Use AlmaLinux secureboot key

This commit is contained in:
eabdullin 2023-05-16 10:57:50 +03:00
parent 40a6d92f88
commit 58152561c0
3 changed files with 10 additions and 5 deletions

Binary file not shown.

Binary file not shown.

View File

@ -441,22 +441,22 @@ Source9: x509.genkey
# Name of the packaged file containing signing key
%ifarch ppc64le
%define signing_key_filename clsecureboot001.cer
%define signing_key_filename almalinuxsecurebootca0.cer
%endif
%ifarch s390x
%define signing_key_filename clsecureboot001.cer
%define signing_key_filename almalinuxsecurebootca0.cer
%endif
Source10: clsecureboot001.cer
Source10: almalinuxsecurebootca0.cer
%define secureboot_ca_0 %{SOURCE10}
%define secureboot_ca_1 %{SOURCE10}
%define secureboot_ca_2 %{SOURCE10}
%define secureboot_key_0 %{SOURCE10}
%define pesign_name_0 clsecureboot001
%define pesign_name_0 almalinuxsecurebootca0
%define secureboot_key_1 %{SOURCE10}
%define pesign_name_1 clsecureboot001
%define pesign_name_1 almalinuxsecurebootca0
Source17: mod-blacklist.sh
Source18: mod-sign.sh
@ -965,6 +965,11 @@ Summary: %{variant_summary}\
Group: System Environment/Kernel\
Provides: %{name}-%{?1:%{1}-}core-uname-r = %{KVERREL}%{?variant}%{?1:+%{1}}\
Provides: installonlypkg(kernel)\
%if "%{?1}" == ""\
Provides: almalinux(kernel-sig-key) = 202303\
Conflicts: shim-ia32 <= 15.6-1.el8.alma\
Conflicts: shim-x64 <= 15.6-1.el8.alma\
%endif\
%{expand:%%kernel_reqprovconf}\
%if %{?1:1} %{!?1:0} \
%{expand:%%kernel_meta_package %{?1:%{1}}}\