Re: Kickstart-list Digest, Vol 149, Issue 1

--===============7859641028351825426==
Content-Type: multipart/alternative; boundary="089e0822ba2099526b0550e857c1"

--089e0822ba2099526b0550e857c1
Content-Type: text/plain; charset="UTF-8"

Would either creating an etc/hosts file with the proper settings or a proxy
config work?

Matthew Conley
912-398-6704

On Jun 1, 2017 12:00 PM, <[email protected]> wrote:

> Send Kickstart-list mailing list submissions to
>         [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://www.redhat.com/mailman/listinfo/kickstart-list
> or, via email, send a message with subject or body 'help' to
>         [email protected]
>
> You can reach the person managing the list at
>         [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Kickstart-list digest..."
>
> Today's Topics:
>
>    1. Addon Order (Alex Martin)
>
>
> ---------- Forwarded message ----------
> From: Alex Martin <[email protected]>
> To: [email protected]
> Cc:
> Bcc:
> Date: Thu, 1 Jun 2017 12:29:49 +0100
> Subject: Addon Order
> Hello,
>
> I have a bit of an odd use-case. Part of our environment is isolated off
> from the internet, so to get around this, I have mirrored the CentOS and
> Epel repos locally and running the installer against those.
>
> The environment is isolated off due to PCI compliance, so I'm trying to
> configure kickstart to select this profile at install.
>
> %addon org_fedora_oscap
>     content-type = scap-security-guide
>     profile = pci-dss
> %end
>
> The problem is, once the centos-release package is installed, it replaces
> or updates the /etc/yum.repos.d/CentOS-Base.repo files back to their
> defaults.
>
> This causes the installer to hang trying to download required scap files
> for that profile from the internet.
>
> I have attempted to create an addon which runs just after the packages
> install, but before the org_fedora_oscap addon, this new addon updates the
> repo URLs back to the mirrored location.
> /mnt/sysimage/etc/yum.repos.d/CentOS-Base.repo.
>
> However, despite the addon running fine, it seems to run AFTER the
> org_fedora_oscap addon.
>
> So basically, am I going around this the wrong way, or is there some logic
> behind which addons are executed in which order?
>
> The relevant part of the kickstart file looks roughly like this:
>
> %packages
> @^minimal
> @core
> chrony
> kexec-tools
> #Additional
> <list of more packages>
>
> %end
>
> %addon org_update_repo
> %end
>
>
> %addon org_fedora_oscap
>     content-type = scap-security-guide
>     profile = pci-dss
> %end
>
> I can post the full sanitised file if requested.
>
> My next option is to update the org_fedora_oscap addon to replace the
> paths, but I think I might be going around this all the wrong way.
>
> Would really appreciate any advice!
> Cheers.
> Alex
>
>
>
> _______________________________________________
> Kickstart-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/kickstart-list
>

--089e0822ba2099526b0550e857c1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Would either creating an etc/hosts file with the proper s=
ettings or a proxy config work?<br><br><div data-smartmail=3D"gmail_signatu=
re">Matthew Conley<br>912-398-6704</div></div><div class=3D"gmail_extra"><b=
r><div class=3D"gmail_quote">On Jun 1, 2017 12:00 PM,  &lt;<a href=3D"mailt=
o:[email protected]">[email protected]</a>&=
gt; wrote:<br type=3D"attribution"><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send Kic=
kstart-list mailing list submissions to<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:[email protected]">ki=
[email protected]</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"https://www.redhat.com/mailman/listi=
nfo/kickstart-list" rel=3D"noreferrer" target=3D"_blank">https://www.redhat=
.com/<wbr>mailman/listinfo/kickstart-<wbr>list</a><br>
or, via email, send a message with subject or body &#39;help&#39; to<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:kickstart-list-request@redhat=
.com">kickstart-list-request@redhat.<wbr>com</a><br>
<br>
You can reach the person managing the list at<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:[email protected]=
om">kickstart-list-owner@redhat.<wbr>com</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than &quot;Re: Contents of Kickstart-list digest...&quot;<br>
<br>Today&#39;s Topics:<br>
<br>
=C2=A0 =C2=A01. Addon Order (Alex Martin)<br>
<br><br>---------- Forwarded message ----------<br>From:=C2=A0Alex Martin &=
lt;<a href=3D"mailto:[email protected]">[email protected]</a>&g=
t;<br>To:=C2=A0<a href=3D"mailto:[email protected]">kickstart-list@=
redhat.com</a><br>Cc:=C2=A0<br>Bcc:=C2=A0<br>Date:=C2=A0Thu, 1 Jun 2017 12:=
29:49 +0100<br>Subject:=C2=A0Addon Order<br><div dir=3D"ltr">Hello,<div><br=
></div><div>I have a bit of an odd use-case. Part of our environment is iso=
lated off from the internet, so to get around this, I have mirrored the Cen=
tOS and Epel repos locally and running the installer against those.</div><d=
iv><br></div><div>The environment is isolated off due to PCI compliance, so=
 I&#39;m trying to configure kickstart to select this profile at install.</=
div><div><br></div><div><div>%addon org_fedora_oscap</div><div>=C2=A0 =C2=
=A0 content-type =3D scap-security-guide</div><div>=C2=A0 =C2=A0 profile =
=3D pci-dss</div><div>%end</div></div><div><br></div><div>The problem is, o=
nce the centos-release package is installed, it replaces or updates the /et=
c/yum.repos.d/CentOS-Base.<wbr>repo files back to their defaults.</div><div=
><br></div><div>This causes the installer to hang trying to download requir=
ed scap files for that profile from the internet.</div><div><br></div><div>=
I have attempted to create an addon which runs just after the packages inst=
all, but before the org_fedora_oscap addon, this new addon updates the repo=
 URLs back to the mirrored location.</div><div>/mnt/sysimage/etc/yum.repos.=
d/<wbr>CentOS-Base.repo.</div><div><br></div><div>However, despite the addo=
n running fine, it seems to run AFTER the org_fedora_oscap addon.</div><div=
><br></div><div>So basically, am I going around this the wrong way, or is t=
here some logic behind which addons are executed in which order?</div><div>=
<br></div><div>The relevant part of the kickstart file looks roughly like t=
his:</div><div><br></div><div><div>%packages</div><div>@^minimal</div><div>=
@core</div><div>chrony</div><div>kexec-tools</div><div>#Additional</div><di=
v>&lt;list of more packages&gt;</div><div><br></div><div>%end</div></div><d=
iv><br></div><div><div>%addon org_update_repo</div><div>%end</div><div><br>=
</div><div><br></div><div>%addon org_fedora_oscap</div><div>=C2=A0 =C2=A0 c=
ontent-type =3D scap-security-guide</div><div>=C2=A0 =C2=A0 profile =3D pci=
-dss</div><div>%end</div></div><div><br></div><div>I can post the full sani=
tised file if requested.=C2=A0</div><div><br></div><div>My next option is t=
o update the org_fedora_oscap addon to replace the paths, but I think I mig=
ht be going around this all the wrong way.=C2=A0</div><div><br></div><div>W=
ould really appreciate any advice!</div><div>Cheers.</div><div>Alex</div><d=
iv><br></div><div><br></div></div>
<br>______________________________<wbr>_________________<br>
Kickstart-list mailing list<br>
<a href=3D"mailto:[email protected]">[email protected]</a><=
br>
<a href=3D"https://www.redhat.com/mailman/listinfo/kickstart-list" rel=3D"n=
oreferrer" target=3D"_blank">https://www.redhat.com/<wbr>mailman/listinfo/k=
ickstart-<wbr>list</a><br></blockquote></div></div>

--089e0822ba2099526b0550e857c1--


--===============7859641028351825426==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Kickstart-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/kickstart-list
--===============7859641028351825426==--