xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-05-31 10:06:39 +00:00
Code Issues Releases Wiki Activity

Merge pull request #7087 from peterwywong/disable_repos

Browse Source 
Disable internet repos to avoid unexpected and silent upgrades
This commit is contained in:
besawn 2022-01-07 13:08:40 -05:00 committed by GitHub
commit 38ef4e0716
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 17 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
xCAT-server/share/xcat/install/scripts/post.rhels8
View File

@ -18,3 +18,14 @@ do
sed -i 's/ONBOOT=no/ONBOOT=yes/' "$i"
fi
done
# List of internal repos to be disabled
internet_repo_file_list="oracle-linux-ol8.repo uek-ol8.repo Rocky-AppStream.repo Rocky-BaseOS.repo Rocky-Extras.repo CentOS-Base.repo"
for repo_file in $internet_repo_file_list
do
if [ -f /etc/yum.repos.d/$repo_file ]; then
sed -i -e 's/enabled=1/enabled=0/' /etc/yum.repos.d/$repo_file
fi
done

22
xCAT-server/share/xcat/netboot/rh/genimage
View File

@ -784,26 +784,16 @@ if ((-d "$rootimg_dir/usr/share/dracut") or (-d "$rootimg_dir/usr/lib/dracut"))
print "Enter the dracut mode. Dracut version: $dracutver. Dracut directory: $dracutdir.\n";
}
# List of internet repos to be disabled
#-- for centos, disable the internet repository
if (-e "$rootimg_dir/etc/yum.repos.d/CentOS-Base.repo") {
my $repo_content = `sed -e '/enabled/d' $rootimg_dir/etc/yum.repos.d/CentOS-Base.repo | sed -e '/^gpgkey/i enabled=0'`;
system("echo '$repo_content' > $rootimg_dir/etc/yum.repos.d/CentOS-Base.repo");
}
#
my @internet_repo_file_list = ("oracle-linux-ol8.repo", "uek-ol8.repo", "Rocky-AppStream.repo", "Rocky-BaseOS.repo", "Rocky-Extras.repo", "CentOS-Base.repo");
#-- Oracle Linux, disable internet repositories
if (-e "$rootimg_dir/etc/yum.repos.d/oracle-linux-ol8.repo") {
my $repo_content = `sed -e '/enabled/d' $rootimg_dir/etc/yum.repos.d/oracle-linux-ol8.repo | sed -e '/^gpgkey/i enabled=0'`;
system("echo '$repo_content' > $rootimg_dir/etc/yum.repos.d/oracle-linux-ol8.repo");
foreach ( @internet_repo_file_list ) {
if (-e "$rootimg_dir/etc/yum.repos.d/$_") {
system("sed -i -e 's/enabled=1/enabled=0/' $rootimg_dir/etc/yum.repos.d/$_");
}
}
if (-e "$rootimg_dir/etc/yum.repos.d/uek-ol8.repo") {
my $repo_content = `sed -e '/enabled/d' $rootimg_dir/etc/yum.repos.d/uek-ol8.repo | sed -e '/^gpgkey/i enabled=0'`;
system("echo '$repo_content' > $rootimg_dir/etc/yum.repos.d/uek-ol8.repo");
}
#
#-- run postinstall script
unless ($imagename) {
$postinstall_filename = imgutils::get_profile_def_filename($osver, $profile, $arch, $customdir, "postinstall");