Trevor,
Last I checked, the "subscription" is really just an x.509 client certificate
that allows the target to "log in" to the web server. Once the HTTPS session is
open, the honor system is about the only thing to keep you from pulling everything down
with reposync. You might be able to hijack that mechanism and insert a legitimate
certificate onto the runner without exposing the credentials to get the certificate.
Charlie Todd
Ball Aerosoace
On Dec 28, 2018, at 5:35 PM, Trevor Vaughan
<tvaughan@onyxpoint.com<mailto:tvaughan@onyxpoint.com>> wrote:
Sorry to be bombing the list, but I keep thinking of additional things.
So, CentOS has
https://app.vagrantup.com/centos/boxes/7<https://urldefense.proofpoint...
which they keep up to date and which makes it easy for me to 'vagrant up' my way
into testing.
RHEL has a hodgepodge of options:
https://app.vagrantup.com/boxes/search?utf8=%E2%9C%93&sort=downloads&...
but nothing actually viable and which would require a subscription registration to be able
to download packages and actually enable testing. (Honestly, a three hour subscription
would be just fine for every case that I can think of).
OEL also has a hodgepodge of options but, once you download it, you can just connect to
their repos and get on with life for CI testing (this isn't ideal since you don't
really know what has changed but again, it's probably "close enough" to make
sure something works).
Trevor
On Fri, Dec 28, 2018 at 5:14 PM Trevor Vaughan
<tvaughan@onyxpoint.com<mailto:tvaughan@onyxpoint.com>> wrote:
Basically, looking at
https://gitlab.com/simp/pupmod-simp-auditd/pipelines/39410693<https://...;,
that last bubble on the right is a publicly donated runner for my lovely FOSS project.
I haven't a clue how to make that work with a RHEL subscription without embedding my
credentials into someone else's computer ( I love the cloud and all but no thanks ).
Trevor
On Fri, Dec 28, 2018 at 5:12 PM Trevor Vaughan
<tvaughan@onyxpoint.com<mailto:tvaughan@onyxpoint.com>> wrote:
Because it's a flaming pain in the rear to get working in a publicly accessible CI
system without exposing secrets or cloning the entire RHEL infrastructure.
On Fri, Dec 28, 2018 at 3:16 PM Shawn Wells
<shawn@redhat.com<mailto:shawn@redhat.com>> wrote:
On 12/28/18 3:07 PM, Trevor Vaughan wrote:
Ugh..yeah, all of my compliance CI tests just broke!
Well, I'll give this a bit and if it doesn't pan out resurrect my RHEL
=> CentOS conversion script.
Alternatively, RHEL could post a Vagrant image with an active trial
license already hooked up to valid repos....alas, the holidays have
already passed. It is currently, non trivial to get working in a CI
environment.
Why use CentOS when RHEL developer subs are free?
https://developers.redhat.com/products/rhel/download/<https://urldefen...
https://developers.redhat.com/blog/2016/03/31/no-cost-rhel-developer-subs...
_______________________________________________
scap-security-guide mailing list --
scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>
To unsubscribe send an email to
scap-security-guide-leave@lists.fedorahosted.org<mailto:scap-security-guide-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html<https://urldefense.proofpoi...
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines<https://urldefe...
List Archives:
https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fe...
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --
_______________________________________________
scap-security-guide mailing list --
scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>
To unsubscribe send an email to
scap-security-guide-leave@lists.fedorahosted.org<mailto:scap-security-guide-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://urldefense.proofpoint.com/v2/url?u=https-3A__getfedora.org_code-2...
List Guidelines:
https://urldefense.proofpoint.com/v2/url?u=https-3A__fedoraproject.org_wi...
List Archives:
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.fedorahosted.o...
This message and any enclosures are intended only for the addressee. Please
notify the sender by email if you are not the intended recipient. If you are
not the intended recipient, you may not use, copy, disclose, or distribute this
message or its contents or enclosures to any other person and any such actions
may be unlawful. Ball reserves the right to monitor and review all messages
and enclosures sent to or from this email address.