Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 14 additions & 6 deletions SPECS-SIGNED/systemd-boot-signed/systemd-boot-signed.spec
Original file line number Diff line number Diff line change
@@ -1,6 +1,12 @@
%global debug_package %{nil}
%ifarch x86_64
%global buildarch x86_64
%global grubefiname grubx64.efi
%global sdbootefiname systemd-bootx64.efi
%elifarch aarch64
%global buildarch aarch64
%global grubefiname grubx64.efi
%global sdbootefiname systemd-bootaa64.efi
%endif

# Support for quick builds with rpmbuild --build-in-place.
Expand All @@ -14,7 +20,7 @@ Version: 255
# determine the build information from local checkout
Version: %(tools/meson-vcs-tag.sh . error | sed -r 's/-([0-9])/.^\1/; s/-g/_g/')
%endif
Release: 22%{?dist}
Release: 23%{?dist}
License: LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -32,8 +38,7 @@ URL: https://systemd.io
# 3. Place the unsigned package and signed binary in this spec's folder
# 4. Build this spec
Source0: systemd-boot-%{version}-%{release}.%{buildarch}.rpm
Source1: systemd-bootx64.efi
ExclusiveArch: x86_64
Source1: %{sdbootefiname}

%description
This package contains the systemd-boot EFI binary signed for secure boot. The package is
Expand Down Expand Up @@ -71,8 +76,8 @@ pushd rpm_contents

# This spec's whole purpose is to inject the signed systemd-boot binary
rpm2cpio %{SOURCE0} | cpio -idmv
cp %{SOURCE1} ./usr/lib/systemd/boot/efi/systemd-bootx64.efi

cp %{SOURCE1} ./usr/lib/systemd/boot/efi/%{sdbootefiname}
popd

%install
Expand All @@ -81,7 +86,7 @@ pushd rpm_contents
# Don't use * wildcard. It does not copy over hidden files in the root folder...
cp -rp ./. %{buildroot}/

cp %{buildroot}/usr/lib/systemd/boot/efi/systemd-bootx64.efi %{buildroot}/boot/efi/EFI/BOOT/grubx64.efi
cp %{buildroot}/usr/lib/systemd/boot/efi/%{sdbootefiname} %{buildroot}/boot/efi/EFI/BOOT/${grubefiname}

popd

Expand All @@ -90,9 +95,12 @@ popd
/usr/share/man/man5/loader.conf.5.gz
/usr/share/man/man7/sd-boot.7.gz
/usr/share/man/man7/systemd-boot.7.gz
/boot/efi/EFI/BOOT/grubx64.efi
/boot/efi/EFI/BOOT/%{grubefiname}

%changelog
* Mon Aug 18 2025 Sean Dougherty <[email protected]> - 255-23
- Add aarch64 package

* Wed Aug 06 2025 Sean Dougherty <[email protected]> - 255-22
- Bump release to match systemd spec

Expand Down
5 changes: 4 additions & 1 deletion SPECS/systemd/systemd.spec
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ Version: 255
# determine the build information from local checkout
Version: %(tools/meson-vcs-tag.sh . error | sed -r 's/-([0-9])/.^\1/; s/-g/_g/')
%endif
Release: 22%{?dist}
Release: 23%{?dist}

# FIXME - hardcode to 'stable' for now as that's what we have in our blobstore
%global stable 1
Expand Down Expand Up @@ -1228,6 +1228,9 @@ rm -f %{name}.lang
# %autochangelog. So we need to continue manually maintaining the
# changelog here.
%changelog
* Mon Aug 18 2025 Sean Dougherty <[email protected]> - 255-23
- Bump release to match systemd-boot-signed spec

* Tue Aug 05 2025 Chris Co <[email protected]> - 255-22
- enable building ukify and sd-boot on arm64
- enable pyflakes buildrequires which is needed for ukify testing
Expand Down
Loading