KeyStore YUM Nexus Docker

Hello together,

thanks for your help, but I still couldn’t solve the problem.

First of, the logs. They show, how the request reaches, but gets deny: HTTP code 403.

[13/May/2026:10:11:14 +0200] - "GET https://cdn.redhat.com:443/ HTTP/1.1" 403 368 434
[13/May/2026:10:11:54 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/10/x86_64/baseos/os/repodata/repomd.xml HTTP/1.1" 403 467 233
[13/May/2026:10:12:11 +0200] - "GET https://cdn.redhat.com:443/ HTTP/1.1" 403 364 172
[13/May/2026:10:12:15 +0200] - "GET https://cdn.redhat.com:443/ HTTP/1.1" 403 368 295 
[13/May/2026:10:12:19 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/10/x86_64/baseos/os/repodata/repomd.xml HTTP/1.1" 403 467 18 
[13/May/2026:10:12:58 +0200] - "GET https://cdn.redhat.com:443/ HTTP/1.1" 403 364 330 
[13/May/2026:10:13:08 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/10/x86_64/baseos/os/repodata/repomd.xml HTTP/1.1" 403 467 209 
[13/May/2026:10:13:19 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/10/x86_64/baseos/os/Packages/k/kernel-core-6.12.0-124.52.1.el10_1.x86_64.rpm HTTP/1.1" 403 552 21 
[13/May/2026:10:13:19 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/10/x86_64/baseos/os/Packages/k/kernel-modules-6.12.0-124.52.1.el10_1.x86_64.rpm HTTP/1.1" 403 555 224 
[13/May/2026:10:13:19 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/10/x86_64/baseos/os/Packages/k/kernel-6.12.0-124.52.1.el10_1.x86_64.rpm HTTP/1.1" 403 543 240 
[13/May/2026:10:14:32 +0200] - "GET https://cdn.redhat.com/content/dist/rhel10/x86_64/baseos/os/repodata/repomd.xml HTTP/1.1" 403 460 434 

In addition, I tryd to run the nexus with diffrent premissions settings. Neither to run the container with root solve the problem, nor to change the premissions of the files to 0644. Also not a combination of boths.

admin@nexus:/opt/nexus/compose$ ll keystore.yum.p12
-rw-r--r-- 1 root root 4658 May 13 10:02 keystore.yum.p12
  nexus:
    image: sonatype/nexus3
    user: "root:root"
    volumes:

Last but not least where the thing with the SHA1. See article by Sonatype. I tryd to solve the problem, by ensure, to use a container image based of AlpineLinux. But that didnt change the situation. I got still the same problems as before. Anything works nice, niether the access to the officel RHEL repos.

  nexus:
    image: sonatype/nexus3:3.92.1-alpine
    volumes:
      - /opt/nexus/rundir:/nexus-data:rw
      # mount yum keystore file for RHEL repo
      # see also https://help.sonatype.com/en/proxying-rhel-yum-repositories.html
      - /opt/nexus/compose/config/nexus.vmoptions:/opt/sonatype/nexus/bin/nexus.vmoptions:ro
      - /opt/nexus/compose/certs/keystore.yum.p12:/opt/keystore.yum.p12:ro

Accidentally, does I updated on that way my nexus repository. The new version allow me the see the files via the webinterface. Both exists, been accessable and readable.

(Have to say, the seound file does also exists, but I can upload only one images. Policies of the forum. Cant post two images.)

When someone is being intressted to know, how I create my keystore file - I write once something for: https://github.com/Alphabeit/Costum-Ansible-Modules/tree/main/keystore_for_nexus