From a99ce02982d6f2ea9c9349b6482e6e535970ece6 Mon Sep 17 00:00:00 2001 From: Benjamin Sherman Date: Mon, 17 Nov 2025 06:42:30 +0000 Subject: [PATCH 1/5] feat: add ublue-os-ucore-addons package --- .../ublue-os-ucore-addons.spec | 35 +++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec diff --git a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec new file mode 100644 index 000000000..265c005c6 --- /dev/null +++ b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec @@ -0,0 +1,35 @@ +Name: ublue-os-ucore-addons +Version: 0.1 +Release: 1%{?dist} +Summary: Signing key for ucore kmods + +License: MIT +URL: https://github.com/ublue-os/packages + +BuildArch: noarch +Supplements: mokutil policycoreutils + +Source0: https://github.com/ublue-os/akmods/raw/refs/heads/main/certs/public_key.der + +%description +Adds the signing key for importing with mokutil to enable secure boot for kernel modules. + +%prep +%setup -q -c -T + + +%build +# Have different name for *.der in case kmodgenca is needed for creating more keys +install -Dm0644 %{SOURCE0} %{buildroot}%{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der + +install -Dm0644 %{buildroot}%{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der %{buildroot}%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der + +%files +%attr(0644,root,root) %{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der +%attr(0644,root,root) %{_sysconfdir}/pki/akmods/certs/akmods-ublue.der + +%changelog +* Mon Nov 17 2025 Benjamin Sherman - 0.2 +- Update rpm spec file metadata +* Sat Dec 30 2023 Benjamin Sherman - 0.1 +- Add key for enrolling ucore kernel modules for secure boot From 5679bf7a56d20f85315651172fdb2110ef947a00 Mon Sep 17 00:00:00 2001 From: Benjamin Sherman Date: Mon, 17 Nov 2025 06:52:24 +0000 Subject: [PATCH 2/5] chore: bump version --- packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec index 265c005c6..153a85128 100644 --- a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec +++ b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec @@ -1,5 +1,5 @@ Name: ublue-os-ucore-addons -Version: 0.1 +Version: 0.2 Release: 1%{?dist} Summary: Signing key for ucore kmods From ad56def2336fb5ff6176a2426628778957affd01 Mon Sep 17 00:00:00 2001 From: Benjamin Sherman Date: Mon, 17 Nov 2025 06:55:38 +0000 Subject: [PATCH 3/5] use install and %install --- packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec index 153a85128..7b362dd0f 100644 --- a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec +++ b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec @@ -18,11 +18,10 @@ Adds the signing key for importing with mokutil to enable secure boot for kernel %setup -q -c -T -%build +%install # Have different name for *.der in case kmodgenca is needed for creating more keys install -Dm0644 %{SOURCE0} %{buildroot}%{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der - -install -Dm0644 %{buildroot}%{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der %{buildroot}%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der +install -Dm0644 %{SOURCE0} %{buildroot}%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der %files %attr(0644,root,root) %{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der From 23160c80096d76f12206540f6285e8b1a29c0023 Mon Sep 17 00:00:00 2001 From: Benjamin Sherman Date: Mon, 17 Nov 2025 07:03:54 +0000 Subject: [PATCH 4/5] use what we know works --- packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec index 7b362dd0f..bb874de58 100644 --- a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec +++ b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec @@ -18,10 +18,11 @@ Adds the signing key for importing with mokutil to enable secure boot for kernel %setup -q -c -T -%install +%build # Have different name for *.der in case kmodgenca is needed for creating more keys install -Dm0644 %{SOURCE0} %{buildroot}%{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der -install -Dm0644 %{SOURCE0} %{buildroot}%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der + +install -Dm0644 %{buildroot}%{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der %{buildroot}%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der %files %attr(0644,root,root) %{_datadir}/ublue-os/%{_sysconfdir}/pki/akmods/certs/akmods-ublue.der @@ -29,6 +30,6 @@ install -Dm0644 %{SOURCE0} %{buildroot}%{_sysconfdir}/pki/akmods/certs/akmods-ub %changelog * Mon Nov 17 2025 Benjamin Sherman - 0.2 -- Update rpm spec file metadata +- Update package source and URL; move to COPR build * Sat Dec 30 2023 Benjamin Sherman - 0.1 - Add key for enrolling ucore kernel modules for secure boot From 10fd94ef2ce4918d55b7f804042ef75479c36170 Mon Sep 17 00:00:00 2001 From: Benjamin Sherman Date: Mon, 17 Nov 2025 07:07:32 +0000 Subject: [PATCH 5/5] use renovate for specific commit of source --- packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec index bb874de58..92e69bced 100644 --- a/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec +++ b/packages/ublue-os-ucore-addons/ublue-os-ucore-addons.spec @@ -9,7 +9,9 @@ URL: https://github.com/ublue-os/packages BuildArch: noarch Supplements: mokutil policycoreutils -Source0: https://github.com/ublue-os/akmods/raw/refs/heads/main/certs/public_key.der +# renovate: datasource=github-tags depName=ublue-os/akmods +%global commit_hash 4388220452a1b71892472bf23e4082bfd477c106 +Source0: https://github.com/ublue-os/akmods/raw/%{commit_hash}/certs/public_key.der %description Adds the signing key for importing with mokutil to enable secure boot for kernel modules.