Commit Graph

16 Commits

Author SHA1 Message Date
Tony Camuso
b51354ee8c Backport upstream fixes and updates for 1.11.1-1 2023-05-19 10:14:46 +00:00
Tony Camuso
0891de6e6c Fix install and erase issues and bump to 1.10.5-2
- The install scriptlet in %post was choosing the first grub.cfg
  file it encountered, which was /boot/efi/EFI/redhat/grub.cfg.
  This is a stub that defines grub boot disk UUID necessary for
  proper grubenv setup, and it must not be overwritten or changed.
- Modify the scriptlet to target /boot/grub2/grub.cfg
- Additionally, remove any wrongly created /boot/grub2/x86_64-efi
  directory and recreate the correct /boot/efi/EFI/redhat/grub.cfg
  stub file.
- Added a %postun section to cleanup when removing tboot with
  dnf erase.
- Thanks to Lenny Szubowicz for the bash code to recreate the
  /boot/efi/EFI/redhat/grub.cfg stub file.

Resolves: rhbz#2112236

Signed-off-by: Tony Camuso <tcamuso@redhat.com>
2022-09-14 16:09:45 -04:00
Tony Camuso
26f7e15a83 Upgrade to tboot-1.10.5-1 for fixes and updates
- Added a Requires line to install grub2-efi-x64-modules
- Added a scriptlet to the tboot.spec file to automatically install
  grub2-efi-x64-modules and move them to the correct directory.
- Removed three patches that are no longer needed.
- Added two patches from upstream, one for a fix, the other cosemetic.
- Resolves: rhbz#2041766
  Resolves: rhbz#2040083

Signed-off-by: Tony Camuso <tcamuso@redhat.com>
2022-05-04 12:44:10 -04:00
Tony Camuso
ef23ce2f9a Use sha256 as default hashing algorithm
new file:   0003-Use-sha256-as-default-hashing-algorithm.patch
modified:   tboot.spec
Bump to 1.10.2-6 for rebuild.
Resolves: rhbz#1935448
2021-09-30 10:40:04 -04:00
Mohan Boddu
860105e1bd Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 01:03:16 +00:00
Tony Camuso
715d5bbe85 Add onboarding test config for tboot in CI
From Miroslave Vadkerti:
  Onboarding tests to RHEL9 in BaseOS CI requires action, adding
  test configuration in our "dispatcher" configuration for RHEL9:
  https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
  Test config was added for tboot in the following MR.
  https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
  Bumped to 1.10.2-4 for rebuild.
Resolves: rhbz#1922002

Signed-off-by: Tony Camuso <tcamuso@redhat.com>
2021-07-28 11:04:01 -04:00
Tony Camuso
152d9753e1 Assure that the build is compliant with RHEL security rules
Add the %{optflags} and %{build_ldflags} macros to get the standard
build flags to meet RHEL requirements.
Bump the nvr to 1.10.2-3.
Resolves: rhbz#1922002
2021-07-27 10:16:09 -04:00
Tony Camuso
973429b029 Bump the nvr to 1.10.2-2 to rebuild with gating.yaml
Also did some reformatting of previous entry in tboot.spec log for
consistency.
Resolves: rhbz#1922002
2021-07-23 07:43:47 -04:00
Tony Camuso
57f0c72c75 Upgrade to 1.10.2 and remove trousers dependency
Also added second patch to remove call to EVP_PKEY_set_alias_type
for SSL3 compliance.

Resolves: rhbz#1922002
Resolves: rhbz#1870520
Resolves: rhbz#1927374
Signed-off-by: Tony Camuso <tcamuso@redhat.com>
2021-06-23 09:04:39 -04:00
Mohan Boddu
dce2b25ea1 Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-06-16 03:40:07 +00:00
Tony Camuso
68d1003c14 Add -Wno-error=deprecated-declarations to the Config.mk patch
tboot.spec bumped to 1.9.11-8
Resolves: rhbz#1958031

Signed-off-by: Tony Camuso <tcamuso@redhat.com>
2021-06-07 09:14:39 -04:00
Mohan Boddu
e013bfad08 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 05:50:23 +00:00
DistroBaker
95b24c614f Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/tboot.git#63211cbd6aeccaaef497db35c45f2c538ec6b844
2021-02-05 07:37:02 +01:00
DistroBaker
41a025ef5d Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/tboot.git#f2bc8403f417e08982495461e83baaefc5811aab
2020-10-30 16:23:32 +00:00
DistroBaker
1ce24d40b1 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/tboot.git#383268517c43ba20e1f607452331b4f52cde8e42
2020-10-30 03:16:56 +01:00
Troy Dawson
dc0da588b7 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/tboot#ab20189ebbca0e3533e268ae1534701c1fa6674c
2020-10-20 08:25:04 -07:00