From edb30b6425528a24bc8d2bb52be9f5c06a867e97 Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Mon, 12 Aug 2019 17:37:10 +0200 Subject: [PATCH] Revert "pesign-test-app fails to build from source: https://bugzilla.redhat.com/show_bug.cgi?id=1675654" This reverts commit aa2e483b93f44aee05ad3242063d77794786959d. References: https://pagure.io/releng/issue/8618 Signed-off-by: Igor Gnatenko --- .gitignore | 2 + dead.package | 1 - pesign-test-app.spec | 133 +++++++++++++++++++++++++++++++++++++++++++ sources | 1 + 4 files changed, 136 insertions(+), 1 deletion(-) create mode 100644 .gitignore delete mode 100644 dead.package create mode 100644 pesign-test-app.spec create mode 100644 sources diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..64f578d --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +pesign-test-app-* +clog diff --git a/dead.package b/dead.package deleted file mode 100644 index 9ddffa5..0000000 --- a/dead.package +++ /dev/null @@ -1 +0,0 @@ -pesign-test-app fails to build from source: https://bugzilla.redhat.com/show_bug.cgi?id=1675654 diff --git a/pesign-test-app.spec b/pesign-test-app.spec new file mode 100644 index 0000000..19db7d3 --- /dev/null +++ b/pesign-test-app.spec @@ -0,0 +1,133 @@ +%trace + +Summary: Simple pesign test target +Name: pesign-test-app +Version: 5 +Release: 11%{?dist} +License: GPLv2 +URL: https://github.com/vathpela/pesign-test-app +BuildRequires: gcc +BuildRequires: acl +BuildRequires: gnu-efi, gnu-efi-devel +BuildRequires: pesign >= 0.104-1 +ExclusiveArch: i686 x86_64 ia64 aarch64 + +# pesign-test-app generates no binaries that run under the installed OS, so +# debuginfo is useless +%global debug_package %{nil} + +# there is no tarball at github, of course. To get this version do: +# git clone https://github.com/vathpela/pesign-test-app.git +# git checkout %%{version} +Source0: pesign-test-app-%{version}.tar.bz2 + +%description +This package contains a very simple UEFI application that effectively does +nothing. The entire purpose of this is to provide a safe app to be signed, +so that we don't have to build large applications in order to test that +deployments of new pesign versions into build infrastructure have succeeded. + +%prep +%setup -q + +%build +make LIBDIR=%{_libdir} DATADIR=%{_datadir} +cp %{name}.efi %{name}-unsigned.efi +id +ls -ld /var/run/pesign || : +getfacl /var/run/pesign || : +ls -l /var/run/pesign/socket || : +getfacl /var/run/pesign/socket || : + +%dump +%pesign -s -i %{name}-unsigned.efi -o %{name}-signed.efi + +%install +rm -rf %{buildroot} +mkdir -p %{buildroot}/%{_libdir} +make LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} DATADIR=%{_datadir} \ + install +mv %{name}-signed.efi %{buildroot}/%{_datadir}/%{name}-%{version}/%{name}-signed.efi + +%check +ls -la /var/run/pesign || : +%ifarch x86_64 +pesign -l -i %{buildroot}/%{_datadir}/%{name}-%{version}/%{name}-signed.efi | grep -c -q "^Signing time: $(date +%%a\ %%b\ %%d,\ %%Y)$" +pesign -l -i %{buildroot}/%{_datadir}/%{name}-%{version}/%{name}-signed.efi | grep -c -q '^The signer.s common name is Fedora Secure Boot Signer$' +%endif + +%files +%doc README COPYING +%dir %{_datadir}/%{name}-%{version} +%{_datadir}/%{name}-%{version}/%{name}.efi +%{_datadir}/%{name}-%{version}/%{name}-signed.efi + +%changelog +* Fri Jul 26 2019 Fedora Release Engineering - 5-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Sat Feb 02 2019 Fedora Release Engineering - 5-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Fri Jul 13 2018 Fedora Release Engineering - 5-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Fri Feb 09 2018 Fedora Release Engineering - 5-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Tue Aug 15 2017 Peter Jones - 5-7 +- Trying an f27 build with pesign-0.112-20 on the host and in the chroot. + +* Tue Aug 15 2017 Peter Jones - 5-6 +- Try an f27 build... + +* Mon Aug 14 2017 Peter Jones - 5-5 +- Try this again. + +* Thu Aug 03 2017 Fedora Release Engineering - 5-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Thu Jul 27 2017 Fedora Release Engineering - 5-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Sat Feb 11 2017 Fedora Release Engineering - 5-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Wed Aug 17 2016 Peter Jones - 5-1 +- Update to pesign-test-app-5, which adds Aarch64 support. + +* Thu Feb 04 2016 Fedora Release Engineering - 0.4-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Thu Jun 18 2015 Fedora Release Engineering - 0.4-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Tue Feb 17 2015 Peter Jones - 0.4-14 +- Right hand. + +* Tue Feb 17 2015 Peter Jones - 0.4-13 +- Left hand. + +* Mon Nov 10 2014 Peter Jones - 0.4-12 +- And the other shoe drops. + +* Mon Nov 10 2014 Peter Jones - 0.4-11 +- I bet you don't know why this is getting built now. + +* Sun Aug 17 2014 Fedora Release Engineering - 0.4-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 0.4-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Wed Aug 28 2013 Peter Jones - 0.4-4 +- Rebuilding to make sure bkernel01 is working right + +* Wed May 22 2013 Peter Jones - 0.4-2 +- Add %%check + +* Tue May 21 2013 Peter Jones - 0.4-1 +- Make it build on i686. + +* Tue May 21 2013 Peter Jones - 0.3-1 +- First attempt. diff --git a/sources b/sources new file mode 100644 index 0000000..0350981 --- /dev/null +++ b/sources @@ -0,0 +1 @@ +0db174239a2532a9485b6b5623ab3cb2 pesign-test-app-5.tar.bz2