Greetings.
I'm running cobbler 2.6.11 . I've come across an issue, and please bear with me,
because I don't grok cobbler enough to know if I'm asking the right question.
I'm also wordy. :(
I have a cobbler server, and it hosts some mirrored repos. Those repos are defined (in
/etc/yum.repos.d/) like this:
[rhel-6-workstation-supplementary-beta-rpms]
metadata_expire = 86400
sslclientcert = /etc/pki/entitlement/redacted.pem
baseurl =
https://cdn.redhat.com/content/beta/rhel/workstation/6/$releasever/$basea...
proxy =
https://redacted:80
ui_repoid_vars = releasever basearch
sslverify = 1
name = Red Hat Enterprise Linux 6 Workstation - Supplementary Beta (RPMs)
sslclientkey = /etc/pki/entitlement/redacted-key.pem
gpgkey =
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
enabled = 0
sslcacert = /etc/rhsm/ca/redhat-uep.pem
gpgcheck = 1
And then I have my matching cobbler repo definition
Name : rhel-x86_64-workstation-supplementary-6
Apt Components (apt only) :
Apt Dist Names (apt only) :
Arch : x86_64
Breed : yum
Comment :
Createrepo Flags : <<inherit>>
Environment Variables : {'https_proxy': 'redacted:80',
'http_proxy': 'redacted:80'}
Keep Updated : True
Mirror :
https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x86_6...
Mirror locally : True
Owners : ['admin']
Priority : 30
External proxy URL :
RPM List : []
Yum Options : {'gpgcheck': '1', 'sslclientkey':
'/etc/pki/entitlement/redacted-key.pem', 'sslclientcert':
'/etc/pki/entitlement/redacted.pem', 'sslcacert':
'/etc/rhsm/ca/redhat-uep.pem'}
As I understand it, when cobbler does its "cobbler reposync", it will not use
/etc/yum.repos.d/ , it will generate its own repo config from the cobbler repo options,
and use that config to sync the repo. So I have to have those Yum Options listed because
my cobbler server needs them because redhat requires them.
So far so good. However...
Those same Yum Options **also** appear in the repo file that is downloaded to my various
clients:
[rhel-x86_64-workstation-supplementary-6]
name=rhel-x86_64-workstation-supplementary-6
baseurl=http://redacted/cobbler/repo_mirror/rhel-x86_64-workstation-supplementary-6
gpgcheck=1
sslclientkey=/etc/pki/entitlement/redacted-key.pem
sslclientcert=/etc/pki/entitlement/redacted.pem
sslcacert=/etc/rhsm/ca/redhat-uep.pem
enabled=1
priority=30
This is my problem. The key files are not installed on the clients. They aren't
needed for the clients to get to my local server.
I guess I can use sed to remove those options from the repo config after it gets
downloaded. I was just hoping there was a better way to say "my server needs
different options than my clients".
Thanks.
Eric B. Hymowitz
Systems Administrator
Solar Dynamics Observatory (SDO)
Eric.B.Hymowitz@nasa.gov<mailto:Eric.B.Hymowitz@nasa.gov>