A bit of a new guy around these parts...
I've done a bit of looking, and haven't found any newbie-friendly instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
A bit of a new guy around these parts...
I've done a bit of looking, and haven't found any newbie-friendly instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Have searched on the wiki ? : http://wiki.centos.org/Repositories/RPMForge
Fabian Arrotin wrote:
On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
A bit of a new guy around these parts...
I've done a bit of looking, and haven't found any newbie-friendly instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Have searched on the wiki ? : http://wiki.centos.org/Repositories/RPMForge
Ya know, that looks familiar. I get the feeling I should be kicking my self for not reading that page further...
Thanks much. I'll give it a whirl...
Fabian Arrotin wrote:
On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
A bit of a new guy around these parts...
I've done a bit of looking, and haven't found any newbie-friendly instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Have searched on the wiki ? : http://wiki.centos.org/Repositories/RPMForge
Some time ago, when I was using Debian/Woody, and Woody was creaking with age, I added third-party repos for various things including newer KDE, Mozilla....
It later occurred to me this was imprudent, and not just because I got a system that became hard to maintain. What, I asked, was there to prevent the maintainers of the KDE debs to insert a brummy kernel?
I asked, and the answer is that apt-get has the ability to control (it's called pinning) what comes from where.
Now, I'm sure all the folk at rpmforge are straight-up good guys, but should you really trust some relative unknown such as debian@localhost.homelinux.org to not slip malware into his repo when he promotes some whiz-bang new lotto-winning program?
How does yum control this?
On 1/7/07, John Summerfield debian@herakles.homelinux.org wrote:
Fabian Arrotin wrote:
On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
A bit of a new guy around these parts... I've done a bit of looking, and haven't found any newbie-friendly
instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Have searched on the wiki ? : http://wiki.centos.org/Repositories/RPMForge
Some time ago, when I was using Debian/Woody, and Woody was creaking with age, I added third-party repos for various things including newer KDE, Mozilla....
It later occurred to me this was imprudent, and not just because I got a system that became hard to maintain. What, I asked, was there to prevent the maintainers of the KDE debs to insert a brummy kernel?
I asked, and the answer is that apt-get has the ability to control (it's called pinning) what comes from where.
You can install the yum-protectbase rpm as a starter. You then say "protect the rpms in this base". Someone could write a more complicated one (per package protection), or they could write another plugin that did weighting so you could select which archives have precedence over others.
Now, I'm sure all the folk at rpmforge are straight-up good guys, but should you really trust some relative unknown such as debian@localhost.homelinux.org to not slip malware into his repo when he promotes some whiz-bang new lotto-winning program?
How does yum control this?
--
Cheers John
-- spambait 1aaaaaaa@coco.merseine.nu Z1aaaaaaa@coco.merseine.nu
Please do not reply off-list _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Stephen John Smoogen wrote:
On 1/7/07, John Summerfield debian@herakles.homelinux.org wrote:
Fabian Arrotin wrote:
On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
A bit of a new guy around these parts... I've done a bit of looking, and haven't found any newbie-friendly
instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Have searched on the wiki ? : http://wiki.centos.org/Repositories/RPMForge
Some time ago, when I was using Debian/Woody, and Woody was creaking with age, I added third-party repos for various things including newer KDE, Mozilla....
It later occurred to me this was imprudent, and not just because I got a system that became hard to maintain. What, I asked, was there to prevent the maintainers of the KDE debs to insert a brummy kernel?
I asked, and the answer is that apt-get has the ability to control (it's called pinning) what comes from where.
You can install the yum-protectbase rpm as a starter. You then say "protect the rpms in this base". Someone could write a more complicated one (per package protection), or they could write another plugin that did weighting so you could select which archives have precedence over others.
In the interests of security, this needs to be made standard behaviour, with the standard repos protected.
A more likely example than mine someone polluting their repos with good intent. For examile, Ximian (We can do Gnome better than Red Hat can), or someone packaging content management software (eg phpgroupware, egroupware, ezpublish [ez.no]) and providing "everything you need."
Their package for RHEL requires PHP5 & MySQL 5, so they just pop PHP5 & MySQL5 into the repo "for your greater convenience."
On Mon, 2007-01-08 at 06:20 +0900, John Summerfield wrote:
Stephen John Smoogen wrote:
On 1/7/07, John Summerfield debian@herakles.homelinux.org wrote:
Fabian Arrotin wrote:
On Fri, 2007-01-05 at 15:10 -0500, David A. Woyciesjes wrote:
A bit of a new guy around these parts... I've done a bit of looking, and haven't found any newbie-friendly
instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Have searched on the wiki ? : http://wiki.centos.org/Repositories/RPMForge
Some time ago, when I was using Debian/Woody, and Woody was creaking with age, I added third-party repos for various things including newer KDE, Mozilla....
It later occurred to me this was imprudent, and not just because I got a system that became hard to maintain. What, I asked, was there to prevent the maintainers of the KDE debs to insert a brummy kernel?
I asked, and the answer is that apt-get has the ability to control (it's called pinning) what comes from where.
You can install the yum-protectbase rpm as a starter. You then say "protect the rpms in this base". Someone could write a more complicated one (per package protection), or they could write another plugin that did weighting so you could select which archives have precedence over others.
In the interests of security, this needs to be made standard behaviour, with the standard repos protected.
A more likely example than mine someone polluting their repos with good intent. For examile, Ximian (We can do Gnome better than Red Hat can), or someone packaging content management software (eg phpgroupware, egroupware, ezpublish [ez.no]) and providing "everything you need."
Their package for RHEL requires PHP5 & MySQL 5, so they just pop PHP5 & MySQL5 into the repo "for your greater convenience."
This is available already.
There is yum-plugin-priorities.
You can set a priority from 1-99 on each repository ... and also use "exclude=" and "includepkgs=" inside each repository to pinpoint control of where each individual package comes from.
See: http://wiki.centos.org/PackageManagement/Yum
Links off that page for Priorities, Fastestmirror, and Protectbase.
(You should choose EITHER protectbase or priorities ... I use priorities).
All those plugins are easily installable ... set plugins=1 in /etc/yum.conf and then modify the /etc/yum.repos.d/*.repo file to your liking.
David A. Woyciesjes musste am 05.01.2007 21:10 dies kund tun:
A bit of a new guy around these parts...
I've done a bit of looking, and haven't found any newbie-friendly instructions on how to add the Dag repository to my CentOS4 box. Could somebody help me out and point me in the right direction? Thanks...
Download http://apt.sw.be/redhat/el4/en/i386/RPMS.dag/rpmforge-release-0.2-2.2.el4.rf... and install it.
If you would like to enable rpmforge you should set enable to 1 in /etc/yum.repos.d/rpmforge.repo.
Dags Repo is part of rpmforge.
Greets René
David, I've done a very dirty script that add most famous third CentOS' repos:
---------------- # Add third part repositories for x86 arquitectures. # Jordi Espasa Clofent.
#!/bin/bash # check root id if [ `id -u` != "0" ]; then echo "Sorry, you are not root." exit 1 fi
# add Karanbar Singh's repositories /usr/bin/wget http://centos.karan.org/kbsingh-CentOS-Extras.repo -P /etc/yum.repos.d/ /usr/bin/wget http://centos.karan.org/kbsingh-CentOS-Misc.repo -P /etc/yum.repos.d/
# add Dag's repository. /usr/bin/wget http://dag.wieers.com/packages/rpmforge-release/rpmforge-release-0.3.4-1.el4... -0 /var/dag.rpm /bin/rpm -Uhv /var/dag.rpm /bin/rm /var/dag.rpm
# add Dries' repository # There are several options. Uncomment correct option according your interests. /bin/echo -e [Dries]\nname=Extra Fedora rpms dries - $releasever - $basearch\nbaseurl=http://ftp.belnet.be/packages/dries.ulyssis.org/redhat/el4/en/i386/dries/RPM...
/etc/yum.repos.d/dries.repo
# install fastestmirror plugin to improve yum performance /bin/echo plugins=1 >> /etc/yum.conf yum -y install yum-plugin-fastestmirror
exit 0
--------------------
Feel free to modify and adapt for your needs. I hope it will be useful. PD. Note is for x86 boxes.