Add pesigcheck for SB signing on UEFI

Signed-off-by: Marta Lewandowska <mlewando@redhat.com>
This commit is contained in:
Marta Lewandowska 2026-07-17 12:46:54 +02:00
parent e6a061bdb0
commit 505400f4a8

View File

@ -17,7 +17,7 @@
Name: grub2
Epoch: 1
Version: 2.12
Release: 51%{?dist}
Release: 52%{?dist}
Summary: Bootloader with support for Linux, Multiboot and more
License: GPL-3.0-or-later
URL: http://www.gnu.org/software/grub/
@ -341,6 +341,16 @@ ln -s ../grub2-systemd-integration.service \
%undefine buildsubdir
%check
%if 0%{with_efi_arch}
pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubefiname} -n0 -c %{sb_cer}
pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubeficdname} -n0 -c %{sb_cer}
%endif
%if 0%{with_alt_efi_arch}
pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubaltefiname} -n0 -c %{sb_cer}
pesigcheck -i $RPM_BUILD_ROOT%{efi_esp_dir}/%{grubalteficdname} -n0 -c %{sb_cer}
%endif
%pre tools
if [ -f /boot/grub2/user.cfg ]; then
if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then
@ -596,6 +606,10 @@ fi
%endif
%changelog
* Fri Jul 17 2026 Marta Lewandowska <mlewando@redhat.com> - 2.12-52
- Add pesigcheck to spec
- Resolves: #RHEL-188361
* Thu Jul 02 2026 Nicolas Frayer <nfrayer@redhat.com> - 2.12-51
- ieee1275/powerpc: implements fibre channel discovery for ofpathname
- Resolves: #RHEL-102160