appliance at host bootup
 # for the booted kernel
 enable kata-osbuilder-generate.service
 # Enable rotation of system log files
 # https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4
 enable logrotate.timer
 # Enable regular update of SpamAssassin data files
 # https://bugzilla.redhat.com/show_bug.cgi?id=1651002
 enable sa-update.timer
 # Enable service to automatically rebuild the RPM database
 # on startup when /var/lib/rpm/.rebuilddb exists
 # https://bugzilla.redhat.com/show_bug.cgi?id=1826658
 enable rpmdb-rebuild.service
 # Enable service to automatically migrate the RPM database to /usr
 # on startup when /var/lib/rpm/.migratedb exists
 # https://bugzilla.redhat.com/show_bug.cgi?id=2044061
 enable rpmdb-migrate.service
 # Support services for Google Cloud
 # Approved by FESCo: https://pagure.io/fesco/issue/2578
 enable google-guest-agent.service
 enable google-startup-scripts.service
 enable google-shutdown-scripts.service
 # Support service for Azure
 # Approved by FESCo: https://pagure.io/fesco/issue/2849
 enable waagent.service
 # Certbot (Let's Encrypt)
 # https://bugzilla.redhat.com/show_bug.cgi?id=1940211
 enable certbot-renew.timer
 # enable thermald by default for desktops
 # https://pagure.io/fedora-workstation/issue/71
 enable thermald.service
 # enable uresourced by default for desktops
 # https://pagure.io/fesco/issue/2457
 enable uresourced.service
 # enable power-profiles-daemon
 # https://pagure.io/fedora-workstation/issue/191
 enable power-profiles-daemon.service
 # Enable clevis-luks-askpass.path
 # https://bugzilla.redhat.com/show_bug.cgi?id=2101719
 enable clevis-luks-askpass.path
 # Enable livesys services for live media
 # https://bugzilla.redhat.com/show_bug.cgi?id=2148790
 enable livesys.service
 enable livesys-late.service
 # Enable Waydroid
 # https://bugzilla.redhat.com/show_bug.cgi?id=2157810
 enable waydroid-container.service
 # Enable nmstate to apply network configuration from /etc/nmstate/*.yml
 # https://github.com/coreos/fedora-coreos-tracker/issues/1175
 # https://github.com/coreos/fedora-coreos-config/pull/2269
 enable nmstate.service
 # Enable nfs-client.target
 # https://bugzilla.redhat.com/show_bug.cgi?id=2218006
 enable nfs-client.target
 # Enable cloud-init services
 # https://bugzilla.redhat.com/show_bug.cgi?id=2233948
 enable cloud-config.service
 enable cloud-final.service
 enable cloud-init.service
 enable cloud-init-local.service
 # Enable  kernel-bootcfg-boot-successful.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=2239607
 enable kernel-bootcfg-boot-successful.service
 # Enable pd-mapper service for Thinkpad X13s
 # https://bugzilla.redhat.com/show_bug.cgi?id=2255318
 enable pd-mapper.service
 # The Cockpit web-based system management console
 enable cockpit.socket
 # https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
 enable fwupd-refresh.timer
--- a/SOURCES/99-default-disable.preset
+++ b/SOURCES/99-default-disable.preset
--- a/SOURCES/Contributors
+++ b/SOURCES/Contributors
@ -0,0 +1,70 @@
 # -*- coding: utf-8 -*-
 The CentOS distribution would not be possible without the hard work and
 dedication of a large number of talented people. It's only fair that we
 acknowledge the time and effort that they have put into the distribution.
 We are always in need of more volunteers. If you're interested in joining
 the CentOS Project, please join us on irc.freenode.net in #centos-devel or 
 via the mailing list at http://lists.centos.org/pipermail/centos-devel/
 ## Special Recognition ## 
 One of the key reasons we got delayed on the CentOS-6 release was lack of 
 suitable build resources, especially when we had to repeatedly build large
 chunks of code. Norwood S came forward and worked with me to 
 setup a large build machine, then tune the build process and help improve
 the overall build, test and validate process we were using. This build
 machine he donated to the project was about 5 times more capable than the
 entire buildsystem we had. And he did this out of his own pocket, from
 his own time, and has since upgraded the machine as well. It's now a 128GB,
 48 core machine, with 4 SSD's and 4 sata disks : but the key metric is 
 that it can build from source, the entire CentOS-7 distro in under 22 hrs.
 Having this capability was key in our ability to build, test and deliver
 CentOS-7 as rapidly as we have been able to.
 We'd like to dedicate the CentOS-7 Release to Mr Norwood S, of Phoenix,
 AZ, USA for his continued support for the project.
 Contributors:
  The Red Hat developers, without whom CentOS would look very different
  Akemi Matsuno-Yagi
  Alain Reguera Delgado
  Alan Bartlett
  Andreas Thienemann
  Anssi Johansson
  Athmane Madjoudj
  Bonnie King
  Brian Stinson
  Carl Trieloff
  Christoph Galuschka
  Fabian Arrotin
  Jakub Filak
  James Moger
  Jeff Sheltren
  Jim Perrin
  Johnny Hughes Jr
  Karanbir Singh
  Karsten Wade
  Kay Williams
  Manuel Wolfshant
  Matej Habrnal
  Marcus Moeller
  Michael Scherer
  Mike McLean
  Pablo Sebastián Greco
  Pat Riehecky
  Ralph Angenendt
  Scott Robbins
  Stephen John Smoogen
  Trevor Hemsley
  Tru Huynh
  Tuomas Kuosmanen
  Tuomo Soini
  Tyler Parsons
--- a/SOURCES/EULA
+++ b/SOURCES/EULA
@ -1,6 +1,6 @@
-AlmaLinux 8 EULA
+CentOS Stream 10 EULA
-AlmaLinux 8 comes with no guarantees or warranties of any sorts, 
+CentOS Stream 10 comes with no guarantees or warranties of any sorts,
 either written or implied.
 The Distribution is released as GPLv2. Individual packages in the
--- a/SOURCES/LICENSE
+++ b/SOURCES/LICENSE
--- a/SOURCES/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
+++ b/SOURCES/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
@ -0,0 +1,37 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 Version: GnuPG v2.0.22 (GNU/Linux)
 mQENBGG65jsBCADef7Fspss6f2PKrlrxufWlBaQI+kcdSDbY7o/dyyjpT7dcX8t8
 Ou73irjiShK3q0pdrh1Wy/mXc7RIJwAbCt9OVgyx4PV6AW5LfU7P7xyEAbTgLhz9
 lLPjBGhBvfRpW+7naPqkTcIKxpVR8Khq6fsvThGCNzNkGa46F1srE3mf1zC9wdVR
 VtXO7gHEZ2LrNcl195jZkBQOLcXANcSOFh5eRfhumULmk4XgCGmZQT5UNFofqOmn
 aWQGBq3XaU7RWjl7RH+IS2EW0rAtz9Le+cH+j0aFhzo7jBMOxGYG62rUaHdxssjV
 S1CrfpYT6NeG5i/1hiP4hO9suezJw4yuXNZ3ABEBAAG0VkNlbnRPUyBFeHRyYXMg
 U0lHIChodHRwczovL3dpa2kuY2VudG9zLm9yZy9TcGVjaWFsSW50ZXJlc3RHcm91
 cCkgPHNlY3VyaXR5QGNlbnRvcy5vcmc+iQE5BBMBCgAjAhsvBwsJCAcDAgEGFQgC
 CQoLBBYCAwECHgECF4AFAmIePKwACgkQH/aiFx2ZdmgUpAgAt1Y139EUQOLd013m
 jZx3shUVHRWCU0SaWLuXLupdxqhe/Iygen48aiDWfAtWr9neAJKKZFboDXXPyxDy
 9529aDgJnjwGRSFAcmvsuMaEMse6PZepTFtwhg2A/N0sDLVJSWagbQmTHdpkgEwn
 rrwO/TEaqjJ2+vZG67IIvw2rgtF3sQC28I1z7c1cPH5/NNf7dOZ29vtn44juMFFs
 o2Kd2FjZ0WP4wRmFF646nS5S1WHGS32K0xvDJMXO3MBXhaATVg+5i5ICA6fx6F3Y
 FFLJrXjx/LBtsY3EbJ0OddeZQtaAHFM1Xm6e0UHpnfjG9EGl9QrC5qzLSng0YMrG
 emhIy7kBDQRhuuY7AQgAs+enJDbwE/Iln3BnxodDQ3/1t9ULlMLJLiV+FgS7yREZ
 QvhVQxFWaJqbiPV6EJVxEP5lUHND2DAE2ZTr60y0rI3ZAY52go+QYHXb+M5HC12H
 HbhIDTWaETNo5heq/qyVSRT1u0g/yKCxQdyqnVsL86bro0wgrpj7XuApQifFhy16
 AkDjhcB0C0dXkfvEnHJylWiHpp7upfSgOcGwQ+yRHOZWJnyF+OMrFfNiwD74/zEN
 4RoNFgpqJZ81TF0qCdllTYGAXXUdYsJlg64dH0u84naTOFIuInywCmNyPmC8e8/0
 g56hCV2L7bRJGjBCa6VH+TgvVGnkFsoMM9ijhuTIIQARAQABiQI+BBgBCgAJAhsu
 BQJiHjnNASnAXSAEGQECAAYFAmG65jsACgkQi1yBEfyl0P9m/QgAh2KmBA4h/slx
 aZeWLb2cV53B1jVElsrEAE/a8yKhhcNeNOQsEWwT2/i6mdWchnIQzojKs3ypoRUY
 xsICIb4b4AFzc//aYhaOWThNRHh0UwaueNu0YBqVF3URUlf/Hw1Wv16v4QwkNhHQ
 +EohCRltR2PBjAHRHXDImy9OxV/uTnZjTXegj2Jl3ueQ5nF4pleqUctt/V9JjqzO
 YcQZW78s1jyBRzefbPxQHKKp4na6etTmIvgVDjkMChRZPRjZYEVZNi8kJM0aaK4q
 ugGoL6cWBR6RYka+/eEFMd3kSrng9ahbNX0F4ztdZ2alPrrE6BvJ7n/Mt6tZKgL7
 x9V0GpbstAkQH/aiFx2ZdmgN/gf+PEUa1LT98RS28fyNPaXYGx5vLWYxUtAdeN9a
 TfugGHCVhVsowbIEnuFUHE1JmTJ1hDaFYXqkgG9zDo81JVz/yCHpNIQO0YF2h+qX
 BXiKP7PQ+iT/PjQHidlYUuz73hjDwRl3AhLafcwVHeD3cCgo/ZP/Vi9Y9iBFVZDl
 jGHxAIe0PWbEAUuqNJOgrlVmmCtSqVkN1Neihx1zjpw3rqfUQzwvhvcsOfkKfnBs
 Boc66IZ0J5pmSzgJnSbLrr2dv1/jYHaolA24vkMqMxKzJbz+GeQ/SqBZ5/rA37VL
 x90Tu9UVSfbyEbwS9Zj1sVmc3mdm1kn6dmTlOfTDIqehfHBlnQ==
 =jx2B
 -----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/RPM-GPG-KEY-centosofficial-SHA256
+++ b/SOURCES/RPM-GPG-KEY-centosofficial-SHA256
@ -0,0 +1,30 @@
 -----BEGIN PGP PUBLIC KEY BLOCK-----
 Version: GnuPG v2.0.22 (GNU/Linux)
 mQINBFzMWxkBEADHrskpBgN9OphmhRkc7P/YrsAGSvvl7kfu+e9KAaU6f5MeAVyn
 rIoM43syyGkgFyWgjZM8/rur7EMPY2yt+2q/1ZfLVCRn9856JqTIq0XRpDUe4nKQ
 8BlA7wDVZoSDxUZkSuTIyExbDf0cpw89Tcf62Mxmi8jh74vRlPy1PgjWL5494b3X
 5fxDidH4bqPZyxTBqPrUFuo+EfUVEqiGF94Ppq6ZUvrBGOVo1V1+Ifm9CGEK597c
 aevcGc1RFlgxIgN84UpuDjPR9/zSndwJ7XsXYvZ6HXcKGagRKsfYDWGPkA5cOL/e
 f+yObOnC43yPUvpggQ4KaNJ6+SMTZOKikM8yciyBwLqwrjo8FlJgkv8Vfag/2UR7
 JINbyqHHoLUhQ2m6HXSwK4YjtwidF9EUkaBZWrrskYR3IRZLXlWqeOi/+ezYOW0m
 vufrkcvsh+TKlVVnuwmEPjJ8mwUSpsLdfPJo1DHsd8FS03SCKPaXFdD7ePfEjiYk
 nHpQaKE01aWVSLUiygn7F7rYemGqV9Vt7tBw5pz0vqSC72a5E3zFzIIuHx6aANry
 Gat3aqU3qtBXOrA/dPkX9cWE+UR5wo/A2UdKJZLlGhM2WRJ3ltmGT48V9CeS6N9Y
 m4CKdzvg7EWjlTlFrd/8WJ2KoqOE9leDPeXRPncubJfJ6LLIHyG09h9kKQARAQAB
 tDpDZW50T1MgKENlbnRPUyBPZmZpY2lhbCBTaWduaW5nIEtleSkgPHNlY3VyaXR5
 QGNlbnRvcy5vcmc+iQI3BBMBCAAhAhsDBgsJCAcDAgYVCAIJCgsDFgIBAh4BAheA
 BQJczFsaAAoJEAW1VbOEg8ZdvOgQAMFTGIQokADy5+CynFKjfO7R0VVpJxmYGVr1
 TjnKaHmjxnJaYqoha9ukGgmLu0r+lJ42Kk6nREk1vlxfRAfiWd00Zkm+K3IMq1/D
 E0heC2vX8qqjsLJs3jzq0hgNvo9X0uHDaA4J1BHsD8sE5in/f4SivjbngvFovRGU
 1XLNCgoqpFNcROP18LqKUw8WtqgWdnYBa5i6D5qx+WMRX0NHNwcCMy1lz+sTFxIU
 9mW6cLsMaacPGD8pUXIVli8P9Vlv3jBk1wFIqRgQPW01ph/3bM7pf9hyM9FAfU4X
 AFcyb1oYI4/82EkICUe6jeuZrz67dPeLVAlYrGW4hp/825g0fqJHxPDp25GS4rAa
 4RqyibLzNjSGdXYeLj2NcB/8OqaP+T1hv3JDaqe70QoYa/GIC4rh15NyXVbUP+LG
 V4vUiL7mb9ynzvF5zYHJbcg4R7dOsiZHrMFwy7FZesQaVrXeJlxRcEj65rpm1ZtZ
 mwAE1k2LsRkvLyr9hpZkXnMeOKYIPwpdmBjXNVNVbq7097OxZOYPPos+iZKMWfl4
 UQnMsCVxonZtamdI4qEc3jMkSZPJKgOplGOms5jdY+EdSvsFWEQ0Snd3dChfU7DV
 o4Rbcy5klwHrvuZIOLaovhyxuRPhP6gV9+gzpTK/7vrvDlFbbZE6s212mDZ13RWB
 mTfAxz4h
 =agO/
 -----END PGP PUBLIC KEY BLOCK-----
--- a/SOURCES/centos-addons.repo
+++ b/SOURCES/centos-addons.repo
@ -0,0 +1,131 @@
 [highavailability]
 name=CentOS Stream $releasever - HighAvailability
 metalink=https://mirrors.centos.org/metalink?repo=centos-highavailability-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=0
 [highavailability-debuginfo]
 name=CentOS Stream $releasever - HighAvailability - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-highavailability-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [highavailability-source]
 name=CentOS Stream $releasever - HighAvailability - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-highavailability-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [nfv]
 name=CentOS Stream $releasever - NFV
 metalink=https://mirrors.centos.org/metalink?repo=centos-nfv-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=0
 [nfv-debuginfo]
 name=CentOS Stream $releasever - NFV - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-nfv-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [nfv-source]
 name=CentOS Stream $releasever - NFV - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-nfv-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [rt]
 name=CentOS Stream $releasever - RT
 metalink=https://mirrors.centos.org/metalink?repo=centos-rt-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=0
 [rt-debuginfo]
 name=CentOS Stream $releasever - RT - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-rt-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [rt-source]
 name=CentOS Stream $releasever - RT - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-rt-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [resilientstorage]
 name=CentOS Stream $releasever - ResilientStorage
 metalink=https://mirrors.centos.org/metalink?repo=centos-resilientstorage-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=0
 [resilientstorage-debuginfo]
 name=CentOS Stream $releasever - ResilientStorage - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-resilientstorage-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [resilientstorage-source]
 name=CentOS Stream $releasever - ResilientStorage - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-resilientstorage-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [extras-common]
 name=CentOS Stream $releasever - Extras packages
 metalink=https://mirrors.centos.org/metalink?repo=centos-extras-sig-extras-common-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=0
 [extras-common-source]
 name=CentOS Stream $releasever - Extras packages - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-extras-sig-extras-common-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
 gpgcheck=0
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
--- a/SOURCES/centos.repo
+++ b/SOURCES/centos.repo
@ -0,0 +1,83 @@
 [baseos]
 name=CentOS Stream $releasever - BaseOS
 metalink=https://mirrors.centos.org/metalink?repo=centos-baseos-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=1
 [baseos-debuginfo]
 name=CentOS Stream $releasever - BaseOS - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-baseos-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [baseos-source]
 name=CentOS Stream $releasever - BaseOS - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-baseos-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [appstream]
 name=CentOS Stream $releasever - AppStream
 metalink=https://mirrors.centos.org/metalink?repo=centos-appstream-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=1
 [appstream-debuginfo]
 name=CentOS Stream $releasever - AppStream - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-appstream-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [appstream-source]
 name=CentOS Stream $releasever - AppStream - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-appstream-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [crb]
 name=CentOS Stream $releasever - CRB
 metalink=https://mirrors.centos.org/metalink?repo=centos-crb-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 countme=1
 enabled=0
 [crb-debuginfo]
 name=CentOS Stream $releasever - CRB - Debug
 metalink=https://mirrors.centos.org/metalink?repo=centos-crb-debug-$stream&arch=$basearch&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
 [crb-source]
 name=CentOS Stream $releasever - CRB - Source
 metalink=https://mirrors.centos.org/metalink?repo=centos-crb-source-$stream&arch=source&protocol=https,http
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-SHA256
 gpgcheck=1
 repo_gpgcheck=0
 metadata_expire=6h
 enabled=0
--- a/SOURCES/centossecureboot201.cer
+++ b/SOURCES/centossecureboot201.cer
--- a/SOURCES/centossecureboot202.cer
+++ b/SOURCES/centossecureboot202.cer
--- a/SOURCES/centossecureboot203.cer
+++ b/SOURCES/centossecureboot203.cer
--- a/SOURCES/centossecureboot204.cer
+++ b/SOURCES/centossecureboot204.cer
--- a/SOURCES/centossecurebootca2.cer
+++ b/SOURCES/centossecurebootca2.cer
--- a/SPECS/centos-stream-release.spec
+++ b/SPECS/centos-stream-release.spec
@ -0,0 +1,533 @@
 %global distro  CentOS Stream
 %global major   10
 %global minor   0
 Name:           centos-stream-release
 Version:        %{major}.%{minor}
 Release:        0.14%{?dist}
 Summary:        %{distro} release files
 License:        GPLv2
 URL:            https://centos.org
 BuildArch:      noarch
 Provides:       centos-release = %{version}-%{release}
 # When running a compose for ELN, we want to make sure that we pull in the
 # correct templates when lorax is installed. This Suggests: will clue
 # libdnf to use this set of templates instead of lorax-templates-generic.
 Suggests: lorax-templates-rhel
 # Required for a lorax run (to generate install media)
 Requires:       centos-stream-repos(%{major})
 Provides:       centos-release-eula
 Provides:       redhat-release-eula
 # required by epel-release
 Provides:       redhat-release = %{version}-%{release}
 # required by dnf
 # https://github.com/rpm-software-management/dnf/blob/4.2.23/dnf/const.py.in#L26
 Provides:       system-release = %{version}-%{release}
 Provides:       system-release(releasever) = %{major}
 Conflicts:      system-release
 # required by libdnf
 # https://github.com/rpm-software-management/libdnf/blob/0.48.0/libdnf/module/ModulePackage.cpp#L472
 Provides:       base-module(platform:el%{major})
 Source200:      EULA
 Source201:      LICENSE
 Source202:      Contributors
 Source300:      85-display-manager.preset
 Source301:      90-default.preset
 Source302:      90-default-user.preset
 Source303:      99-default-disable.preset
 Source304:      50-redhat.conf
 Source400:      centossecurebootca2.cer
 # kernel signing certificate
 Source401:      centossecureboot201.cer
 # grub2 signing certificate
 Source402:      centossecureboot202.cer
 # Fwupd signing certificate
 Source403:      centossecureboot203.cer
 # UKI-VIRT signing certificate
 Source404:      centossecureboot204.cer
 Source500:      centos.repo
 Source501:      centos-addons.repo
 Source602:      RPM-GPG-KEY-CentOS-SIG-Extras-SHA512
 Source603:      RPM-GPG-KEY-centosofficial-SHA256
 %package -n centos-sb-certs
 Summary: %{distro} public secureboot certificates
 Group: System Environment/Base
 Provides: system-sb-certs = %{version}-%{release}
 %package -n centos-stream-repos
 Summary:        CentOS Stream package repositories
 Provides:       system-repos = %{version}-%{release}
 Provides:       centos-stream-repos(%{major}) = %{version}
 Requires:       centos-gpg-keys = %{version}-%{release}
 %package -n centos-gpg-keys
 Summary:        CentOS RPM keys
 %description
 %{distro} release files.
 %description -n centos-sb-certs
 %{distro} secureboot certificates
 %description -n centos-stream-repos
 This package provides the package repository files for CentOS Stream.
 %description -n centos-gpg-keys
 This package provides the RPM signature keys for CentOS.
 %install
 # copy license and contributors doc here for %%license and %%doc macros
 mkdir -p ./docs
 cp %{SOURCE201} %{SOURCE202} ./docs
 # create /etc/system-release and /etc/redhat-release
 install -d -m 0755 %{buildroot}%{_sysconfdir}
 echo "%{distro} release %{major}" > %{buildroot}%{_sysconfdir}/centos-release
 ln -s centos-release %{buildroot}%{_sysconfdir}/system-release
 ln -s centos-release %{buildroot}%{_sysconfdir}/redhat-release
 # -------------------------------------------------------------------------
 # Definitions for /etc/os-release and for macros in macros.dist.  These
 # macros are useful for spec files where distribution-specific identifiers
 # are used to customize packages.
 # Name of vendor / name of distribution. Typically used to identify where
 # the binary comes from in --help or --version messages of programs.
 # Examples: gdb.spec, clang.spec
 %global dist_vendor CentOS
 %global dist_name   %{distro}
 # URL of the homepage of the distribution
 # Example: gstreamer1-plugins-base.spec
 %global dist_home_url https://centos.org/
 # Bugzilla / bug reporting URLs shown to users.
 # Examples: gcc.spec
 %global dist_bug_report_url https://issues.redhat.com/
 # debuginfod server, as used in elfutils.spec.
 %global dist_debuginfod_url https://debuginfod.centos.org/
 # -------------------------------------------------------------------------
 # Create the os-release file
 install -d -m 0755 %{buildroot}%{_prefix}/lib
 cat > %{buildroot}%{_prefix}/lib/os-release << EOF
 NAME="%{dist_name}"
 VERSION="%{major}"
 ID="centos"
 ID_LIKE="rhel fedora"
 VERSION_ID="%{major}"
 PLATFORM_ID="platform:el%{major}"
 PRETTY_NAME="%{distro} %{major}"
 ANSI_COLOR="0;31"
 LOGO="fedora-logo-icon"
 CPE_NAME="cpe:/o:centos:centos:%{major}"
 HOME_URL="%{dist_home_url}"
 BUG_REPORT_URL="%{dist_bug_report_url}"
 REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux %{major}"
 REDHAT_SUPPORT_PRODUCT_VERSION="%{distro}"
 EOF
 # Create the symlink for /etc/os-release
 ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
 # write cpe to /etc/system/release-cpe
 echo "cpe:/o:centos:centos:%{major}" > %{buildroot}%{_sysconfdir}/system-release-cpe
 # create /etc/issue, /etc/issue.net and /etc/issue.d
 echo '\S' > %{buildroot}%{_sysconfdir}/issue
 echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
 cp %{buildroot}%{_sysconfdir}/issue{,.net}
 echo >> %{buildroot}%{_sysconfdir}/issue
 mkdir -p %{buildroot}%{_sysconfdir}/issue.d
 # set up the dist tag macros
 mkdir -p %{buildroot}%{_rpmmacrodir}
 cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
 # dist macros.
 %%__bootstrap ~bootstrap
 %%centos_ver %{major}
 %%centos %{major}
 %%rhel %{major}
 %%el%{major} 1
 %%distcore            .el%{major}
 %%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
 %%dist_vendor         %{dist_vendor}
 %%dist_name           %{dist_name}
 %%dist_home_url       %{dist_home_url}
 %%dist_bug_report_url %{dist_bug_report_url}
 %%dist_debuginfod_url %{dist_debuginfod_url}
 EOF
 # use unbranded datadir
 install -d -m 0755 %{buildroot}%{_datadir}/centos-release
 ln -s centos-release %{buildroot}%{_datadir}/redhat-release
 install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/centos-release/
 # copy systemd presets
 install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
 install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset
 install -p -m 0644 %{SOURCE300} %{buildroot}%{_prefix}/lib/systemd/system-preset/
 install -p -m 0644 %{SOURCE301} %{buildroot}%{_prefix}/lib/systemd/system-preset/
 install -p -m 0644 %{SOURCE302} %{buildroot}%{_prefix}/lib/systemd/user-preset/
 # installing the same file for both system and user presets to set the same behavior for both
 install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/system-preset/
 install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/user-preset/
 # copy sysctl presets
 mkdir -p %{buildroot}/%{_prefix}/lib/sysctl.d/
 install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
 # Create stub yum repos
 mkdir %{buildroot}%{_sysconfdir}/yum.repos.d
 touch %{buildroot}%{_sysconfdir}/yum.repos.d/redhat.repo
 # Copy secureboot certificates
 install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
 install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
 # Install aarch64 certs
 install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
 install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
 install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
 install -m 644 %{SOURCE403} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
 install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
 # Install x86_64 certs
 install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
 install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
 install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
 install -m 644 %{SOURCE403} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
 install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
 # Install ppc64le certs
 install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
 install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
 install -m 644 %{SOURCE402} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
 install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
 # Install s390x certs
 install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
 install -m 644 %{SOURCE401} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
 install -m 644 %{SOURCE404} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
 # Link x86_64 certs
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-x86_64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-x86_64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-x86_64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
 # Link aarch64 certs
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-aarch64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-aarch64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-aarch64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
 # Link ppc64le certs
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-ppc64le.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
 # Link s390x certs
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-s390x.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-s390x.cer
 ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
 # copy yum repos
 install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
 install -p -m 0644 %{SOURCE500} %{buildroot}%{_sysconfdir}/yum.repos.d/
 install -p -m 0644 %{SOURCE501} %{buildroot}%{_sysconfdir}/yum.repos.d/
 # dnf variables
 install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
 echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
 # copy GPG keys
 install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
 install -p -m 0644 %{SOURCE602} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
 install -p -m 0644 %{SOURCE603} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
 %files
 %license docs/LICENSE
 %doc docs/Contributors
 %{_sysconfdir}/redhat-release
 %{_sysconfdir}/system-release
 %{_sysconfdir}/centos-release
 %config(noreplace) %{_sysconfdir}/os-release
 %config %{_sysconfdir}/system-release-cpe
 %config(noreplace) %{_sysconfdir}/issue
 %config(noreplace) %{_sysconfdir}/issue.net
 %dir %{_sysconfdir}/issue.d
 %dir %{_sysconfdir}/yum.repos.d
 %ghost %{_sysconfdir}/yum.repos.d/redhat.repo
 %{_rpmmacrodir}/macros.dist
 %{_datadir}/redhat-release
 %{_datadir}/centos-release
 %{_prefix}/lib/os-release
 %{_prefix}/lib/systemd/system-preset/*
 %{_prefix}/lib/systemd/user-preset/*
 %{_prefix}/lib/sysctl.d/50-redhat.conf
 %files -n centos-sb-certs
 # Note to future packagers:
 # resetting the symlinks in /etc/pki/sb-certs on upgrade is the intended behavior here
 %dir %{_sysconfdir}/pki/sb-certs
 %dir %{_datadir}/pki/sb-certs/
 %{_sysconfdir}/pki/sb-certs/*.cer
 %{_datadir}/pki/sb-certs/*.cer
 %files -n centos-stream-repos
 %config(noreplace) %{_sysconfdir}/yum.repos.d/centos.repo
 %config(noreplace) %{_sysconfdir}/yum.repos.d/centos-addons.repo
 %config(noreplace) %{_sysconfdir}/dnf/vars/stream
 %files -n centos-gpg-keys
 %{_sysconfdir}/pki/rpm-gpg
 %changelog
 * Mon Jun 17 2024 Troy Dawson <tdawson@redhat.com> - 10.0-0.14
 - Change repos to point to the mirrors
 * Fri Jun 07 2024 Sandro Bonazzola <sbonazzo@redhat.com> - 10.0-0.13
 - Fix distcore macro initialization
 * Thu May 30 2024 Carl George <carl@redhat.com> - 10.0-0.12
 - Add distcore macro to allow dist overrides that don't mask distprefix, distsuffix, or bootstrap macros
 - Resolves: RHEL-38900
 * Thu May 30 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.11
 - Restore cups.service patch
 - Resolves: RHEL-37762
 * Thu May 30 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.10
 - Temporarily revert cups.service patch
 - Related: RHEL-37762
 * Wed May 29 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.9
 - Enable cups.service
 - Resolves: RHEL-37762
 * Tue May 28 2024 Adam Samalik <asamalik@redhat.com> - 10.0-0.8
 - Add a re-signed centosofficial keys using SHA256
 - Drop old unused keys
 - Enable signature checks in repos
 * Mon May 13 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.7
 - Enable tuned.service
 - Resolves: RHEL-35582
 * Tue Mar 26 2024 Troy Dawson <tdawson@redhat.com> - 10.0-0.6
 - Temp change: Change repos to point to production composes
 * Wed Mar 20 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.4
 - Update BUG_REPORT_URL to use issues.redhat.com
 - Resolves: RHEL-17456
 * Thu Mar 14 2024 Stephen Gallagher <sgallagh@redhat.com> - 10.0-0.3
 - Sync presets from Fedora 40
 * Tue Nov 28 2023 Troy Dawson <tdawson@redhat.com> - 10.0-0.2
 - Add Suggests: lorax-templates-rhel
 * Wed Sep 20 2023 Troy Dawson <tdawson@redhat.com> - 10.0-0.1
 - Update to version 10.0
 * Wed Aug 30 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-23
 - Add keys for UKI-VIRT
 - Resolves: RHELBLD-13378
 * Fri Jun 30 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-22
 - Fix incorrect symlink path for sbcerts
 - Resolves: RHELPLAN-161305
 * Mon Apr 03 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-21
 - Enable obex.service
 - Resolves: rhbz#2181984
 * Fri Feb 17 2023 Sayan Paul <saypaul@redhat.com> - 9.0-20
 - Remove ostree-readonly-sysroot-migration service from preset
 - Resolves: rhbz#2170787
 * Tue Feb 14 2023 Stephen Gallagher <sgallagh@redhat.com> - 9.0-19
 - Enable ostree-readonly-sysroot-migration service
 - Resolves: rhbz#2167344
 * Tue Sep 06 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-18
 - Enable alternative *-release packages
 * Tue Sep 6 2022 Amit Shah <amitshah@fedoraproject.org> - 9.0-17
 - Add new distribution-specific macros for package configurations
 * Tue Aug 30 2022 Josh Boyer <jwboyer@redhat.com> - 9.0-16
 - Adjust debuginfo RPM repo names to -debuginfo
 * Thu Jul 28 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-15
 - Enable greenboot-service-monitor.service in presets
 - Resolves: rhbz#2108625
 * Thu Jul 28 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-14
 - Enable clevis-luks-askpass.path in presets
 - Resolves: rhbz#2106811
 * Thu Jun 23 2022 Maxwell G <gotmax@e.email> - 9.0-13
 - Include %%{?distsuffix} in %%dist definition
 - Resolves: rhbz#2100579
 * Wed Mar 02 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-12
 - The Extras key was re-signed to get rid of a SHA1 algo.
  Related: rhbz#2059424
 * Fri Feb 04 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-11
 - Enable logrotate.timer
 * Wed Feb 02 2022 Stephen Gallagher <sgallagh@redhat.com> - 9.0-10
 - Enable switcheroo-control.service
 - Resolves: rhbz#2049627
 * Sun Jan 30 2022 Neal Gompa <ngompa@datto.com> - 9.0-9
 - Restructure centos-stream-release and centos-stream-repos dependencies
 - Resolves: rhbz#2048268
 * Mon Jan 17 2022 Neal Gompa <ngompa@centosproject.org> - 9.0-8
 - Use metalinks for extras-common repos
 - Resolves: rhbz#2037871
 * Thu Jan 06 2022 Fabian Arrotin <arrfab@redhat.com> - 9.0-7
 - Adding Extras-common repos for SIGs produced content
 - Resolves: rhbz#2037871
 * Mon Dec 13 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-6
 - Add LOGO to os-release(5) data
  Resolves: rhbz#2031998
 * Thu Nov 18 2021 Timothée Ravier <tim@siosm.fr> - 9.0-5
 - Create and own /etc/issue.d directory
 * Fri Nov 12 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-4
 - Add preset to enable WirePlumber by default
 - Related: rhbz#2022717
 * Mon Oct 04 2021 Carl George <carl@redhat.com> - 9.0-3
 - Specify protocols in metalink URLs
 - Related: rhbz#2006565
 * Tue Sep 21 2021 Carl George <carl@redhat.com> - 9.0-2
 - Add repos and gpg-keys subpackages
 - Resolves: rhbz#2006565
 * Fri Sep 10 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.12
 - Ship public secureboot certs in a well-known location
 - Related: rhbz#1997343
 - Switch to libvirt modular daemons
 - Related: rhbz#1991965
 * Thu Sep 02 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.11
 - Update EULA to refer to CentOS Stream 9 instead of CentOS Linux 8
 - Resolves: CS-798
 * Wed Sep 01 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.10
 - Drop nfs-convert.service preset
 - Related: rhbz#1937811
 * Fri Aug 06 2021 Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.9
 - Add stub yum repo for lorax
 - Fixes: rhbz#1990671
 * Mon Jul 26 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-1.0.8
 - Move dist macros from /etc to /usr
 * Mon Jul 26 2021 Mikolaj Izdebski <mizdebsk@redhat.com> - 9.0-1.0.7
 - Define __bootstrap macro
 * Mon Jul 26 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-1.0.6
 - Add missing systemd user presets to enable PipeWire services
 * Fri Jul 23 2021 Neal Gompa <ngompa@centosproject.org> - 9.0-1.0.5
 - Add missing presets for SDDM synced from Fedora
 * Mon Apr 05 2021 Brian Stinson <bstinson@redhat.com> - 9.0-1.0.4
 - Add some missing systemd presets
 * Tue Mar 23 2021 Josh Boyer <jwboyer@redhat.com> - 9.0-1.0.3
 - Add sysctl.d presets
 * Wed Mar 17 2021 Troy Dawson <tdawson@redhat.com> - 9.0-1.0.2
 - Add distprefix to %{dist}
 * Fri Mar 12 2021 Troy Dawson <tdawson@redhat.com> - 9.0-1.0.1
 - Relax dependency for centos-repos
 * Wed Mar 03 2021 Michal Konecny <mkonecny@redhat.com> - 9.0-1
 - Update to version 9.0
 * Mon Sep 28 2020 Carl George <carl@george.computer> - 8.4-1
 - Update to version 8.4
 * Wed Sep 02 2020 Carl George <carl@george.computer> - 8.3-1
 - Convert to centos-stream-release
 * Fri May 15 2020 Pablo Greco <pgreco@centosproject.org> - 8-2.0.1
 - Relax dependency for centos-repos
 - Remove update_boot, it was never used in 8
 - Add rootfs_expand to aarch64
 - Bump release for 8.2
 * Thu Mar 12 2020 bstinson@centosproject.org - 8-1.0.9
 - Add the Devel repo to centos-release
 - Install os-release(5) content to /usr/lib and have /etc/os-release be a symlink (ngompa)pr#9
 * Thu Jan 02 2020 Brian Stinson <bstinson@centosproject.org> - 8-1.0.8
 - Add base module platform Provides so DNF can auto-discover modular platform (ngompa)pr#6
 - Switched CR repo to mirrorlist to spread the load (arrfab)pr#5
 * Thu Dec 19 2019 bstinson@centosproject.org - 8-1.0.7
 - Typo fixes
 - Disable the HA repo by default
 * Wed Dec 18 2019 Pablo Greco <pgreco@centosproject.org> - 8-1.el8
 - Fix requires in armhfp
 * Tue Dec 17 2019 bstinson@centosproject.org - 8-1.el8
 - Add the HighAvailability repository
 * Wed Aug 14 2019 Neal Gompa <ngompa@centosproject.org> 8-1.el8
 - Split repositories and GPG keys out into subpackages
 * Sat Aug 10 2019 Fabian Arrotin <arrfab@centos.org> 8-0.el8
 - modified baseurl paths, even if disabled
 * Sat Aug 10 2019 Fabian Arrotin <arrfab@centos.org> 8-0.el8
 - Enabled Extras by default.
 - Fixed sources paths for BaseOS/AppStream
 * Sat Aug 10 2019 Brian Stinson <bstinson@centosproject.org> 8-0.el7
 - Update Debuginfo and fasttrack to use releasever
 - Fix CentOS-media.repo to include appstream
 * Wed May 08 2019 Pablo Greco <pablo@fliagreco.com.ar> 8-0.el7
 - Initial setup for CentOS-8
--- a/almalinux-ha.repo
+++ b/almalinux-ha.repo
@ -1,28 +0,0 @@
 # almalinux-ha.repo
 [ha]
 name=AlmaLinux $releasever - HighAvailability
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/HighAvailability/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [ha-source]
 name=AlmaLinux $releasever - HighAvailability Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [ha-debuginfo]
 name=AlmaLinux $releasever - HighAvailability debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-nfv.repo
+++ b/almalinux-nfv.repo
@ -1,27 +0,0 @@
 # almalinux-nfv.repo
 [nfv]
 name=AlmaLinux $releasever - Real Time for NFV
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/NFV/$basearch/os/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [nfv-source]
 name=AlmaLinux $releasever - Real Time for NFV Sources
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/NFV/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [nfv-debuginfo]
 name=AlmaLinux $releasever - Real Time for NFV Debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/NFV/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-plus.repo
+++ b/almalinux-plus.repo
@ -1,28 +0,0 @@
 # almalinux-plus.repo
 [plus]
 name=AlmaLinux $releasever - Plus
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/plus/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [plus-source]
 name=AlmaLinux $releasever - Plus Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/plus/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [plus-debuginfo]
 name=AlmaLinux $releasever - Plus debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/plus/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-powertools.repo
+++ b/almalinux-powertools.repo
@ -1,28 +0,0 @@
 # almalinux-powertools.repo
 [powertools]
 name=AlmaLinux $releasever - PowerTools
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/PowerTools/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [powertools-source]
 name=AlmaLinux $releasever - PowerTools Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/PowerTools/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [powertools-debuginfo]
 name=AlmaLinux $releasever - PowerTools debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/PowerTools/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-release.spec
+++ b/almalinux-release.spec
@ -1,274 +0,0 @@
 %define debug_package %{nil}
 %define product_family AlmaLinux
 %define release_name Cerulean Leopard
 %define contentdir almalinux
 %define infra_var stock
 %define base_release_version 8
 %define full_release_version 8.10
 %define dist_release_version 8
 %define upstream_rel_long 8.10-0.2
 %define upstream_rel 8.10
 %define almalinux_rel 1
 %define dist .el%{dist_release_version}
 %global eol_date 2029-06-01
 # The anaconda scripts in %%{_libexecdir} can create false requirements
 %global __requires_exclude_from %{_libexecdir}
 Name:           almalinux-release
 Version:        %{upstream_rel}
 Release:        %{almalinux_rel}%{?dist}
 Summary:        %{product_family} release file
 Group:          System Environment/Base
 License:        GPLv2
 Provides:       almalinux-release = %{version}-%{release}
 Provides:       centos-release = %{version}-%{release}
 Provides:       almalinux-release(upstream) = %{upstream_rel}
 Provides:       centos-release(upstream) = %{upstream_rel}
 Provides:       redhat-release = %{upstream_rel_long}
 Provides:       system-release = %{upstream_rel_long}
 Provides:       system-release(releasever) = %{base_release_version}
 Provides:       base-module(platform:el%{base_release_version})
 Provides:       almalinux-release-eula
 Provides:       centos-release-eula
 Provides:       redhat-release-eula
 Source1:        85-display-manager.preset
 Source2:        90-default.preset
 Source3:        99-default-disable.preset
 Source10:       RPM-GPG-KEY-AlmaLinux
 ##Source100:      rootfs-expand
 Source200:      EULA
 Source201:      GPL
 ##Source202:      Contributors
 Source300:      almalinux.repo
 Source301:      almalinux-ha.repo
 Source302:      almalinux-powertools.repo
 Source303:      almalinux-resilientstorage.repo
 Source304:      almalinux-plus.repo
 Source305:      almalinux-sap.repo
 Source306:      almalinux-saphana.repo
 # Only for x86_64
 Source310:      almalinux-rt.repo
 Source311:      almalinux-nfv.repo
 %description
 %{product_family} release files
 %prep
 echo OK
 %build
 echo OK
 %install
 rm -rf %{buildroot}
 # create skeleton
 mkdir -p %{buildroot}/etc
 mkdir -p %{buildroot}%{_prefix}/lib
 # create /etc/system-release and /etc/redhat-release
 echo "%{product_family} release %{full_release_version}%{?beta: %{beta}} (%{release_name})" > %{buildroot}/etc/almalinux-release
 echo "Derived from Red Hat Enterprise Linux %{upstream_rel} (Source)" > %{buildroot}/etc/almalinux-release-upstream
 ln -s almalinux-release %{buildroot}/etc/system-release
 ln -s almalinux-release %{buildroot}/etc/redhat-release
 ln -s almalinux-release %{buildroot}/etc/centos-release
 # Create the os-release file
 cat << EOF >>%{buildroot}%{_prefix}/lib/os-release
 NAME="%{product_family}"
 VERSION="%{full_release_version} (%{release_name})"
 ID="almalinux"
 ID_LIKE="rhel centos fedora"
 VERSION_ID="%{full_release_version}"
 PLATFORM_ID="platform:el%{base_release_version}"
 PRETTY_NAME="%{product_family} %{full_release_version}%{?beta: %{beta}} (%{release_name})"
 ANSI_COLOR="0;34"
 LOGO="fedora-logo-icon"
 CPE_NAME="cpe:/o:almalinux:almalinux:%{base_release_version}::baseos"
 HOME_URL="https://almalinux.org/"
 DOCUMENTATION_URL="https://wiki.almalinux.org/"
 BUG_REPORT_URL="https://bugs.almalinux.org/"
 ALMALINUX_MANTISBT_PROJECT="AlmaLinux-%{base_release_version}"
 ALMALINUX_MANTISBT_PROJECT_VERSION="%{full_release_version}"
 REDHAT_SUPPORT_PRODUCT="%{product_family}"
 REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?beta: %{beta}}"
 SUPPORT_END=%{eol_date}
 EOF
 # Create the symlink for /etc/os-release
 ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
 # write cpe to /etc/system-release-cpe
 echo "cpe:/o:almalinux:almalinux:%{base_release_version}::baseos" | tr [A-Z] [a-z] > %{buildroot}/etc/system-release-cpe
 # create /etc/issue and /etc/issue.net
 echo '\S' > %{buildroot}/etc/issue
 echo 'Kernel \r on an \m' >> %{buildroot}/etc/issue
 cp %{buildroot}/etc/issue %{buildroot}/etc/issue.net
 echo >> %{buildroot}/etc/issue
 # copy GPG keys
 mkdir -p -m 755 %{buildroot}/etc/pki/rpm-gpg
 install -m 644 %{SOURCE10} %{buildroot}/etc/pki/rpm-gpg
 # copy yum repos
 mkdir -p -m 755 %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE300} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE301} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE302} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE303} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE304} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE305} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE306} %{buildroot}/etc/yum.repos.d
 # RT and NFV are only for x86_64
 %ifarch x86_64
 install -m 644 %{SOURCE310} %{buildroot}/etc/yum.repos.d
 install -m 644 %{SOURCE311} %{buildroot}/etc/yum.repos.d
 %endif
 mkdir -p -m 755 %{buildroot}/etc/dnf/vars
 echo "%{infra_var}" > %{buildroot}/etc/dnf/vars/infra
 echo "%{contentdir}" >%{buildroot}/etc/dnf/vars/contentdir
 echo "%{base_release_version}-stream" > %{buildroot}/etc/dnf/vars/stream
 # set up the dist tag macros
 install -d -m 755 %{buildroot}/etc/rpm
 cat >> %{buildroot}/etc/rpm/macros.dist << EOF
 # dist macros.
 %%almalinux_ver %{base_release_version}
 %%almalinux %{base_release_version}
 %%centos_ver %{base_release_version}
 %%centos %{base_release_version}
 %%rhel %{base_release_version}
 %%dist .el%{base_release_version}
 %%el%{base_release_version} 1
 EOF
 # use unbranded datadir
 mkdir -p -m 755 %{buildroot}/%{_datadir}/almalinux-release
 ln -s almalinux-release %{buildroot}/%{_datadir}/redhat-release
 install -m 644 %{SOURCE200} %{buildroot}/%{_datadir}/almalinux-release
 # use unbranded docdir
 mkdir -p -m 755 %{buildroot}/%{_docdir}/almalinux-release
 ln -s almalinux-release %{buildroot}/%{_docdir}/redhat-release
 install -m 644 %{SOURCE201} %{buildroot}/%{_docdir}/almalinux-release
 # copy systemd presets
 mkdir -p %{buildroot}/%{_prefix}/lib/systemd/system-preset/
 install -m 0644 %{SOURCE1} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
 install -m 0644 %{SOURCE2} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
 install -m 0644 %{SOURCE3} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
 %clean
 rm -rf %{buildroot}
 %files
 %defattr(0644,root,root,0755)
 /etc/redhat-release
 /etc/system-release
 /etc/centos-release
 ##/etc/centos-release-upstream
 /etc/almalinux-release
 /etc/almalinux-release-upstream
 /etc/dnf/vars/*
 /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 %config(noreplace) /etc/yum.repos.d/almalinux.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-ha.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-powertools.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-resilientstorage.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-plus.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-sap.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-saphana.repo
 %ifarch x86_64
 %config(noreplace) /etc/yum.repos.d/almalinux-rt.repo
 %config(noreplace) /etc/yum.repos.d/almalinux-nfv.repo
 %endif
 %config(noreplace) /etc/os-release
 %config /etc/system-release-cpe
 %config(noreplace) /etc/issue
 %config(noreplace) /etc/issue.net
 /etc/rpm/macros.dist
 %{_docdir}/redhat-release
 %{_docdir}/almalinux-release
 %{_datadir}/redhat-release
 %{_datadir}/almalinux-release
 %{_prefix}/lib/os-release
 %{_prefix}/lib/systemd/system-preset/*
 %changelog
 * Wed May 22 2024 Andrew Lukoshko <alukoshko@almalinux.org> - 8.10-1
 - 8.10 stable release
 * Thu Nov 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.9-1
 - 8.9 stable release
 * Mon Oct 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-3
 - Split AlmaLinux OS 8 GPG public keys to fix microdnf
 * Tue Oct 10 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-2
 - Add new AlmaLinux OS 8 GPG key
 * Tue May 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-1
 - 8.8 stable release
 * Sat Nov 19 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-3
 - Fixed ownership of dirs (albz#328)
 * Wed Nov 09 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-2
 - Add stream dnf variable for CentOS SIG repos compatibility
 * Mon Nov 07 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-1
 - 8.7 stable release
 - Add SAP and SAPHANA repos
 * Wed Jun 22 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-2
 - Add more compatibility variables to /etc/os-release
 * Thu May 19 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-1
 - Bump release
 * Tue May 10 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.1
 - 8.6 stable release
 * Thu Mar 31 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.0
 - 8.6 beta release
 - Add RT and NFV repos for x86_64
 * Tue Dec 28 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1.1
 - Add RS repo
 * Thu Oct 07 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1
 - 8.5 beta release
 * Thu Jul 29 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-3
 - disable fastestmirror dnf plugin for all repos
 * Thu May 20 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-2
 - 8.4 stable release
 - Disable PowerTools repo by default and move it to separate file
 * Fri Apr 16 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-1
 - 8.4 beta release
 * Wed Mar 24 2021 Andrei Lukoshko <alukoshko@almalinux.org> - 8.3-4
 - 8.3 stable release
 * Wed Feb 10 2021 Andrei Lukoshko <alukoshko@cloudlinux.com> - 8.3-3
 - Switch repos to mirrorlists and enable fastestmirror plugin
 - Use full release version for ALMALINUX_MANTISBT_PROJECT_VERSION
 - Add HighAvailability repo
 * Wed Jan 27 2021 Anatholy Scryabin <ascryabin@cloudlinux.com> - 8.3-2
 - Initial build for AlmaLinux
--- a/almalinux-resilientstorage.repo
+++ b/almalinux-resilientstorage.repo
@ -1,28 +0,0 @@
 # almalinux-resilientstorage.repo
 [resilientstorage]
 name=AlmaLinux $releasever - ResilientStorage
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/ResilientStorage/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [resilientstorage-source]
 name=AlmaLinux $releasever - ResilientStorage Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [resilientstorage-debuginfo]
 name=AlmaLinux $releasever - ResilientStorage debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-rt.repo
+++ b/almalinux-rt.repo
@ -1,27 +0,0 @@
 # almalinux-rt.repo
 [rt]
 name=AlmaLinux $releasever - Real Time
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/RT/$basearch/os/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [rt-source]
 name=AlmaLinux $releasever - Real Time Sources
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/RT/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [rt-debuginfo]
 name=AlmaLinux $releasever - Real Time Debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/RT/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-sap.repo
+++ b/almalinux-sap.repo
@ -1,28 +0,0 @@
 # almalinux-sap.repo
 [sap]
 name=AlmaLinux $releasever - SAP
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/SAP/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [sap-source]
 name=AlmaLinux $releasever - SAP Sources
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/SAP/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [sap-debuginfo]
 name=AlmaLinux $releasever - SAP Debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/SAP/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux-saphana.repo
+++ b/almalinux-saphana.repo
@ -1,28 +0,0 @@
 # almalinux-saphana.repo
 [saphana]
 name=AlmaLinux $releasever - SAP HANA
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/SAPHANA/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [saphana-source]
 name=AlmaLinux $releasever - SAP HANA Sources
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [saphana-debuginfo]
 name=AlmaLinux $releasever - SAP HANA Debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
--- a/almalinux.repo
+++ b/almalinux.repo
@ -1,78 +0,0 @@
 # almalinux.repo
 [baseos]
 name=AlmaLinux $releasever - BaseOS
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/BaseOS/$basearch/os/
 enabled=1
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 [appstream]
 name=AlmaLinux $releasever - AppStream
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/AppStream/$basearch/os/
 enabled=1
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 [extras]
 name=AlmaLinux $releasever - Extras
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/extras/$basearch/os/
 enabled=1
 gpgcheck=1
 countme=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Sources
 [baseos-source]
 name=AlmaLinux $releasever - BaseOS Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 [appstream-source]
 name=AlmaLinux $releasever - AppStream Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 [extras-source]
 name=AlmaLinux $releasever - Extras Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/extras/Source/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 ## Debuginfo
 [baseos-debuginfo]
 name=AlmaLinux $releasever - BaseOS debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 [appstream-debuginfo]
 name=AlmaLinux $releasever - AppStream debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 [extras-debuginfo]
 name=AlmaLinux $releasever - Extras debuginfo
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/extras/debug/$basearch/
 enabled=0
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux