Gecko [ dealzandfreebies.com ]

Name	Size	Permission	Date
macros.alt-python38	1.97 KB	-rw-r--r--	2024-09-23 11:26
macros.alt-python39	1.98 KB	-rw-r--r--	2025-06-19 12:11
macros.dwz	1.76 KB	-rw-r--r--	2023-05-15 14:30
macros.efi-srpm	3 KB	-rw-r--r--	2021-11-23 22:32
macros.environment-modules	75 B	-rw-r--r--	2020-07-30 12:13
macros.fedora-misc	2.76 KB	-rw-r--r--	2023-05-15 14:30
macros.fedora-misc-srpm	239 B	-rw-r--r--	2023-05-15 14:30
macros.firewalld	239 B	-rw-r--r--	2025-03-11 09:51
macros.forge	12.43 KB	-rw-r--r--	2023-05-15 14:30
macros.ghc-srpm	414 B	-rw-r--r--	2018-08-12 10:37
macros.go-srpm	7.17 KB	-rw-r--r--	2021-04-08 14:45
macros.info	390 B	-rw-r--r--	2022-04-18 17:09
macros.javapackages-filesystem	1.89 KB	-rw-r--r--	2018-08-06 15:09
macros.kernel-srpm	116 B	-rw-r--r--	2023-05-15 14:30
macros.ldc-srpm	73 B	-rw-r--r--	2023-05-15 14:30
macros.ldconfig	307 B	-rw-r--r--	2023-05-15 14:30
macros.mono-srpm	181 B	-rw-r--r--	2023-05-15 14:30
macros.nodejs-srpm	324 B	-rw-r--r--	2023-05-15 14:30
macros.ocaml-srpm	737 B	-rw-r--r--	2019-10-14 08:31
macros.openblas-srpm	104 B	-rw-r--r--	2019-10-16 20:47
macros.perl	5.06 KB	-rw-r--r--	2025-07-28 08:01
macros.perl-srpm	794 B	-rw-r--r--	2019-10-13 14:18
macros.pesign	3.33 KB	-rw-r--r--	2023-04-04 13:57
macros.pybytecompile	886 B	-rw-r--r--	2023-05-16 12:55
macros.python	3.36 KB	-rw-r--r--	2023-05-16 12:55
macros.python-srpm	5.95 KB	-rw-r--r--	2023-05-16 12:55
macros.python2	1.82 KB	-rw-r--r--	2022-04-21 15:26
macros.python3	3.63 KB	-rw-r--r--	2023-05-16 12:55
macros.ruby	1001 B	-rw-r--r--	2023-06-06 14:55
macros.rust-srpm	61 B	-rw-r--r--	2018-01-08 19:15
macros.scl	13.53 KB	-rw-r--r--	2023-04-01 16:10
macros.selinux-policy	6.61 KB	-rw-r--r--	2026-03-02 20:30
macros.systemd	4.03 KB	-rw-r--r--	2026-04-23 11:12
macros.systemtap	206 B	-rw-r--r--	2023-10-14 13:06
macros.valgrind-srpm	127 B	-rw-r--r--	2023-05-15 14:30
macros.vim	40 B	-rw-r--r--	2026-04-29 08:48
macros.vpath	228 B	-rw-r--r--	2023-05-15 14:30

Rename

# macros for use with pesign
#
# this makes it possible to invoke your build as:
# rpmbuild --define 'pe_signing_token test2' --define "pe_signing_cert signing key for test2" -ba shim.spec
# and then in the spec do:
# %pesign -s -i shim.orig -o shim.efi
# And magically get the right thing.

%__pesign_token %{nil}%{?pe_signing_token:-t "%{pe_signing_token}"}
%__pesign_cert %{!?pe_signing_cert:"Red Hat Test Certificate"}%{?pe_signing_cert:"%{pe_signing_cert}"}

%__pesign_client_token %{!?pe_signing_token:"Fedora Signer (OpenSC Card)"}%{?pe_signing_token:"%{pe_signing_token}}
%__pesign_client_cert %{!?pe_signing_cert:"/CN=Fedora Secure Boot Signer"}%{?pe_signing_cert:"%{pe_signing_cert}}

%_pesign /usr/bin/pesign
%_pesign_client /usr/bin/pesign-client

# -i <input filename>
# -o <output filename>
# -C <output cert filename>
# -e <output sattr filename>
# -c <input certificate filename>	# rhel only
# -n <input certificate name>		# rhel only
# -a <input ca cert filename>		# rhel only
# -s 					# perform signing
%pesign(i:o:C:e:c:n:a:s)						\
  _pesign_nssdir=/etc/pki/pesign					\
  if [ %{__pesign_cert} = "Red Hat Test Certificate" ]; then		\
    _pesign_nssdir=/etc/pki/pesign-rh-test				\
  fi									\
  if [ -x %{_pesign} ] &&  						\\\
       [ "%{_target_cpu}" == "x86_64" -o 				\\\
         "%{_target_cpu}" == "aarch64" ]; then				\
    if [ "0%{?rhel}" -ge "7" -a -f /usr/bin/rpm-sign ]; then		\
      nss=$(mktemp -p $PWD -d)						\
      echo > ${nss}/pwfile						\
      certutil -N -d ${nss} -f ${nss}/pwfile				\
      certutil -A -n "ca" -t "CT,C," -i %{-a*} -d ${nss}		\
      certutil -A -n "signer" -t ",c," -i %{-c*} -d ${nss}		\
      sattrs=$(mktemp -p $PWD --suffix=.der)				\
      %{_pesign} %{-i} -E ${sattrs} --certdir ${nss} --force		\
      rpm-sign --key "%{-n*}" --rsadgstsign ${sattrs}			\
      %{_pesign} -R ${sattrs}.sig -I ${sattrs} %{-i}			\\\
                 --certdir ${nss} -c signer %{-o}			\
      rm -rf ${sattrs} ${sattrs}.sig ${nss}				\
    elif [ "%{vendor}" == "Fedora Project" -a				\\\
           "$(id -un)" == "mockbuild" -a				\\\
           "$(uname -m)" == "x86_64" ] &&				\\\
         grep -q ID=fedora /etc/os-release && 				\\\
         [[ "%{_buildhost}" =~ ^bkernel.* ]] &&			\\\
         ! [ -S /run/pesign/socket ]; then				\
      echo "No socket even though this is %{_buildhost}"		\
      ls -ld /run/pesign || :					\
      getfacl /run/pesign || :					\
      ls -l /run/pesign/socket || :				\
      getfacl /run/pesign/socket || :				\
      echo =========== env ==============				\
      set								\
      echo =========== env ==============				\
      exit 1								\
    elif [ -S /run/pesign/socket ]; then				\
      %{_pesign_client} -t %{__pesign_client_token}			\\\
                        -c %{__pesign_client_cert}			\\\
                        %{-i} %{-o} %{-e} %{-s} %{-C}			\
    else								\
      %{_pesign} %{__pesign_token} -c %{__pesign_cert}			\\\
		 --certdir ${_pesign_nssdir}				\\\
                 %{-i} %{-o} %{-e} %{-s} %{-C}				\
    fi									\
  else									\
    if [ -n "%{-i*}" -a -n "%{-o*}" ]; then				\
      mv %{-i*} %{-o*}							\
    elif [ -n "%{-i*}" -a -n "%{-e*}" ]; then				\
      touch %{-e*}							\
    fi									\
  fi									\
  if [ ! -s %{-o} ]; then						\
    if [ -e "%{-o*}" ]; then						\
      rm -f %{-o*}							\
    fi									\
    exit 1								\
  fi ;