Greetings.

 

I’m running cobbler 2.6.11 .  I’ve come across an issue, and please bear with me, because I don’t grok cobbler enough to know if I’m asking the right question.  I’m also wordy. L

 

I have a cobbler server, and it hosts some mirrored repos.  Those repos are defined (in /etc/yum.repos.d/) like this:

 

[rhel-6-workstation-supplementary-beta-rpms]

metadata_expire = 86400

sslclientcert = /etc/pki/entitlement/redacted.pem

baseurl = https://cdn.redhat.com/content/beta/rhel/workstation/6/$releasever/$basearch/supplementary/os

proxy = https://redacted:80

ui_repoid_vars = releasever basearch

sslverify = 1

name = Red Hat Enterprise Linux 6 Workstation - Supplementary Beta (RPMs)

sslclientkey = /etc/pki/entitlement/redacted-key.pem

gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

enabled = 0

sslcacert = /etc/rhsm/ca/redhat-uep.pem

gpgcheck = 1

 

And then I have my matching cobbler repo definition

 

Name                           : rhel-x86_64-workstation-supplementary-6

Apt Components (apt only)      :

Apt Dist Names (apt only)      :

Arch                           : x86_64

Breed                          : yum

Comment                        :

Createrepo Flags               : <<inherit>>

Environment Variables          : {'https_proxy': 'redacted:80',

'http_proxy': 'redacted:80'}

Keep Updated                   : True

Mirror                         : https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x86_64/supplementary/os

Mirror locally                 : True

Owners                         : ['admin']

Priority                       : 30

External proxy URL             :

RPM List                       : []

Yum Options                    : {'gpgcheck': '1', 'sslclientkey': '/etc/pki/entitlement/redacted-key.pem', 'sslclientcert': '/etc/pki/entitlement/redacted.pem', 'sslcacert': '/etc/rhsm/ca/redhat-uep.pem'}

 

As I understand it, when cobbler does its “cobbler reposync”, it will not use /etc/yum.repos.d/ , it will generate its own repo config from the cobbler repo options, and use that config to sync the repo.  So I have to have those Yum Options listed because my cobbler server needs them because redhat requires them.

 

So far so good.  However...

 

Those same Yum Options **also** appear in the repo file that is downloaded to my various clients:

 

[rhel-x86_64-workstation-supplementary-6]

name=rhel-x86_64-workstation-supplementary-6

baseurl=http://redacted/cobbler/repo_mirror/rhel-x86_64-workstation-supplementary-6

gpgcheck=1

sslclientkey=/etc/pki/entitlement/redacted-key.pem

sslclientcert=/etc/pki/entitlement/redacted.pem

sslcacert=/etc/rhsm/ca/redhat-uep.pem

enabled=1

priority=30

 

This is my problem.  The key files are not installed on the clients.  They aren’t needed for the clients to get to my local server.

 

I guess I can use sed to remove those options from the repo config after it gets downloaded.  I was just hoping there was a better way to say “my server needs different options than my clients”.

 

Thanks.

 

Eric B. Hymowitz

Systems Administrator

Solar Dynamics Observatory (SDO)

Eric.B.Hymowitz@nasa.gov