50-redhat.conf

@@ -0,0 +1,7 @@
+# https://bugzilla.redhat.com/show_bug.cgi?id=1689346
+kernel.kptr_restrict = 1
+
+# Source route verification
+net.ipv4.conf.default.rp_filter = 1
+net.ipv4.conf.*.rp_filter = 1
+-net.ipv4.conf.all.rp_filter

85-display-manager.preset

@@ -6,5 +6,6 @@ enable gdm.service
 enable lightdm.service
 enable slim.service
 enable lxdm.service
+enable sddm.service
 enable kdm.service
 enable xdm.service

90-default-user.preset

@@ -0,0 +1,30 @@
+# Enable the D-Bus service (including its socket for socket activation)
+# unconditionally. It is used throughout Fedora and required on all machines.
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/4
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
+
+# Socket-activated pipewire service for individual user sessions
+# https://bugzilla.redhat.com/show_bug.cgi?id=1592434
+enable pipewire.socket
+
+# Enable the PipeWire PulseAudio compatibility socket interface
+# https://bugzilla.redhat.com/show_bug.cgi?id=1904239
+# https://bugzilla.redhat.com/show_bug.cgi?id=1907906
+# https://fedoraproject.org/wiki/Changes/DefaultPipeWire
+enable pipewire-pulse.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1976006
+enable pipewire-media-session.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1979419
+enable wireplumber.service
+
+# Enable the session agent for snaps
+# https://bugzilla.redhat.com/show_bug.cgi?id=1734371
+enable snapd.session-agent.socket
+
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/80
+enable obex.service
+enable grub-boot-success.timer
+enable pulseaudio.socket

90-default.preset

@@ -1,27 +1,63 @@
-# Also see:
+# See https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/
-# https://fedoraproject.org/wiki/Starting_services_by_default
+# for the Fedora policy.
 
+# On Fedora we deviate from some upstream defaults
 disable systemd-timesyncd.service
-disable systemd-resolved.service
+disable systemd-networkd.service
+disable systemd-networkd-wait-online.service
+# We want to update systemd-boot from packaging scriptlets after updates.
+disable systemd-boot-update.service
 
-# systemd
+# https://fedoraproject.org/wiki/Changes/EnableSystemdOomd
-enable remote-fs.target
+enable systemd-oomd.service
-enable getty@tty1.service
+
+# These presets were last validated en-masse on 2015-09-09
+# https://fedorahosted.org/fesco/ticket/1472
 
 # System stuff
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+enable dbus.socket
+enable dbus-broker.service
 enable sshd.service
+
+# Locally-running services
 enable atd.*
 enable crond.*
-enable chronyd.service
 enable rpcbind.*
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/636
+enable chronyd.service
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
+# https://bugzilla.redhat.com/show_bug.cgi?id=1455704
 enable NetworkManager.service
+enable NetworkManager-wait-online.service
 enable NetworkManager-dispatcher.service
 enable ModemManager.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1311
 enable auditd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=2258520
+enable audit-rules.service
+
+# Locally-running service
 enable restorecond.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/1166
 enable bluetooth.*
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable avahi-daemon.*
-enable cups.*
+
+# Default configuration is locally-running only
+# CUPS is now socket-activatable for local use-cases, so don't enable cups.service
+# https://pagure.io/fesco/issue/1701
+enable cups.socket
+enable cups.path
+
+# RHELBLD-15232: We need the full service enabled to act as a print server
+enable cups.service
 
 # The various syslog implementations
 enable rsyslog.*
@@ -29,15 +65,89 @@ enable syslog-ng.*
 enable sysklogd.*
 
 # Network facing
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable firewalld.service
-enable libvirtd.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/2627
+# Virtualization driver specific daemons. Start by default at boot for VM
+# autostart, but shutdown after 2 mins and socket activated thereafter
+enable virtqemud.service
+enable virtxend.service
+enable virtlxcd.service
+enable virtvboxd.service
+
+# Sockets for the services listed above, to support socket activation
+# after the initial timeout
+enable virtqemud.socket
+enable virtqemud-ro.socket
+enable virtqemud-admin.socket
+enable virtxend.socket
+enable virtxend-ro.socket
+enable virtxend-admin.socket
+enable virtlxcd.socket
+enable virtlxcd-ro.socket
+enable virtlxcd-admin.socket
+enable virtvboxd.socket
+enable virtvboxd-ro.socket
+enable virtvboxd-admin.socket
+
+# Compatibility with libvirtd sockets for old clients (socket activated
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
+enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
+
+# Secondary drivers providing supporting functionality to main virtualization
+# drivers (socket activated only when required)
+enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
+enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
+enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
+enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
+enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
+enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
+
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
+enable virtlogd.socket
+enable virtlogd-admin.socket
+enable virtlockd.socket
+enable virtlockd-admin.socket
+
+# https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable xinetd.service
-enable ladvd.service
 
 # Storage
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/391
 enable multipathd.service
+
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/876
 enable libstoragemgmt.service
-enable lvm2-lvmpolld.socket
+
+# Approved by FESCo - https://pagure.io/fesco/issue/2386
+enable iscsid.socket
+enable iscsiuio.socket
+
+# Approved by FESCo - https://pagure.io/fesco/issue/2943
+enable iscsi-starter.service
+
+# iSCSI support for early-boot
+# https://bugzilla.redhat.com/show_bug.cgi?id=1930470
+enable iscsi-onboot.service
+
+# Locally-running services
 enable lvm2-monitor.*
 enable lvm2-lvmetad.*
 enable dm-event.*
@@ -47,6 +157,9 @@ enable dmraid-activation.service
 enable mdmonitor.service
 enable mdmonitor-takeover.service
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=1817491
+enable raid-check.timer
+
 # https://bugzilla.redhat.com/show_bug.cgi?id=876237
 enable spice-vdagentd.service
 
@@ -56,144 +169,299 @@ enable qemu-guest-agent.service
 # https://bugzilla.redhat.com/show_bug.cgi?id=928726
 enable dnf-makecache.timer
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=1995495
+enable rpm-ostree-countme.timer
+
 # https://bugzilla.redhat.com/show_bug.cgi?id=957135
 enable vmtoolsd.service
 
+# https://bugzilla.redhat.com/show_bug.cgi?id=976315
+enable dkms.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=961878
+enable ipmi.service
+enable ipmievd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1039351
+enable x509watch.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1060754
+enable dnssec-triggerd.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1095353
+enable uuidd.socket
+
+# Hardware
+# Locally-running service
+enable gpm.*
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1066421
+enable gpsd.socket
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1141607
+enable x2gocleansessions.service
+
+# https://issues.redhat.com/browse/RHEL-35582
+enable tuned.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1215641
+enable unbound-anchor.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1222495
+enable lvm2-lvmpolld.*
+
+# https://fedoraproject.org/wiki/Changes/UEFISecureBootBlacklistUpdates
+enable dbxtool.service
+
+# Locally-running services
+enable irqbalance.service
+enable lm_sensors.service
+enable mcelog.*
+enable smartd.service
+enable pcscd.socket
+enable rngd.service
+
+# Other stuff
+# Approved by FESCo - https://fedorahosted.org/fesco/ticket/937
+# Note: abrt-ccpp.service is excluded in favor of systemd-coredump.
+enable abrtd.service
+enable abrt-journal-core.service
+enable abrt-oops.service
+enable abrt-xorg.service
+enable abrt-vmcore.service
+
+# Locally-running services
+enable kdump.service
+enable ksm.service
+enable ksmtuned.service
+enable rootfs-resize.service
+enable sysstat.service
+enable sysstat-collect.timer
+enable sysstat-summary.timer
+enable uuidd.service
+enable xendomains.service
+enable xenstored.service
+enable xenconsoled.service
+
+# Desktop stuff
+# Locally-running services
+enable accounts-daemon.service
+enable rtkit-daemon.service
+enable upower.service
+enable udisks2.service
+enable polkit.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1187072
+enable timedatex.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1231745
+enable mlocate-updatedb.timer
+
+# https://src.fedoraproject.org/rpms/fedora-release/pull-request/204
+enable plocate-updatedb.timer
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1218999
+enable sa-update.timer
+
+# Hyper-V guest support daemons
+# https://bugzilla.redhat.com/show_bug.cgi?id=1279322
+enable vmtoolsd.service
+
 # mcelog is a utility that collects and decodes Machine Check Exception data
 # on x86-32 and x86-64 systems.
 # https://bugzilla.redhat.com/show_bug.cgi?id=1302179
 enable mcelog.service
 
-#https://bugzilla.redhat.com/show_bug.cgi?id=995987
+# OPAL-prd is a utility specific to ppc64le systems
-enable kdump.service
+# It is the "OPAL Processor Recovery Diagnostics Daemon"
-
+# https://bugzilla.redhat.com/show_bug.cgi?id=1312018
-#https://bugzilla.redhat.com/show_bug.cgi?id=1009970
-enable tuned.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1215645
-enable unbound-anchor.timer
-
-# Enable SSSD Kerberos Credential Cache Server
-# https://bugzilla.redhat.com/show_bug.cgi?id=1558927
-enable sssd-kcm.socket
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1578833
-enable sssd.service
-
-# Hardware
-enable gpm.*
-enable gpsd.*
-enable irqbalance.service
-enable lm_sensors.service
-enable mcelog.*
-enable microcode.service
-enable smartd.service
-enable pcscd.socket
-enable rngd.service
-
-# Other stuff
-enable abrtd.service
-enable abrt-journal-core.service
-enable abrt-oops.service
-enable abrt-xorg.service
-enable abrt-vmcore.service
-enable lttng-sessiond.service
-enable ksm.service
-enable ksmtuned.service
-enable rootfs-resize.service
-enable sysstat.service
-enable uuidd.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1193616
-enable hypervfcopyd.service
-enable hypervkvpd.service
-enable hypervvssd.service
-
-# Desktop stuff
-enable accounts-daemon.service
-enable rtkit-daemon.service
-enable upower.service
-enable udisks2.service
-enable packagekit-offline-update.service
-enable PackageKit.service
-
-# Initial Setup reconfiguration service
-enable initial-setup-reconfiguration.service
-
-# https://bugzilla.redhat.com/show_bug.cgi?id=1312446
 enable opal-prd.service
 
-# virtlog.service is sometimes used by VMs started by libvirt.service
+# lircd is the Linux Infrared Control daemon
-# Enable virtlog.socket to have it socket activated
+# Starting with version 0.9.4, it requires no manual configuration
-# https://bugzilla.redhat.com/show_bug.cgi?id=1325503
+# https://bugzilla.redhat.com/show_bug.cgi?id=1340061
-enable virtlogd.socket
+enable lircd.socket
 
+# IPSec management
+# https://bugzilla.redhat.com/show_bug.cgi?id=1276285
+enable pluto.socket
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1271839
+# https://bugzilla.redhat.com/show_bug.cgi?id=1367932
-enable rhsmcertd.service
+# Automatically refresh installed snaps
+enable snapd.refresh.timer
+# Socket activated daemon to manage snaps
+enable snapd.socket
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1359645
+# Support for dual-GPU systems
-enable brandbot.*
+# https://bugzilla.redhat.com/show_bug.cgi?id=1389762
+enable switcheroo-control.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1572550
+# Support for the DRBD link-cleaning service
-enable timedatex.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1399387
+enable drbdlinksclean.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1578870
+# Enable the System Security Services Daemon
-enable selinux-autorelabel-mark.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1427649
-enable rhel-configure.service
+enable sssd.service
-enable rhel-dmesg.service
 
-# https://github.com/fedora-sysv/initscripts/commit/37109fdf9808
+# Enable ostree-remount on ostree-based systems
-enable nis-domainname.service
+# (Does nothing on non-ostree systems)
+# https://bugzilla.redhat.com/show_bug.cgi?id=1451458
+enable ostree-remount.service
+
+# Enable Performance Co-Pilot services
+# https://bugzilla.redhat.com/show_bug.cgi?id=1472350
+enable pmcd.service
+enable pmlogger.service
+enable pmie.service
+
+# Enable SSSD Kerberos Credential Cache Server
+# https://bugzilla.redhat.com/show_bug.cgi?id=1475999
+enable sssd-kcm.socket
+
+# sssd-secrets.socket was previously enabled, but as of
+# SSSD 2.0 it is not longer needed
+# https://bugzilla.redhat.com/show_bug.cgi?id=1615584
+
+# A mechanism to transfer state between the initramfs and the real
+# system. Obsolete since /run was introduced, but still used by some
+# services.
+# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
+# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
 enable import-state.service
-enable loadmodules.service
+
+# An initscripts mechanism for readonly root
+# https://bugzilla.redhat.com/show_bug.cgi?id=1493479
+# https://bugzilla.redhat.com/show_bug.cgi?id=1584645
 enable readonly-root.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1630200
+# Ensure that any installed kmods are built for the currently-running
-# s390x specific services
+# kernel at boot
+# https://bugzilla.redhat.com/show_bug.cgi?id=1518258
+enable akmods.service
+
+# virtualbox-guest-additions service, yet another virtual-machine guest
+# integration agent, this is a locally-running service, Note this has a
+# "ConditionVirtualization=|oracle" so it will only run under VirtualBox
+# https://bugzilla.redhat.com/show_bug.cgi?id=1534595
+enable vboxservice.service
+
+# Mark the system for SELinux autorelabel when appropriate
+# https://bugzilla.redhat.com/show_bug.cgi?id=1589720
+enable selinux-autorelabel-mark.service
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1623901
 enable cpi.service
+
+# Initialize persistent devices on s390x
 enable device_cio_free.service
 
 # Enable the stratis daemon for managing stratis storage
-# https://bugzilla.redhat.com/show_bug.cgi?id=1632510
+# https://bugzilla.redhat.com/show_bug.cgi?id=1630514
 enable stratisd.service
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1817591
+# Enable a service to finalize staged OSTree changes at shutdown
-enable mlocate-updatedb.timer
+# https://bugzilla.redhat.com/show_bug.cgi?id=1639372
+enable ostree-finalize-staged.path
 
-# nvme auto connect
+# Enable the Docker daemon socket
-# https://bugzilla.redhat.com/show_bug.cgi?id=1805466
+# https://bugzilla.redhat.com/show_bug.cgi?id=1655602
-enable nvmefc-boot-connections.service
+enable docker.socket
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=1683101
+# Enable the service for adding Fedora OCI repos to flatpak
-enable nfs-convert.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=1696225
+enable flatpak-add-fedora-repos.service
 
-# OSTree based systems need to remount /sysroot and
+# Run fstrim weekly on filesystems listed in fstab
-# /var as rw via ostree-remount.service
+enable fstrim.timer
-# ignored by non-OSTree based systems
-# https://bugzilla.redhat.com/show_bug.cgi?id=1848453
-enable ostree-remount.service
 
-# enable greenboot services
+# oneshot to generate kata VM appliance at host bootup
-# https://bugzilla.redhat.com/show_bug.cgi?id=1935177
+# for the booted kernel
-enable greenboot-grub2-set-counter.service
+enable kata-osbuilder-generate.service
-enable greenboot-grub2-set-success.service
-enable greenboot-healthcheck.service
-enable greenboot-rpm-ostree-grub2-check-fallback.service
-enable greenboot-status.service
-enable greenboot-task-runner.service
-enable redboot-auto-reboot.service
-enable redboot-task-runner.service
 
-# enable dbus services
+# Enable rotation of system log files
-# https://bugzilla.redhat.com/show_bug.cgi?id=1941642
+# https://bugzilla.redhat.com/show_bug.cgi?id=1655153#c4
-# https://projects.engineering.redhat.com/browse/RHELBLD-6131
+enable logrotate.timer
-enable dbus.socket
-enable dbus-daemon.service
 
-# enable nfs-client.target
+# Enable regular update of SpamAssassin data files
-# https://bugzilla.redhat.com/show_bug.cgi?id=1967515
+# https://bugzilla.redhat.com/show_bug.cgi?id=1651002
+enable sa-update.timer
+
+# Enable service to automatically rebuild the RPM database
+# on startup when /var/lib/rpm/.rebuilddb exists
+# https://bugzilla.redhat.com/show_bug.cgi?id=1826658
+enable rpmdb-rebuild.service
+
+# Enable service to automatically migrate the RPM database to /usr
+# on startup when /var/lib/rpm/.migratedb exists
+# https://bugzilla.redhat.com/show_bug.cgi?id=2044061
+enable rpmdb-migrate.service
+
+# Support services for Google Cloud
+# Approved by FESCo: https://pagure.io/fesco/issue/2578
+enable google-guest-agent.service
+enable google-startup-scripts.service
+enable google-shutdown-scripts.service
+
+# Support service for Azure
+# Approved by FESCo: https://pagure.io/fesco/issue/2849
+enable waagent.service
+
+# Certbot (Let's Encrypt)
+# https://bugzilla.redhat.com/show_bug.cgi?id=1940211
+enable certbot-renew.timer
+
+# enable thermald by default for desktops
+# https://pagure.io/fedora-workstation/issue/71
+enable thermald.service
+
+# enable uresourced by default for desktops
+# https://pagure.io/fesco/issue/2457
+enable uresourced.service
+
+# enable power-profiles-daemon
+# https://pagure.io/fedora-workstation/issue/191
+enable power-profiles-daemon.service
+
+# Enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2101719
+enable clevis-luks-askpass.path
+
+# Enable livesys services for live media
+# https://bugzilla.redhat.com/show_bug.cgi?id=2148790
+enable livesys.service
+enable livesys-late.service
+
+# Enable Waydroid
+# https://bugzilla.redhat.com/show_bug.cgi?id=2157810
+enable waydroid-container.service
+
+# Enable nmstate to apply network configuration from /etc/nmstate/*.yml
+# https://github.com/coreos/fedora-coreos-tracker/issues/1175
+# https://github.com/coreos/fedora-coreos-config/pull/2269
+enable nmstate.service
+
+# Enable nfs-client.target
+# https://bugzilla.redhat.com/show_bug.cgi?id=2218006
 enable nfs-client.target
 
-# https://bugzilla.redhat.com/show_bug.cgi?id=2126605
+# Enable cloud-init services
-enable clevis-luks-askpass.path
+# https://bugzilla.redhat.com/show_bug.cgi?id=2233948
+enable cloud-config.service
+enable cloud-final.service
+enable cloud-init.service
+enable cloud-init-local.service
+
+# Enable  kernel-bootcfg-boot-successful.service
+# https://bugzilla.redhat.com/show_bug.cgi?id=2239607
+enable kernel-bootcfg-boot-successful.service
+
+# Enable pd-mapper service for Thinkpad X13s
+# https://bugzilla.redhat.com/show_bug.cgi?id=2255318
+enable pd-mapper.service
+
+# The Cockpit web-based system management console
+enable cockpit.socket
+
+# https://fedoraproject.org/wiki/Changes/EnableFwupdRefreshByDefault
+enable fwupd-refresh.timer

EULA

@@ -1,10 +1,8 @@
-AlmaLinux 8 EULA
+AlmaLinux 10 EULA
 
-AlmaLinux 8 comes with no guarantees or warranties of any sorts, 
+AlmaLinux 10 comes with no guarantees or warranties of any sorts, 
 either written or implied.
 
 The Distribution is released as GPLv2. Individual packages in the
 distribution come with their own licences. A copy of the GPLv2 license
 is included with the distribution media.
-
-

RPM-GPG-KEY-AlmaLinux

@@ -1,87 +0,0 @@
------BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1
-
-mQINBF/9iQ4BEADguRE+cjShp7JujKkiVH3+ZYYD5ncX7IMh7Ig0DbDC8ldtm84k
-4vi8266IIBLM3eRgkF9sgHciRikTPow50R+Ww7jJzehV9vjTkRzWr8ikog6X3ZPw
-rh9QAqOdTOIn4bBSS6j5+xdxYKG7yEWXjADbkFVSiLvejp3FrLZGlNFdPCkGKFhC
-vTCgbEKtAkXHx/jFDJCYbnJkzrecCSd+a3yQ4Ehp6TCxnywXdseX4WGyNT3E6Ppu
-JRIXLKrVwP/5pZxqgBS9EDsQpaqxmkS8iJe9j8Bkzm4mL0K4Y8B5vApIyxRO0i0C
-8Eb8UgLSoOwWsZjWpDcYtLgCTNT1CCaOe5lG6qy3HD6Y7LiXinnMgq5uXbfTEKxZ
-rUyQ9Jepxe5hk5GJ1mTbQ6vEj0oYOWYWCwLZKOHucRh8BmvYEbhMBGsgBGcMruql
-Na+gw1eVIMTknGCdGGwceb3DLNHXGolU3GDTKd8d6lEaXkFx9zXWBicOIDyG72tU
-vZMj2RVzmgEhxcw1vKxoJIUOegjpdqBqTJRnM/tnimm4eE65hHhuqRYIngwHWqL0
-K+Daxt+J+4l5Xo56AEYc+2i8JA1nGT/nw13KE/7S79wRVaJPzDccI7/mefDKcF3R
-EGWG7f9jWqoCB+wvXD+0FpHDcp0TPgDcWTObUs3yBoySbgj8IXL3z2R64wARAQAB
-tCJBbG1hTGludXggPHBhY2thZ2VyQGFsbWFsaW51eC5vcmc+iQI+BBMBAgAoBQJf
-/YkOAhsBBQkFo5qABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBIj898Ors0
-+IsjD/9/F/PIu7kSn4P8Ud9j/iyoO8hH53qXKMimarg920ugt2uUyl6SzaJqV0dK
-ACrczvC0VmxrNaJ1jB31TGPpdJZpey5AJbefofu/RgAlxHN6o3QX0Br4bEHahF20
-21q2eIjoMrq8eiz8X5D2wfx6CyOA6RZY96MVQ2whXjQHV+hwo65xyMUyjTuFx5Pb
-nl7gdYr9EkH3EafdNrpuVurp+Zrgur+973nUrzKq8c2rlDiEQz/ZG+bgasTDYkcz
-q6NUPP5OQ5BVpFCkuE9YuziZD+37hxN07P2gyz9NRrfAOZqBXj8er4vqNhpR/lLA
-h5QF1erb0mjcMFEhkV8ETN0ceJzL/t829BlQ7MB7LdQ5v9kc5p5cwcsBly54ouI0
-l9LjSN95Al0VPoWE8zgjnytecu2UN5+0k12bfcj0zjKdAxEVD3y9Id1MJIze7/PA
-6v3LOk+SSs8M0ASmZEnDBTCbDRpXlDDUKEEmMIBRdvpTxjiUnwD2tHwhXR8m6vw6
-749i+mdc8fgljTey8sJLKxTabbYNgTHLi9lCMdmPlKU2QJYsIwIBpqF2/eenNyZT
-LvlW/aBUU7Li3etUnJeP9ig+V2LuDhyT6TlVPsFKCCruoy7faSjW2/2wlVcasGQp
-YqqqqtQJyVDRud6ig7oH3EWSvUySEmywjBp5zfwrMw3jeWkwHbkBjQRf/YnGAQwA
-tk5NBR7SCwYwEsmPDUX/SJ98eGHb1nux/cRaX+K2KgX7Yi3hhlFs/InkiiNKs+Au
-0N5ZBIXltypguo5jE3MwXQxLr2MfJ74bdDXR7z3BmBB92BMaS+tHNJWroYnqiSQ7
-2PXfWRF9PtlChF12NyK6SVrQg58IqJjf5MQ8hodgIk0t21qCvxe/IotktjKHy2Vn
-gvKPjtT05qXpAK0CP8N5wtOc4WnFCxvNTI7e1KkYS4dvXHL6V+WvqL3saGIXY5Iy
-0jYZW5xMxh691C+HvHQ8/Lof3Enenz3hDJR0X9wvzusxBJWwg/vqRIR8+YYKSHj1
-VEFycTabqGLlnPpYpFqDOdqS2gDtdrD6FEsrSpy9pBd98XAzjkn6BW4Rf0PTaJ/z
-b3paHsqxEnWbamANs5GYs1Y/1rEIl66jOhZB9Sua22/wfGd3PvfM6nxi825l4coO
-bbivRY6U4/WtxQUcK8zdoF97zUlvbNNN0LsluZ0tBF44o5vt7f4aCGXZ8XMVIef1
-ABEBAAGJA8QEGAECAA8FAl/9icYCGwIFCQWjmoABqQkQSI/PfDq7NPjA3SAEGQEC
-AAYFAl/9icYACgkQUdZkfsIa1upqtQv/R9oLsG3g4Rg2MKDrXYSa94n1CBY5ESDL
-1N0mZTWQ5nVdfIWWifnpe72VDBR3Y+r5ootnCHq09DbK+K3q82q2UmGEq968mR96
-LKGjWuTS1rY/MCbQbW+jcrnju0T3bCcImggMJoYCzuUnBfIkexObwi/YidqgL92+
-nw3NzqeWnq+gu/1Q2ngzhN8Ft4mwOcFr9H0px0476LLvR+7lrSu2HqGeHk+fUA4c
-ZNwvsgGYgCAJhz8fPwKCoLrxsE82bkZ86JgUJEcMu0ki4UFo3rg6NmkDwnrYO61l
-MOrBCxt/lPJz7d8L9oCLu9pJSBsKH9RNqO10NAoEMppKwnQSz6RQFRJj7WNW+OEs
-mjZt7sNrTr0Y+udx58Sqd0C5k7lGUtYWKKGpLfdz0RLnBTTFmjnB3Y2uyOJFc4FS
-g251yjk9ds1AFjdRThQ2kFpZzQAo5ei6zMBaZATg0E2uk4HAfpQ58CPGj4f1k3py
-1N2hYUA+qksZIVxjFfwYr5LCv4tMZumZl6UP/je7EHh5IGkB1+Bpeyj3dudZblvM
-lE6kdGridxInbiJvgqBSdprIksR8wm1Vy/Z1/lHEM6QnUODGyRAbjQHL3kPKloPj
-lKr8TNAELbmVTZjBRJowsGw27rhYAaji/qEet/0ALfu2l3QuOQ38dyuPpxlDSTLY
-WnajVIgvSJUU3Yl38Lp3UTuHdtdiNWgyHkLOA/11GK14RSWYsjZAamstlSpl24Op
-yKLN5z+q4tNAs+tfQrWNRi3SMG7UDroxztJVkHGvuJ2DT/Q6tANigPzipLzSgOIO
-8Wa2aQmqtQ4V0eB2S4DxcMckHti3+4fbrzBzeN/PFaIVLwUtdsUdBs+TtSZFdN9e
-i0oLUChIYKDvVBGqgmIor6YgenNSSZni3rj+RRA3gQom7jyVrQPgUv7lsv/MLCmg
-Ogpibxs3+SDbbZ6tP0D8uxdRnB4NVeENewlqw/ImacgjLtjBHaq+BebjWErIAkdX
-VnjWoLdZoV3B4ComKsjFNf7sfbzV/T2Xpg/r/u1WkiSjvD0mkSZ+3seDjd6oL20s
-p7jGLnSGZqGsUksJym0tWRvuyspgTELZlcjuMfHKuKmYudYFi+Y48+YsdJ7UetNT
-kAIBinjtZwEEAP4GumNNy7f4l4tt1CBy1EgoYtYCcJC5SGyhWMee3L3hLhHe7Iwd
-72EHtteVBoVn0eg6
-=rEWJ
------END PGP PUBLIC KEY BLOCK-----
------BEGIN PGP PUBLIC KEY BLOCK-----
-
-mQINBGUlFG8BEADc0kEC57b722MbPVkI8aoYFAEWM+lj084H26msZpAYVfW7fCi5
-S7g3n6htVdvvnB6MrJANitZgQhMyC7tchNQz5sjrFffasNkOoI5Q27PSrG676ILP
-diowPWfJkwrN0f0UcJsV3w5KBedvUXJnoa64lP/oBFkbz3SvUTqZFkSBzOfCTdXW
-bvpZonghgm/AEU8wqsdOitXU23Xn4fsPB7aULgR31jz3irnaUDFXUnNqoiQpU6JB
-P6WiFqN/IZMH95HW1WlMBGSOalSbQUlNEND3J0lxK2a33UBmTdR3aLyS+o9P8+7b
-Cdzbkrs1fXXVxxvlaQdSWBSjVULUZjKIZ+HtqhIaTiBELa7JHBEBbEZgNHpymmc8
-hIF6fdTbzbbYx9MbNmpzCcr+SKHubCdvZyX2FsWK1CHvYx6iPc9wcu4x9yh8MIfp
-KpLSJG1SaSCHbUdatpsOSQK2pbIN3THsvFrKPVssLrMgVjwp22Q3vMFL+ldq0vZ5
-6uIIiNRKrX2CKKrUy1kF7FjDNMx4riaCQHs5vp7qOttxv0E/X4Z9B4QZdC02H2Mq
-Ea5LoDxONutv+JMzWFyxIEQvbnfdDSu4QUDkn3H1WkBNmqTUwny5DSxZNjGB8a6P
-ISaIE+kN2pp5v9eB8Q4+4BxbU2G2/Jy/V6bFC8eLL+PIKodPKbpCqoPyGwARAQAB
-tCdBbG1hTGludXggT1MgOCA8cGFja2FnZXJAYWxtYWxpbnV4Lm9yZz6JAk8EEwEI
-ADkWIQS8Xt3K31AsB38Vgogq6B6KztcliwUCZSUUbwIbAwQLCQgHAyICAQQVCgkI
-BBYCAwECHgcCF4AACgkQKugeis7XJYvOeA/9E/hJwfd7UPtvsv+y7Wiei1NCt+OJ
-AzJQPjEzHJNmLAD157AHtpA2yZpB9GlRQkjRu40fn0It20mwjnl0j5oHF9HnQ+/H
-Qtiw9pwgNpZJaTe5YnzETbGqrrOVgWihkJyJhn42vtuirNu7pKJvWilRvz1a81JK
-i/okezXp1KBrgrxR/bG26c8k61AK6n/ExI1MoHZhyaAAebFqG8vTiWTuC2a4t7SD
-pxbzsn5CMuXqVY1gxIdiUGzgrXfSm5WgpSYEG01VN+VF885caPvtMHoLBy/pLGN3
-5TKp4pKiA9JGQxtlZLdO666UbpgbjoxFYxNZEwY3Tdx37zbsP4pHcaN8fOGbk5mG
-h8LwkjppPZzoXONyBfUJ+uHBEzRJEw4KtVRgaZZfCcojRvmyJB4TAM1SYkikaw8F
-0gi3OPRWtVdEogxP0XD/tTrPSKo7pTDEk17HIyKCU0KxF4ZSbxXFMeH5OZUQAQM4
-l7ECGNg3bVhXC66AHE72mz/PN39M2Z0Sww7GWYCf6IDhhkeTxYx+I7VW1Uo9ht5L
-i3ZRMbX/h6NBYTUaPJEx3fwixNv2+RtE3m4JIxg76xBOYGLyIRlaImWNGKTnGz5m
-IBRP5Vm7nRdFOOFhNz+iDIyq0LEyhGU7xCriFaL+ozXLiIzycidgTTZW3WfkHxlr
-ZEzov/wIBeoaIp8=
-=mC/C
------END PGP PUBLIC KEY BLOCK-----

RPM-GPG-KEY-AlmaLinux-10

@@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=tJCw
+-----END PGP PUBLIC KEY BLOCK-----

almalinux-appstream.repo

@@ -0,0 +1,30 @@
+[appstream]
+name=AlmaLinux $releasever - AppStream
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream
+# baseurl=https://repo.almalinux.org/almalinux/$releasever/AppStream/$basearch/os/
+enabled=1
+gpgcheck=1
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=1
+
+[appstream-debuginfo]
+name=AlmaLinux $releasever - AppStream - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[appstream-source]
+name=AlmaLinux $releasever - AppStream - Source
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-source
+# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/Source/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0

almalinux-baseos.repo

@@ -0,0 +1,30 @@
+[baseos]
+name=AlmaLinux $releasever - BaseOS
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos
+# baseurl=https://repo.almalinux.org/almalinux/$releasever/BaseOS/$basearch/os/
+enabled=1
+gpgcheck=1
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=1
+
+[baseos-debuginfo]
+name=AlmaLinux $releasever - BaseOS - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[baseos-source]
+name=AlmaLinux $releasever - BaseOS - Source
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-source
+# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/Source/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0

almalinux-crb.repo

@@ -0,0 +1,30 @@
+[crb]
+name=AlmaLinux $releasever - CRB
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/crb
+# baseurl=https://repo.almalinux.org/almalinux/$releasever/CRB/$basearch/os/
+enabled=0
+gpgcheck=1
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[crb-debuginfo]
+name=AlmaLinux $releasever - CRB - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/crb-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/CRB/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[crb-source]
+name=AlmaLinux $releasever - CRB - Source
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/crb-source
+# baseurl=https://repo.almalinux.org/vault/$releasever/CRB/Source/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0

almalinux-extras.repo

@@ -0,0 +1,30 @@
+[extras]
+name=AlmaLinux $releasever - Extras
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras
+# baseurl=https://repo.almalinux.org/almalinux/$releasever/extras/$basearch/os/
+enabled=1
+gpgcheck=1
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[extras-debuginfo]
+name=AlmaLinux $releasever - Extras - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/extras/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[extras-source]
+name=AlmaLinux $releasever - Extras - Source
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-source
+# baseurl=https://repo.almalinux.org/vault/$releasever/extras/Source/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0

almalinux-highavailability.repo

@@ -1,28 +1,30 @@
-# almalinux-ha.repo
+[highavailability]
-
-[ha]
 name=AlmaLinux $releasever - HighAvailability
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/highavailability
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/HighAvailability/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
+[highavailability-debuginfo]
-[ha-source]
+name=AlmaLinux $releasever - HighAvailability - Debug
-name=AlmaLinux $releasever - HighAvailability Source
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/highavailability-debug
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[ha-debuginfo]
-name=AlmaLinux $releasever - HighAvailability debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/ha-debuginfo
 # baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/debug/$basearch/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[highavailability-source]
+name=AlmaLinux $releasever - HighAvailability - Source
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/highavailability-source
+# baseurl=https://repo.almalinux.org/vault/$releasever/HighAvailability/Source/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0

almalinux-nfv.repo

@@ -1,27 +1,30 @@
-# almalinux-nfv.repo
-
 [nfv]
-name=AlmaLinux $releasever - Real Time for NFV
+name=AlmaLinux $releasever - NFV
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/NFV/$basearch/os/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[nfv-debuginfo]
+name=AlmaLinux $releasever - NFV - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/NFV/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
 [nfv-source]
-name=AlmaLinux $releasever - Real Time for NFV Sources
+name=AlmaLinux $releasever - NFV - Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/NFV/Source/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
-
+metadata_expire=86400
-## Debuginfo
+enabled_metadata=0
-[nfv-debuginfo]
-name=AlmaLinux $releasever - Real Time for NFV Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/nfv-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/NFV/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux-plus.repo

@@ -1,5 +1,3 @@
-# almalinux-plus.repo
-
 [plus]
 name=AlmaLinux $releasever - Plus
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus
@@ -7,22 +5,26 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus
 enabled=0
 gpgcheck=1
 countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[plus-debuginfo]
+name=AlmaLinux $releasever - Plus - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/plus/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
 [plus-source]
-name=AlmaLinux $releasever - Plus Source
+name=AlmaLinux $releasever - Plus - Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/plus/Source/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
-
+metadata_expire=86400
-## Debuginfo
+enabled_metadata=0
-[plus-debuginfo]
-name=AlmaLinux $releasever - Plus debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/plus-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/plus/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux-powertools.repo

@@ -1,28 +0,0 @@
-# almalinux-powertools.repo
-
-[powertools]
-name=AlmaLinux $releasever - PowerTools
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/PowerTools/$basearch/os/
-enabled=0
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[powertools-source]
-name=AlmaLinux $releasever - PowerTools Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/PowerTools/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[powertools-debuginfo]
-name=AlmaLinux $releasever - PowerTools debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/powertools-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/PowerTools/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux-release.spec

@@ -1,274 +1,363 @@
-%define debug_package %{nil}
+%global distro  AlmaLinux
-%define product_family AlmaLinux
+%define release_name    Purple Lion
-%define release_name Cerulean Leopard
+%global major   10
-%define contentdir almalinux
+%global minor   0
-%define infra_var stock
+%global eol_date 2035-06-01
-%define base_release_version 8
-%define full_release_version 8.10
-%define dist_release_version 8
-%define upstream_rel_long 8.10-0.2
-%define upstream_rel 8.10
-%define almalinux_rel 1
-%define dist .el%{dist_release_version}
-%global eol_date 2029-06-01
-
-# The anaconda scripts in %%{_libexecdir} can create false requirements
-%global __requires_exclude_from %{_libexecdir}
 
 Name:           almalinux-release
-Version:        %{upstream_rel}
+Version:        %{major}.%{minor}
-Release:        %{almalinux_rel}%{?dist}
+Release:        14.4%{?dist}
-Summary:        %{product_family} release file
+Summary:        %{distro} release files
-Group:          System Environment/Base
+License:        GPL-2.0-or-later
-License:        GPLv2
+URL:            https://almalinux.org
-Provides:       almalinux-release = %{version}-%{release}
-Provides:       centos-release = %{version}-%{release}
-Provides:       almalinux-release(upstream) = %{upstream_rel}
-Provides:       centos-release(upstream) = %{upstream_rel}
-Provides:       redhat-release = %{upstream_rel_long}
-Provides:       system-release = %{upstream_rel_long}
-Provides:       system-release(releasever) = %{base_release_version}
-Provides:       base-module(platform:el%{base_release_version})
 
-Provides:       almalinux-release-eula
+Provides:       centos-release = %{version}-%{release}
+# When running a compose for ELN, we want to make sure that we pull in the
+# correct templates when lorax is installed. This Suggests: will clue
+# libdnf to use this set of templates instead of lorax-templates-generic.
+Suggests:       lorax-templates-almalinux
+
+# Required for a lorax run (to generate install media)
+Requires:       almalinux-repos = %{version}-%{release}
 Provides:       centos-release-eula
 Provides:       redhat-release-eula
 
-Source1:        85-display-manager.preset
+# required by epel-release
-Source2:        90-default.preset
+Provides:       redhat-release = %{version}-%{release}
-Source3:        99-default-disable.preset
-Source10:       RPM-GPG-KEY-AlmaLinux
 
-##Source100:      rootfs-expand
+# required by dnf
+# https://github.com/rpm-software-management/dnf/blob/4.2.23/dnf/const.py.in#L26
+Provides:       system-release = %{version}-%{release}
+Provides:       system-release(releasever) = %{major}
+Conflicts:      system-release
+
+# required by libdnf
+# https://github.com/rpm-software-management/libdnf/blob/0.48.0/libdnf/module/ModulePackage.cpp#L472
+Provides:       base-module(platform:el%{major})
 
 Source200:      EULA
-Source201:      GPL
+Source201:      LICENSE
-##Source202:      Contributors
 
-Source300:      almalinux.repo
+Source300:      85-display-manager.preset
-Source301:      almalinux-ha.repo
+Source301:      90-default.preset
-Source302:      almalinux-powertools.repo
+Source302:      90-default-user.preset
-Source303:      almalinux-resilientstorage.repo
+Source303:      99-default-disable.preset
-Source304:      almalinux-plus.repo
+Source304:      50-redhat.conf
-Source305:      almalinux-sap.repo
-Source306:      almalinux-saphana.repo
 
+Source400:      alsecureboot001.cer
+
+Source500:      almalinux-appstream.repo
+Source501:      almalinux-baseos.repo
+Source502:      almalinux-crb.repo
+Source503:      almalinux-extras.repo
+Source504:      almalinux-highavailability.repo
+Source505:      almalinux-resilientstorage.repo
+Source506:      almalinux-sap.repo
+Source507:      almalinux-saphana.repo
 # Only for x86_64
-Source310:      almalinux-rt.repo
+Source510:      almalinux-nfv.repo
-Source311:      almalinux-nfv.repo
+Source511:      almalinux-rt.repo
+
+Source600:      RPM-GPG-KEY-AlmaLinux-10
+
+%package -n almalinux-sb-certs
+Summary: %{distro} public secureboot certificates
+Group: System Environment/Base
+Provides: system-sb-certs = %{version}-%{release}
+Provides: redhat-sb-certs = %{version}-%{release}
+Provides: centos-sb-certs = %{version}-%{release}
+Provides: almalinux-sb-certs = %{version}-%{release}
+
+%package -n almalinux-repos
+Summary:        %{distro} package repositories
+Requires:       almalinux-release = %{version}-%{release}
+Requires:       almalinux-gpg-keys = %{version}-%{release}
+# Required by CentOS SIGs release packages
+Provides:       centos-stream-repos = %{version}-%{release}
+
+%package -n almalinux-gpg-keys
+Summary:        %{distro} RPM keys
+# Required by CentOS SIGs release packages
+Provides:       centos-gpg-keys = %{version}-%{release}
 
 %description
-%{product_family} release files
+%{distro} release files.
 
-%prep
+%description -n almalinux-sb-certs
-echo OK
+%{distro} secureboot certificates
 
-%build
+%description -n almalinux-repos
-echo OK
+This package provides the package repository files for %{distro}.
+
+%description -n almalinux-gpg-keys
+This package provides the RPM signature keys for %{distro}.
 
 %install
-rm -rf %{buildroot}
+# copy license and contributors doc here for %%license and %%doc macros
-
+mkdir -p ./docs
-# create skeleton
+cp %{SOURCE201} ./docs
-mkdir -p %{buildroot}/etc
-mkdir -p %{buildroot}%{_prefix}/lib
 
 # create /etc/system-release and /etc/redhat-release
-echo "%{product_family} release %{full_release_version}%{?beta: %{beta}} (%{release_name})" > %{buildroot}/etc/almalinux-release
+install -d -m 0755 %{buildroot}%{_sysconfdir}
-echo "Derived from Red Hat Enterprise Linux %{upstream_rel} (Source)" > %{buildroot}/etc/almalinux-release-upstream
+echo "%{distro} release %{major}.%{minor}%{?beta: %{beta}} (%{release_name})" > %{buildroot}%{_sysconfdir}/almalinux-release
-ln -s almalinux-release %{buildroot}/etc/system-release
+ln -s almalinux-release %{buildroot}%{_sysconfdir}/system-release
-ln -s almalinux-release %{buildroot}/etc/redhat-release
+ln -s almalinux-release %{buildroot}%{_sysconfdir}/redhat-release
-ln -s almalinux-release %{buildroot}/etc/centos-release
+
+# -------------------------------------------------------------------------
+# Definitions for /etc/os-release and for macros in macros.dist.  These
+# macros are useful for spec files where distribution-specific identifiers
+# are used to customize packages.
+
+# Name of vendor / name of distribution. Typically used to identify where
+# the binary comes from in --help or --version messages of programs.
+# Examples: gdb.spec, clang.spec
+%global dist_vendor AlmaLinux OS Foundation
+%global dist_name   %{distro}
+
+# URL of the homepage of the distribution
+# Example: gstreamer1-plugins-base.spec
+%global dist_home_url https://almalinux.org/
+
+# Bugzilla / bug reporting URLs shown to users.
+# Examples: gcc.spec
+%global dist_bug_report_url https://bugs.almalinux.org/
+
+# debuginfod server, as used in elfutils.spec.
+# %global dist_debuginfod_url https://debuginfod.centos.org/
+# -------------------------------------------------------------------------
+
 
 # Create the os-release file
-cat << EOF >>%{buildroot}%{_prefix}/lib/os-release
+install -d -m 0755 %{buildroot}%{_prefix}/lib
-NAME="%{product_family}"
+cat > %{buildroot}%{_prefix}/lib/os-release << EOF
-VERSION="%{full_release_version} (%{release_name})"
+NAME="%{dist_name}"
+VERSION="%{major}.%{minor} (%{release_name})"
 ID="almalinux"
 ID_LIKE="rhel centos fedora"
-VERSION_ID="%{full_release_version}"
+VERSION_ID="%{major}.%{minor}"
-PLATFORM_ID="platform:el%{base_release_version}"
+PLATFORM_ID="platform:el%{major}"
-PRETTY_NAME="%{product_family} %{full_release_version}%{?beta: %{beta}} (%{release_name})"
+PRETTY_NAME="%{distro} %{major}.%{minor}%{?beta: %{beta}} (%{release_name})"
 ANSI_COLOR="0;34"
 LOGO="fedora-logo-icon"
-CPE_NAME="cpe:/o:almalinux:almalinux:%{base_release_version}::baseos"
+CPE_NAME="cpe:/o:almalinux:almalinux:%{major}::baseos"
-HOME_URL="https://almalinux.org/"
+HOME_URL="%{dist_home_url}"
 DOCUMENTATION_URL="https://wiki.almalinux.org/"
-BUG_REPORT_URL="https://bugs.almalinux.org/"
+VENDOR_NAME="AlmaLinux"
+VENDOR_URL="%{dist_home_url}"
+BUG_REPORT_URL="%{dist_bug_report_url}"
 
-ALMALINUX_MANTISBT_PROJECT="AlmaLinux-%{base_release_version}"
+ALMALINUX_MANTISBT_PROJECT="AlmaLinux-%{major}"
-ALMALINUX_MANTISBT_PROJECT_VERSION="%{full_release_version}"
+ALMALINUX_MANTISBT_PROJECT_VERSION="%{major}.%{minor}"
-REDHAT_SUPPORT_PRODUCT="%{product_family}"
+REDHAT_SUPPORT_PRODUCT="%{distro}"
-REDHAT_SUPPORT_PRODUCT_VERSION="%{full_release_version}%{?beta: %{beta}}"
+REDHAT_SUPPORT_PRODUCT_VERSION="%{major}.%{minor}%{?beta: %{beta}}"
 SUPPORT_END=%{eol_date}
 EOF
 
 # Create the symlink for /etc/os-release
 ln -s ../usr/lib/os-release %{buildroot}%{_sysconfdir}/os-release
 
-# write cpe to /etc/system-release-cpe
+# write cpe to /etc/system/release-cpe
-echo "cpe:/o:almalinux:almalinux:%{base_release_version}::baseos" | tr [A-Z] [a-z] > %{buildroot}/etc/system-release-cpe
+echo "cpe:/o:almalinux:almalinux:%{major}::baseos" > %{buildroot}%{_sysconfdir}/system-release-cpe
 
-# create /etc/issue and /etc/issue.net
+# create /etc/issue, /etc/issue.net and /etc/issue.d
-echo '\S' > %{buildroot}/etc/issue
+echo '\S' > %{buildroot}%{_sysconfdir}/issue
-echo 'Kernel \r on an \m' >> %{buildroot}/etc/issue
+echo 'Kernel \r on an \m' >> %{buildroot}%{_sysconfdir}/issue
-cp %{buildroot}/etc/issue %{buildroot}/etc/issue.net
+cp %{buildroot}%{_sysconfdir}/issue{,.net}
-echo >> %{buildroot}/etc/issue
+echo >> %{buildroot}%{_sysconfdir}/issue
-
+mkdir -p %{buildroot}%{_sysconfdir}/issue.d
-# copy GPG keys
-mkdir -p -m 755 %{buildroot}/etc/pki/rpm-gpg
-install -m 644 %{SOURCE10} %{buildroot}/etc/pki/rpm-gpg
-
-# copy yum repos
-mkdir -p -m 755 %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE300} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE301} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE302} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE303} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE304} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE305} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE306} %{buildroot}/etc/yum.repos.d
-
-# RT and NFV are only for x86_64
-%ifarch x86_64
-install -m 644 %{SOURCE310} %{buildroot}/etc/yum.repos.d
-install -m 644 %{SOURCE311} %{buildroot}/etc/yum.repos.d
-%endif
-
-mkdir -p -m 755 %{buildroot}/etc/dnf/vars
-echo "%{infra_var}" > %{buildroot}/etc/dnf/vars/infra
-echo "%{contentdir}" >%{buildroot}/etc/dnf/vars/contentdir
-echo "%{base_release_version}-stream" > %{buildroot}/etc/dnf/vars/stream
 
 # set up the dist tag macros
-install -d -m 755 %{buildroot}/etc/rpm
+mkdir -p %{buildroot}%{_rpmmacrodir}
-cat >> %{buildroot}/etc/rpm/macros.dist << EOF
+cat > %{buildroot}%{_rpmmacrodir}/macros.dist << EOF
 # dist macros.
 
-%%almalinux_ver %{base_release_version}
+%%__bootstrap ~bootstrap
-%%almalinux %{base_release_version}
+%%almalinux_ver %{major}
-%%centos_ver %{base_release_version}
+%%almalinux %{major}
-%%centos %{base_release_version}
+%%centos_ver %{major}
-%%rhel %{base_release_version}
+%%centos %{major}
-%%dist .el%{base_release_version}
+%%rhel %{major}
-%%el%{base_release_version} 1
+%%el%{major} 1
+%%distcore            .el%{major}
+%%dist %%{!?distprefix0:%%{?distprefix}}%%{expand:%%{lua:for i=0,9999 do print("%%{?distprefix" .. i .."}") end}}%%{distcore}%%{?distsuffix}%%{?with_bootstrap:%{__bootstrap}}
+%%dist_vendor         %{dist_vendor}
+%%dist_name           %{dist_name}
+%%dist_home_url       %{dist_home_url}
+%%dist_bug_report_url %{dist_bug_report_url}
 EOF
 
 # use unbranded datadir
-mkdir -p -m 755 %{buildroot}/%{_datadir}/almalinux-release
+install -d -m 0755 %{buildroot}%{_datadir}/almalinux-release
-ln -s almalinux-release %{buildroot}/%{_datadir}/redhat-release
+ln -s almalinux-release %{buildroot}%{_datadir}/redhat-release
-install -m 644 %{SOURCE200} %{buildroot}/%{_datadir}/almalinux-release
+install -p -m 0644 %{SOURCE200} %{buildroot}%{_datadir}/almalinux-release/
-
-# use unbranded docdir
-mkdir -p -m 755 %{buildroot}/%{_docdir}/almalinux-release
-ln -s almalinux-release %{buildroot}/%{_docdir}/redhat-release
-install -m 644 %{SOURCE201} %{buildroot}/%{_docdir}/almalinux-release
 
 # copy systemd presets
-mkdir -p %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE1} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -d -m 0755 %{buildroot}%{_prefix}/lib/systemd/user-preset
-install -m 0644 %{SOURCE2} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE300} %{buildroot}%{_prefix}/lib/systemd/system-preset/
-install -m 0644 %{SOURCE3} %{buildroot}/%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE301} %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE302} %{buildroot}%{_prefix}/lib/systemd/user-preset/
+
+# installing the same file for both system and user presets to set the same behavior for both
+install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/system-preset/
+install -p -m 0644 %{SOURCE303} %{buildroot}%{_prefix}/lib/systemd/user-preset/
+
+# copy sysctl presets
+mkdir -p %{buildroot}/%{_prefix}/lib/sysctl.d/
+install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
+
+# Create stub yum repos
+mkdir %{buildroot}%{_sysconfdir}/yum.repos.d
+touch %{buildroot}%{_sysconfdir}/yum.repos.d/redhat.repo
+
+# Copy secureboot certificates
+install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
+install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
+
+# Install aarch64 certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
 
 
-%clean
+# Install x86_64 certs
-rm -rf %{buildroot}
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
+
+# Install ppc64le certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
+
+# Install s390x certs
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer
+install -m 644 %{SOURCE400} %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
+
+# Link x86_64 certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-x86_64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-x86_64.cer
+
+# Link aarch64 certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-fwupd-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-fwupd-aarch64.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-aarch64.cer
+
+# Link ppc64le certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-grub2-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-grub2-ppc64le.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-ppc64le.cer
+
+# Link s390x certs
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-ca-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-kernel-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-kernel-s390x.cer
+ln -sr %{buildroot}%{_datadir}/pki/sb-certs/secureboot-uki-virt-s390x.cer %{buildroot}%{_sysconfdir}/pki/sb-certs/secureboot-uki-virt-s390x.cer
+
+# copy yum repos
+install -d -m 0755 %{buildroot}%{_sysconfdir}/yum.repos.d
+install -p -m 0644 %{SOURCE500} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE501} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE502} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE503} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE504} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE505} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE506} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE507} %{buildroot}%{_sysconfdir}/yum.repos.d/
+# RT and NFV are only for x86_64
+%ifarch x86_64
+install -p -m 0644 %{SOURCE510} %{buildroot}%{_sysconfdir}/yum.repos.d/
+install -p -m 0644 %{SOURCE511} %{buildroot}%{_sysconfdir}/yum.repos.d/
+%endif
+
+# Replace basearch to x86_64_v2
+%ifarch x86_64_v2
+sed -i "s/\$basearch/x86_64_v2/g" %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
+sed -i '/^mirrorlist=/ s|$|?arch=x86_64_v2|g' %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
+%endif
+
+# Replace $releasever variable with beta if it is set
+%if %{defined beta}
+sed -i "s/\$releasever/%{major}.%{minor}-beta/g" %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
+sed -i "s|https://repo.almalinux.org/almalinux/|https://vault.almalinux.org/|g" %{buildroot}%{_sysconfdir}/yum.repos.d/*.repo
+%endif
+
+# dnf variables
+install -d -m 0755 %{buildroot}%{_sysconfdir}/dnf/vars
+echo "%{major}-stream" > %{buildroot}%{_sysconfdir}/dnf/vars/stream
+
+# copy GPG keys
+install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/rpm-gpg
+install -p -m 0644 %{SOURCE600} %{buildroot}%{_sysconfdir}/pki/rpm-gpg/
+
+# These variables should be set in the build environment to change rpm names
+mkdir -p %{buildroot}%{_sysconfdir}/rpm
+%ifarch x86_64_v2
+echo '%%_target_platform x86_64-%%{_vendor}-%%{_target_os}%%{?_gnu}' >> %{buildroot}%{_sysconfdir}/rpm/macros.x86_64_v2
+echo '%%x86_64_v2 1' >> %{buildroot}%{_sysconfdir}/rpm/macros.x86_64_v2
+%endif
+
 
 %files
-%defattr(0644,root,root,0755)
+%license docs/LICENSE
-/etc/redhat-release
+%{_sysconfdir}/redhat-release
-/etc/system-release
+%{_sysconfdir}/system-release
-/etc/centos-release
+%{_sysconfdir}/almalinux-release
-##/etc/centos-release-upstream
+%config(noreplace) %{_sysconfdir}/os-release
-/etc/almalinux-release
+%config %{_sysconfdir}/system-release-cpe
-/etc/almalinux-release-upstream
+%config(noreplace) %{_sysconfdir}/issue
-/etc/dnf/vars/*
+%config(noreplace) %{_sysconfdir}/issue.net
-/etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+%dir %{_sysconfdir}/issue.d
-%config(noreplace) /etc/yum.repos.d/almalinux.repo
+%dir %{_sysconfdir}/yum.repos.d
-%config(noreplace) /etc/yum.repos.d/almalinux-ha.repo
+%ghost %{_sysconfdir}/yum.repos.d/redhat.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-powertools.repo
+%{_rpmmacrodir}/macros.dist
-%config(noreplace) /etc/yum.repos.d/almalinux-resilientstorage.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-plus.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-sap.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-saphana.repo
-%ifarch x86_64
-%config(noreplace) /etc/yum.repos.d/almalinux-rt.repo
-%config(noreplace) /etc/yum.repos.d/almalinux-nfv.repo
-%endif
-%config(noreplace) /etc/os-release
-%config /etc/system-release-cpe
-%config(noreplace) /etc/issue
-%config(noreplace) /etc/issue.net
-/etc/rpm/macros.dist
-%{_docdir}/redhat-release
-%{_docdir}/almalinux-release
 %{_datadir}/redhat-release
 %{_datadir}/almalinux-release
 %{_prefix}/lib/os-release
 %{_prefix}/lib/systemd/system-preset/*
+%{_prefix}/lib/systemd/user-preset/*
+%{_prefix}/lib/sysctl.d/50-redhat.conf
+%ifarch x86_64_v2
+%config(noreplace) %{_sysconfdir}/rpm/macros.x86_64_v2
+%endif
+
+%files -n almalinux-sb-certs
+# Note to future packagers:
+# resetting the symlinks in /etc/pki/sb-certs on upgrade is the intended behavior here
+%dir %{_sysconfdir}/pki/sb-certs
+%dir %{_datadir}/pki/sb-certs/
+%{_sysconfdir}/pki/sb-certs/*.cer
+%{_datadir}/pki/sb-certs/*.cer
+
+%files -n almalinux-repos
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-appstream.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-baseos.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-crb.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-extras.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-highavailability.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-resilientstorage.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-sap.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-saphana.repo
+%ifarch x86_64
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-nfv.repo
+%config(noreplace) %{_sysconfdir}/yum.repos.d/almalinux-rt.repo
+%endif
+%config(noreplace) %{_sysconfdir}/dnf/vars/stream
+
+%files -n almalinux-gpg-keys
+%{_sysconfdir}/pki/rpm-gpg
 
 %changelog
-* Wed May 22 2024 Andrew Lukoshko <alukoshko@almalinux.org> - 8.10-1
+* Mon Nov 25 2024 Eduard Abdullin <eabdullin@almalinux.org> - 10.0-14.4
-- 8.10 stable release
+- Initial release
-
-* Thu Nov 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.9-1
-- 8.9 stable release
-
-* Mon Oct 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-3
-- Split AlmaLinux OS 8 GPG public keys to fix microdnf
-
-* Tue Oct 10 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-2
-- Add new AlmaLinux OS 8 GPG key
-
-* Tue May 16 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 8.8-1
-- 8.8 stable release
-
-* Sat Nov 19 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-3
-- Fixed ownership of dirs (albz#328)
-
-* Wed Nov 09 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-2
-- Add stream dnf variable for CentOS SIG repos compatibility
-
-* Mon Nov 07 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.7-1
-- 8.7 stable release
-- Add SAP and SAPHANA repos
-
-* Wed Jun 22 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-2
-- Add more compatibility variables to /etc/os-release
-
-* Thu May 19 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-1
-- Bump release
-
-* Tue May 10 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.1
-- 8.6 stable release
-
-* Thu Mar 31 2022 Andrew Lukoshko <alukoshko@almalinux.org> - 8.6-0.0
-- 8.6 beta release
-- Add RT and NFV repos for x86_64
-
-* Tue Dec 28 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1.1
-- Add RS repo
-
-* Thu Oct 07 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.5-1
-- 8.5 beta release
-
-* Thu Jul 29 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-3
-- disable fastestmirror dnf plugin for all repos
-
-* Thu May 20 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-2
-- 8.4 stable release
-- Disable PowerTools repo by default and move it to separate file
-
-* Fri Apr 16 2021 Andrew Lukoshko <alukoshko@almalinux.org> - 8.4-1
-- 8.4 beta release
-
-* Wed Mar 24 2021 Andrei Lukoshko <alukoshko@almalinux.org> - 8.3-4
-- 8.3 stable release
-
-* Wed Feb 10 2021 Andrei Lukoshko <alukoshko@cloudlinux.com> - 8.3-3
-- Switch repos to mirrorlists and enable fastestmirror plugin
-- Use full release version for ALMALINUX_MANTISBT_PROJECT_VERSION
-- Add HighAvailability repo
-
-* Wed Jan 27 2021 Anatholy Scryabin <ascryabin@cloudlinux.com> - 8.3-2
-- Initial build for AlmaLinux

almalinux-resilientstorage.repo

@@ -1,5 +1,3 @@
-# almalinux-resilientstorage.repo
-
 [resilientstorage]
 name=AlmaLinux $releasever - ResilientStorage
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
@@ -7,22 +5,26 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage
 enabled=0
 gpgcheck=1
 countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[resilientstorage-debuginfo]
+name=AlmaLinux $releasever - ResilientStorage - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
 [resilientstorage-source]
-name=AlmaLinux $releasever - ResilientStorage Source
+name=AlmaLinux $releasever - ResilientStorage - Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/Source/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
-
+metadata_expire=86400
-## Debuginfo
+enabled_metadata=0
-[resilientstorage-debuginfo]
-name=AlmaLinux $releasever - ResilientStorage debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/resilientstorage-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/ResilientStorage/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux-rt.repo

@@ -1,27 +1,30 @@
-# almalinux-rt.repo
-
 [rt]
-name=AlmaLinux $releasever - Real Time
+name=AlmaLinux $releasever - RT
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/RT/$basearch/os/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+countme=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[rt-debuginfo]
+name=AlmaLinux $releasever - RT - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/RT/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
 [rt-source]
-name=AlmaLinux $releasever - Real Time Sources
+name=AlmaLinux $releasever - RT - Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/RT/Source/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
-
+metadata_expire=86400
-## Debuginfo
+enabled_metadata=0
-[rt-debuginfo]
-name=AlmaLinux $releasever - Real Time Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/rt-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/RT/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux-sap.repo

@@ -1,5 +1,3 @@
-# almalinux-sap.repo
-
 [sap]
 name=AlmaLinux $releasever - SAP
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap
@@ -7,22 +5,26 @@ mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap
 enabled=0
 gpgcheck=1
 countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[sap-debuginfo]
+name=AlmaLinux $releasever - SAP - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/SAP/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
 [sap-source]
-name=AlmaLinux $releasever - SAP Sources
+name=AlmaLinux $releasever - SAP - Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/SAP/Source/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
-
+metadata_expire=86400
-## Debuginfo
+enabled_metadata=0
-[sap-debuginfo]
-name=AlmaLinux $releasever - SAP Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/sap-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/SAP/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux-saphana.repo

@@ -1,28 +1,30 @@
-# almalinux-saphana.repo
-
 [saphana]
-name=AlmaLinux $releasever - SAP HANA
+name=AlmaLinux $releasever - SAPHANA
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana
 # baseurl=https://repo.almalinux.org/almalinux/$releasever/SAPHANA/$basearch/os/
 enabled=0
 gpgcheck=1
 countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
+
+[saphana-debuginfo]
+name=AlmaLinux $releasever - SAPHANA - Debug
+mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-debug
+# baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/debug/$basearch/
+enabled=0
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
+metadata_expire=86400
+enabled_metadata=0
 
-## Sources
 [saphana-source]
-name=AlmaLinux $releasever - SAP HANA Sources
+name=AlmaLinux $releasever - SAPHANA - Source
 mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-source
 # baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/Source/
 enabled=0
 gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-10
-
+metadata_expire=86400
-## Debuginfo
+enabled_metadata=0
-[saphana-debuginfo]
-name=AlmaLinux $releasever - SAP HANA Debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/saphana-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/SAPHANA/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux

almalinux.repo

@@ -1,78 +0,0 @@
-# almalinux.repo
-
-[baseos]
-name=AlmaLinux $releasever - BaseOS
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/BaseOS/$basearch/os/
-enabled=1
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[appstream]
-name=AlmaLinux $releasever - AppStream
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/AppStream/$basearch/os/
-enabled=1
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[extras]
-name=AlmaLinux $releasever - Extras
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras
-# baseurl=https://repo.almalinux.org/almalinux/$releasever/extras/$basearch/os/
-enabled=1
-gpgcheck=1
-countme=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Sources
-[baseos-source]
-name=AlmaLinux $releasever - BaseOS Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[appstream-source]
-name=AlmaLinux $releasever - AppStream Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[extras-source]
-name=AlmaLinux $releasever - Extras Source
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-source
-# baseurl=https://repo.almalinux.org/vault/$releasever/extras/Source/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-## Debuginfo
-[baseos-debuginfo]
-name=AlmaLinux $releasever - BaseOS debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/baseos-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/BaseOS/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[appstream-debuginfo]
-name=AlmaLinux $releasever - AppStream debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/appstream-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/AppStream/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
-
-[extras-debuginfo]
-name=AlmaLinux $releasever - Extras debuginfo
-mirrorlist=https://mirrors.almalinux.org/mirrorlist/$releasever/extras-debuginfo
-# baseurl=https://repo.almalinux.org/vault/$releasever/extras/debug/$basearch/
-enabled=0
-gpgcheck=1
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux