Dne 4.11.2017 v 01:20 Stephen John Smoogen napsal(a):
What I normally do in an enterprise setting is get the packages I am
going to install on the boxes and collect them to their own
repository. I then sign those packages with a rpm key that I control
and then have all the client boxes point to that repository. That way
I have better control of what is available to clients and if someone
decides that weechat should be installed on a server.. they will have
had to convince the change control team that it was needed. If the
systems were really change control or security critical, I make sure I
copy the source code for any auditing purposes or for
rebuilding/patching on my own as needed later.
The steps in setting up such a repository flow control is:
<EPEL> -- reposync --> <Local EPEL mirror> -- copy files I want
installed --> <Local Repo> --> Systems.
And on the enterprise level you can do that using:
https://theforeman.org/plugins/katello/
(for free, without support)
or with Red Hat Satellite (the same, but with support).
Mirek