public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Gerd Hoffmann <kraxel@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/edk2] rawhide: update dbx to 20260901.2023 (v1.7.0)
Date: Tue, 08 Sep 2026 06:44:10 GMT [thread overview]
Message-ID: <178884985081.1.5211047572530782418.rpms-edk2-3a6497a81ef6@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/edk2
Branch : rawhide
Commit : 3a6497a81ef6614b50c50b5f6750afbfc9cb3ff4
Author : Gerd Hoffmann <kraxel@redhat.com>
Date : 2026-09-06T07:54:08+02:00
Stats : +18/-1 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/edk2/c/3a6497a81ef6614b50c50b5f6750afbfc9cb3ff4?branch=rawhide
Log:
update dbx to 20260901.2023 (v1.7.0)
---
diff --git a/DBXUpdate-20260901.2023.aa64.bin b/DBXUpdate-20260901.2023.aa64.bin
new file mode 100644
index 0000000..b210ee7
Binary files /dev/null and b/DBXUpdate-20260901.2023.aa64.bin differ
diff --git a/DBXUpdate-20260901.2023.x64.bin b/DBXUpdate-20260901.2023.x64.bin
new file mode 100644
index 0000000..3885599
Binary files /dev/null and b/DBXUpdate-20260901.2023.x64.bin differ
diff --git a/edk2.spec b/edk2.spec
index ee165bc..6396808 100644
--- a/edk2.spec
+++ b/edk2.spec
@@ -26,6 +26,7 @@
%define OPENSSL_VER 3.5.8
%define DBXDATE_2011 20260630.2011
+%define DBXDATE_2023 20260901.2023
# Undefine this to get *HUGE* (50MB+) verbose build logs
%define silent --silent
@@ -120,7 +121,9 @@ Source83: edk2-build.rhel-9
Source84: edk2-build.rhel-10
Source90: DBXUpdate-%{DBXDATE_2011}.x64.bin
+Source91: DBXUpdate-%{DBXDATE_2023}.x64.bin
Source92: DBXUpdate-%{DBXDATE_2011}.aa64.bin
+Source93: DBXUpdate-%{DBXDATE_2023}.aa64.bin
Patch0001: 0001-BaseTools-do-not-build-BrotliCompress-RH-only.patch
Patch0002: 0002-MdeModulePkg-remove-package-private-Brotli-include-p.patch
@@ -401,7 +404,7 @@ cp -a -- \
%{SOURCE50} \
%{SOURCE60} \
%{SOURCE80} %{SOURCE81} %{SOURCE82} %{SOURCE83} %{SOURCE84} \
- %{SOURCE90} %{SOURCE92} \
+ %{SOURCE90} %{SOURCE91} %{SOURCE92} %{SOURCE93} \
.
%build
@@ -455,19 +458,23 @@ python3 CryptoPkg/Library/OpensslLib/configure.py
virt-fw-vars --input %{RHELCFG}/ovmf/OVMF_VARS.fd \
--output %{RHELCFG}/ovmf/OVMF_VARS.secboot.fd \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
virt-fw-vars --input %{RHELCFG}/ovmf/OVMF.inteltdx.fd \
--output %{RHELCFG}/ovmf/OVMF.inteltdx.secboot.fd \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
%if %{qemuvars}
virt-fw-vars --output-json %{RHELCFG}/ovmf/vars.blank.json
virt-fw-vars --output-json %{RHELCFG}/ovmf/vars.secboot.json \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
%endif
build_iso %{RHELCFG}/ovmf
cp DBXUpdate-%{DBXDATE_2011}.x64.bin %{RHELCFG}/ovmf
+cp DBXUpdate-%{DBXDATE_2023}.x64.bin %{RHELCFG}/ovmf
%else
@@ -476,23 +483,28 @@ cp DBXUpdate-%{DBXDATE_2011}.x64.bin %{RHELCFG}/ovmf
virt-fw-vars --input Fedora/ovmf/OVMF_VARS.fd \
--output Fedora/ovmf/OVMF_VARS.secboot.fd \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
virt-fw-vars --input Fedora/ovmf/OVMF_VARS_4M.fd \
--output Fedora/ovmf/OVMF_VARS_4M.secboot.fd \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
virt-fw-vars --input Fedora/ovmf/OVMF.inteltdx.fd \
--output Fedora/ovmf/OVMF.inteltdx.secboot.fd \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
%if %{qemuvars}
virt-fw-vars --output-json Fedora/ovmf/vars.blank.json
virt-fw-vars --output-json Fedora/ovmf/vars.secboot.json \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot
%endif
build_iso Fedora/ovmf
cp DBXUpdate-%{DBXDATE_2011}.x64.bin Fedora/ovmf
+cp DBXUpdate-%{DBXDATE_2023}.x64.bin Fedora/ovmf
igvm-wrap --input Fedora/ovmf/OVMF_CODE_4M.fd \
--vars Fedora/ovmf/OVMF_VARS_4M.fd \
@@ -509,6 +521,7 @@ done
virt-fw-vars --input Fedora/ovmf/OVMF.stateless.fd \
--output Fedora/ovmf/OVMF.stateless.secboot.fd \
--set-dbx DBXUpdate-%{DBXDATE_2011}.x64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.x64.bin \
--enroll-redhat --secure-boot \
--set-fallback-no-reboot
@@ -539,9 +552,11 @@ done
virt-fw-vars --output-json %{RHELCFG}/aarch64/vars.blank.json
virt-fw-vars --output-json %{RHELCFG}/aarch64/vars.secboot.json \
--set-dbx DBXUpdate-%{DBXDATE_2011}.aa64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.aa64.bin \
--enroll-redhat --secure-boot
%endif
cp DBXUpdate-%{DBXDATE_2011}.aa64.bin %{RHELCFG}/aarch64
+cp DBXUpdate-%{DBXDATE_2023}.aa64.bin %{RHELCFG}/aarch64
%else
./edk2-build.py --config edk2-build.fedora %{?silent} --release-date "$RELEASE_DATE" -m armvirt
./edk2-build.py --config edk2-build.fedora.platforms %{?silent} -m aa64
@@ -549,9 +564,11 @@ cp DBXUpdate-%{DBXDATE_2011}.aa64.bin %{RHELCFG}/aarch64
virt-fw-vars --output-json Fedora/aarch64/vars.blank.json
virt-fw-vars --output-json Fedora/aarch64/vars.secboot.json \
--set-dbx DBXUpdate-%{DBXDATE_2011}.aa64.bin \
+ --add-dbx DBXUpdate-%{DBXDATE_2023}.aa64.bin \
--enroll-redhat --secure-boot
%endif
cp DBXUpdate-%{DBXDATE_2011}.aa64.bin Fedora/aarch64
+cp DBXUpdate-%{DBXDATE_2023}.aa64.bin Fedora/aarch64
%endif
for raw in */aarch64/*.raw; do
qcow2="${raw%.raw}.qcow2"
reply other threads:[~2026-09-08 6:44 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178884985081.1.5211047572530782418.rpms-edk2-3a6497a81ef6@fedoraproject.org \
--to=kraxel@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox