pool/pesign-obs-integration
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
127 Commits 1 Branch 0 Tags 660 KiB
factory
Commit Graph

57 Commits

Author SHA256 Message Date
Joey Lee
0d746ea462 Accepting request 1147092 from home:joeyli:branches:Base:System 
Update to version 10.2+git20240216.1e15ef4

OBS-URL: https://build.opensuse.org/request/show/1147092
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=125
 2024-02-16 13:21:00 +00:00
Joey Lee
e5c2489f9d Accepting request 1092481 from home:joeyli:branches:Base:System 
upgrade to 10.2+git20230612.4699910 (bsc#1211849)

OBS-URL: https://build.opensuse.org/request/show/1092481
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=121
 2023-06-12 08:18:28 +00:00
Joey Lee
0e8a09fd6a Accepting request 1060443 from home:gmbr3:POBSI 
- Add dependency-generators.patch to support copying source files
  and macros to the re-package build (jsc#PED-2658)

OBS-URL: https://build.opensuse.org/request/show/1060443
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=119
 2023-01-30 05:21:45 +00:00
Joey Lee
a3ca55835f Accepting request 1006620 from home:gary_lin:branches:Base:System 
- Add verify-sig.patch to verify the signatures before attaching
  them (bsc#1200108, bsc#1203679)

OBS-URL: https://build.opensuse.org/request/show/1006620
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=117
 2022-09-28 09:42:39 +00:00
Joey Lee
62b873db57 Accepting request 989007 from home:gmbr3:Active 
- Update attr.patch to fix ghost symlinks still being affected
- Add rpmlintrc.patch to stop copying it to the build output

OBS-URL: https://build.opensuse.org/request/show/989007
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=115
 2022-07-26 05:30:14 +00:00
Marcus Meissner
cf17ee3bbc Accepting request 984716 from home:gmbr3:Active 
- Add attr.patch to fix:
  * Avoid assigning %attr's to symlinks which causes rpmbuild spam
  * Change perms mask to 07777 to ensure SUID/SGID is copied over
- Add lang.patch to support %lang

OBS-URL: https://build.opensuse.org/request/show/984716
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=113
 2022-07-06 11:25:01 +00:00
Dirk Mueller
14512d1906 Accepting request 982769 from home:gmbr3:POBSI 
- Update to version 10.2+git20220504.8690743:
  * Don't repackage aarch64_ilp32 *-64bit packages
  * Use pesign for signing on riscv64
  * Add padding to grub signature correctly (jsc#SLE-18271 bsc#1192764).
  * kernel-sign-file: Support appending verbatim PKCS#7 signature.
  * kernel-sign-file: Move x509 parsing into a function.
  * Support ppc grub signing (jsc#SLE-18271 bsc#1192764).
  * Handle packages with epochs as well
  * Turn off rpm fatal warnings for noarch packages
- Upstreamed patches:
  * 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch
  * 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch
  * 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch
  * 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch
- Added patches:
  * order.patch - support OrderWithRequires

OBS-URL: https://build.opensuse.org/request/show/982769
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=111
 2022-06-16 07:55:52 +00:00
Joey Lee
b63590e396 Accepting request 947877 from home:michals 
- Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764).
   + 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch
   + 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch
   + 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch
   + 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch

Add SLE bug references:
  * Add support for GZIP and ZSTD module compression (bsc#1188636)
  * Compress kernel modules in batch and in parallel (bsc#1188636)
  support kernel module compression (bsc#1135854, jsc#SLE-16661)

OBS-URL: https://build.opensuse.org/request/show/947877
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=110
 2022-01-22 10:58:17 +00:00
Ludwig Nussel
37a3159863 Accepting request 910150 from home:lnussel:branches:Base:System 
- Update to version 10.2+git20210804.ff18da1:
  * brp-99-pesign: fix that the signature of shim be broken

OBS-URL: https://build.opensuse.org/request/show/910150
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=109
 2021-08-04 12:36:09 +00:00
Joey Lee
2546eb045b Accepting request 909397 from home:lnussel:usrmove 
- Update to version 10.2+git20210730.0cb100c:
  * Sign kernel also in module dir (boo#1184804)
- switch package to obs_scm to avoid recompression

OBS-URL: https://build.opensuse.org/request/show/909397
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=107
 2021-07-31 01:31:55 +00:00
Joey Lee
fc03531124 Accepting request 908891 from home:lnussel:usrmove 
- Fix signing of kernel in {,/usr}/lib/modules

OBS-URL: https://build.opensuse.org/request/show/908891
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=106
 2021-07-29 05:56:59 +00:00
Dirk Mueller
f7fb3783bc - Update to version git master (10.2): 
* Add support for GZIP and ZSTD module compression
  * Always pad the EFI image when calculating the hash
  * Version bump to 10.2
  * approach issue#22 false noarch subpackage
- drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
  pesign-obs-integration-support-gzip-zstd-compression.patch (merged)

OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=105
 2021-07-23 09:23:14 +00:00
Gary Ching-Pang Lin
c932fb72d2 Accepting request 901097 from home:lnussel:usrmove 
- find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)

OBS-URL: https://build.opensuse.org/request/show/901097
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=103
 2021-06-24 08:51:35 +00:00
Gary Ching-Pang Lin
01c145bdd2 Accepting request 901054 from home:gary_lin:branches:Base:System 
- Add pesign-obs-integration-support-gzip-zstd-compression.patch
  to support gzip and zstd module compression

OBS-URL: https://build.opensuse.org/request/show/901054
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=102
 2021-06-21 03:30:41 +00:00
Gary Ching-Pang Lin
949cc7fa93 Accepting request 880006 from home:gary_lin:branches:Base:System 
fix the potential hash mismatching (bsc#1183747)

OBS-URL: https://build.opensuse.org/request/show/880006
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=100
 2021-03-23 01:21:04 +00:00
Gary Ching-Pang Lin
754a92d165 Accepting request 857809 from home:gary_lin:branches:Base:System 
- Update to version 10.2:
  * Fix the wrongly created noarch subpackages
    (issue#22, bsc#1180242)

OBS-URL: https://build.opensuse.org/request/show/857809
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=97
 2020-12-21 06:42:06 +00:00
Dirk Mueller
20d454911d - Update to version 10.1+1602850462: 
* Compress kernel modules in batch and in parallel
  * Forward _binary_payload to the repackaged rpm (bsc#1175882)
- remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch,
  parallel-compression.patch (upstream)

OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=95
 2020-10-21 12:49:41 +00:00
Gary Ching-Pang Lin
e7dce62cd8 Accepting request 842009 from home:dirkmueller:branches:Base:System 
- Sync from git master directly
- drop 0001-Add-support-for-kernel-module-compression.patch
  0001-Enable-find_provides-and-requires.patch
  0001-Initialize-compress-variable.patch
  0001-Keep-the-files-in-the-OTHER-directory.patch
  0001-Passthrough-license-tag.patch
  0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
  0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  pesign-sign-s390x-kernel.patch (upstream)
- add parallel-compression.patch

OBS-URL: https://build.opensuse.org/request/show/842009
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=94
 2020-10-19 08:43:41 +00:00
Gary Ching-Pang Lin
bb7f067c5f Accepting request 831346 from home:gary_lin:branches:Base:System 
forward _binary_payload to the repackaged rpm (bsc#1175882)

OBS-URL: https://build.opensuse.org/request/show/831346
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=92
 2020-09-02 06:47:09 +00:00
Gary Ching-Pang Lin
9b1a660fb0 Accepting request 821456 from home:gary_lin:branches:Base:System 
Add 0001-Enable-find_provides-and-requires.patch (bsc#1114605)

OBS-URL: https://build.opensuse.org/request/show/821456
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=90
 2020-07-17 08:21:50 +00:00
Marcus Meissner
eee6f816df Accepting request 789612 from home:msmeissn:branches:Base:System 
- pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x)
  kernels with just kernel-sign-file (bsc#1163524)

OBS-URL: https://build.opensuse.org/request/show/789612
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=88
 2020-03-30 06:19:47 +00:00
Gary Ching-Pang Lin
b14ebb7b0a Accepting request 777389 from home:msmeissn:branches:Base:System 
(merged in SLE changes entry)

Also pull request to github repo.

- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  Hard code signing of stage3.bin of s390-tools (bsc#1163524)

- Require pesign on arm (boo#1134303).

OBS-URL: https://build.opensuse.org/request/show/777389
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=86
 2020-02-24 02:13:53 +00:00
Gary Ching-Pang Lin
034791523e Accepting request 745872 from home:jirislaby:branches:Base:System 
- 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
  to support xz-compressed vmlinux (bnc#1155921)

OBS-URL: https://build.opensuse.org/request/show/745872
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=84
 2019-11-07 01:47:34 +00:00
Gary Ching-Pang Lin
61342f2452 Accepting request 745580 from home:gary_lin:branches:Base:System 
to keep the files in the OTHER directory (boo#1155474)

OBS-URL: https://build.opensuse.org/request/show/745580
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=83
 2019-11-06 06:46:05 +00:00
Gary Ching-Pang Lin
c9882f55ca Accepting request 720133 from home:gary_lin:branches:Base:System 
- Add 0001-Initialize-compress-variable.patch to initialize
  $compress in pesign-gen-repackage-spec to avoid warning

OBS-URL: https://build.opensuse.org/request/show/720133
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=79
 2019-08-01 02:54:22 +00:00
Gary Ching-Pang Lin
5350328eee Accepting request 706196 from home:gary_lin:branches:Base:System 
support kernel module compression (bsc#1135854)

OBS-URL: https://build.opensuse.org/request/show/706196
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=77
 2019-05-29 07:12:18 +00:00
Gary Ching-Pang Lin
b67e7b42c2 Accepting request 703726 from home:Guillaume_G:branches:Base:System 
- pesign is also available on %arm

OBS-URL: https://build.opensuse.org/request/show/703726
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=75
 2019-05-20 03:14:09 +00:00
Gary Ching-Pang Lin
98ff0f7ccd Accepting request 694662 from home:gary_lin:branches:Base:System 
Drop 0002-Enable-find_provides-and-requires.patch due to the build failure of virtualbox-guest-x11

OBS-URL: https://build.opensuse.org/request/show/694662
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=73
 2019-04-16 04:05:44 +00:00
Gary Ching-Pang Lin
dd0209890e Accepting request 693109 from home:gary_lin:branches:Base:System 
- rpm: forward the missing rpm bits (bsc#1114605)
  + 0001-Passthrough-license-tag.patch
  + 0002-Enable-find_provides-and-requires.patch

OBS-URL: https://build.opensuse.org/request/show/693109
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=72
 2019-04-11 07:04:40 +00:00
Gary Ching-Pang Lin
923a1088fe Accepting request 679675 from home:gary_lin:branches:Base:System 
Add the missing bugzilla entry

OBS-URL: https://build.opensuse.org/request/show/679675
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=70
 2019-02-27 03:18:39 +00:00
Gary Ching-Pang Lin
4e25e617bb Accepting request 657499 from home:gary_lin:branches:Base:System 
Update to 10.1 to include modsign-verify (requires suse-module-tools 15.0.10)

OBS-URL: https://build.opensuse.org/request/show/657499
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=68
 2018-12-13 01:40:37 +00:00
Gary Ching-Pang Lin
2dacee200d Accepting request 645696 from home:gary_lin:branches:Base:System 
- rpm: properly forward dep flags
- Fix new Lintian Error from Debian 10

OBS-URL: https://build.opensuse.org/request/show/645696
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=65
 2018-10-31 10:15:41 +00:00
Gary Ching-Pang Lin
0b6f1c3027 Accepting request 615105 from home:gary_lin:branches:Base:System 
- Remove the unstable source url
- Update the debian scripts

OBS-URL: https://build.opensuse.org/request/show/615105
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=60
 2018-06-08 03:32:05 +00:00
Gary Ching-Pang Lin
026c3df003 Accepting request 614522 from home:bluca:branches:Base:System 
- Make tarball generation Debian-friendly
- Fix Lintian Errors in Debian build of repackaged source

Changes from PR: https://github.com/openSUSE/pesign-obs-integration/pull/4

OBS-URL: https://build.opensuse.org/request/show/614522
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=59
 2018-06-07 10:03:07 +00:00
Gary Ching-Pang Lin
00bb628658 Accepting request 614417 from home:gary_lin:branches:Base:System 
Switch to tarball release

OBS-URL: https://build.opensuse.org/request/show/614417
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=58
 2018-06-06 04:32:27 +00:00
Gary Ching-Pang Lin
b86ef55a2e Accepting request 613226 from home:bluca:debian_secure_boot 
Add _service file with tar_scm and dsc. The tar_scm is necessary, as for Debian builds it's necessary to have a tarball with the content.
RPM build is unchanged.

OBS-URL: https://build.opensuse.org/request/show/613226
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=57
 2018-05-31 08:50:32 +00:00
Gary Ching-Pang Lin
6319b7f2ab Accepting request 579228 from home:gary_lin:branches:Base:System 
Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)

OBS-URL: https://build.opensuse.org/request/show/579228
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=55
 2018-02-23 02:47:20 +00:00
Gary Ching-Pang Lin
848ed6ebc6 Accepting request 528929 from home:joeyli:branches:Base:System 
Replacing sign-file.c with new kernel-sign-file script to support PKCS#7 kernel module signing (bsc#1049122)

OBS-URL: https://build.opensuse.org/request/show/528929
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=51
 2017-10-03 02:07:39 +00:00
Gary Ching-Pang Lin
cf2c1c7eed Accepting request 521694 from home:joeyli:branches:Base:System 
Add sign-file.c to support PKCS#7 kernel module signing (bsc#1049122)

OBS-URL: https://build.opensuse.org/request/show/521694
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=47
 2017-09-13 04:46:55 +00:00
Gary Ching-Pang Lin
71d38ee384 Accepting request 442519 from home:michal-m:branches:Base:System 
- Copy over any *.log files from the first build (bsc#1012422)

OBS-URL: https://build.opensuse.org/request/show/442519
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=45
 2016-11-29 08:50:09 +00:00
Gary Ching-Pang Lin
da5516c552 Accepting request 365195 from home:gary_lin:branches:Base:System 
- Add aarch64 support since pesign also build on aarch64

OBS-URL: https://build.opensuse.org/request/show/365195
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=43
 2016-03-07 09:52:00 +00:00
Gary Ching-Pang Lin
e2aa168abc Accepting request 282492 from home:michal-m:branches:Base:System 
- Add support for file verify flags (bnc#905420).

- Sort the parts of the repackage spec file for easier debugging.

OBS-URL: https://build.opensuse.org/request/show/282492
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=41
 2015-01-23 02:01:38 +00:00
Stephan Kulow
9d99969431 Accepting request 247328 from home:oertel:factory-relnums 
sanitize release line in specfile

OBS-URL: https://build.opensuse.org/request/show/247328
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=37
 2014-09-03 16:27:37 +00:00
Gary Ching-Pang Lin
87e166a2f0 Accepting request 245477 from home:michal-m:branches:Base:System 
- brp-99-compress-vmlinux: Compress the vmlinux image after
  find-debuginfo (bnc#880848, bnc#884459)

OBS-URL: https://build.opensuse.org/request/show/245477
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=35
 2014-08-21 04:08:32 +00:00
Gary Ching-Pang Lin
45f8223933 Accepting request 244346 from home:msmeissn:branches:Base:System 
- switch gen-hmac to use fipscheck instead of sha256hmac

OBS-URL: https://build.opensuse.org/request/show/244346
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=33
 2014-08-13 09:59:54 +00:00
Stephan Kulow
4ee730db27 Accepting request 231426 from home:michal-m:branches:Base:System 
- Fix matching /boot and /lib/firmware in pesign-repackage.spec

- Do not store the buildroot in the .*.hmac file.

- Regenerate the HMAC checksum when signing and EFI binary with
  a checksum (fate#316930, bnc#856310).

- Update README.

- Add /usr/lib/rpm/pesign/gen-hmac tool to generate a hmac checksum
  for a given file (fate#316930, bnc#856310).

OBS-URL: https://build.opensuse.org/request/show/231426
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=23
 2014-04-27 07:52:13 +00:00
Gary Ching-Pang Lin
f6afa13b96 Accepting request 228761 from home:michal-m:branches:Base:System 
- Do not sign any files if BRP_PESIGN_FILES is set not an empty
  string (bnc#857599).

- Fix a typo in the last change.

- Default to BRP_PESIGN_FILES="*.ko /lib/firmware" (bnc#857599).

- Add --signatures=<directory> option to modsign-repackage
  (bnc#841627).

OBS-URL: https://build.opensuse.org/request/show/228761
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=20
 2014-04-03 01:54:03 +00:00
Marcus Meissner
c9543f88db Accepting request 178980 from home:michal-m:branches:Base:System 
- Put debuginfo packages to %_topdir/OTHER (bnc#824971).

- Version 10
- Add modsign-repackage tool to repackage RPMs outside the buildservice

OBS-URL: https://build.opensuse.org/request/show/178980
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=18
 2013-06-14 21:59:33 +00:00
Stephan Kulow
d29a4a291b - correct the license of the generated package to fix build 
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=14
 2013-03-15 06:19:57 +00:00
Michal Marek
fa59630114 Accepting request 157340 from home:michal-m:modsign 
- Do not repackage debuginfo package (bnc#806637)

OBS-URL: https://build.opensuse.org/request/show/157340
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=12
 2013-03-05 09:55:45 +00:00