From 9dfdddd33a312f5488607adae76fe74007d5a8b3 Mon Sep 17 00:00:00 2001 From: Peter Jones Date: Tue, 7 Jul 2020 13:36:52 -0400 Subject: [PATCH] Disable the pesign-authorize call in posttrans, until we can figure out a better way to deal with that in the fedora kernel builder chroot setup Signed-off-by: Peter Jones --- pesign.spec | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/pesign.spec b/pesign.spec index 5c948c8..82923b5 100644 --- a/pesign.spec +++ b/pesign.spec @@ -3,7 +3,7 @@ Name: pesign Summary: Signing utility for UEFI binaries Version: 113 -Release: 5%{?dist} +Release: 7%{?dist} License: GPLv2 URL: https://github.com/vathpela/pesign @@ -119,7 +119,13 @@ exit 0 %posttrans certutil -d %{_sysconfdir}/pki/pesign/ -X -L > /dev/null -%{_libexecdir}/pesign/pesign-authorize + +# this is disabled currently because it breaks the fedora kernel build root +# generation - because we don't currently have a good way of populating +# /etc/pesign/{users,groups} before the buildroot is installed, or +# populating them and re-running pesign-authorize afterwards but before the +# package build of e.g. kernel +#%%{_libexecdir}/pesign/pesign-authorize %endif %files @@ -155,6 +161,10 @@ certutil -d %{_sysconfdir}/pki/pesign/ -X -L > /dev/null %{python3_sitelib}/mockbuild/plugins/pesign.* %changelog +* Tue Jul 07 2020 Peter Jones - 113-6 +- Disable the pesign-authorize call in posttrans, until we can figure out a + better way to deal with that in the fedora kernel builder chroot setup + * Tue Jul 07 2020 Peter Jones - 113-5 - Make pesign require nss-tools for the posttrans scriptlet - Move most of macros.pesign to /usr/libexec/pesign/pesign-rpmbuild-helper