From 1eff03692323fcaea9e3525d93d3271344b5cf11 Mon Sep 17 00:00:00 2001 From: Lance Bragstad Date: Thu, 12 Dec 2024 09:37:05 -0600 Subject: [PATCH] Add lock file for RPMs to enable hermetic builds This commit introduces a lock file for RPMs so that we can produce hermetic builds with Konflux, following the guidance in documentation: https://github.com/konflux-ci/docs/pull/192 --- ...nce-operator-must-gather-pull-request.yaml | 4 +- .../compliance-operator-must-gather-push.yaml | 4 +- images/must-gather/Containerfile | 2 +- images/must-gather/rpms.in.yaml | 18 ++ images/must-gather/rpms.lock.yaml | 300 ++++++++++++++++++ redhat.repo | 41 +++ 6 files changed, 366 insertions(+), 3 deletions(-) create mode 100644 images/must-gather/rpms.in.yaml create mode 100644 images/must-gather/rpms.lock.yaml create mode 100644 redhat.repo diff --git a/.tekton/compliance-operator-must-gather-pull-request.yaml b/.tekton/compliance-operator-must-gather-pull-request.yaml index 1d02b148c..94f8965aa 100644 --- a/.tekton/compliance-operator-must-gather-pull-request.yaml +++ b/.tekton/compliance-operator-must-gather-pull-request.yaml @@ -33,7 +33,9 @@ spec: - name: dockerfile value: images/must-gather/Containerfile - name: hermetic - value: "false" + value: "true" + - name: prefetch-input + value: '{"type": "rpm", "path": "images/must-gather/"}' pipelineSpec: description: | This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. diff --git a/.tekton/compliance-operator-must-gather-push.yaml b/.tekton/compliance-operator-must-gather-push.yaml index 0c5773c7b..8a2da6760 100644 --- a/.tekton/compliance-operator-must-gather-push.yaml +++ b/.tekton/compliance-operator-must-gather-push.yaml @@ -29,7 +29,9 @@ spec: - name: dockerfile value: images/must-gather/Containerfile - name: hermetic - value: "false" + value: "true" + - name: prefetch-input + value: '{"type": "rpm", "path": "images/must-gather/"}' pipelineSpec: description: | This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization. diff --git a/images/must-gather/Containerfile b/images/must-gather/Containerfile index 398870268..4e9c6d9c7 100644 --- a/images/must-gather/Containerfile +++ b/images/must-gather/Containerfile @@ -15,7 +15,7 @@ LABEL \ # Install openshift-clients, jq, tar, and rsync, which are required for # must-gather. -RUN microdnf -y install openshift-clients jq tar rsync --enablerepo="rhocp-4.16-for-rhel-9-x86_64-rpms" +RUN microdnf -y install openshift-clients jq tar rsync WORKDIR /go/src/github.com/ComplianceAsCode/compliance-operator diff --git a/images/must-gather/rpms.in.yaml b/images/must-gather/rpms.in.yaml new file mode 100644 index 000000000..f5a4d0012 --- /dev/null +++ b/images/must-gather/rpms.in.yaml @@ -0,0 +1,18 @@ +contentOrigin: + repofiles: + - ./redhat.repo + +packages: + - jq + - openshift-clients + - rsync + - tar + +arches: + - aarch64 + - x86_64 + - s390x + - ppc64le + +context: + containerfile: images/must-gather/Containerfile diff --git a/images/must-gather/rpms.lock.yaml b/images/must-gather/rpms.lock.yaml new file mode 100644 index 000000000..ff9e884a0 --- /dev/null +++ b/images/must-gather/rpms.lock.yaml @@ -0,0 +1,300 @@ +--- +lockfileVersion: 1 +lockfileVendor: redhat +arches: +- arch: aarch64 + packages: + - url: https://cdn.redhat.com/content/dist/layered/rhel9/aarch64/rhocp/4.16/os/Packages/o/openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.aarch64.rpm + repoid: rhocp-4.16-for-rhel-9-aarch64-rpms + size: 54053414 + checksum: sha256:4be4439b747cc7e125fd190e135520515fb8669dae54451d216aed2093a84805 + name: openshift-clients + evr: 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9 + sourcerpm: openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/b/bash-completion-2.11-5.el9.noarch.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 469639 + checksum: sha256:3b4ae87f0e9a13cda47f1c009eb2c63135dc22b2b4dd89a6310f8e8fbb59e30a + name: bash-completion + evr: 1:2.11-5.el9 + sourcerpm: bash-completion-2.11-5.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/j/jq-1.6-17.el9.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 188206 + checksum: sha256:63cca45f59cf0a3e8534c000b2a47b27b0bba49b8c2db9f2746b00f52fda3a6a + name: jq + evr: 1.6-17.el9 + sourcerpm: jq-1.6-17.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/l/libpkgconf-1.7.3-10.el9.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 38310 + checksum: sha256:9bdfccf6b092e0683aa6984f7c6caa737b30c0b1495e16abb03b5d1a5f8e787a + name: libpkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/o/oniguruma-6.9.6-1.el9.6.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 222676 + checksum: sha256:a75ad34bc945249c352dc690055b429a04b405f0f62c6bc0f0962e501b104ef6 + name: oniguruma + evr: 6.9.6-1.el9.6 + sourcerpm: oniguruma-6.9.6-1.el9.6.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/p/pkgconf-1.7.3-10.el9.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 45196 + checksum: sha256:aa38a3951a690d721a815ea8f9b01995a85f35a8540d8075205821011d0385e6 + name: pkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/p/pkgconf-m4-1.7.3-10.el9.noarch.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 16054 + checksum: sha256:91bafd6e06099451f60288327b275cfcc651822f6145176a157c6b0fa5131e02 + name: pkgconf-m4 + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/p/pkgconf-pkg-config-1.7.3-10.el9.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 12398 + checksum: sha256:47f1f744f96a2f3d360bc129837738dcebb1ee5032effc4472a891eea1d6a907 + name: pkgconf-pkg-config + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/r/rsync-3.2.3-20.el9.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 405766 + checksum: sha256:83e5198193ecd11eaa4472138697c08726bd8c9b8fed8670e5c883b6a5b76d57 + name: rsync + evr: 3.2.3-20.el9 + sourcerpm: rsync-3.2.3-20.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os/Packages/t/tar-1.34-7.el9.aarch64.rpm + repoid: rhel-9-for-aarch64-baseos-rpms + size: 900197 + checksum: sha256:44552dea889d350403c3074a33d7cb274b3f57553e47db998745df13f931b458 + name: tar + evr: 2:1.34-7.el9 + sourcerpm: tar-1.34-7.el9.src.rpm + source: [] + module_metadata: [] +- arch: ppc64le + packages: + - url: https://cdn.redhat.com/content/dist/layered/rhel9/ppc64le/rhocp/4.16/os/Packages/o/openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.ppc64le.rpm + repoid: rhocp-4.16-for-rhel-9-ppc64le-rpms + size: 51103274 + checksum: sha256:ed374f4499781593e46bc7feab47475d759ff855c94912b17723901e84cbd9cc + name: openshift-clients + evr: 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9 + sourcerpm: openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/b/bash-completion-2.11-5.el9.noarch.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 469639 + checksum: sha256:3b4ae87f0e9a13cda47f1c009eb2c63135dc22b2b4dd89a6310f8e8fbb59e30a + name: bash-completion + evr: 1:2.11-5.el9 + sourcerpm: bash-completion-2.11-5.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/j/jq-1.6-17.el9.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 207417 + checksum: sha256:e381d59df27801e91def44d49e3bb6aacedebbd4fe4d5b3d4ea5a636ce150c98 + name: jq + evr: 1.6-17.el9 + sourcerpm: jq-1.6-17.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/l/libpkgconf-1.7.3-10.el9.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 42712 + checksum: sha256:a96600fec79e7d94523816dc620203e812c4a08c82c07fb3bb62d7e9e6e1f661 + name: libpkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/o/oniguruma-6.9.6-1.el9.6.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 249364 + checksum: sha256:6a07dd01b88d7137f3d059162593c9be09bb8bb6b630f85f24ef36726f2361e0 + name: oniguruma + evr: 6.9.6-1.el9.6 + sourcerpm: oniguruma-6.9.6-1.el9.6.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/p/pkgconf-1.7.3-10.el9.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 46315 + checksum: sha256:a70516a3a8f016a80613bc071586cd653db12a650c4c9f057743125cb7ad7433 + name: pkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/p/pkgconf-m4-1.7.3-10.el9.noarch.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 16054 + checksum: sha256:91bafd6e06099451f60288327b275cfcc651822f6145176a157c6b0fa5131e02 + name: pkgconf-m4 + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/p/pkgconf-pkg-config-1.7.3-10.el9.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 12416 + checksum: sha256:1d641be62db76b074f4ca2d6b470d85dcf806d96e2c834337482a73984db1979 + name: pkgconf-pkg-config + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/r/rsync-3.2.3-20.el9.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 438760 + checksum: sha256:812d772d00253f15f5dd87c7e53509136cfeb48e9eb028e869cd427820daa99c + name: rsync + evr: 3.2.3-20.el9 + sourcerpm: rsync-3.2.3-20.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os/Packages/t/tar-1.34-7.el9.ppc64le.rpm + repoid: rhel-9-for-ppc64le-baseos-rpms + size: 937724 + checksum: sha256:f2cc206dfacc9981fad6cf33600ad28bcd1c573f16d8c18523dc9df52ca90660 + name: tar + evr: 2:1.34-7.el9 + sourcerpm: tar-1.34-7.el9.src.rpm + source: [] + module_metadata: [] +- arch: s390x + packages: + - url: https://cdn.redhat.com/content/dist/layered/rhel9/s390x/rhocp/4.16/os/Packages/o/openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.s390x.rpm + repoid: rhocp-4.16-for-rhel-9-s390x-rpms + size: 52977770 + checksum: sha256:34536532b11ada76f07d78f158499c97abdd7d218117d6eb00e946a25f91b5ba + name: openshift-clients + evr: 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9 + sourcerpm: openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/b/bash-completion-2.11-5.el9.noarch.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 469639 + checksum: sha256:3b4ae87f0e9a13cda47f1c009eb2c63135dc22b2b4dd89a6310f8e8fbb59e30a + name: bash-completion + evr: 1:2.11-5.el9 + sourcerpm: bash-completion-2.11-5.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/j/jq-1.6-17.el9.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 203971 + checksum: sha256:792e2c51e444d45cc8e10e1d24301078e9c4dcb4e6b3484f466cf3ff76c24a03 + name: jq + evr: 1.6-17.el9 + sourcerpm: jq-1.6-17.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/l/libpkgconf-1.7.3-10.el9.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 37876 + checksum: sha256:fa1da3b44d85663cceaa0faf8eb5f2f7325cc83c381d6018f303edd06cab5938 + name: libpkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/o/oniguruma-6.9.6-1.el9.6.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 225688 + checksum: sha256:67630347e4df461ccd7f7d803e46e03d078d3ac1795045f008f3bc89818d4e22 + name: oniguruma + evr: 6.9.6-1.el9.6 + sourcerpm: oniguruma-6.9.6-1.el9.6.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/p/pkgconf-1.7.3-10.el9.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 45258 + checksum: sha256:a5f966f792cacc4696e4187593a915fb56452dd272cf4c81d930968adb3ee00c + name: pkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/p/pkgconf-m4-1.7.3-10.el9.noarch.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 16054 + checksum: sha256:91bafd6e06099451f60288327b275cfcc651822f6145176a157c6b0fa5131e02 + name: pkgconf-m4 + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/p/pkgconf-pkg-config-1.7.3-10.el9.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 12411 + checksum: sha256:ef854bfe75102d994afb58510121164c4b9b8359b7d983cd8904c425a175b750 + name: pkgconf-pkg-config + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/r/rsync-3.2.3-20.el9.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 407920 + checksum: sha256:64bf419470d88adb1dd6f75c8067f9b2ca1d4c7ca90dc48f09535aeed99c794d + name: rsync + evr: 3.2.3-20.el9 + sourcerpm: rsync-3.2.3-20.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/s390x/baseos/os/Packages/t/tar-1.34-7.el9.s390x.rpm + repoid: rhel-9-for-s390x-baseos-rpms + size: 902370 + checksum: sha256:fa8758bac6a56830de66ad1ab623c87768065bcc6f8242faa42ac4198260d456 + name: tar + evr: 2:1.34-7.el9 + sourcerpm: tar-1.34-7.el9.src.rpm + source: [] + module_metadata: [] +- arch: x86_64 + packages: + - url: https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/rhocp/4.16/os/Packages/o/openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.x86_64.rpm + repoid: rhocp-4.16-for-rhel-9-x86_64-rpms + size: 54912665 + checksum: sha256:0ffd7347620fd10bb75774520e571702361a6d0352de9112979693d003964038 + name: openshift-clients + evr: 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9 + sourcerpm: openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/b/bash-completion-2.11-5.el9.noarch.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 469639 + checksum: sha256:3b4ae87f0e9a13cda47f1c009eb2c63135dc22b2b4dd89a6310f8e8fbb59e30a + name: bash-completion + evr: 1:2.11-5.el9 + sourcerpm: bash-completion-2.11-5.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/j/jq-1.6-17.el9.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 194646 + checksum: sha256:9e996fbd48660f2815b29c88e1fd3b2ac5359eafb811f6208c6c4814ffb11e5b + name: jq + evr: 1.6-17.el9 + sourcerpm: jq-1.6-17.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/l/libpkgconf-1.7.3-10.el9.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 38387 + checksum: sha256:4feae5941b73640bd86b8d506a657cac5b770043db1464fbcd207721b2159dda + name: libpkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/o/oniguruma-6.9.6-1.el9.6.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 226451 + checksum: sha256:a532fc644b41ead28ac07fb4217e2ceb9cdd5fdaadc13e9a02b7be3ee703bf85 + name: oniguruma + evr: 6.9.6-1.el9.6 + sourcerpm: oniguruma-6.9.6-1.el9.6.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/p/pkgconf-1.7.3-10.el9.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 45675 + checksum: sha256:bb47b4ecc499c308f41031a99e723827d152d5d750f59849d0c265d820944a26 + name: pkgconf + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/p/pkgconf-m4-1.7.3-10.el9.noarch.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 16054 + checksum: sha256:91bafd6e06099451f60288327b275cfcc651822f6145176a157c6b0fa5131e02 + name: pkgconf-m4 + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/p/pkgconf-pkg-config-1.7.3-10.el9.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 12438 + checksum: sha256:9a502d81d73d3303ceb53a06ad7ce525c97117ea64352174a33708bf3429283d + name: pkgconf-pkg-config + evr: 1.7.3-10.el9 + sourcerpm: pkgconf-1.7.3-10.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/r/rsync-3.2.3-20.el9.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 411143 + checksum: sha256:093a322b87dd5f287d4f46189f6eeb72168572f79bbeaf01a56a457838388886 + name: rsync + evr: 3.2.3-20.el9 + sourcerpm: rsync-3.2.3-20.el9.src.rpm + - url: https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/Packages/t/tar-1.34-7.el9.x86_64.rpm + repoid: rhel-9-for-x86_64-baseos-rpms + size: 910235 + checksum: sha256:17f2e592a2c04c050b690afeb9042e02521a0b5ee3288dad837463f4acf542c3 + name: tar + evr: 2:1.34-7.el9 + sourcerpm: tar-1.34-7.el9.src.rpm + source: [] + module_metadata: [] diff --git a/redhat.repo b/redhat.repo new file mode 100644 index 000000000..0b7937b4a --- /dev/null +++ b/redhat.repo @@ -0,0 +1,41 @@ +[rhocp-4.16-for-rhel-9-$basearch-rpms] +name = Red Hat OpenShift Container Platform 4.16 for RHEL 9 $basearch (RPMs) +baseurl = https://cdn.redhat.com/content/dist/layered/rhel9/$basearch/rhocp/4.16/os +enabled = 1 +gpgcheck = 1 +gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release +sslverify = 1 +sslcacert = /etc/rhsm-host/ca/redhat-uep.pem +sslclientkey = /etc/pki/entitlement-host/1063693491304658595-key.pem +sslclientcert = /etc/pki/entitlement-host/1063693491304658595.pem +sslverifystatus = 1 +metadata_expire = 86400 +enabled_metadata = 0 + +[rhel-9-for-$basearch-baseos-rpms] +name = Red Hat Enterprise Linux 9 for $basearch - BaseOS (RPMs) +baseurl = https://cdn.redhat.com/content/dist/rhel9/$releasever/$basearch/baseos/os +enabled = 1 +gpgcheck = 1 +gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release +sslverify = 1 +sslcacert = /etc/rhsm-host/ca/redhat-uep.pem +sslclientkey = /etc/pki/entitlement-host/1063693491304658595-key.pem +sslclientcert = /etc/pki/entitlement-host/1063693491304658595.pem +sslverifystatus = 1 +metadata_expire = 86400 +enabled_metadata = 1 + +[rhel-9-for-$basearch-appstream-rpms] +name = Red Hat Enterprise Linux 9 for $basearch - AppStream (RPMs) +baseurl = https://cdn.redhat.com/content/dist/rhel9/$releasever/$basearch/appstream/os +enabled = 1 +gpgcheck = 1 +gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release +sslverify = 1 +sslcacert = /etc/rhsm-host/ca/redhat-uep.pem +sslclientkey = /etc/pki/entitlement-host/1063693491304658595-key.pem +sslclientcert = /etc/pki/entitlement-host/1063693491304658595.pem +sslverifystatus = 1 +metadata_expire = 86400 +enabled_metadata = 1