Kickstart-list Digest, Vol 149, Issue 1

[Matthew]

Would either creating an etc/hosts file with the proper settings or a proxy
config work?

Matthew Conley
912-398-6704

On Jun 1, 2017 12:00 PM, <kickstart-list-request at redhat.com> wrote:

> Send Kickstart-list mailing list submissions to
>         kickstart-list at redhat.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://www.redhat.com/mailman/listinfo/kickstart-list
> or, via email, send a message with subject or body 'help' to
>         kickstart-list-request at redhat.com
>
> You can reach the person managing the list at
>         kickstart-list-owner at redhat.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Kickstart-list digest..."
>
> Today's Topics:
>
>    1. Addon Order (Alex Martin)
>
>
> ---------- Forwarded message ----------
> From: Alex Martin <alexmartin.bu at gmail.com>
> To: kickstart-list at redhat.com
> Cc:
> Bcc:
> Date: Thu, 1 Jun 2017 12:29:49 +0100
> Subject: Addon Order
> Hello,
>
> I have a bit of an odd use-case. Part of our environment is isolated off
> from the internet, so to get around this, I have mirrored the CentOS and
> Epel repos locally and running the installer against those.
>
> The environment is isolated off due to PCI compliance, so I'm trying to
> configure kickstart to select this profile at install.
>
> %addon org_fedora_oscap
>     content-type = scap-security-guide
>     profile = pci-dss
> %end
>
> The problem is, once the centos-release package is installed, it replaces
> or updates the /etc/yum.repos.d/CentOS-Base.repo files back to their
> defaults.
>
> This causes the installer to hang trying to download required scap files
> for that profile from the internet.
>
> I have attempted to create an addon which runs just after the packages
> install, but before the org_fedora_oscap addon, this new addon updates the
> repo URLs back to the mirrored location.
> /mnt/sysimage/etc/yum.repos.d/CentOS-Base.repo.
>
> However, despite the addon running fine, it seems to run AFTER the
> org_fedora_oscap addon.
>
> So basically, am I going around this the wrong way, or is there some logic
> behind which addons are executed in which order?
>
> The relevant part of the kickstart file looks roughly like this:
>
> %packages
> @^minimal
> @core
> chrony
> kexec-tools
> #Additional
> <list of more packages>
>
> %end
>
> %addon org_update_repo
> %end
>
>
> %addon org_fedora_oscap
>     content-type = scap-security-guide
>     profile = pci-dss
> %end
>
> I can post the full sanitised file if requested.
>
> My next option is to update the org_fedora_oscap addon to replace the
> paths, but I think I might be going around this all the wrong way.
>
> Would really appreciate any advice!
> Cheers.
> Alex
>
>
>
> _______________________________________________
> Kickstart-list mailing list
> Kickstart-list at redhat.com
> https://www.redhat.com/mailman/listinfo/kickstart-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/kickstart-list/attachments/20170601/1076d6e9/attachment.htm>