cobbler issue with delivering repo definitions
by Hymowitz, Eric B. (GSFC-444.0)[KBRwyle]
Greetings.
I'm running cobbler 2.6.11 . I've come across an issue, and please bear with me, because I don't grok cobbler enough to know if I'm asking the right question. I'm also wordy. :(
I have a cobbler server, and it hosts some mirrored repos. Those repos are defined (in /etc/yum.repos.d/) like this:
[rhel-6-workstation-supplementary-beta-rpms]
metadata_expire = 86400
sslclientcert = /etc/pki/entitlement/redacted.pem
baseurl = https://cdn.redhat.com/content/beta/rhel/workstation/6/$releasever/$basea...
proxy = https://redacted:80
ui_repoid_vars = releasever basearch
sslverify = 1
name = Red Hat Enterprise Linux 6 Workstation - Supplementary Beta (RPMs)
sslclientkey = /etc/pki/entitlement/redacted-key.pem
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
enabled = 0
sslcacert = /etc/rhsm/ca/redhat-uep.pem
gpgcheck = 1
And then I have my matching cobbler repo definition
Name : rhel-x86_64-workstation-supplementary-6
Apt Components (apt only) :
Apt Dist Names (apt only) :
Arch : x86_64
Breed : yum
Comment :
Createrepo Flags : <<inherit>>
Environment Variables : {'https_proxy': 'redacted:80',
'http_proxy': 'redacted:80'}
Keep Updated : True
Mirror : https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x86_6...
Mirror locally : True
Owners : ['admin']
Priority : 30
External proxy URL :
RPM List : []
Yum Options : {'gpgcheck': '1', 'sslclientkey': '/etc/pki/entitlement/redacted-key.pem', 'sslclientcert': '/etc/pki/entitlement/redacted.pem', 'sslcacert': '/etc/rhsm/ca/redhat-uep.pem'}
As I understand it, when cobbler does its "cobbler reposync", it will not use /etc/yum.repos.d/ , it will generate its own repo config from the cobbler repo options, and use that config to sync the repo. So I have to have those Yum Options listed because my cobbler server needs them because redhat requires them.
So far so good. However...
Those same Yum Options **also** appear in the repo file that is downloaded to my various clients:
[rhel-x86_64-workstation-supplementary-6]
name=rhel-x86_64-workstation-supplementary-6
baseurl=http://redacted/cobbler/repo_mirror/rhel-x86_64-workstation-supplementary-6
gpgcheck=1
sslclientkey=/etc/pki/entitlement/redacted-key.pem
sslclientcert=/etc/pki/entitlement/redacted.pem
sslcacert=/etc/rhsm/ca/redhat-uep.pem
enabled=1
priority=30
This is my problem. The key files are not installed on the clients. They aren't needed for the clients to get to my local server.
I guess I can use sed to remove those options from the repo config after it gets downloaded. I was just hoping there was a better way to say "my server needs different options than my clients".
Thanks.
Eric B. Hymowitz
Systems Administrator
Solar Dynamics Observatory (SDO)
Eric.B.Hymowitz(a)nasa.gov<mailto:Eric.B.Hymowitz@nasa.gov>