rpms/s390utils
7
0
Fork 0
Code Issues Pull Requests Releases Activity

merge stage3 signing support from RHEL

Browse Source
This commit is contained in:
Dan Horák 2019-09-12 14:02:50 +02:00
parent 18c25ca8a6
commit 0379a19cd4
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
s390utils.spec
View File

@ -1,5 +1,10 @@
%define vipaver 2.1.0 %define vipaver 2.1.0
# secure boot support is for RHEL only
%if 0%{?rhel} >= 8
%global signzipl 1
%endif
Name: s390utils Name: s390utils
Summary: Utilities and daemons for IBM z Systems Summary: Utilities and daemons for IBM z Systems
Version: 2.11.0 Version: 2.11.0
@ -26,6 +31,10 @@ Source22: 20-zipl-kernel.install
Source23: 52-zipl-rescue.install Source23: 52-zipl-rescue.install
Source24: 91-zipl.install Source24: 91-zipl.install
%if 0%{?signzipl}
%define pesign_name redhatsecureboot302
%endif
# change the defaults to match Fedora environment # change the defaults to match Fedora environment
Patch0: s390-tools-zipl-invert-script-options.patch Patch0: s390-tools-zipl-invert-script-options.patch
Patch1: s390-tools-zipl-blscfg-rpm-nvr-sort.patch Patch1: s390-tools-zipl-blscfg-rpm-nvr-sort.patch
@ -80,6 +89,18 @@ make install \
DISTRELEASE=%{release} \ DISTRELEASE=%{release} \
V=1 V=1
# sign the stage3 bootloader
%if 0%{?signzipl}
if [ -x /usr/bin/rpm-sign ]; then
pushd %{buildroot}/lib/s390-tools/
rpm-sign --key "%{pesign_name}" --lkmsign stage3.bin --output stage3.signed
mv stage3.signed stage3.bin
popd
else
echo "rpm-sign not available, stage3 won't be signed"
fi
%endif
mkdir -p %{buildroot}{/boot,%{_udevrulesdir},%{_sysconfdir}/{profile.d,sysconfig},%{_prefix}/lib/modules-load.d} mkdir -p %{buildroot}{/boot,%{_udevrulesdir},%{_sysconfdir}/{profile.d,sysconfig},%{_prefix}/lib/modules-load.d}
install -p -m 644 zipl/boot/tape0.bin %{buildroot}/boot/tape0 install -p -m 644 zipl/boot/tape0.bin %{buildroot}/boot/tape0
install -p -m 755 %{SOURCE5} %{buildroot}%{_sbindir} install -p -m 755 %{SOURCE5} %{buildroot}%{_sbindir}