AlmaLinux change: Use AlmaLinux SB

.gitignore

@@ -5,4 +5,3 @@
 /fwupd-efi-1.4.tar.xz
 /fwupd-efi-1.5.tar.xz
 /fwupd-efi-1.6.tar.xz
-/fwupd-efi-1.8.tar.gz

fwupd-efi.spec

@@ -1,20 +1,15 @@
+%global efi_vendor almalinux
+%global efidir almalinux
+%global efi_esp_dir /boot/efi/EFI/%{efidir}
 %global debug_package %{nil}
 
-%define sb_ca		%{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer
-%define sb_cer		%{_datadir}/pki/sb-certs/secureboot-fwupd-%{_arch}.cer
-%if 0%{?centos}
-%define sb_key		centossecureboot803
-%else
-%define sb_key		redhatsecureboot803
-%endif
-
 Summary:   Firmware update EFI binaries
 Name:      fwupd-efi
-Version:   1.8
+Version:   1.6
 Release:   %autorelease
 License:   LGPL-2.1-or-later
 URL:       https://github.com/fwupd/fwupd-efi
-Source0:   https://github.com/fwupd/%{name}/archive/refs/tags/%{name}-%{version}.tar.gz
+Source0:   https://github.com/fwupd/fwupd-efi/releases/download/%{version}/%{name}-%{version}.tar.xz
 
 # these are the only architectures supporting UEFI UpdateCapsule
 ExclusiveArch: x86_64 aarch64
@@ -24,7 +19,6 @@ BuildRequires: meson
 BuildRequires: gnu-efi-devel >= 3.0.18
 BuildRequires: pesign >= 113-20
 BuildRequires: python3-pefile
-BuildRequires: system-sb-certs
 
 %description
 fwupd is a project to allow updating device firmware, and this package provides
@@ -36,19 +30,11 @@ the EFI binary that is used for updating using UpdateCapsule.
 %build
 
 %meson \
-    -Dgenpeimg=disabled \
-%if 0%{?centos}
-    -Defi_sbat_distro_id="centos" \
-    -Defi_sbat_distro_summary="The CentOS Project" \
-    -Defi_sbat_distro_url="https://www.centos.org/" \
-%else
-    -Defi_sbat_distro_id="rhel" \
-    -Defi_sbat_distro_summary="Red Hat Enterprise Linux" \
-    -Defi_sbat_distro_url="mailto:secalert@redhat.com" \
-%endif
-    -Dgenpeimg=disabled \
+    -Defi_sbat_distro_id="almalinux" \
+    -Defi_sbat_distro_summary="AlmaLinux" \
     -Defi_sbat_distro_pkgname="%{name}" \
-    -Defi_sbat_distro_version="%{version}-%{release}"
+    -Defi_sbat_distro_version="%{version}-%{release}" \
+    -Defi_sbat_distro_url="https://git.almalinux.org/rpms/%{name}"
 
 %meson_build
 
@@ -63,17 +49,14 @@ the EFI binary that is used for updating using UpdateCapsule.
 %global efiarch aa64
 %endif
 %global fwup_efi_fn $RPM_BUILD_ROOT%{_libexecdir}/fwupd/efi/fwupd%{efiarch}.efi
+%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp
 %define __pesign_client_cert fwupd-signer
-%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.signed -a %{sb_ca} -c %{sb_cer} -n %{sb_key}
+%pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed
 rm -vf %{fwup_efi_fn}.tmp
 
-%check
-pesigcheck -i %{fwup_efi_fn}.signed -n0 -c %{sb_cer}
-
 %files
 %doc README.md AUTHORS
 %license COPYING
-%dir %{_libexecdir}/fwupd/efi
 %{_libexecdir}/fwupd/efi/*.efi
 %{_libexecdir}/fwupd/efi/*.efi.signed
 %{_libdir}/pkgconfig/fwupd-efi.pc

gating.yaml

@@ -4,4 +4,3 @@ product_versions:
 decision_context: osci_compose_gate
 rules:
   - !PassingTestCaseRule {test_case_name: kernel-qe.kernel-ci.hardware-fwupd.tier0.functional}
-  - !PassingTestCaseRule {test_case_name: desktop-qe.desktop-ci.tier1-gating.functional}

sources

@@ -1 +1 @@
-SHA512 (fwupd-efi-1.8.tar.gz) = bd361eb60397850af025228ea9f4efbf289f8e1c2612f240ae4c5ffee8caea15c31aa0748c06e57b28a7f38b8c2708147a228d8a99077798f4435436f12e092e
+SHA512 (fwupd-efi-1.6.tar.xz) = 37d3c1348bdead620e626a3e602dc6cd774c47d24ca18a3bf6aee071300d658bc4d37e6ec74fcd20f9b345141d69ea3343d44b9408af4759ad65ef10b72ead69