From c967a6e19e25590543d9fc3e22cffe222d9cb610 Mon Sep 17 00:00:00 2001 From: Jason Rodriguez Date: Tue, 23 Jun 2026 16:38:17 -0400 Subject: [PATCH] Add ciq-grub2 virtual Provides so shim can require CIQ grub2 The CIQ shim must not boot upstream RESF grub2 (it lacks the grub.ciq_rocky SBAT entry and is not signed by the key the shim trusts). A version pin is unsafe: a newer Rocky grub2 would satisfy the range but still be wrong. Add ciq-grub2 and ciq-grub2- Provides to the EFI variant package so the shim can Requires the token directly. Co-Authored-By: Claude Opus 4.8 (1M context) --- SOURCES/grub.macros | 2 ++ 1 file changed, 2 insertions(+) diff --git a/SOURCES/grub.macros b/SOURCES/grub.macros index 733be0c..465cd7e 100644 --- a/SOURCES/grub.macros +++ b/SOURCES/grub.macros @@ -230,6 +230,8 @@ Requires: %{name}-tools = %{evr} \ # Add ciq-shim requirement, ONLY on ciq secureboot supported arches \ %ifarch x86_64 \ Requires: ciq-shim >= 15.8 \ +Provides: ciq-grub2 = %{evr} \ +Provides: ciq-grub2-%{1} = %{evr} \ %endif \ %{-p:Provides: %{name}-efi = %{evr}} \ %{-p:Obsoletes: %{name}-efi <= %{flagday}} \