|
|
|
|
@ -54,7 +54,7 @@
|
|
|
|
|
Summary: Firmware update daemon
|
|
|
|
|
Name: fwupd
|
|
|
|
|
Version: 1.8.16
|
|
|
|
|
Release: 1%{?dist}
|
|
|
|
|
Release: 1%{?dist}.inferit
|
|
|
|
|
License: LGPLv2+
|
|
|
|
|
URL: https://github.com/fwupd/fwupd
|
|
|
|
|
Source0: http://people.freedesktop.org/~hughsient/releases/%{name}-%{version}.tar.xz
|
|
|
|
|
@ -76,12 +76,9 @@ Source20: http://people.redhat.com/rhughes/dbx/DBXUpdate-20230509-aa64.cab
|
|
|
|
|
Source21: http://people.redhat.com/rhughes/dbx/DBXUpdate-20230509-ia32.cab
|
|
|
|
|
Source22: http://people.redhat.com/rhughes/dbx/DBXUpdate-20230509-x64.cab
|
|
|
|
|
|
|
|
|
|
# these are numbered high just to keep them wildly away from colliding with
|
|
|
|
|
# the real package sources, in order to reduce churn.
|
|
|
|
|
Source300: redhatsecurebootca3.cer
|
|
|
|
|
Source301: redhatsecureboot301.cer
|
|
|
|
|
Source500: redhatsecurebootca5.cer
|
|
|
|
|
Source503: redhatsecureboot503.cer
|
|
|
|
|
# MSVSphere secureboot certificates
|
|
|
|
|
Source1000: spheresecurebootca.cer
|
|
|
|
|
Source1001: spheresecureboot001.cer
|
|
|
|
|
|
|
|
|
|
BuildRequires: gettext
|
|
|
|
|
BuildRequires: glib2-devel >= %{glib2_version}
|
|
|
|
|
@ -248,11 +245,11 @@ cd -
|
|
|
|
|
-Dplugin_tpm=enabled \
|
|
|
|
|
-Defi_os_dir=%{efi_vendor} \
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_id="rhel" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_summary="Red Hat Enterprise Linux" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_id="msvsphere" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_summary="MSVSphere" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_pkgname="%{name}" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_version="%{version}" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_url="mail:secalert@redhat.com" \
|
|
|
|
|
-Dfwupd-efi:efi_sbat_distro_url="mailto:security@msvsphere-os.ru" \
|
|
|
|
|
-Dfwupd-efi:efi-libdir="/usr/lib64" \
|
|
|
|
|
%endif
|
|
|
|
|
%else
|
|
|
|
|
@ -306,8 +303,7 @@ install \
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
%global efiarch x64
|
|
|
|
|
%global fwup_efi_fn $RPM_BUILD_ROOT%{_libexecdir}/fwupd/efi/fwupd%{efiarch}.efi
|
|
|
|
|
%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp -a %{SOURCE300} -c %{SOURCE301} -n redhatsecureboot301
|
|
|
|
|
%pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed -a %{SOURCE500} -c %{SOURCE503} -n redhatsecureboot503
|
|
|
|
|
%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.signed -a %{SOURCE1000} -c %{SOURCE1001} -n spheresecureboot001
|
|
|
|
|
rm -fv %{fwup_efi_fn}.tmp
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
@ -490,6 +486,10 @@ done
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Tue Oct 10 2023 Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 1.8.16-1.inferit
|
|
|
|
|
- Modified to use MSVSphere Secure Boot certificates
|
|
|
|
|
- Rebuilt for MSVSphere 9.3
|
|
|
|
|
|
|
|
|
|
* Fri Jun 09 2023 Richard Hughes <richard@hughsie.com> 1.8.16-1
|
|
|
|
|
- Update to latest stable upstream version.
|
|
|
|
|
- Resolves: rhbz#2209944
|
|
|
|
|
|
