This topic provides instructions for creating the Oracle Linux YUM repository server required for Kubernetes cluster deployment.
Procedure
- Install the following package, which include the utilities necessary to set up the repository.
# dnf install -y dnf-utils
- Create the following directories to hold the main OS and UEK respositories.
# mkdir -p /u01/repo/OracleLinux # mkdir -p /u01/repo/logs # mkdir -p /u01/repo/scripts
- Enable the YUM repositories in the below files: (The below example is with the default Installation of Oracle Linux):
The
ol8_baseos_latest
andol8_appstream
repositories must be enabled in /etc/yum.repos.d/oracle-linux-ol8.repo file (enabled flag should be set to “1” For example: enabled=1)ol8_UEKR6
repository must be enabled in the /etc/yum.repos.d/uek-ol8.repo file (enabled flag should be set to “1” For ex: enabled=1)The reposync command is used to synchronize a remote YUM repository to a local directory.Execute the following commands to retrieve the packages using YUM.# /usr/bin/reposync --newest-only --download-metadata --repoid=ol8_baseos_latest -p /u01/repo/OracleLinux # /usr/bin/reposync --newest-only --download-metadata --repoid=ol8_appstream -p /u01/repo/OracleLinux # /usr/bin/reposync --newest-only --download-metadata --repoid=ol8_UEKR6 -p /u01/repo/OracleLinux
The first time, the repositories sync could take some time. - Create a resync CRON job by performing the following steps:
- A resync of the Yum repositories involves repeating the reposync. You can script them and run them from the CRON. Create a script called /u01/repo/scripts/repo_sync.sh with the following contents.
#!/bin/bash LOG_FILE=/u01/repo/logs/repo_sync_$(date +%Y.%m.%d).log # Remove old logs find /u01/repo/logs/repo_sync* -mtime +5 -delete; >> $LOG_FILE 2>&1 # Sync repositories /usr/bin/reposync --newest-only --download-metadata --refresh --repoid=ol8_baseos_latest -p /u01/repo/OracleLinux >> $LOG_FILE 2>&1 /usr/bin/reposync --newest-only --download-metadata --refresh --repoid=ol8_appstream -p /u01/repo/OracleLinux >> $LOG_FILE 2>&1 /usr/bin/reposync --newest-only --download-metadata --refresh --repoid=ol8_UEKR6 -p /u01/repo/OracleLinux >> $LOG_FILE 2>&1
- Run the executable file.
# chmod u+x /u01/repo/scripts/repo_sync.sh
- Set up a CRON job to run the scripts on a daily basis. The following script runs each day at 01:00.
0 1 * * * /u01/repo/scripts/repo_sync.sh > /dev/null 2>&1
- Install the Apache HTTP servers, start it and make sure it restarts automatically on reboot.
If you are using the Linux firewall, you must connect to port 80.
# dnf install -y httpd # systemctl start httpd # systemctl enable httpd
- A resync of the Yum repositories involves repeating the reposync. You can script them and run them from the CRON. Create a script called /u01/repo/scripts/repo_sync.sh with the following contents.
- Set permissions to Security-Enhanced Linux (SELinux).
The modifications can be made permanent by changing the SELINUX parameter in the /etc/selinux/config file. The file contains an explanation of the allowable values.
# cat /etc/selinux/config # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=enforcing # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=targeted #
- Present the repositories using the HTTP server.
# mkdir -p /var/www/html/repo/OracleLinux/ol8_baseos_latest # ln -s /u01/repo/OracleLinux/ol8_baseos_latest/ /var/www/html/repo/OracleLinux/ol8_baseos_latest/x86_64 # mkdir -p /var/www/html/repo/OracleLinux/ol8_appstream # ln -s /u01/repo/OracleLinux/ol8_appstream/ /var/www/html/repo/OracleLinux/ol8_appstream/x86_64 # mkdir -p /var/www/html/repo/OracleLinux/ol8_UEKR6 # ln -s /u01/repo/OracleLinux/ol8_UEKR6/ /var/www/html/repo/OracleLinux/ol8_UEKR6/x86_64
- Copy the GPG key to the HTTP server.
cp /etc/pki/rpm-gpg/RPM-GPG-KEY-oracle /var/www/html/RPM-GPG-KEY-oracle-ol8