Name: ksigner Version: @VERSION@ Release: @RELEASE@%{?dist} Summary: Secure Boot kernel signing utility License: MIT URL: https://git.radon.win/radon/ksigner Source0: %{name}-%{version}.tar.gz BuildArch: noarch Requires: openssl Requires: mokutil Requires: sbsigntools Requires: hmaccalc Requires: sudo Requires: bash >= 4.0 %description A utility for signing Linux kernels with custom keys for Secure Boot. Supports signing individual kernels or all kernels. %prep %setup -q %build # Nothing to build - shell script %install # Create directories install -d %{buildroot}%{_bindir} install -d %{buildroot}%{_sysconfdir}/ksigner install -d %{buildroot}%{_unitdir} install -d %{buildroot}%{_sysconfdir}/kernel/postinst.d install -d %{buildroot}%{_mandir}/man8 # Install main script install -m 755 ksigner %{buildroot}%{_bindir}/ksigner # Install configuration file install -m 644 ksigner.conf %{buildroot}%{_sysconfdir}/ksigner/ksigner.conf # Install man page install -m 644 ksigner.8 %{buildroot}%{_mandir}/man8/ksigner.8 %post echo "===========================================" echo "Kernel Signer has been installed." echo "To set up kernel signing:" echo " 1. Run: sudo ksigner setup" echo " 2. Reboot your system" echo " 3. In MOK Manager: Enroll MOK → Continue → Yes → Enter password" echo "===========================================" %files %license LICENSE %doc README.md %{_bindir}/ksigner %config(noreplace) %{_sysconfdir}/ksigner/ksigner.conf %{_mandir}/man8/ksigner.8* %changelog * Tue Sep 23 2025 RadioactivePb - 1.0.1-1 - Initial RPM release - Added configuration file support