- Use AlmaLinux cert

- Add conflicts to old shim

SOURCES/grub.macros

@@ -287,6 +287,11 @@ Requires:	%{name}-tools-extra = %{evr}				\
 Requires:	%{name}-tools = %{evr}					\
 Requires:	%{efi_esp_dir}/shim%%(echo %{1} | cut -d- -f2).efi	\
 Provides:	%{name}-efi = %{evr}					\
+Provides:	almalinux(grub2-sig-key) = 202303				\
+%{expand:%%ifarch x86_64						\
+Conflicts:	shim-x64 <= 15.6-1.el8.alma					\
+Conflicts:	shim-ia32 <= 15.6-1.el8.alma				\
+%%endif}										\
 %{?legacy_provides:Provides:	%{name} = %{evr}}			\
 %{-o:Obsoletes:	%{name}-efi < %{evr}}					\
 									\

SPECS/grub2.spec

@@ -11,7 +11,7 @@
 Name:		grub2
 Epoch:		1
 Version:	2.02
-Release:	142%{?dist}.3.alma
+Release:	142%{?dist}.3.alma.1
 Summary:	Bootloader with support for Linux, Multiboot and more
 Group:		System Environment/Base
 License:	GPLv3+
@@ -28,7 +28,7 @@ Source6:	gitignore
 Source8:	strtoull_test.c
 Source9:	20-grub.install
 Source12:	99-grub-mkconfig.install
-Source13:	clsecureboot001.cer
+Source13:	almalinuxsecurebootca0.cer
 Source19:	sbat.csv.in
 
 %include %{SOURCE1}
@@ -36,16 +36,16 @@ Source19:	sbat.csv.in
 %if 0%{with_efi_arch}
 %define old_sb_ca	%{SOURCE13}
 %define old_sb_cer	%{SOURCE13}
-%define old_sb_key	clsecureboot001
+%define old_sb_key	almalinuxsecurebootca0
 %define sb_ca		%{SOURCE13}
 %define sb_cer		%{SOURCE13}
-%define sb_key		clsecureboot001
+%define sb_key		almalinuxsecurebootca0
 %endif
 
 %ifarch ppc64le
 %define old_sb_cer	%{SOURCE13}
 %define sb_cer		%{SOURCE13}
-%define sb_key		clsecureboot001
+%define sb_key		almalinuxsecurebootca0
 %endif
 
 # AlmaLinux: keep upstream EVR for RHEL SBAT entry