Re: Kickstart-list Digest, Vol 149, Issue 1

[Matthew <simontek@xxxxxxxxx>]

Would either creating an etc/hosts file with the proper settings or a proxy config work?

Matthew Conley
912-398-6704

On Jun 1, 2017 12:00 PM, <kickstart-list-request@xxxxxxxxxx> wrote:

Send Kickstart-list mailing list submissions to
        kickstart-list@xxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
        https://www.redhat.com/mailman/listinfo/kickstart-list
or, via email, send a message with subject or body 'help' to
        kickstart-list-request@redhat.com

You can reach the person managing the list at
        kickstart-list-owner@redhat.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Kickstart-list digest..."

Today's Topics:

   1. Addon Order (Alex Martin)


---------- Forwarded message ----------
From: Alex Martin <alexmartin.bu@xxxxxxxxx>
To: kickstart-list@xxxxxxxxxx
Cc: 
Bcc: 
Date: Thu, 1 Jun 2017 12:29:49 +0100
Subject: Addon Order

Hello,

I have a bit of an odd use-case. Part of our environment is isolated off from the internet, so to get around this, I have mirrored the CentOS and Epel repos locally and running the installer against those.

The environment is isolated off due to PCI compliance, so I'm trying to configure kickstart to select this profile at install.

%addon org_fedora_oscap

    content-type = scap-security-guide

    profile = "">

%end

The problem is, once the centos-release package is installed, it replaces or updates the /etc/yum.repos.d/CentOS-Base.repo files back to their defaults.

This causes the installer to hang trying to download required scap files for that profile from the internet.

I have attempted to create an addon which runs just after the packages install, but before the org_fedora_oscap addon, this new addon updates the repo URLs back to the mirrored location.

/mnt/sysimage/etc/yum.repos.d/CentOS-Base.repo.

However, despite the addon running fine, it seems to run AFTER the org_fedora_oscap addon.

So basically, am I going around this the wrong way, or is there some logic behind which addons are executed in which order?

The relevant part of the kickstart file looks roughly like this:

%packages

@^minimal

@core

chrony

kexec-tools

#Additional

<list of more packages>

%end

%addon org_update_repo

%end

%addon org_fedora_oscap

    content-type = scap-security-guide

    profile = "">

%end

I can post the full sanitised file if requested. 

My next option is to update the org_fedora_oscap addon to replace the paths, but I think I might be going around this all the wrong way. 

Would really appreciate any advice!

Cheers.

Alex

_______________________________________________
Kickstart-list mailing list
Kickstart-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/kickstart-list

_______________________________________________
Kickstart-list mailing list
Kickstart-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/kickstart-list