pool/pesign-obs-integration
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
68 Commits 1 Branch 0 Tags 684 KiB
b63590e396
Commit Graph

61 Commits

Author SHA256 Message Date
Joey Lee
b63590e396 Accepting request 947877 from home:michals 
- Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764).
   + 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch
   + 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch
   + 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch
   + 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch

Add SLE bug references:
  * Add support for GZIP and ZSTD module compression (bsc#1188636)
  * Compress kernel modules in batch and in parallel (bsc#1188636)
  support kernel module compression (bsc#1135854, jsc#SLE-16661)

OBS-URL: https://build.opensuse.org/request/show/947877
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=110
 2022-01-22 10:58:17 +00:00
Ludwig Nussel
37a3159863 Accepting request 910150 from home:lnussel:branches:Base:System 
- Update to version 10.2+git20210804.ff18da1:
  * brp-99-pesign: fix that the signature of shim be broken

OBS-URL: https://build.opensuse.org/request/show/910150
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=109
 2021-08-04 12:36:09 +00:00
Ludwig Nussel
6f36bbe4d4 mention dropped patch in changes file 
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=108
 2021-08-02 14:06:11 +00:00
Joey Lee
2546eb045b Accepting request 909397 from home:lnussel:usrmove 
- Update to version 10.2+git20210730.0cb100c:
  * Sign kernel also in module dir (boo#1184804)
- switch package to obs_scm to avoid recompression

OBS-URL: https://build.opensuse.org/request/show/909397
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=107
 2021-07-31 01:31:55 +00:00
Joey Lee
fc03531124 Accepting request 908891 from home:lnussel:usrmove 
- Fix signing of kernel in {,/usr}/lib/modules

OBS-URL: https://build.opensuse.org/request/show/908891
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=106
 2021-07-29 05:56:59 +00:00
Dirk Mueller
f7fb3783bc - Update to version git master (10.2): 
* Add support for GZIP and ZSTD module compression
  * Always pad the EFI image when calculating the hash
  * Version bump to 10.2
  * approach issue#22 false noarch subpackage
- drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
  pesign-obs-integration-support-gzip-zstd-compression.patch (merged)

OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=105
 2021-07-23 09:23:14 +00:00
Gary Ching-Pang Lin
c932fb72d2 Accepting request 901097 from home:lnussel:usrmove 
- find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)

OBS-URL: https://build.opensuse.org/request/show/901097
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=103
 2021-06-24 08:51:35 +00:00
Gary Ching-Pang Lin
01c145bdd2 Accepting request 901054 from home:gary_lin:branches:Base:System 
- Add pesign-obs-integration-support-gzip-zstd-compression.patch
  to support gzip and zstd module compression

OBS-URL: https://build.opensuse.org/request/show/901054
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=102
 2021-06-21 03:30:41 +00:00
Gary Ching-Pang Lin
949cc7fa93 Accepting request 880006 from home:gary_lin:branches:Base:System 
fix the potential hash mismatching (bsc#1183747)

OBS-URL: https://build.opensuse.org/request/show/880006
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=100
 2021-03-23 01:21:04 +00:00
Gary Ching-Pang Lin
53cd34b3d6 Accepting request 858092 from home:gary_lin:branches:Base:System 
tag bsc#1180279

OBS-URL: https://build.opensuse.org/request/show/858092
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=98
 2020-12-22 09:38:03 +00:00
Gary Ching-Pang Lin
754a92d165 Accepting request 857809 from home:gary_lin:branches:Base:System 
- Update to version 10.2:
  * Fix the wrongly created noarch subpackages
    (issue#22, bsc#1180242)

OBS-URL: https://build.opensuse.org/request/show/857809
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=97
 2020-12-21 06:42:06 +00:00
Dirk Mueller
20d454911d - Update to version 10.1+1602850462: 
* Compress kernel modules in batch and in parallel
  * Forward _binary_payload to the repackaged rpm (bsc#1175882)
- remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch,
  parallel-compression.patch (upstream)

OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=95
 2020-10-21 12:49:41 +00:00
Gary Ching-Pang Lin
e7dce62cd8 Accepting request 842009 from home:dirkmueller:branches:Base:System 
- Sync from git master directly
- drop 0001-Add-support-for-kernel-module-compression.patch
  0001-Enable-find_provides-and-requires.patch
  0001-Initialize-compress-variable.patch
  0001-Keep-the-files-in-the-OTHER-directory.patch
  0001-Passthrough-license-tag.patch
  0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
  0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  pesign-sign-s390x-kernel.patch (upstream)
- add parallel-compression.patch

OBS-URL: https://build.opensuse.org/request/show/842009
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=94
 2020-10-19 08:43:41 +00:00
Gary Ching-Pang Lin
bb7f067c5f Accepting request 831346 from home:gary_lin:branches:Base:System 
forward _binary_payload to the repackaged rpm (bsc#1175882)

OBS-URL: https://build.opensuse.org/request/show/831346
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=92
 2020-09-02 06:47:09 +00:00
Gary Ching-Pang Lin
9b1a660fb0 Accepting request 821456 from home:gary_lin:branches:Base:System 
Add 0001-Enable-find_provides-and-requires.patch (bsc#1114605)

OBS-URL: https://build.opensuse.org/request/show/821456
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=90
 2020-07-17 08:21:50 +00:00
Marcus Meissner
eee6f816df Accepting request 789612 from home:msmeissn:branches:Base:System 
- pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x)
  kernels with just kernel-sign-file (bsc#1163524)

OBS-URL: https://build.opensuse.org/request/show/789612
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=88
 2020-03-30 06:19:47 +00:00
Gary Ching-Pang Lin
b14ebb7b0a Accepting request 777389 from home:msmeissn:branches:Base:System 
(merged in SLE changes entry)

Also pull request to github repo.

- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  Hard code signing of stage3.bin of s390-tools (bsc#1163524)

- Require pesign on arm (boo#1134303).

OBS-URL: https://build.opensuse.org/request/show/777389
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=86
 2020-02-24 02:13:53 +00:00
Gary Ching-Pang Lin
034791523e Accepting request 745872 from home:jirislaby:branches:Base:System 
- 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
  to support xz-compressed vmlinux (bnc#1155921)

OBS-URL: https://build.opensuse.org/request/show/745872
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=84
 2019-11-07 01:47:34 +00:00
Gary Ching-Pang Lin
61342f2452 Accepting request 745580 from home:gary_lin:branches:Base:System 
to keep the files in the OTHER directory (boo#1155474)

OBS-URL: https://build.opensuse.org/request/show/745580
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=83
 2019-11-06 06:46:05 +00:00
Gary Ching-Pang Lin
06d408973f Accepting request 728300 from home:michals 
Add bug reference (boo#1134303).

OBS-URL: https://build.opensuse.org/request/show/728300
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=81
 2019-09-05 01:31:54 +00:00
Gary Ching-Pang Lin
c9882f55ca Accepting request 720133 from home:gary_lin:branches:Base:System 
- Add 0001-Initialize-compress-variable.patch to initialize
  $compress in pesign-gen-repackage-spec to avoid warning

OBS-URL: https://build.opensuse.org/request/show/720133
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=79
 2019-08-01 02:54:22 +00:00
Gary Ching-Pang Lin
5350328eee Accepting request 706196 from home:gary_lin:branches:Base:System 
support kernel module compression (bsc#1135854)

OBS-URL: https://build.opensuse.org/request/show/706196
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=77
 2019-05-29 07:12:18 +00:00
Gary Ching-Pang Lin
b67e7b42c2 Accepting request 703726 from home:Guillaume_G:branches:Base:System 
- pesign is also available on %arm

OBS-URL: https://build.opensuse.org/request/show/703726
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=75
 2019-05-20 03:14:09 +00:00
Gary Ching-Pang Lin
98ff0f7ccd Accepting request 694662 from home:gary_lin:branches:Base:System 
Drop 0002-Enable-find_provides-and-requires.patch due to the build failure of virtualbox-guest-x11

OBS-URL: https://build.opensuse.org/request/show/694662
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=73
 2019-04-16 04:05:44 +00:00
Gary Ching-Pang Lin
dd0209890e Accepting request 693109 from home:gary_lin:branches:Base:System 
- rpm: forward the missing rpm bits (bsc#1114605)
  + 0001-Passthrough-license-tag.patch
  + 0002-Enable-find_provides-and-requires.patch

OBS-URL: https://build.opensuse.org/request/show/693109
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=72
 2019-04-11 07:04:40 +00:00
Gary Ching-Pang Lin
923a1088fe Accepting request 679675 from home:gary_lin:branches:Base:System 
Add the missing bugzilla entry

OBS-URL: https://build.opensuse.org/request/show/679675
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=70
 2019-02-27 03:18:39 +00:00
Gary Ching-Pang Lin
4e25e617bb Accepting request 657499 from home:gary_lin:branches:Base:System 
Update to 10.1 to include modsign-verify (requires suse-module-tools 15.0.10)

OBS-URL: https://build.opensuse.org/request/show/657499
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=68
 2018-12-13 01:40:37 +00:00
Gary Ching-Pang Lin
2dacee200d Accepting request 645696 from home:gary_lin:branches:Base:System 
- rpm: properly forward dep flags
- Fix new Lintian Error from Debian 10

OBS-URL: https://build.opensuse.org/request/show/645696
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=65
 2018-10-31 10:15:41 +00:00
Gary Ching-Pang Lin
0f06679cea debhelper: restrict wildcard package unpacking 
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=63
 2018-06-12 03:33:38 +00:00
Gary Ching-Pang Lin
ddec8e7615 Accepting request 615847 from home:gary_lin:branches:Base:System 
debhelper: fix conffiles corner case

OBS-URL: https://build.opensuse.org/request/show/615847
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=61
 2018-06-11 03:26:40 +00:00
Gary Ching-Pang Lin
0b6f1c3027 Accepting request 615105 from home:gary_lin:branches:Base:System 
- Remove the unstable source url
- Update the debian scripts

OBS-URL: https://build.opensuse.org/request/show/615105
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=60
 2018-06-08 03:32:05 +00:00
Gary Ching-Pang Lin
00bb628658 Accepting request 614417 from home:gary_lin:branches:Base:System 
Switch to tarball release

OBS-URL: https://build.opensuse.org/request/show/614417
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=58
 2018-06-06 04:32:27 +00:00
Gary Ching-Pang Lin
b86ef55a2e Accepting request 613226 from home:bluca:debian_secure_boot 
Add _service file with tar_scm and dsc. The tar_scm is necessary, as for Debian builds it's necessary to have a tarball with the content.
RPM build is unchanged.

OBS-URL: https://build.opensuse.org/request/show/613226
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=57
 2018-05-31 08:50:32 +00:00
Gary Ching-Pang Lin
6319b7f2ab Accepting request 579228 from home:gary_lin:branches:Base:System 
Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)

OBS-URL: https://build.opensuse.org/request/show/579228
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=55
 2018-02-23 02:47:20 +00:00
Gary Ching-Pang Lin
f5a76f9105 Accepting request 539760 from home:joeyli:branches:Base:System 
Modified modsign-repackage, using certificate to try to decrypt the signature of kernel module. It can be used to verify the integrity of signature.

OBS-URL: https://build.opensuse.org/request/show/539760
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=53
 2017-11-08 06:39:19 +00:00
Gary Ching-Pang Lin
848ed6ebc6 Accepting request 528929 from home:joeyli:branches:Base:System 
Replacing sign-file.c with new kernel-sign-file script to support PKCS#7 kernel module signing (bsc#1049122)

OBS-URL: https://build.opensuse.org/request/show/528929
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=51
 2017-10-03 02:07:39 +00:00
Dirk Mueller
55ca786f71 Accepting request 528496 from home:coolo:branches:openSUSE:Factory 
- escape regexp in pesign-gen-repackage-spec for perl 5.26

OBS-URL: https://build.opensuse.org/request/show/528496
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=49
 2017-09-25 09:01:49 +00:00
Gary Ching-Pang Lin
cf2c1c7eed Accepting request 521694 from home:joeyli:branches:Base:System 
Add sign-file.c to support PKCS#7 kernel module signing (bsc#1049122)

OBS-URL: https://build.opensuse.org/request/show/521694
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=47
 2017-09-13 04:46:55 +00:00
Gary Ching-Pang Lin
71d38ee384 Accepting request 442519 from home:michal-m:branches:Base:System 
- Copy over any *.log files from the first build (bsc#1012422)

OBS-URL: https://build.opensuse.org/request/show/442519
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=45
 2016-11-29 08:50:09 +00:00
Gary Ching-Pang Lin
da5516c552 Accepting request 365195 from home:gary_lin:branches:Base:System 
- Add aarch64 support since pesign also build on aarch64

OBS-URL: https://build.opensuse.org/request/show/365195
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=43
 2016-03-07 09:52:00 +00:00
Gary Ching-Pang Lin
e2aa168abc Accepting request 282492 from home:michal-m:branches:Base:System 
- Add support for file verify flags (bnc#905420).

- Sort the parts of the repackage spec file for easier debugging.

OBS-URL: https://build.opensuse.org/request/show/282492
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=41
 2015-01-23 02:01:38 +00:00
Michael Schröder
2cfb0fbd97 fall back to project cert in the followup spec if it exists 
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=39
 2014-09-16 15:09:43 +00:00
Stephan Kulow
9d99969431 Accepting request 247328 from home:oertel:factory-relnums 
sanitize release line in specfile

OBS-URL: https://build.opensuse.org/request/show/247328
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=37
 2014-09-03 16:27:37 +00:00
Gary Ching-Pang Lin
87e166a2f0 Accepting request 245477 from home:michal-m:branches:Base:System 
- brp-99-compress-vmlinux: Compress the vmlinux image after
  find-debuginfo (bnc#880848, bnc#884459)

OBS-URL: https://build.opensuse.org/request/show/245477
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=35
 2014-08-21 04:08:32 +00:00
Gary Ching-Pang Lin
45f8223933 Accepting request 244346 from home:msmeissn:branches:Base:System 
- switch gen-hmac to use fipscheck instead of sha256hmac

OBS-URL: https://build.opensuse.org/request/show/244346
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=33
 2014-08-13 09:59:54 +00:00
Gary Ching-Pang Lin
b4df4cf6ef Accepting request 243599 from home:michal-m:branches:Base:System 
- Set BRP_PESIGN_FILES="" in the repackage build to avoid loops.

OBS-URL: https://build.opensuse.org/request/show/243599
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=31
 2014-08-05 02:30:29 +00:00
Marcus Meissner
833c62a58c Accepting request 242969 from home:michal-m:branches:Base:System 
- Accept also rpmlintrc files without any <package>- prefix.

OBS-URL: https://build.opensuse.org/request/show/242969
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=29
 2014-07-30 09:43:53 +00:00
Gary Ching-Pang Lin
516bf187be Accepting request 242748 from home:michal-m:branches:Base:System 
- Use package's rpmlintrc files in the second build.

OBS-URL: https://build.opensuse.org/request/show/242748
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=27
 2014-07-29 07:17:45 +00:00
Gary Ching-Pang Lin
4af437f4e6 Accepting request 239464 from home:michal-m:branches:Base:System 
- Drop support for signing firmware files (bnc#867199)

OBS-URL: https://build.opensuse.org/request/show/239464
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=25
 2014-07-07 01:50:17 +00:00
Stephan Kulow
4ee730db27 Accepting request 231426 from home:michal-m:branches:Base:System 
- Fix matching /boot and /lib/firmware in pesign-repackage.spec

- Do not store the buildroot in the .*.hmac file.

- Regenerate the HMAC checksum when signing and EFI binary with
  a checksum (fate#316930, bnc#856310).

- Update README.

- Add /usr/lib/rpm/pesign/gen-hmac tool to generate a hmac checksum
  for a given file (fate#316930, bnc#856310).

OBS-URL: https://build.opensuse.org/request/show/231426
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=23
 2014-04-27 07:52:13 +00:00