Red Hat Yum proxy support in Nexus?

Sonatype Nexus Repository
23

Hi Olu,

One RM server with multi yum-proxy repos for the same test server; repos - extras, optional.

Regards,
David.

24

David,

Thanks. Please some more questions:

1.) As you’re getting a 404 from RM on your Yum client, then I’m presuming that everyone of those repositories you’re proxying in RM are specified in your /etc/yum.repos.d/nexus.repo file on your Yum client machine?

2.) Did you set the javax.net.ssl.keyStore and javax.net.ssl.keyStorePassword system properties in your $NEXUS_HOME_DIRECTORY/bin/nexus.vmoptions file? If so, does the entitlement certificate you used to generate the keystore.p12 file (in steps 2 and 3 of our instructions) allow you to access all the remote urls you’re proxying in RM? I’m asking because a 404 returned by RM when proxying a RHEL Yum repository usually suggests a keystore was not set (i.e javax.net.ssl.keyStore and javax.net.ssl.keyStorePassword ) or something is wrong with the keystore specified (e.g the entitlement certificate only allows you to access some remote repos, that’s why I’m asking this question)

Regards
Olu

25

Hi Olu,

  1. Yes, one ~.repo file with each RM yum-proxy URL.
  2. Yes, keys are setup OK as the server repo is working fine now. The entitlement certificate is for the client box and should offer all the repos from RHEL the same as any other test server. However, I don;t rule this out as an issue. The errors; 14 and 404 are on the client box for the non-server repos. It may be the URL is not correct on the RM server for extras, optional and supplementary?. I didn’t change the server RHEL cdn URL just repeated steps 8 and 9 and it started to work on the client.

Regards,

David.

26

David,

Please is it possible for you to share the base_url specified in your /etc/yum.repos.d/nexus.repo file for one of the optional repos (i.e Repository Manager proxied optional repo) that isn’t working as well as the corresponding ‘Remote storage’ URL in the Repository Manager configuration for that repo?

Regards
Olu

27

Hi Olu,
Working repo;
a. RM server repo calling URL:
https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os
[nexusRHEL7Server]

b. Repo file on client box that works:
name = Nexus Repository - Server $releasever $basearch
enabled = 1
gpgcheck = 1
baseurl = http://xx.xx.xx.xx:8081/repository/RHEL7server/
ui_repoid_vars = releasever basearch
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
priority=1

Regards,

David

28

Hi Olu,

Did reply to your questions but it was blocked as spam!

Regards,
David.

29

David,

Thanks. That configuration is correct, hence the reason it’s working as expected. However, I actually wanted to see the URLs for one of the optional repos that is not working to help ascertain whether or not the problem you’re experiencing with the optional/extras etc repos are due to incorrect URLs.

Regards
Olu

30

Hi Olu,

Did try and send that as well but was blocked!.

Regards,

David.

31

You mean blocked by this site or blocked on your end?
-Joe

32

Hi Joe,

Blocked by the community site as spam.

Regards,

David

33

Hi David,
If possible, you can email me the detail at jtom@sonatype.com and I can relay to Olu.
I was unaware we had blocking setup here.
Thanks,
Joe

34

Hi David,

Thanks for emailing @jtom. I’ve had a look at the RM URL as well as the one specified in your *.repo file on your client and they look correct. I presume you’ve already checked that your entitlement certificate allows your Yum client to directly access the optional repo URL in question? That is, if you moved your nexus.repo file from /etc/yum.repos.d somewhere else, can your Yum client access that optional repo?

Thanks
Olu

35

hello, as for me, i’ve configured nexus to proxy this url
https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64

and client side is like this:

###RH7 Repo###
[rh7-proxy-devtools]
name=RH7 Proxy Devtools
baseurl=http://repo.sitename.ru:8081/repository/rh7-proxy/devtools/1/os
enabled=1
gpgcheck=1
gpgkey=http://repo.sitename.ru:8081/repository/KEYS/rpm/RPM-GPG-KEY-redhat-release

So for extras/os this looks like

[rh7-proxy-extras]
name=RH7 Proxy extras
baseurl=http://repo.sitename.ru:8081/repository/rh7-proxy/extras/os
enabled=1
gpgcheck=1
gpgkey=http://repo.sitename.ru:8081/repository/KEYS/rpm/RPM-GPG-KEY-redhat-release

hope that will help

36

Hi Everyone,

Thank you for all your help on this. All is working correctly. Checked the Entitlement certificate and it allows server on RHEL 6,7,8 etc, only! as its a 30 day evaluation.

Regards,
David.