Mailinglist Archive: opensuse-security (34 mails)

< Previous Next >
Re: [opensuse-security] yup repositories for SLE 12?
On Fri, Nov 14, 2014 at 02:07:53PM +0100, Frank Steiner wrote:
Hi Marcus,

Marcus Meissner wrote

Is there a way to mirror from the SCC, too?

SMT has been updated to be able to do so.

yes, I've found a document about this, thanks!


(I have so far no plans to update yup, but patches are welcome. Perhaps
I can find the time at some point in the future.)

I've adjusted yup myself after the last version you created
in your home repository for SLE 11, to reflect SP2/3 etc. So all I need
to make it work for SLE 12 are the new URLs instead of the old
https://nu.novell.com/repo/$RCE/... ones. Are they defined somewhere?

I'd like to stay with yup because it's perfectly scriptable for our needs
(like e.g. not fetching patch.rpms etc.). SMT would only be the "fallback"...

While there are new urls and the scheme is kind of easy to see, the
authentication
method changed.

e.g.
https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?TOKEN

where TOKEN is a very long hexstring.

The TOKEN is got via queries to
https://scc.suse.com/access/services/1106?credentials=SUSE_Linux_Enterprise_Server_12_x86_64
(not sure what 1106 means) for the server.

On a installed system, the credentials needed to access above (basic-auth) are
in:
/etc/zypp/credentials.d/SUSE_Linux_Enterprise_Server_12_x86_64
this has username (SCC_hexstring) and password (hexstring)

so:
curl -u SCC_hexstring:hexstring
https://scc.suse.com/access/services/1106?credentials=SUSE_Linux_Enterprise_Server_12_x86_64

the returned repoindex XML refers to above urls for starters.
<repoindex>
<repo
url="https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?TOKEN";
alias="SLES12-Updates" name="SLES12-Updates" autorefresh="true" enabled="true"
distro_target="sle-12-x86_64"/>
<repo
url="https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update_debug?TOKEN";
alias="SLES12-Debuginfo-Updates" name="SLES12-Debuginfo-Updates"
autorefresh="true" enabled="false" distro_target="sle-12-x86_64"/>
<repo
url="https://updates.suse.com/SUSE/Products/SLE-SERVER/12/x86_64/product?TOKEN";
alias="SLES12-Pool" name="SLES12-Pool" autorefresh="false" enabled="true"
distro_target="sle-12-x86_64"/>
<repo
url="https://updates.suse.com/SUSE/Products/SLE-SERVER/12/x86_64/product_debug?TOKEN";
alias="SLES12-Debuginfo-Pool" name="SLES12-Debuginfo-Pool" autorefresh="false"
enabled="false" distro_target="sle-12-x86_64"/>
</repoindex>

Ciao, Marcus
--
To unsubscribe, e-mail: opensuse-security+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-security+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups