The org_fedora_oscap addon which does the remediation bits runs in the /mnt/sysimage chroot environment and accesses the files in /etc/yum.repos.d (looking at strace) Because of this, I don't think it respects the repo or proxy lines in the kickstart file, hence my attempt to edit the repo files directly before the addon executing.
Just to check, the %pre section of the kickstart runs before the disk is partitioned, is the correct? And the %post sections run after the packages have been installed? So is there anyway to get files onto the target system before the packages are installed? Thanks Alex On 1 June 2017 at 23:48, bishop <[email protected]> wrote: > > Alex, > > /etc/yum.repos.d/CentOS-Base.repo isn't replaced or updated: it's a > config file, and appears to be config(noreplace). If you >it then your > troubles with that one should be over. > > I had to wait until I could check, but I was sure of it. And my own > cobbler-installed systems have relied on this since at least centos4, > despite many, many updates of the centos-release. > > (I use a modified %yum_repos macro in the kickstart to write a cron job > that creates a new repo file, so the repos in my profiles always launder > out into the subscribed hosts. Works well) > > If you *delete* that repo file, though, yes, of course, it's going to be > restored with a new copy. Maybe don't do that. > > - bish > > > > On Thu, Jun 1, 2017 at 7:29 AM, Alex Martin <[email protected] > > <mailto:[email protected]>> wrote: > > > > The problem is, once the centos-release package is installed, it > > replaces or updates the /etc/yum.repos.d/CentOS-Base.repo files back > > to their defaults. > > > > This causes the installer to hang trying to download required scap > > files for that profile from the internet. > > > > _______________________________________________ > Kickstart-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/kickstart-list >
_______________________________________________ Kickstart-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/kickstart-list
