Ch 9 Managing Software Flashcards
(133 cards)
RPM stands for what?
Red Hat Package Manager
What do EUS, E4S, and ELS before the RPM stand for?
Extended Update Support(2 yrs and 4 yrs), Extended Life Cycle Support
What are some benefits of dnf?
- The way it handles package dependencies
What does dnf stand for?
dandified yum (yum is its predecessor)
Why use software repos?
Helps when you’re installing and need dependencies
Name 3 file compression/archiving tools
.tar, .zip, .gz
Name 4 package formats for installing software
.exe (Windows), .rpm (Linux - redhat), .deb (Linux - debian), .pkg (MacOS)
What’s a benefit of installing from a repo vs installing packages individually?
A repo resolves dependencies automatically
How does dnf resolve dependencies?
dnf looks at the repos configured on a system to fetch dependencies automatically
What is an EPEL repo?
Extra Packages for Enterprise Linux. These are Fedora project repos that aren’t from RHEL.
What command line tool is used to manage subscriptions?
subscription-manager
In what circumstances would you need to specify which repos to use?
- You want to use nondefault software packages
- You are installing RHEL but not registering it
What are the four main parameters needed or a repo file?
[label] a repo file can have many sub repos, and each section starts with a label that ids each sub repo
name= specifies the name of the repo
baseurl= url pointing to repo location
gpgcheck= use if you want a gpg key used to verify package integrity
What directory contains repos?
/etc/yum.repos.d
What tool can generate a template repo file so you don’t have to remember the specifics?
dnf config-manager
e.g. dnf config-manager —add-repo=file:///repo/BaseOS
What options can you point to for a repo?
URI (file location), URL
file://URI or file:///repo/BaseOS
https://URL or https://reposerver.example.com
What additional option needs to be set after creating a repo file with dnf config-manager –add-repo?
set gpgcheck = 0 if you don’t want the gpg check. If you don’t specify, by default it will want a gpgcheck
Detail for repo parameter [label]
This is the section header inside the .repo file, enclosed in square brackets ([ ]).
It serves as a unique identifier for the repository and is used when running dnf commands (e.g., dnf repolist or dnf install –enablerepo=repoid)
See example below from the fedora.repo file.
[fedora]
name=Fedora $releasever - $basearch
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
enabled=1
countme=1
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
[fedora-debuginfo]
name=Fedora $releasever - $basearch - Debug
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Everything/$basearch/debug/tree/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-debug-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
[fedora-source]
name=Fedora $releasever - Source
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Everything/source/tree/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-source-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
~
Detail for the name= parameter
This is the human-readable description of the repository, specified by the name= directive.
It is displayed in dnf repolist and other output but is not used in commands.
example: inside the fedora.repo file
[fedora]
name=Fedora $releasever - $basearch
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
enabled=1
countme=1
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
[fedora-debuginfo]
name=Fedora $releasever - $basearch - Debug
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Everything/$basearch/debug/tree/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-debug-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
[fedora-source]
name=Fedora $releasever - Source
#baseurl=http://download.example/pub/fedora/linux/releases/$releasever/Everything/source/tree/
metalink=https://mirrors.fedoraproject.org/metalink?repo=fedora-source-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
repo_gpgcheck=0
type=rpm
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
skip_if_unavailable=False
~
Detail for the mirrorlist= parameter
Optional parameter that refers to a URL where information about mirror servers for this server can be obtained. Typically used for big online repos only
Detail for the baseurl= parameter
mandatory option that refers to the base URL or URI where the RPM packages are found
Detail for the gpgcheck= parameter
Set to 1 if a GNU Privacy Guard integrity check needs to b eperformed on the packages. If set to 1, a GPG key is required. This is also the default and will be set as such if you create a new repo with the repo creation command line tool.
Detail for the gpgkey= parameter
Specifies the location of the GPG key that is used to check package integrity
What sort of circumstances would lead to the use of a gpg check being invaluable?
- A repo is hacked and the download files are replaced/changed
- A man in the middle attack