The upstream 0-day bot found an issue with the existing patchset in the
rawhide kernel. Everything builds fine as a whole, but if one were to
bisect the patches, a build would break because the shim GUID is used
in a patch before it is actually defined.
Fix this by inserting a patch in the series to explicitly define that
and the image security database GUIDs. This posting is a refresh of the
whole series, for completeness.
josh