Compare commits

...

10 Commits

Author SHA1 Message Date
openeuler-ci-bot
6211fb3cbd
!7 [sync] PR-4: 修改changelog
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2022-08-02 03:39:11 +00:00
z30023234
f0a8a75d27 Delete sensitive information
(cherry picked from commit 4c524f39e090c611d0d4e637c3d41c62f9236535)
2022-08-02 11:29:03 +08:00
openeuler-ci-bot
73d7596482
!5 [sync] PR-3: 新增支持DIM文件签名
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2022-07-28 11:52:16 +00:00
w00559322
2c37dae0be add support for DIM
(cherry picked from commit 350a28e60568eb2625682b5a3641aae18d10518e)
2022-07-28 09:56:17 +08:00
openeuler-ci-bot
08e7ddd0a3 !2 添加YAML文件
From: @caffeaulait
Reviewed-by: @zhujianwei001
Signed-off-by: @zhujianwei001
2020-09-28 09:41:42 +08:00
caffeaulait
e36cd1b7aa add yaml file 2020-09-27 10:27:34 +08:00
openeuler-ci-bot
af7306745b !1 Initial version
Merge pull request !1 from roberto.sassu/master
2020-08-03 16:24:33 +08:00
Roberto Sassu
9e019cf2b9 Update pesign-obs-integration.spec 2020-07-23 14:30:46 +02:00
Roberto Sassu
a84748da60 Update pesign-obs-integration.spec 2020-07-23 14:28:29 +02:00
Roberto Sassu
c39c9b74cc Remove Undefine-__brp_digest_list-in-pesign-repackage.spec..patch 2020-07-23 14:22:21 +02:00
4 changed files with 44 additions and 28 deletions

27
Add-support-for-DIM.patch Normal file
View File

@ -0,0 +1,27 @@
From 47d79f48c0f5d4b5ce02e33d54fb1954df41fb2f Mon Sep 17 00:00:00 2001
From: zhangyiru330 <zhangyiru3@huawei.com>
Date: Mon, 7 Mar 2022 14:32:49 +0800
Subject: [PATCH] Add support for DIM
---
pesign-repackage.spec.in | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
index 6dae3a9..8b4b550 100644
--- a/pesign-repackage.spec.in
+++ b/pesign-repackage.spec.in
@@ -138,6 +138,10 @@ for sig in "${sigs[@]}"; do
mkdir -p %buildroot/etc/ima/digest_lists.sig
cp $sig %buildroot/etc/ima/digest_lists.sig
;;
+ */etc/dim/digest_list/*)
+ mkdir -p %buildroot/etc/dim/digest_list
+ cp $sig %buildroot/etc/dim/digest_list
+ ;;
*.ko.sig)
/usr/lib/rpm/pesign/kernel-sign-file -i pkcs7 -s "$sig" sha256 "$cert" "$f"
;;
--
1.8.3.1

View File

@ -1,26 +0,0 @@
From b9006b66251441a10e1714e697cb45c2fb49a410 Mon Sep 17 00:00:00 2001
From: Roberto Sassu <roberto.sassu@huawei.com>
Date: Tue, 14 Jul 2020 17:11:10 +0200
Subject: [PATCH] Undefine __brp_digest_list in pesign-repackage.spec.in
---
pesign-repackage.spec.in | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
index 90ae17c..034f56c 100644
--- a/pesign-repackage.spec.in
+++ b/pesign-repackage.spec.in
@@ -174,7 +174,8 @@ popd
--directory=%buildroot "${rpms[@]}"
rpmbuild --define "%%buildroot %buildroot" --define "%%disturl $disturl" \
--define "%%_builddir $PWD" \
- --define "%_suse_insert_debug_package %%{nil}" -bb repackage.spec
+ --define "%_suse_insert_debug_package %%{nil}" \
+ --undefine "%%__brp_digest_list" -bb repackage.spec
# This is needed by the kernel packages. Ideally, we should not run _any_ brp
# checks, because the RPMs passed them once already
--
2.27.GIT

View File

@ -23,7 +23,7 @@ Summary: Macros and scripts to sign the kernel and bootloader
License: GPL-2.0-only
Group: Development/Tools/Other
Version: 10.1
Release: 0
Release: 4
Requires: fipscheck
%if 0%{?suse_version}
Requires: mozilla-nss-tools
@ -43,7 +43,7 @@ Patch2: Skip-processing-of-ghost-files-as-they-are-not-extra.patch
Patch3: Add-support-for-digest-lists.patch
Patch4: Don-t-set-files-variable-in-brp-99-pesign.patch
Patch5: Disable-building-debug-packages.patch
Patch6: Undefine-__brp_digest_list-in-pesign-repackage.spec..patch
Patch6: Add-support-for-DIM.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%if 0%{?suse_version}
# suse-module-tools <= 15.0.10 contains modsign-verify
@ -88,3 +88,14 @@ fi
/usr/lib/rpm/*
%changelog
* Sun Apr 24 2022 zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 10.1-4
- Delete sensitive information
* Mon Mar 07 2022 wangyu <wangyu283@huawei.com> - 10.1-3
- Add Add-support-for-DIM.patch
* Wed Jul 22 2020 Roberto Sassu <roberto.sassu@huawei.com> - 10.1-2
- Add Require-nss-util-for-building-in-pesign-repackage.sp.patch
* Wed Jul 22 2020 Roberto Sassu <roberto.sassu@huawei.com> - 10.1-1
- Initial import

View File

@ -0,0 +1,4 @@
version_control: github
src_repo: openSUSE/pesign-obs-integration
tag_prefix: ^
seperator: .