From: Don Zickus dzickus@redhat.com
Add system-sb-certs for RHEL-9
Copy the RHEL-9 signing requirement over to ARK. This change is wrapped with "{?rhel} && !{?eln}" to allow Fedora and ELN to continue using their signing technology.
The system-sb-certs is just a metapackage for either rhel-sb-certs or centos-sb-certs, depending on what is installed on your system.
Tested by building under koji eln successfully.
Signed-off-by: Don Zickus dzickus@redhat.com
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100755 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -654,6 +654,10 @@ BuildRequires: kabi-dw %if %{signkernel}%{signmodules} BuildRequires: openssl %if %{signkernel} +# ELN uses Fedora signing process, so exclude +%if 0%{?rhel} && !0%{?eln} +BuildRequires: system-sb-certs +%endif %ifarch x86_64 aarch64 BuildRequires: nss-tools BuildRequires: pesign >= 0.10-4
-- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1774
From: Don Zickus on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1774#note_9403758...
@hertonrk-rh @jmflinuxtx - is this a respectful way to wrap this buildreq?
From: Herton R. Krzesinski on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1774#note_9415432...
Don, needs to add centos to the mix, I think the right check here would be: ``` %if 0%{?rhel}%{?centos} && !0%{?eln} ```
From: Don Zickus on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1774#note_9415724...
Hmm, I remembered centos-stream, but forgot about centos.
I will push that update. Not sure if that change or just using '!{?fedora}' is easier.
kernel@lists.fedoraproject.org