Modified to use MSVSphere Secure Boot certificates

i9 changed/i9/fwupd-1.7.9-1.el9.inferit
Eugene Zamriy 2 years ago
parent adac08eb50
commit f3678faf25
Signed by: ezamriy
GPG Key ID: 7EBF95C7DCFA496C

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

@ -45,7 +45,7 @@
Summary: Firmware update daemon Summary: Firmware update daemon
Name: fwupd Name: fwupd
Version: 1.7.9 Version: 1.7.9
Release: 1%{?dist} Release: 1%{?dist}.inferit
License: LGPLv2+ License: LGPLv2+
URL: https://github.com/fwupd/fwupd URL: https://github.com/fwupd/fwupd
Source0: http://people.freedesktop.org/~hughsient/releases/%{name}-%{version}.tar.xz Source0: http://people.freedesktop.org/~hughsient/releases/%{name}-%{version}.tar.xz
@ -58,12 +58,9 @@ Source13: http://people.redhat.com/rhughes/dbx/DBXUpdate-20200729-aa64.cab
Source14: http://people.redhat.com/rhughes/dbx/DBXUpdate-20200729-ia32.cab Source14: http://people.redhat.com/rhughes/dbx/DBXUpdate-20200729-ia32.cab
Source15: http://people.redhat.com/rhughes/dbx/DBXUpdate-20200729-x64.cab Source15: http://people.redhat.com/rhughes/dbx/DBXUpdate-20200729-x64.cab
# these are numbered high just to keep them wildly away from colliding with # MSVSphere secureboot certificates
# the real package sources, in order to reduce churn. Source1000: spheresecurebootca.cer
Source300: redhatsecurebootca3.cer Source1001: spheresecureboot001.cer
Source301: redhatsecureboot301.cer
Source500: redhatsecurebootca5.cer
Source503: redhatsecureboot503.cer
BuildRequires: gettext BuildRequires: gettext
BuildRequires: glib2-devel >= %{glib2_version} BuildRequires: glib2-devel >= %{glib2_version}
@ -224,11 +221,11 @@ tar xfvs %{SOURCE2} -C subprojects/fwupd-efi --strip-components=1
-Dplugin_uefi_pk=true \ -Dplugin_uefi_pk=true \
-Defi_os_dir=%{efi_vendor} \ -Defi_os_dir=%{efi_vendor} \
%ifarch x86_64 %ifarch x86_64
-Dfwupd-efi:efi_sbat_distro_id="rhel" \ -Dfwupd-efi:efi_sbat_distro_id="msvsphere" \
-Dfwupd-efi:efi_sbat_distro_summary="Red Hat Enterprise Linux" \ -Dfwupd-efi:efi_sbat_distro_summary="MSVSphere" \
-Dfwupd-efi:efi_sbat_distro_pkgname="%{name}" \ -Dfwupd-efi:efi_sbat_distro_pkgname="%{name}" \
-Dfwupd-efi:efi_sbat_distro_version="%{version}" \ -Dfwupd-efi:efi_sbat_distro_version="%{version}" \
-Dfwupd-efi:efi_sbat_distro_url="mail:secalert@redhat.com" \ -Dfwupd-efi:efi_sbat_distro_url="mailto:security@msvsphere.ru" \
-Dfwupd-efi:efi-libdir="/usr/lib64" \ -Dfwupd-efi:efi-libdir="/usr/lib64" \
%endif %endif
-Dplugin_tpm=true \ -Dplugin_tpm=true \
@ -277,9 +274,7 @@ install %{SOURCE10} %{SOURCE11} %{SOURCE12} %{SOURCE13} %{SOURCE14} %{SOURCE15}
%ifarch x86_64 %ifarch x86_64
%global efiarch x64 %global efiarch x64
%global fwup_efi_fn $RPM_BUILD_ROOT%{_libexecdir}/fwupd/efi/fwupd%{efiarch}.efi %global fwup_efi_fn $RPM_BUILD_ROOT%{_libexecdir}/fwupd/efi/fwupd%{efiarch}.efi
%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp -a %{SOURCE300} -c %{SOURCE301} -n redhatsecureboot301 %pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.signed -a %{SOURCE1000} -c %{SOURCE1001} -n spheresecureboot001
%pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed -a %{SOURCE500} -c %{SOURCE503} -n redhatsecureboot503
rm -fv %{fwup_efi_fn}.tmp
%endif %endif
mkdir -p --mode=0700 $RPM_BUILD_ROOT%{_localstatedir}/lib/fwupd/gnupg mkdir -p --mode=0700 $RPM_BUILD_ROOT%{_localstatedir}/lib/fwupd/gnupg
@ -537,8 +532,9 @@ done
%endif %endif
%changelog %changelog
* Wed Mar 15 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 1.7.9-1 * Mon Mar 27 2023 Eugene Zamriy <ezamriy@msvsphere.ru> - 1.7.9-1.inferit
- Rebuilt for MSVSphere 9.1. - Modified to use MSVSphere Secure Boot certificates
- Rebuilt for MSVSphere 9.1
* Mon Jul 25 2022 Richard Hughes <richard@hughsie.com> 1.7.8-1 * Mon Jul 25 2022 Richard Hughes <richard@hughsie.com> 1.7.8-1
- New upstream release - New upstream release

Loading…
Cancel
Save