From 473e895a719ed75fafd480fa231d43ee8c8297a2 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Fri, 15 May 2026 16:54:50 +0300 Subject: [PATCH] Expose Secure Boot required packages per platform --- alws/routers/platforms.py | 30 +++++++++++++++++------- reference_data/platforms.yaml | 44 +++++++++++++++++++++++++++++++++++ 2 files changed, 65 insertions(+), 9 deletions(-) diff --git a/alws/routers/platforms.py b/alws/routers/platforms.py index 58868f85..d6f9581e 100644 --- a/alws/routers/platforms.py +++ b/alws/routers/platforms.py @@ -45,15 +45,27 @@ async def get_platforms( db: AsyncSession = Depends(AsyncSessionDependency(key=get_async_db_key())), ): platforms = await pl_crud.get_platforms(db) - return [ - { - **platform_schema.PlatformResponse.from_orm(platform).dict( - exclude={"data"} - ), - "data": {"versions": (platform.data or {}).get("versions", [])}, - } - for platform in platforms - ] + result = [] + for platform in platforms: + platform_data = platform.data or {} + mock_data = platform_data.get("mock", {}) or {} + result.append( + { + **platform_schema.PlatformResponse.from_orm(platform).dict( + exclude={"data"} + ), + "data": { + "versions": platform_data.get("versions", []), + # Expose the list of SRPM names that must be built with + # secure boot enabled so the UI can warn the user when + # one of these packages is queued without is_secure_boot. + "secure_boot_required_packages": mock_data.get( + "secure_boot_required_packages", [] + ), + }, + } + ) + return result @router.patch( diff --git a/reference_data/platforms.yaml b/reference_data/platforms.yaml index 5186089b..e749f594 100644 --- a/reference_data/platforms.yaml +++ b/reference_data/platforms.yaml @@ -59,6 +59,17 @@ "%modsign_os": "almalinux8" secure_boot_additional_packages: - al-signing-client + secure_boot_required_packages: + - fwupd + - fwupd-efi + - fwupdate + - grub2 + - kernel + - kernel-rt + - kmod-kvdo + - kmod-redhat-oracleasm + - nvidia-open-kmod + - shim mock_dist: el8 timeout: 43200 versions: @@ -1760,6 +1771,17 @@ "%modsign_os": "almalinux9" secure_boot_additional_packages: - al-signing-client + secure_boot_required_packages: + - fwupd + - fwupd-efi + - fwupdate + - grub2 + - kernel + - kernel-rt + - kmod-kvdo + - kmod-redhat-oracleasm + - nvidia-open-kmod + - shim mock_dist: el9 timeout: 43200 versions: @@ -3486,6 +3508,17 @@ "%modsign_os": "almalinux10" secure_boot_additional_packages: - al-signing-client + secure_boot_required_packages: + - fwupd + - fwupd-efi + - fwupdate + - grub2 + - kernel + - kernel-rt + - kmod-kvdo + - kmod-redhat-oracleasm + - nvidia-open-kmod + - shim mock_dist: el10 timeout: 43200 versions: @@ -5538,6 +5571,17 @@ "%modsign_os": "almalinux10" secure_boot_additional_packages: - al-signing-client + secure_boot_required_packages: + - fwupd + - fwupd-efi + - fwupdate + - grub2 + - kernel + - kernel-rt + - kmod-kvdo + - kmod-redhat-oracleasm + - nvidia-open-kmod + - shim mock_dist: el10 timeout: 172800 yum: