|
|
|
|
Summary: Simple pesign test target
|
|
|
|
|
Name: pesign-test-app
|
|
|
|
|
Version: 0.4
|
|
|
|
|
Release: 2%{?dist}
|
|
|
|
|
Group: Development/System
|
|
|
|
|
License: GPLv2
|
|
|
|
|
URL: https://github.com/vathpela/pesign-test-app
|
|
|
|
|
BuildRequires: gnu-efi
|
|
|
|
|
BuildRequires: pesign >= 0.104-1
|
|
|
|
|
ExclusiveArch: i686 x86_64 ia64
|
|
|
|
|
|
|
|
|
|
# pesign-test-app generates no binaries that run under the installed OS, so
|
|
|
|
|
# debuginfo is useless
|
|
|
|
|
%global debug_package %{nil}
|
|
|
|
|
|
|
|
|
|
# there is no tarball at github, of course. To get this version do:
|
|
|
|
|
# git clone https://github.com/vathpela/pesign-test-app.git
|
|
|
|
|
# git checkout %%{version}
|
|
|
|
|
Source0: pesign-test-app-%{version}.tar.bz2
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
This package contains a very simple UEFI application that effectively does
|
|
|
|
|
nothing. The entire purpose of this is to provide a safe app to be signed,
|
|
|
|
|
so that we don't have to build large applications in order to test that
|
|
|
|
|
deployments of new pesign versions into build infrastructure have succeeded.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
make LIBDIR=%{_libdir} DATADIR=%{_datadir}
|
|
|
|
|
cp %{name}.efi %{name}-unsigned.efi
|
|
|
|
|
%pesign -s -i %{name}-unsigned.efi -o %{name}-signed.efi
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
|
mkdir -p %{buildroot}/%{_libdir}
|
|
|
|
|
make LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} DATADIR=%{_datadir} \
|
|
|
|
|
install
|
|
|
|
|
mv %{name}-signed.efi %{buildroot}/%{_datadir}/%{name}-%{version}/%{name}-signed.efi
|
|
|
|
|
|
|
|
|
|
%check
|
|
|
|
|
%ifarch x86_64
|
|
|
|
|
pesign -l -i %{buildroot}/%{_datadir}/%{name}-%{version}/%{name}-signed.efi | grep -c -q "^Signing time: $(date +%%a\ %%b\ %%d,\ %%Y)$"
|
|
|
|
|
pesign -l -i %{buildroot}/%{_datadir}/%{name}-%{version}/%{name}-signed.efi | grep -c -q '^The signer.s common name is Fedora Secure Boot Signer$'
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
%clean
|
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%defattr(-,root,root,-)
|
|
|
|
|
%doc README COPYING
|
|
|
|
|
%dir %{_datadir}/%{name}-%{version}
|
|
|
|
|
%{_datadir}/%{name}-%{version}/%{name}.efi
|
|
|
|
|
%{_datadir}/%{name}-%{version}/%{name}-signed.efi
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Wed May 22 2013 Peter Jones <pjones@redhat.com> - 0.4-2
|
|
|
|
|
- Add %%check
|
|
|
|
|
|
|
|
|
|
* Tue May 21 2013 Peter Jones <pjones@redhat.com> - 0.4-1
|
|
|
|
|
- Make it build on i686.
|
|
|
|
|
|
|
|
|
|
* Tue May 21 2013 Peter Jones <pjones@redhat.com> - 0.3-1
|
|
|
|
|
- First attempt.
|
