In CS-330 CentOS Stream Team added koji tags that should be used for secure boot signing with pesign. This ticket is the remaining work that needs to be done to have these packages signed for secure boot.

Here is the list of packages that are part of this task:

• grub2
• kernel
• kernel-rt
• fwupd
• shim
• kmod-*
• s390utils

Acceptance criteria:

• Secure boot signing for the above packages is in place