Comment # 8 on bug 1134303 from Guillaume GARDET

(In reply to Michal Suchanek from comment #7)
> I think it is preferable to use $image so changes to image name does not
> cause regression in signing.

Ok.

> However, we should select explicitly which archs we want to sign as well.
> Signing ppc64 or s390x might break boot on some systems.

As only ARM and x86* have CONFIG_EFI_STUB=y, ppc64 and s390x will not be signed
anyway. Do you need explicit %ifarch to disable signing for ppc64 and s390x? Or
CONFIG_EFI_STUB=y condition is enough?