Commit Graph

49 Commits

Author SHA256 Message Date
Ludwig Nussel
37a3159863 Accepting request 910150 from home:lnussel:branches:Base:System
- Update to version 10.2+git20210804.ff18da1:
  * brp-99-pesign: fix that the signature of shim be broken

OBS-URL: https://build.opensuse.org/request/show/910150
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=109
2021-08-04 12:36:09 +00:00
Joey Lee
2546eb045b Accepting request 909397 from home:lnussel:usrmove
- Update to version 10.2+git20210730.0cb100c:
  * Sign kernel also in module dir (boo#1184804)
- switch package to obs_scm to avoid recompression

OBS-URL: https://build.opensuse.org/request/show/909397
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=107
2021-07-31 01:31:55 +00:00
Joey Lee
fc03531124 Accepting request 908891 from home:lnussel:usrmove
- Fix signing of kernel in {,/usr}/lib/modules

OBS-URL: https://build.opensuse.org/request/show/908891
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=106
2021-07-29 05:56:59 +00:00
f7fb3783bc - Update to version git master (10.2):
* Add support for GZIP and ZSTD module compression
  * Always pad the EFI image when calculating the hash
  * Version bump to 10.2
  * approach issue#22 false noarch subpackage
- drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
  pesign-obs-integration-support-gzip-zstd-compression.patch (merged)

OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=105
2021-07-23 09:23:14 +00:00
Gary Ching-Pang Lin
c932fb72d2 Accepting request 901097 from home:lnussel:usrmove
- find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)

OBS-URL: https://build.opensuse.org/request/show/901097
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=103
2021-06-24 08:51:35 +00:00
Gary Ching-Pang Lin
01c145bdd2 Accepting request 901054 from home:gary_lin:branches:Base:System
- Add pesign-obs-integration-support-gzip-zstd-compression.patch
  to support gzip and zstd module compression

OBS-URL: https://build.opensuse.org/request/show/901054
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=102
2021-06-21 03:30:41 +00:00
Gary Ching-Pang Lin
949cc7fa93 Accepting request 880006 from home:gary_lin:branches:Base:System
fix the potential hash mismatching (bsc#1183747)

OBS-URL: https://build.opensuse.org/request/show/880006
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=100
2021-03-23 01:21:04 +00:00
Gary Ching-Pang Lin
754a92d165 Accepting request 857809 from home:gary_lin:branches:Base:System
- Update to version 10.2:
  * Fix the wrongly created noarch subpackages
    (issue#22, bsc#1180242)

OBS-URL: https://build.opensuse.org/request/show/857809
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=97
2020-12-21 06:42:06 +00:00
20d454911d - Update to version 10.1+1602850462:
* Compress kernel modules in batch and in parallel
  * Forward _binary_payload to the repackaged rpm (bsc#1175882)
- remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch,
  parallel-compression.patch (upstream)

OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=95
2020-10-21 12:49:41 +00:00
Gary Ching-Pang Lin
e7dce62cd8 Accepting request 842009 from home:dirkmueller:branches:Base:System
- Sync from git master directly
- drop 0001-Add-support-for-kernel-module-compression.patch
  0001-Enable-find_provides-and-requires.patch
  0001-Initialize-compress-variable.patch
  0001-Keep-the-files-in-the-OTHER-directory.patch
  0001-Passthrough-license-tag.patch
  0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
  0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  pesign-sign-s390x-kernel.patch (upstream)
- add parallel-compression.patch

OBS-URL: https://build.opensuse.org/request/show/842009
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=94
2020-10-19 08:43:41 +00:00
Gary Ching-Pang Lin
bb7f067c5f Accepting request 831346 from home:gary_lin:branches:Base:System
forward _binary_payload to the repackaged rpm (bsc#1175882)

OBS-URL: https://build.opensuse.org/request/show/831346
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=92
2020-09-02 06:47:09 +00:00
Gary Ching-Pang Lin
9b1a660fb0 Accepting request 821456 from home:gary_lin:branches:Base:System
Add 0001-Enable-find_provides-and-requires.patch (bsc#1114605)

OBS-URL: https://build.opensuse.org/request/show/821456
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=90
2020-07-17 08:21:50 +00:00
eee6f816df Accepting request 789612 from home:msmeissn:branches:Base:System
- pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x)
  kernels with just kernel-sign-file (bsc#1163524)

OBS-URL: https://build.opensuse.org/request/show/789612
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=88
2020-03-30 06:19:47 +00:00
Gary Ching-Pang Lin
b14ebb7b0a Accepting request 777389 from home:msmeissn:branches:Base:System
(merged in SLE changes entry)

Also pull request to github repo.

- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  Hard code signing of stage3.bin of s390-tools (bsc#1163524)

- Require pesign on arm (boo#1134303).

OBS-URL: https://build.opensuse.org/request/show/777389
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=86
2020-02-24 02:13:53 +00:00
Gary Ching-Pang Lin
034791523e Accepting request 745872 from home:jirislaby:branches:Base:System
- 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
  to support xz-compressed vmlinux (bnc#1155921)

OBS-URL: https://build.opensuse.org/request/show/745872
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=84
2019-11-07 01:47:34 +00:00
Gary Ching-Pang Lin
61342f2452 Accepting request 745580 from home:gary_lin:branches:Base:System
to keep the files in the OTHER directory (boo#1155474)

OBS-URL: https://build.opensuse.org/request/show/745580
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=83
2019-11-06 06:46:05 +00:00
Gary Ching-Pang Lin
c9882f55ca Accepting request 720133 from home:gary_lin:branches:Base:System
- Add 0001-Initialize-compress-variable.patch to initialize
  $compress in pesign-gen-repackage-spec to avoid warning

OBS-URL: https://build.opensuse.org/request/show/720133
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=79
2019-08-01 02:54:22 +00:00
Gary Ching-Pang Lin
5350328eee Accepting request 706196 from home:gary_lin:branches:Base:System
support kernel module compression (bsc#1135854)

OBS-URL: https://build.opensuse.org/request/show/706196
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=77
2019-05-29 07:12:18 +00:00
Gary Ching-Pang Lin
b67e7b42c2 Accepting request 703726 from home:Guillaume_G:branches:Base:System
- pesign is also available on %arm

OBS-URL: https://build.opensuse.org/request/show/703726
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=75
2019-05-20 03:14:09 +00:00
Gary Ching-Pang Lin
98ff0f7ccd Accepting request 694662 from home:gary_lin:branches:Base:System
Drop 0002-Enable-find_provides-and-requires.patch due to the build failure of virtualbox-guest-x11

OBS-URL: https://build.opensuse.org/request/show/694662
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=73
2019-04-16 04:05:44 +00:00
Gary Ching-Pang Lin
dd0209890e Accepting request 693109 from home:gary_lin:branches:Base:System
- rpm: forward the missing rpm bits (bsc#1114605)
  + 0001-Passthrough-license-tag.patch
  + 0002-Enable-find_provides-and-requires.patch

OBS-URL: https://build.opensuse.org/request/show/693109
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=72
2019-04-11 07:04:40 +00:00
Gary Ching-Pang Lin
923a1088fe Accepting request 679675 from home:gary_lin:branches:Base:System
Add the missing bugzilla entry

OBS-URL: https://build.opensuse.org/request/show/679675
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=70
2019-02-27 03:18:39 +00:00
Gary Ching-Pang Lin
4e25e617bb Accepting request 657499 from home:gary_lin:branches:Base:System
Update to 10.1 to include modsign-verify (requires suse-module-tools 15.0.10)

OBS-URL: https://build.opensuse.org/request/show/657499
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=68
2018-12-13 01:40:37 +00:00
Gary Ching-Pang Lin
2dacee200d Accepting request 645696 from home:gary_lin:branches:Base:System
- rpm: properly forward dep flags
- Fix new Lintian Error from Debian 10

OBS-URL: https://build.opensuse.org/request/show/645696
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=65
2018-10-31 10:15:41 +00:00
Gary Ching-Pang Lin
0b6f1c3027 Accepting request 615105 from home:gary_lin:branches:Base:System
- Remove the unstable source url
- Update the debian scripts

OBS-URL: https://build.opensuse.org/request/show/615105
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=60
2018-06-08 03:32:05 +00:00
Gary Ching-Pang Lin
026c3df003 Accepting request 614522 from home:bluca:branches:Base:System
- Make tarball generation Debian-friendly
- Fix Lintian Errors in Debian build of repackaged source

Changes from PR: https://github.com/openSUSE/pesign-obs-integration/pull/4

OBS-URL: https://build.opensuse.org/request/show/614522
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=59
2018-06-07 10:03:07 +00:00
Gary Ching-Pang Lin
00bb628658 Accepting request 614417 from home:gary_lin:branches:Base:System
Switch to tarball release

OBS-URL: https://build.opensuse.org/request/show/614417
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=58
2018-06-06 04:32:27 +00:00
Gary Ching-Pang Lin
b86ef55a2e Accepting request 613226 from home:bluca:debian_secure_boot
Add _service file with tar_scm and dsc. The tar_scm is necessary, as for Debian builds it's necessary to have a tarball with the content.
RPM build is unchanged.

OBS-URL: https://build.opensuse.org/request/show/613226
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=57
2018-05-31 08:50:32 +00:00
Gary Ching-Pang Lin
6319b7f2ab Accepting request 579228 from home:gary_lin:branches:Base:System
Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)

OBS-URL: https://build.opensuse.org/request/show/579228
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=55
2018-02-23 02:47:20 +00:00
Gary Ching-Pang Lin
848ed6ebc6 Accepting request 528929 from home:joeyli:branches:Base:System
Replacing sign-file.c with new kernel-sign-file script to support PKCS#7 kernel module signing (bsc#1049122)

OBS-URL: https://build.opensuse.org/request/show/528929
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=51
2017-10-03 02:07:39 +00:00
Gary Ching-Pang Lin
cf2c1c7eed Accepting request 521694 from home:joeyli:branches:Base:System
Add sign-file.c to support PKCS#7 kernel module signing (bsc#1049122)

OBS-URL: https://build.opensuse.org/request/show/521694
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=47
2017-09-13 04:46:55 +00:00
Gary Ching-Pang Lin
71d38ee384 Accepting request 442519 from home:michal-m:branches:Base:System
- Copy over any *.log files from the first build (bsc#1012422)

OBS-URL: https://build.opensuse.org/request/show/442519
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=45
2016-11-29 08:50:09 +00:00
Gary Ching-Pang Lin
da5516c552 Accepting request 365195 from home:gary_lin:branches:Base:System
- Add aarch64 support since pesign also build on aarch64

OBS-URL: https://build.opensuse.org/request/show/365195
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=43
2016-03-07 09:52:00 +00:00
Gary Ching-Pang Lin
e2aa168abc Accepting request 282492 from home:michal-m:branches:Base:System
- Add support for file verify flags (bnc#905420).

- Sort the parts of the repackage spec file for easier debugging.

OBS-URL: https://build.opensuse.org/request/show/282492
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=41
2015-01-23 02:01:38 +00:00
Stephan Kulow
9d99969431 Accepting request 247328 from home:oertel:factory-relnums
sanitize release line in specfile

OBS-URL: https://build.opensuse.org/request/show/247328
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=37
2014-09-03 16:27:37 +00:00
Gary Ching-Pang Lin
87e166a2f0 Accepting request 245477 from home:michal-m:branches:Base:System
- brp-99-compress-vmlinux: Compress the vmlinux image after
  find-debuginfo (bnc#880848, bnc#884459)

OBS-URL: https://build.opensuse.org/request/show/245477
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=35
2014-08-21 04:08:32 +00:00
Gary Ching-Pang Lin
45f8223933 Accepting request 244346 from home:msmeissn:branches:Base:System
- switch gen-hmac to use fipscheck instead of sha256hmac

OBS-URL: https://build.opensuse.org/request/show/244346
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=33
2014-08-13 09:59:54 +00:00
Stephan Kulow
4ee730db27 Accepting request 231426 from home:michal-m:branches:Base:System
- Fix matching /boot and /lib/firmware in pesign-repackage.spec

- Do not store the buildroot in the .*.hmac file.

- Regenerate the HMAC checksum when signing and EFI binary with
  a checksum (fate#316930, bnc#856310).

- Update README.

- Add /usr/lib/rpm/pesign/gen-hmac tool to generate a hmac checksum
  for a given file (fate#316930, bnc#856310).

OBS-URL: https://build.opensuse.org/request/show/231426
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=23
2014-04-27 07:52:13 +00:00
Gary Ching-Pang Lin
f6afa13b96 Accepting request 228761 from home:michal-m:branches:Base:System
- Do not sign any files if BRP_PESIGN_FILES is set not an empty
  string (bnc#857599).

- Fix a typo in the last change.

- Default to BRP_PESIGN_FILES="*.ko /lib/firmware" (bnc#857599).

- Add --signatures=<directory> option to modsign-repackage
  (bnc#841627).

OBS-URL: https://build.opensuse.org/request/show/228761
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=20
2014-04-03 01:54:03 +00:00
c9543f88db Accepting request 178980 from home:michal-m:branches:Base:System
- Put debuginfo packages to %_topdir/OTHER (bnc#824971).

- Version 10
- Add modsign-repackage tool to repackage RPMs outside the buildservice

OBS-URL: https://build.opensuse.org/request/show/178980
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=18
2013-06-14 21:59:33 +00:00
Stephan Kulow
d29a4a291b - correct the license of the generated package to fix build
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=14
2013-03-15 06:19:57 +00:00
Michal Marek
fa59630114 Accepting request 157340 from home:michal-m:modsign
- Do not repackage debuginfo package (bnc#806637)

OBS-URL: https://build.opensuse.org/request/show/157340
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=12
2013-03-05 09:55:45 +00:00
8190f57d5b add link again
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=10
2013-03-05 07:42:40 +00:00
126b676d62 osc copypac from project:home:michal-m:modsign package:pesign-obs-integration revision:5
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=9
2013-03-05 07:41:57 +00:00
b3f5792b51 ...
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=5
2013-02-06 12:45:18 +00:00
7ad3b5035f ...
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=4
2013-02-06 12:31:33 +00:00
c581df2ee9 - switch to normal brp hook
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=3
2013-02-06 12:25:06 +00:00
6a8d32d403 - fix pesign calls
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=2
2013-02-05 13:35:22 +00:00
184dbd8a83 osc copypac from project:home:michal-m:modsign package:pesign-obs-integration revision:2
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=1
2013-02-05 10:41:47 +00:00