YUM Repositories

Triggering RPM Metadata Updates

When enabled, the metadata calculation is triggered automatically by some actions, and can also be invoked manually by others. Either way, the metadata produced is served to YUM clients.

Automatic

RPM metadata is automatically calculated:

1. When deploying/removing/copying/moving an RPM file.
2. When performing content import (both system and repository imports).

Manual 

You can manually invoke RPM metadata calculation:

1. By selecting the local repository in the Tree Browser and clicking Recalculate Index in the Actions menu.
2. Via Artifactory's REST-API.

Configuration

To create an RPM local repository, select RPM as the Package Type when you create the repository.

Local Repositories

To enable automatic RPM metadata calculation on a local YUM repository, in the YUMSettings section of the Basic settings screen, set Auto-calculate YUM Metadata.

REPO_ROOT/$ARTIFACT_NAME/$ARTIFACT_VERSION/$ARCHITECTURE/FILE_NAME
- or -
rpm-local/foo/1.0/x64/foo-1.0-x64.rpmm

Remote Repositories

Artifactory remote repositories support RPMs out-of-the-box, and there is no need for any special configuration needed in order to work with RPMs in a remote repository.

All you need to do is point your YUM client at the remote repository, and you are ready to use YUM with Artifactory.

To define a remote repository to proxy an YUM remote repository, follow the steps below:

1. In the Admin module under Repositories | Remote, click "New" to create a new remote repository.
2. Set the Repository Key value, and specify the URL to the remote repository in the URL field as displayed below.
   
3. Click "Save & Finish"
4. Back in the Artifacts module, in theTree Browser, select the repository. Note that in the Tree Browser, the repository name is appended with "-cache".
5. Click Set Me Up and copy the value of the baseurl tag.
6. Next, create the /etc/yum.repos.d/targetCentos.repo file and paste the following configuration into it: 

[targetCentos]
name=targetCentos
baseurl=http://localhost:8081/artifactory/targetCentos/
enabled=1
gpgcheck=0

Virtual Repositories

A Virtual Repository defined in Artifactory aggregates packages from both local and remote repositories.
This allows you to access both locally hosted RPM packages and remote proxied RPM repositories from a single URL defined for the virtual repository.
To define a virtual YUM repository, create a virtual repository, set the Package Type  to be RPM,  and select the underlying local and remote RPM repositories to include in the Basic settings tab.

To allow deploying packages to this repository, set the Default Deployment Repository.

Signing RPM Metadata 

Artifactory supports using a GPG key to sign RPM metadata for authentication by the YUM client.

To generate a pair of GPG keys and upload them to Artifactory, please refer to GPG Signing.

Using Yum to Deploy RPM Packages

Once you have configured your local machine to install RPM packages from your YUM local repository, you may also deploy RPM packages to the same repository using the UI or using the REST API. 

Through the REST API you also have the option to deploy by checksum or deploying from an archive.   

For example, to deploy an RPM package into a repository called rpm-local you could use the following:

curl -u<USERNAME>:<PASSWORD> -XPUT http://localhost:8080/artifactory/rpm-local/<PATH_TO_METADATA_ROOT> -T <TARGET_FILE_PATH>

where PATH_TO_METADATA_ROOT specifies the path from the repository root to the deploy folder.

YUM Groups

A YUM group is a set of RPM packages collected together for a specific purpose. For example, you might collect a set of "Development Tools” together as a YUM group. 

A group is specified by adding a group XML file to same directory as the RPM packages included in it. The group file contains the metadata of the group including pointers to all the RPM files that make up the group.

Artifactory supports attaching a YUM Group file to the YUM calculation essentially mimicking the createrepo -g command.

A group file can also be created by running the following command:

sudo yum-groups-manager -n "My Group" --id=mygroup --save=mygroups.xml --mandatory yum glibc rpm

Attaching a YUM Group

The process of attaching YUM group metadata to a local repository is simple:

1. Create an XML file in the groups format used by YUM. You can either just type it out manually using any text editor, or run the yum-groups-manager command from yum-utils.
2. Deploy the created group file to the repodata folder. 
   Artifactory will automatically perform the following steps:
   • Create the corresponding .gz file and deploy it next to the deployed group XML file.
   • Invoke a YUM calculation on the local repository. 
   • Attach the group information (both the XML and the .gz file) to the repomd.xml file.
3. Make sure the group file names are listed in the YUM Group File Names field of the Packages tab. This tells Artifactory which files should be attached as repository group information.

YUM Group Commands

The following table lists some useful YUM group commands:

Setting Group Properties

YUM group properties can be set  in the /etc/yum.config file as follows:

Yum Authentication

Proxy Server Settings

If your organization uses a proxy server as an intermediary for Internet access, specify the proxy settings in /etc/yum.conf. If the proxy server also requires authentication, you also need to specify the proxy_username, and proxy_password settings.

proxy=<proxy server url> 
proxy_username=<user>
proxy_password=pass 

If you use the yum plugin (yum-rhn-plugin) to access the ULN, specify the enableProxy and httpProxy settings in /etc/sysconfig/rhn/up2date. In addition, If the proxy server requires authentication, you also need to specify the enableProxyAuth, proxyUser, and proxyPassword settings as shown below.

enableProxy=1
httpProxy=<proxy server url> 
enableProxyAuth=1
proxyUser=<user>
proxyPassword=<password>

SSL Setting

YUM supports SSL from version 3.2.27. 

To secure a repository with SSL, execute the following steps:

• Generate a private key and certificate using  OpenSSL.

• Define your protected repository in a .repo file as follows:

  [protected]
  name = SSL protected repository
  baseurl=<secure repo url>
  enabled=1
  gpgcheck=1
  gpgKey=<URL to public key>
  sslverify=1
  sslclientcert=<path to .cert file>
  sslclientkey=<path to .key file>

  where:
  gpgkey is a URL pointing to the ASCII-armored GPG key file for the repository . This option is used if YUM needs a public key to verify a package and the required key has not been imported into the RPM database. 
  If this option is set, YUM will automatically import the key from the specific URL. You will be prompted before the key is installed unless the assumeyes option is set.

[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=0
debuglevel=2
logfile=/var/log/yum.log
exactarch=1
obsoletes=1
gpgcheck=1
plugins=1
installonly_limit=3
[comments abridged]

You can view all the metadata that annotates an RPM by choosing it in Artifactory's tree browser and selecting the RPM Info tab:

Metadata Fields as Properties

The corresponding RPM metadata fields are automatically added as properties of an RPM artifact in YUM repositories accessed through Artifactory:

• rpm.metadata.name

• rpm.metadata.arch

• rpm.metadata.version

• rpm.metadata.release

• rpm.metadata.epoch

• rpm.metadata.group

• rpm.metadata.vendor

• rpm.metadata.summary

Properties can be used for searching and other functions. For more details please refer to Properties.

Watch the Screencast

Watch this short screencast to learn how easy it is to host RPMs in Artifactory.