Compare commits

..

4 commits

Author SHA1 Message Date
Coiby Xu
667e783b37 Fix a typo in changelog
Signed-off-by: Coiby Xu <coxu@redhat.com>
2025-10-27 12:25:09 +08:00
Coiby Xu
3d7171c676 Release 1.6.2-7
Signed-off-by: Coiby Xu <coxu@redhat.com>
2025-10-27 11:53:12 +08:00
Coiby Xu
7e1ffed77c Allow packit to make and propose a build
Currently, only users with commit access to the dist-git repo can make
and propose a build. But packit doesn't have commit access to the repo.
So explicitly allow packit to do make and propose a build.

Fixes: e962d0c ("Use packit to automate ima-evm-utils releasing")
Signed-off-by: Coiby Xu <coxu@redhat.com>
2025-10-27 11:53:12 +08:00
Coiby Xu
47853f2cf6 Use RSAHEADER to tell if a package has been signed
Packages now use RPM v4 signature %{RSAHEADER}. %{SIGPGP} is the name
of the RPM v3 header+payload signature and can't be used to tell if
a package has been signed,

    # uname -r
    6.16.10-200.fc42.x86_64
    # rpm -q --queryformat "%{SIGPGP:pgpsig}\n" --all|grep -c "^(none)$"
    586
    # rpm -q --queryformat "%{RSAHEADER}\n" --all|grep -c "^(none)$"
    5

Signed-off-by: Coiby Xu <coxu@redhat.com>
2025-10-16 17:35:31 +08:00
3 changed files with 7 additions and 4 deletions

View file

@ -23,12 +23,12 @@ jobs:
# PR in src.fedoraproject.org been merged.
- job: koji_build
trigger: commit
allowed_pr_authors: ["all_committers"]
allowed_pr_authors: ["all_committers", "packit"]
dist_git_branches:
- fedora-all
# This is triggered at Fedora messaging bus about koji build finished.
- job: bodhi_update
trigger: commit
allowed_builders: ["all_committers"]
allowed_builders: ["all_committers", "packit"]
dist_git_branches:

View file

@ -132,7 +132,7 @@ if [[ -z $reinstall_threshold ]]; then
fi
fi
unsigned_packages_in_rpm_db=$(rpm -q --queryformat "%{SIGPGP:pgpsig}\n" "$package" | grep -c "^(none)$")
unsigned_packages_in_rpm_db=$(rpm -q --queryformat "%{RSAHEADER}\n" "$package" | grep -c "^(none)$")
if [[ $unsigned_packages_in_rpm_db -ge $reinstall_threshold ]]; then
add_by_reinstall

View file

@ -8,7 +8,7 @@
Name: ima-evm-utils
Version: 1.6.2
Release: 6%{?dist}
Release: 7%{?dist}
Summary: IMA/EVM support utilities
License: GPL-2.0-or-later
Url: https://github.com/linux-integrity/
@ -145,6 +145,9 @@ install -D %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/ima-setup
%{_libdir}/libimaevm.so
%changelog
* Thu Oct 16 2025 Coiby Xu <coxu@redhat.com> - 1.6.2-7
- ima-add-sigs: Use RSAHEADER to tell if a package has been signed
* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild