%global rawhide_release 44 %global updates_testing_enabled 0 Summary: Fedora package repositories Name: fedora-repos Version: 43 Release: 2%{?eln:.eln%{eln}} License: MIT URL: https://fedoraproject.org/ Provides: fedora-repos(%{version}) = %{release} Requires: system-release(%{version}) Obsoletes: fedora-repos < 33-0.7 Obsoletes: fedora-repos-modular < 39-0.3 %if %{rawhide_release} == %{version} Requires: fedora-repos-rawhide = %{version}-%{release} %endif Requires: fedora-gpg-keys >= %{version}-%{release} BuildArch: noarch # Required by %%check BuildRequires: gnupg sed rpm Source1: archmap Source10: RPM-GPG-KEY-fedora-7-primary Source11: RPM-GPG-KEY-fedora-8-primary Source12: RPM-GPG-KEY-fedora-8-primary-original Source13: RPM-GPG-KEY-fedora-9-primary Source14: RPM-GPG-KEY-fedora-9-primary-original Source15: RPM-GPG-KEY-fedora-9-secondary Source16: RPM-GPG-KEY-fedora-10-primary Source17: RPM-GPG-KEY-fedora-11-primary Source18: RPM-GPG-KEY-fedora-12-primary Source19: RPM-GPG-KEY-fedora-13-primary Source20: RPM-GPG-KEY-fedora-13-secondary Source21: RPM-GPG-KEY-fedora-14-primary Source22: RPM-GPG-KEY-fedora-14-secondary Source23: RPM-GPG-KEY-fedora-15-primary Source24: RPM-GPG-KEY-fedora-15-secondary Source25: RPM-GPG-KEY-fedora-16-primary Source26: RPM-GPG-KEY-fedora-16-secondary Source27: RPM-GPG-KEY-fedora-17-primary Source28: RPM-GPG-KEY-fedora-17-secondary Source29: RPM-GPG-KEY-fedora-18-primary Source30: RPM-GPG-KEY-fedora-18-secondary Source31: RPM-GPG-KEY-fedora-19-primary Source32: RPM-GPG-KEY-fedora-19-secondary Source33: RPM-GPG-KEY-fedora-20-primary Source34: RPM-GPG-KEY-fedora-20-secondary Source35: RPM-GPG-KEY-fedora-21-primary Source36: RPM-GPG-KEY-fedora-21-secondary Source37: RPM-GPG-KEY-fedora-22-primary Source38: RPM-GPG-KEY-fedora-22-secondary Source39: RPM-GPG-KEY-fedora-23-primary Source40: RPM-GPG-KEY-fedora-23-secondary Source41: RPM-GPG-KEY-fedora-24-primary Source42: RPM-GPG-KEY-fedora-24-secondary Source43: RPM-GPG-KEY-fedora-25-primary Source44: RPM-GPG-KEY-fedora-25-secondary Source45: RPM-GPG-KEY-fedora-26-primary Source46: RPM-GPG-KEY-fedora-26-secondary Source47: RPM-GPG-KEY-fedora-27-primary Source48: RPM-GPG-KEY-fedora-28-primary Source49: RPM-GPG-KEY-fedora-29-primary Source50: RPM-GPG-KEY-fedora-30-primary Source51: RPM-GPG-KEY-fedora-31-primary Source52: RPM-GPG-KEY-fedora-32-primary Source53: RPM-GPG-KEY-fedora-33-primary Source54: RPM-GPG-KEY-fedora-34-primary Source55: RPM-GPG-KEY-fedora-35-primary Source56: RPM-GPG-KEY-fedora-36-primary Source57: RPM-GPG-KEY-fedora-37-primary Source58: RPM-GPG-KEY-fedora-38-primary Source59: RPM-GPG-KEY-fedora-39-primary Source60: RPM-GPG-KEY-fedora-40-primary Source61: RPM-GPG-KEY-fedora-41-primary Source62: RPM-GPG-KEY-fedora-42-primary Source63: RPM-GPG-KEY-fedora-43-primary Source64: RPM-GPG-KEY-fedora-44-primary Source65: RPM-GPG-KEY-fedora-45-primary # When bumping Rawhide to fN, create N+1 key (and update archmap). (This # ensures users have the next future key installed and referenced, even if they # don't update very often. This will smooth out Rawhide N->N+1 transition for them). Source150: RPM-GPG-KEY-fedora-iot-2019 # IMA certs: dracut integrity module only recognizes DER format Source500: fedora-ima-ca.der Source501: fedora-39-ima.der Source502: fedora-40-ima.der Source503: fedora-41-ima.der Source504: fedora-42-ima.der Source505: fedora-43-ima.der Source506: fedora-44-ima.der Source507: fedora-45-ima.der %description Fedora package repository files for yum and dnf along with gpg public keys. %package -n fedora-gpg-keys Summary: Fedora RPM keys Requires: filesystem >= 3.18-6 %description -n fedora-gpg-keys This package provides the RPM signature keys. %prep %build %install # Install the keys install -d -m 755 $RPM_BUILD_ROOT/etc/pki/rpm-gpg install -m 644 %{_sourcedir}/RPM-GPG-KEY* $RPM_BUILD_ROOT/etc/pki/rpm-gpg/ # Link the primary/secondary keys to arch files, according to archmap. # Ex: if there's a key named RPM-GPG-KEY-fedora-19-primary, and archmap # says "fedora-19-primary: i386 x86_64", # RPM-GPG-KEY-fedora-19-{i386,x86_64} will be symlinked to that key. pushd $RPM_BUILD_ROOT/etc/pki/rpm-gpg/ # Also add a symlink for Rawhide and ELN keys ln -s RPM-GPG-KEY-fedora-%{rawhide_release}-primary RPM-GPG-KEY-fedora-rawhide-primary ln -s RPM-GPG-KEY-fedora-%{rawhide_release}-primary RPM-GPG-KEY-fedora-eln-primary for keyfile in RPM-GPG-KEY*; do # resolve symlinks, so that we don't need to keep duplicate entries in archmap real_keyfile=$(basename $(readlink -f $keyfile)) key=${real_keyfile#RPM-GPG-KEY-} # e.g. 'fedora-20-primary' if ! grep -q "^${key}:" %{_sourcedir}/archmap; then echo "ERROR: no archmap entry for $key" exit 1 fi arches=$(sed -ne "s/^${key}://p" %{_sourcedir}/archmap) for arch in $arches; do # replace last part with $arch (fedora-20-primary -> fedora-20-$arch) ln -s $keyfile ${keyfile%%-*}-$arch # NOTE: RPM replaces %% with % done done # and add symlink for compat generic location ln -s RPM-GPG-KEY-fedora-%{version}-primary RPM-GPG-KEY-%{version}-fedora popd # Install the IMA certs install -d -m 755 $RPM_BUILD_ROOT/etc/keys/ima install -m 644 %{_sourcedir}/fedora*ima.der $RPM_BUILD_ROOT/etc/keys/ima/ install -d -m 755 $RPM_BUILD_ROOT/usr/share/ima/ install -m 644 %{_sourcedir}/fedora-ima-ca.der $RPM_BUILD_ROOT/usr/share/ima/ca.der %check # Make sure the Rawhide+1 key wasn't forgotten to be created rawhide_next=$((%{rawhide_release}+1)) test -n "$rawhide_next" || exit 1 if ! test -f $RPM_BUILD_ROOT/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${rawhide_next}-primary; then echo "ERROR: GPG key for Fedora ${rawhide_next} is not present" exit 1 fi # Check arch keys exists on supported architectures, and RPM considers # them valid TMPRING=$(mktemp) DBPATH=$(mktemp -d) for VER in %{version} %{rawhide_release} ${rawhide_next}; do echo -n > "$TMPRING" for ARCH in $(sed -ne "s/^fedora-${VER}-primary://p" %{_sourcedir}/archmap) do gpg --no-default-keyring --keyring="$TMPRING" \ --import $RPM_BUILD_ROOT%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-fedora-$VER-$ARCH rpm --dbpath "$DBPATH" --import $RPM_BUILD_ROOT%{_sysconfdir}/pki/rpm-gpg/RPM-GPG-KEY-fedora-$VER-$ARCH --test done # Ensure some arch key was imported gpg --no-default-keyring --keyring="$TMPRING" --list-keys | grep -A 2 '^pub\s' done rm -f "$TMPRING" %posttrans if [[ -f /etc/yum.repos.d/fedora.repo.rpmsave ]]; then rm /etc/yum.repos.d/fedora.repo.rpmsave fi if [[ -f /etc/yum.repos.d/fedora-updates.repo.rpmsave ]]; then rm /etc/yum.repos.d/fedora-updates.repo.rpmsave fi if [[ -f /etc/yum.repos.d/fedora-updates.repo.rpmsave ]]; then rm /etc/yum.repos.d/fedora-updates-testing.repo.rpmsave fi if [[ -f /etc/yum.repos.d/fedora-cisco-openh264.repo.rpmsave ]]; then rm /etc/yum.repos.d/fedora-cisco-openh264.repo.rpmsave fi %files -n fedora-gpg-keys %dir /etc/pki/rpm-gpg /etc/pki/rpm-gpg/RPM-GPG-KEY-* # ima-certs /etc/keys/ima/fedora*ima* /usr/share/ima/ca.der %changelog * Tue Apr 01 2025 Adam Williamson - 42-1 - Disable updates-testing for F42 release * Fri Jan 31 2025 Patrik Polakovic - 42-0.5 - Rawhide is now F43 - Update testing repository for F42 enabled * Wed Jan 10 2025 Samyak Jain - 42-0.4 - Add RPM-GPG-KEY-fedora-44-primary * Tue Oct 22 2024 Stephen Gallagher - 42-0.3 - ELN: Drop ResilientStorage * Wed Sep 18 2024 Stephen Gallagher - 42-0.2 - Use mirror links for ELN * Tue Aug 13 2024 Samyak Jain - 42-0.1 - Setup for rawhide being F42 * Sat Aug 10 2024 Samyak Jain - 41-0.3 - Add RPM-GPG-KEY-fedora-43-primary * Wed May 08 2024 Coiby Xu - 41-0.2 - add/update IMA certs * Tue Feb 13 2024 Samyak Jain - 41-0.1 - Setup for rawhide being F41 * Wed Sep 27 2023 Sandro Bonazzola - 40-0.2 - Allow ELN installation without Rawhide repos * Tue Aug 08 2023 Samyak Jain - 40-0.1 - Setup for rawhide being F40 * Fri Jul 21 2023 Peter Robinson - 39-0.4 - Update IMA keys location for kernel/dracut * Mon Jul 10 2023 Miro Hrončok - 39-0.3 - Drop fedora-repos-modular and fedora-repos-rawhide-modular packages - https://fedoraproject.org/wiki/Changes/RetireModularity * Sat Feb 18 2023 Kevin Fenzi - 39-0.2 - Include IMA public certs. * Wed Feb 08 2023 Tomas Hrcka - 39-0.1 - Setup for rawhide being F39 * Wed Jan 25 2023 Tomas Hrcka - 38-0.4 - Add RPM-GPG-KEY-fedora-40-primary * Tue Aug 16 2022 Adam Williamson - 38.0-3 - Fix RPM-GPG-KEY-fedora-39-primary (dustymabe) * Tue Aug 09 2022 Tomas Hrcka - 38-0.2 - Drop armhfp from archmap on f38,f39 * Tue Aug 09 2022 Tomas Hrcka - 38-0.1 - Setup for rawhide being F38 - Adding F39 key * Wed Jun 08 2022 Stephen Gallagher - 37-0.3 - ELN: don't enable layered product repos by default * Wed May 25 2022 Stephen Gallagher - 37-0.2 - Rework Fedora ELN repositories * Tue Feb 08 2022 Tomas Hrcka - 37-0.1 - Setup for rawhide being F37 - Adding F38 key * Tue Aug 17 2021 Tomas Hrcka - 36-0.3 - Remove spurious space in RPM-GPG-KEY-fedora-37-primary (cgwalters) * Tue Aug 10 2021 Tomas Hrcka - 36-0.2 - Setup for rawhide being F36 * Wed Apr 28 2021 Dusty Mabe - 35-0.4 - Enable the updates archive repo on non-rawhide. * Fri Feb 19 2021 Petr Menšík - 35-0.3 - Check arch key imports during build (#1872248) * Wed Feb 17 2021 Mohan Boddu - 35-0.2 - Support $releasever=rawhide on Rawhide (kparal) - Make archmap entries mandatory, except symlinks (kparal) - Fixing F36 key * Tue Feb 09 2021 Tomas Hrcka - 35-0.1 - Setup for rawhide being F35 * Tue Feb 09 2021 Mohan Boddu - 34-0.10 - Fixing archmap for F35 * Thu Feb 04 2021 Mohan Boddu - 34-0.9 - Adding F35 key * Wed Oct 14 2020 Stephen Gallagher - 34-0.8 - ELN: Drop dependency on fedora-repos-rawhide-modular * Tue Oct 13 2020 Stephen Gallagher - 34-0.7 - Ensure that the ELN GPG key always points at the Rawhide key * Tue Oct 13 2020 Stephen Gallagher - 34-0.6 - Drop the fedora-eln-modular.repo * Thu Oct 08 2020 Stephen Gallagher - 34-0.5 - Update the ELN repos for the BaseOS and AppStream split * Mon Oct 05 2020 Dusty Mabe - 34-0.4 - Add the fedora-repos-archive subpackage. * Fri Aug 21 2020 Miro Hrončok - 34-0.3 - Fix a copy-paste error in eln repo name - Drop fedora-modular from base package since it's in the modular subpackage - Fixes: rhbz#1869150 * Wed Aug 19 2020 Stephen Gallagher - 34-0.2 - Enable rebuilding of fedora-repos in ELN - Drop unused modularity-specific release information * Mon Aug 10 2020 Tomas Hrcka - 34-0.1 - Setup for rawhide being F34 * Thu Aug 06 2020 Mohan Boddu - 33-0.9 - Adding F34 key * Tue Jun 30 2020 Stephen Gallagher - 33-0.8 - Add optional repositories for ELN * Mon Jun 29 21:10:15 CEST 2020 Igor Raits - 33-0.7 - Split modular repos to the separate packages * Mon Jun 01 2020 Dusty Mabe - 33-0.6 - Add fedora compose ostree repo to fedora-repos-ostree * Mon Apr 13 2020 Stephen Gallagher - 33-0.5 - Add the release to the fedora-repos(NN) Provides: * Thu Apr 09 2020 Kalev Lember - 33-0.4 - Switch to metalink for fedora-cisco-openh264 and disable repo gpgcheck (#1768206) - Use the same metadata_expire time for fedora-cisco-openh264 and -debuginfo - Remove enabled_metadata key for fedora-cisco-openh264 * Sat Feb 22 2020 Neal Gompa - 33-0.3 - Enable fedora-cisco-openh264 repo by default * Wed Feb 19 2020 Adam Williamson - 33-0.2 - Restore baseurl lines, but with example domain * Tue Feb 11 2020 Mohan Boddu - 33-0.1 - Setup for rawhide being F33 * Tue Feb 11 2020 Mohan Boddu - 32-0.4 - Remove baseurl download.fp.o (puiterwijk) - Enabling dnf countme * Tue Jan 28 2020 Mohan Boddu - 32-0.3 - Adding F33 key * Mon Aug 19 2019 Kevin Fenzi - 32-0.2 - Fix f32 key having extra spaces. * Tue Aug 13 2019 Mohan Boddu - 32-0.1 - Adding F32 key - Setup for rawhide being f32 * Tue Mar 12 2019 Vít Ondruch - 31-0.3 - Allow to use newer GPG keys, so Rawhide can be updated after branch. * Thu Mar 07 2019 Sinny Kumari - 31-0.2 - Create fedora-repos-ostree sub-package * Tue Feb 19 2019 Tomas Hrcka - 31-0.1 - Setup for rawhide being f31 * Mon Feb 18 2019 Mohan Boddu - 30-0.4 - Adding F31 key * Sat Jan 05 2019 Kevin Fenzi - 30-0.3 - Add fedora-7-primary to archmap. Fixes bug #1531957 - Remove failovermethod option in repos (augenauf(Florian H)) * Tue Nov 13 2018 Mohan Boddu - 30-0.2 - Adding fedora-iot-2019 key - Enable skip_if_unavailable for cisco-openh264 repo * Tue Aug 14 2018 Mohan Boddu - 30-0.1 - Setup for rawhide being f30