From 30c917d1b34dbfa71345be817650f8133087fb4c Mon Sep 17 00:00:00 2001
From: Brett Mastbergen <bmastbergen@ciq.com>
Date: Tue, 14 Apr 2026 13:50:47 -0400
Subject: [PATCH 1/2] spec: update branding in package descriptions and log
 messages

---
 ciq/SPECS/kernel.spec | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/ciq/SPECS/kernel.spec b/ciq/SPECS/kernel.spec
index a6bf4dcd4e9bc..c2c72fe0d0c15 100644
--- a/ciq/SPECS/kernel.spec
+++ b/ciq/SPECS/kernel.spec
@@ -1405,7 +1405,7 @@ Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1
 AutoReq: no\
 AutoProv: yes\
 %description %{?1:%{1}-}modules-internal\
-This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat internal usage.\
+This package provides kernel modules for the %{?2:%{2} }kernel package for CIQ internal usage.\
 %{nil}
 
 #
@@ -1594,7 +1594,7 @@ Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{uname_suffix %{?1
 AutoReq: no\
 AutoProv: yes\
 %description %{?1:%{1}-}modules-partner\
-This package provides kernel modules for the %{?2:%{2} }kernel package for Red Hat partners usage.\
+This package provides kernel modules for the %{?2:%{2} }kernel package for CIQ partners usage.\
 %{nil}
 
 # Now, each variant package.
@@ -2034,7 +2034,7 @@ for opt in %{clang_make_opts}; do
   OPTS="$OPTS -m $opt"
 done
 %endif
-%{log_msg "Generate redhat configs"}
+%{log_msg "Generate CIQ configs"}
 RHJOBS=$RPM_BUILD_NCPUS SPECPACKAGE_NAME=%{name} ./process_configs.sh $OPTS %{specrpmversion}
 
 # We may want to override files from the primary target in case of building
@@ -2854,7 +2854,7 @@ BuildKernel() {
     # prune junk from kernel-debuginfo
     find $RPM_BUILD_ROOT/usr/src/kernels -name "*.mod.c" -delete
 
-    # Red Hat UEFI Secure Boot CA cert, which can be used to authenticate the kernel
+    # UEFI Secure Boot CA cert, which can be used to authenticate the kernel
     %{log_msg "Install certs"}
     mkdir -p $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer
 %if %{signkernel}
@@ -2867,7 +2867,7 @@ BuildKernel() {
 %endif
 
 %if 0%{?rhel}
-    # Red Hat IMA code-signing cert, which is used to authenticate package files
+    # IMA code-signing cert, which is used to authenticate package files
     install -m 0644 %{ima_signing_cert} $RPM_BUILD_ROOT%{_datadir}/doc/kernel-keys/$KernelVer/%{ima_cert_name}
 %endif
 

From a9d7eecb8f4ae8174d85e21d9db026dd8371a138 Mon Sep 17 00:00:00 2001
From: Brett Mastbergen <bmastbergen@ciq.com>
Date: Wed, 8 Apr 2026 09:40:06 -0400
Subject: [PATCH 2/2] github actions: add RPM build workflow for x86_64 and
 aarch64

---
 .github/workflows/rpm-build.yml | 55 +++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 .github/workflows/rpm-build.yml

diff --git a/.github/workflows/rpm-build.yml b/.github/workflows/rpm-build.yml
new file mode 100644
index 0000000000000..1ec8dfc9c29de
--- /dev/null
+++ b/.github/workflows/rpm-build.yml
@@ -0,0 +1,55 @@
+name: RPM Build
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  rpm-build-job:
+    strategy:
+      matrix:
+        include:
+          - arch: x86_64
+            runner: kernel-build
+            mock_config: rocky-9-x86_64
+          - arch: aarch64
+            runner: kernel-build-arm64
+            mock_config: rocky-9-aarch64
+    runs-on:
+      labels: ${{ matrix.runner }}
+    container:
+      image: rockylinux/rockylinux:9
+      options: --privileged --cpus 8
+    steps:
+      - name: Install tools and libraries
+        run: |
+          dnf install -y epel-release
+          dnf install -y mock git rust cargo zstd which
+          useradd -m -G mock mockbuild
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Generate tarball
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          ./ciq/SOURCES/generate_tarball.sh
+
+      - name: Build SRPM
+        run: |
+          mkdir -p ../build_files
+          chown mockbuild:mock ../build_files
+          su mockbuild -c "mock -v -r ${{ matrix.mock_config }} --resultdir=$(pwd)/../build_files \
+            --buildsrpm \
+            --sources=$(pwd)/ciq/SOURCES \
+            --spec=$(pwd)/ciq/SPECS/kernel.spec"
+
+      - name: Build RPM
+        run: |
+          SRPM=$(ls ../build_files/*.src.rpm | head -1)
+          su mockbuild -c "mock -v -r ${{ matrix.mock_config }} --resultdir=$(pwd)/../build_files $SRPM"