Externalize role

This commit is contained in:
Adrien Reslinger 2018-10-08 19:34:43 +02:00
commit 39504f99ff
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
18 changed files with 962 additions and 0 deletions

98
files/httpd_proxy.conf Normal file
View file

@ -0,0 +1,98 @@
<VirtualHost *:80>
ServerName repos.example.com
#Cache
CacheEnable disk /
CacheRoot /var/www/cache/example.com/
CacheIgnoreNoLastMod On
CacheDefaultExpire 86400
Header unset Expires
Header unset Cache-Control
Header unset Pragma
#Proxy
ProxyRequests On
# X86_64
ProxyPass /CentOS7/x86_84/os/ http://mirror.centos.org/centos/7/os/x86_64/
ProxyPassReverse /CentOS7/x86_84/ http://mirror.centos.org/centos/7/os/x86_64/
ProxyPass /CentOS7/x86_64/updates/ http://mirror.centos.org/centos/7/updates/x86_64/
ProxyPassReverse /CentOS7/x86_64/updates/ http://mirror.centos.org/centos/7/updates/x86_64/
ProxyPass /CentOS7/x86_64/extras/ http://mirror.centos.org/centos/7/extras/x86_64/
ProxyPassReverse /CentOS7/x86_64/extras/ http://mirror.centos.org/centos/7/extras/x86_64/
ProxyPass /CentOS7/x86_64/centosplus/ http://mirror.centos.org/centos/7/centosplus/x86_64/
ProxyPassReverse /CentOS7/x86_64/centosplus/ http://mirror.centos.org/centos/7/centosplus/x86_64/
ProxyPass /CentOS7/x86_64/tor/ https://deb.torproject.org/torproject.org/rpm/el/7/x86_64/
ProxyPassReverse /CentOS7/x86_64/tor/ https://deb.torproject.org/torproject.org/rpm/el/7/x86_64/
ProxyPass /CentOS7/x86_64/epel/ http://download.fedoraproject.org/pub/epel/7/x86_64/
ProxyPassReverse /CentOS7/x86_64/epel/ http://download.fedoraproject.org/pub/epel/7/x86_64/
ProxyPass /CentOS7/x86_64/rpmforge/ http://mirrors.ircam.fr/pub/dag/redhat/el7/en/x86_64/rpmforge/
ProxyPassReverse /CentOS7/x86_64/rpmforge/ http://mirrors.ircam.fr/pub/dag/redhat/el7/en/x86_64/rpmforge/
ProxyPass /CentOS7/x86_64/nux-dextop/ http://li.nux.ro/download/nux/dextop/el7/x86_64/
ProxyPassReverse /CentOS7/x86_64/nux-dextop/ http://li.nux.ro/download/nux/dextop/el7/x86_64/
ProxyPass /CentOS7/x86_64/elrepo/ http://elrepo.org/linux/elrepo/el7/x86_64/
ProxyPassReverse /CentOS7/x86_64/elrepo/ http://elrepo.org/linux/elrepo/el7/x86_64/
ProxyPass /CentOS7/x86_64/elrepo-testing/ http://elrepo.org/linux/testing/el7/x86_64/
ProxyPassReverse /CentOS7/x86_64/elrepo-testing/ http://elrepo.org/linux/testing/el7/x86_64/
ProxyPass /CentOS7/x86_64/elrepo-kernel/ http://elrepo.org/linux/kernel/el7/x86_64/
ProxyPassReverse /CentOS7/x86_64/elrepo-kernel/ http://elrepo.org/linux/kernel/el7/x86_64/
ProxyPass /CentOS7/x86_64/elrepo-extras/ http://elrepo.org/linux/extras/el7/x86_64/
ProxyPassReverse /CentOS7/x86_64/elrepo-extras/ http://elrepo.org/linux/extras/el7/x86_64/
ProxyPass /CentOS7/x86_64/rbu-dracut-crypt-ssh/ https://copr-be.cloud.fedoraproject.org/results/rbu/dracut-crypt-ssh/epel-7-x86_64/
ProxyPassReverse /CentOS7/x86_64/rbu-dracut-crypt-ssh/ https://copr-be.cloud.fedoraproject.org/results/rbu/dracut-crypt-ssh/epel-7-x86_64/
ProxyPass /CentOS7/x86_64/forensics/ http://www.cert.org/forensics/repository/centos/cert/7/x86_64/
ProxyPassReverse /CentOS7/x86_64/forensics/ http://www.cert.org/forensics/repository/centos/cert/7/x86_64/
ProxyPass /CentOS7/x86_64/forensics-splunk/ http://www.cert.org/forensics/repository/centos/splunk/7/x86_64/
ProxyPassReverse /CentOS7/x86_64/forensics-splunk/ http://www.cert.org/forensics/repository/centos/splunk/7/x86_64/
ProxyPass /CentOS7/x86_64/forensics-sip/ http://www.cert.org/forensics/repository/centos/sip/7/x86_64/
ProxyPassReverse /CentOS7/x86_64/forensics-sip/ http://www.cert.org/forensics/repository/centos/sip/7/x86_64/
ProxyPass /CentOS7/x86_64/ansible/ http://releases.ansible.com/ansible/rpm/release/epel-7-x86_64/
ProxyPassReverse /CentOS7/x86_64/ansible/ http://releases.ansible.com/ansible/rpm/release/epel-7-x86_64/
ProxyPass /CentOS7/x86_64/docker-ce/ https://download.docker.com/linux/centos/7/x86_64/stable/
ProxyPassReverse /CentOS7/x86_64/docker-ce/ https://download.docker.com/linux/centos/7/x86_64/stable/
# armv7hl
ProxyPass /CentOS7/armv7hl/os/ http://mirror.centos.org/altarch/7/os/armhfp/
ProxyPassReverse /CentOS7/armv7hl/ http://mirror.centos.org/altarch/7/os/armhfp/
ProxyPass /CentOS7/armv7hl/updates/ http://mirror.centos.org/altarch/7/updates/armhfp/
ProxyPassReverse /CentOS7/armv7hl/updates/ http://mirror.centos.org/altarch/7/updates/armhfp/
ProxyPass /CentOS7/armv7hl/extras/ http://mirror.centos.org/altarch/7/extras/armhfp/
ProxyPassReverse /CentOS7/armv7hl/extras/ http://mirror.centos.org/altarch/7/extras/armhfp/
ProxyPass /CentOS7/armv7hl/centosplus/ http://mirror.centos.org/altarch/7/centosplus/armhfp/
ProxyPassReverse /CentOS7/armv7hl/centosplus/ http://mirror.centos.org/altarch/7/centosplus/armhfp/
ProxyPass /CentOS7/armv7hl/kernel-generic/ http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-generic/
ProxyPassReverse /CentOS7/armv7hl/kernel-generic/ http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-generic/
ProxyPass /CentOS7/armv7hl/kernel-rpi2/ http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-rpi2/
ProxyPassReverse /CentOS7/armv7hl/kernel-rpi2/ http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-rpi2/
ProxyPass /CentOS7/armv7hl/epel/ https://armv7.dev.centos.org/repodir/epel-pass-1/
ProxyPassReverse /CentOS7/armv7hl/epel/ https://armv7.dev.centos.org/repodir/epel-pass-1/
# i386
ProxyPass /CentOS7/i386/os/ http://mirror.centos.org/altarch/7/os/i386/
ProxyPassReverse /CentOS7/i386/ http://mirror.centos.org/altarch/7/os/i386/
ProxyPass /CentOS7/i386/updates/ http://mirror.centos.org/altarch/7/updates/i386/
ProxyPassReverse /CentOS7/i386/updates/ http://mirror.centos.org/altarch/7/updates/i386/
ProxyPass /CentOS7/i386/extras/ http://mirror.centos.org/altarch/7/extras/i386/
ProxyPassReverse /CentOS7/i386/extras/ http://mirror.centos.org/altarch/7/extras/i386/
ProxyPass /CentOS7/i386/centosplus/ http://mirror.centos.org/altarch/7/centosplus/i386/
ProxyPassReverse /CentOS7/i386/centosplus/ http://mirror.centos.org/altarch/7/centosplus/i386/
# armv5tel
ProxyPass /CentOS7/armv5tel/os/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/base/
ProxyPass /CentOS7/armv5tel/os/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/base/
ProxyPass /CentOS7/armv5tel/updates/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/updates/
ProxyPass /CentOS7/armv5tel/updates/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/updates/
ProxyPass /CentOS7/armv5tel/extras/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/extra/
ProxyPass /CentOS7/armv5tel/extras/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/extra/
ProxyPass /CentOS7/armv5tel/upstream-extra/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/upstream-extra/
ProxyPass /CentOS7/armv5tel/upstream-extra/ http://ftp.redsleeve.org/pub/el7-devel/el7/7/upstream-extra/
ProxyPass /CentOS7/armv5tel/raspberrypi/ http://ftp.redsleeve.org/pub/el7-devel/el7/raspberrypi/
ProxyPass /CentOS7/armv5tel/raspberrypi/ http://ftp.redsleeve.org/pub/el7-devel/el7/raspberrypi/
ProxyPass /CentOS7/armv5tel/kirkwood/ http://ftp.redsleeve.org/pub/el7-devel/el7/kirkwood/
ProxyPass /CentOS7/armv5tel/kirkwood/ http://ftp.redsleeve.org/pub/el7-devel/el7/kirkwood/
ProxyPass /CentOS7/armv5tel/epel/ http://ftp.redsleeve.org/pub/el7-devel/el7/EPEL-full/
ProxyPass /CentOS7/armv5tel/epel/ http://ftp.redsleeve.org/pub/el7-devel/el7/EPEL-full/
</VirtualHost>

161
files/nginx_proxy.conf Normal file
View file

@ -0,0 +1,161 @@
proxy_set_header HOST $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_buffering on;
proxy_buffer_size 1k;
proxy_buffers 64 4k;
proxy_busy_buffers_size 8k;
proxy_max_temp_file_size 2048m;
proxy_temp_file_write_size 32k;
proxy_cache_path /var/lib/nginx/cache levels=1:2 keys_zone=backcache:8m max_size=50m;
proxy_cache_key "$scheme$request_method$host$request_uri$is_args$args";
proxy_cache_valid 200 302 1440m;
proxy_cache_valid 404 1m;
#upstream backend_hosts {
# server host1.example.com;
# server host2.example.com;
# server host3.example.com;
#}
server {
listen 80;
server_name repos.example.com;
# location /proxy-me {
# proxy_pass http://backend_hosts;
# }
location /CentOS7/x86_84/os/ {
proxy_pass http://mirror.centos.org/centos/7/os/x86_64/;
}
location /CentOS7/x86_64/updates/ {
proxy_pass http://mirror.centos.org/centos/7/updates/x86_64/;
}
location /CentOS7/x86_64/extras/ {
proxy_pass http://mirror.centos.org/centos/7/extras/x86_64/;
}
location /CentOS7/x86_64/centosplus/ {
proxy_pass http://mirror.centos.org/centos/7/centosplus/x86_64/;
}
location /CentOS7/x86_64/tor/ {
proxy_pass https://deb.torproject.org/torproject.org/rpm/el/7/x86_64/;
}
location /CentOS7/x86_64/epel/ {
proxy_pass http://download.fedoraproject.org/pub/epel/7/x86_64/;
}
location /CentOS7/x86_64/rpmforge/ {
proxy_pass http://mirrors.ircam.fr/pub/dag/redhat/el7/en/x86_64/rpmforge/;
}
location /CentOS7/x86_64/nux-dextop/ {
proxy_pass http://li.nux.ro/download/nux/dextop/el7/x86_64/;
}
location /CentOS7/x86_64/elrepo/ {
proxy_pass http://elrepo.org/linux/elrepo/el7/x86_64/;
}
location /CentOS7/x86_64/elrepo-testing/ {
proxy_pass http://elrepo.org/linux/testing/el7/x86_64/;
}
location /CentOS7/x86_64/elrepo-kernel/ {
proxy_pass http://elrepo.org/linux/kernel/el7/x86_64/;
}
location /CentOS7/x86_64/elrepo-extras/ {
proxy_pass http://elrepo.org/linux/extras/el7/x86_64/;
}
location /CentOS7/x86_64/rbu-dracut-crypt-ssh/ {
proxy_pass https://copr-be.cloud.fedoraproject.org/results/rbu/dracut-crypt-ssh/epel-7-x86_64/;
}
location /CentOS7/x86_64/forensics/ {
proxy_pass http://www.cert.org/forensics/repository/centos/cert/7/x86_64/;
}
location /CentOS7/x86_64/forensics-splunk/ {
proxy_pass http://www.cert.org/forensics/repository/centos/splunk/7/x86_64/;
}
location /CentOS7/x86_64/forensics-sip/ {
proxy_pass http://www.cert.org/forensics/repository/centos/sip/7/x86_64/;
}
location /CentOS7/x86_64/ansible/ {
proxy_pass http://releases.ansible.com/ansible/rpm/release/epel-7-x86_64/;
}
location /CentOS7/x86_64/docker-ce/ {
proxy_pass https://download.docker.com/linux/centos/7/x86_64/stable/;
}
location /CentOS7/armv7hl/os/ {
proxy_pass http://mirror.centos.org/altarch/7/os/armhfp/;
}
location /CentOS7/armv7hl/updates/ {
proxy_pass http://mirror.centos.org/altarch/7/updates/armhfp/;
}
location /CentOS7/armv7hl/extras/ {
proxy_pass http://mirror.centos.org/altarch/7/extras/armhfp/;
}
location /CentOS7/armv7hl/centosplus/ {
proxy_pass http://mirror.centos.org/altarch/7/centosplus/armhfp/;
}
location /CentOS7/armv7hl/kernel-generic/ {
proxy_pass http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-generic/;
}
location /CentOS7/armv7hl/kernel-rpi2/ {
proxy_pass http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-rpi2/;
}
location /CentOS7/armv7hl/epel/ {
proxy_pass https://armv7.dev.centos.org/repodir/epel-pass-1/;
}
location /CentOS7/i386/os/ {
proxy_pass http://mirror.centos.org/altarch/7/os/i386/;
}
location /CentOS7/i386/updates/ {
proxy_pass http://mirror.centos.org/altarch/7/updates/i386/;
}
location /CentOS7/i386/extras/ {
proxy_pass http://mirror.centos.org/altarch/7/extras/i386/;
}
location /CentOS7/i386/centosplus/ {
proxy_pass http://mirror.centos.org/altarch/7/centosplus/i386/;
}
location /CentOS7/armv5tel/os/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/base/;
}
location /CentOS7/armv5tel/os/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/base/;
}
location /CentOS7/armv5tel/updates/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/updates/;
}
location /CentOS7/armv5tel/updates/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/updates/;
}
location /CentOS7/armv5tel/extras/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/extra/;
}
location /CentOS7/armv5tel/extras/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/extra/;
}
location /CentOS7/armv5tel/upstream-extra/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/upstream-extra/;
}
location /CentOS7/armv5tel/upstream-extra/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/7/upstream-extra/;
}
location /CentOS7/armv5tel/raspberrypi/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/raspberrypi/;
}
location /CentOS7/armv5tel/raspberrypi/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/raspberrypi/;
}
location /CentOS7/armv5tel/kirkwood/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/kirkwood/;
}
location /CentOS7/armv5tel/kirkwood/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/kirkwood/;
}
location /CentOS7/armv5tel/epel/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/EPEL-full/;
}
location /CentOS7/armv5tel/epel/ {
proxy_pass http://ftp.redsleeve.org/pub/el7-devel/el7/EPEL-full/;
}
}

138
files/update_mirror.sh Executable file
View file

@ -0,0 +1,138 @@
#!/bin/bash
echo "Start: $(date)"
REPOS_RACINE=/var/www/html/repos
YUM_CONF=/etc/yum-mirror.repo.d
if [ -e /var/run/update_mirror ]; then
echo "Update mirror is already running"
exit 1
else
echo "$$" > /var/run/update_mirror
fi
if [ ! $(which reposync 2>/dev/null) ]; then
yum install -y yum-utils createrepo
fi
if [ ! $(which lftp 2>/dev/null) ]; then
yum install -y lftp
fi
#yum repolist --enablerepo=*
#reposync --downloadcomps --download-metadata --arch=$(uname -m) --repoid=tor --tempcache --download_path=/var/www/html/CentOS7/
#ARCH=armv6l
#for i in base updates; do
# reposync --config="${YUM_CONF}"/RedSleeve7-base.repo --arch=$ARCH --norepopath --repoid=$i --tempcache --delete --download_path="${REPOS_RACINE}"/$ARCH/${i/base/os}/Packages/
# createrepo "${REPOS_RACINE}"/$ARCH/${i/base/os}/
#done
###################################################################
# Springdale
#
#DIST=Springdale7
#ARCH=i686
#reposync --config="${YUM_CONF}"/springdale-7.repo --arch=$ARCH --norepopath --repoid=core --tempcache --delete --download_path="${REPOS_RACINE}"/"$DIST"/$ARCH/os/Packages/
#createrepo "${REPOS_RACINE}"/$ARCH/os/
#reposync --config="${YUM_CONF}"/springdale-7.repo --arch=$ARCH --norepopath --repoid=addons-core --tempcache --delete --download_path="${REPOS_RACINE}"/"$DIST"/$ARCH/Addons/Packages/
#createrepo "${REPOS_RACINE}"/$ARCH/Addons
#for REP in "${REPOS_RACINE}"/$ARCH/os/{LiveOS,images/pxeboot}; do
# if [ ! -d "$REP" ]; then
# mkdir -p "$REP"
# fi
#done
#wget -N http://springdale.math.ias.edu/data/springdale/7/i386/os/LiveOS/squashfs.img --directory-prefix="${REPOS_RACINE}"/"$DIST"/$ARCH/os/LiveOS/
#wget -N http://springdale.math.ias.edu/data/springdale/7/i386/os/images/boot.iso --directory-prefix="${REPOS_RACINE}"/"$DIST"/$ARCH/os/images/
#wget -N http://springdale.math.ias.edu/data/springdale/7/i386/os/images/pxeboot/{initrd.img,upgrade.img,vmlinuz} --directory-prefix="${REPOS_RACINE}"/"$DIST"/$ARCH/os/images/pxeboot/
#
#reposync --config="${YUM_CONF}"/springdale-7.repo --arch=$ARCH --norepopath --repoid=updates --tempcache --download_path="${REPOS_RACINE}"/"$DIST"/$ARCH/updates/os/Packages/
#createrepo "${REPOS_RACINE}"/$ARCH/updates/os/
#reposync --config="${YUM_CONF}"/springdale-7.repo --arch=$ARCH --norepopath --repoid=addons-updates --tempcache --download_path="${DIST}"/$ARCH/updates/Addons/Packages/
#createrepo "${REPOS_RACINE}"/$ARCH/updates/Addons
####################################################################
# CentOS
#
for ARCH in i686 x86_64 armv7hl armv5tel aarch64; do
ARCH=${ARCH/armv6l/armv5tel}
case $ARCH in
x86_64)
DIST=CentOS7;;
REPARCH=x86_64;;
i686)
DIST=CentOS7;;
REPARCH=${ARCH/i686/i386};;
aarch64)
DIST=CentOS7;;
REPARCH=aarch64;;
armv7hl)
DIST=CentOS7;;
REPARCH=armhfp;;
#REPARCH=armv7hl;;
armv5tel|armv6l)
DIST=RedSleeve7;;
REPARCH=armv5tel;;
esac
case $ARCH in
x86_64)
BASE_MIRROR=http://mirror.centos.org
MIRROR="${BASE_MIRROR}"/centos-7/7;;
i686|aarch64|armv7hl)
BASE_MIRROR=http://mirror.centos.org
MIRROR="${BASE_MIRROR}"/altarch/7;;
armv5tel|armv6l)
BASE_MIRROR=
MIRROR=;;
esac
case $ARCH in
x86_64|i686|aarch64)
# mise en place du boot réseaux
for REP in "${REPOS_RACINE}"/"$DIST"/$REPARCH/os/{LiveOS,images/pxeboot}; do
if [ ! -d "$REP" ]; then
mkdir -p "$REP"
fi
done
wget -N "$MIRROR"/os/$REPARCH/LiveOS/squashfs.img --directory-prefix="${REPOS_RACINE}"/"$DIST"/$REPARCH/os/LiveOS/
wget -N "$MIRROR"/os/$REPARCH/images/boot.iso --directory-prefix="${REPOS_RACINE}"/"$DIST"/$REPARCH/os/images/
wget -N "$MIRROR"/os/$REPARCH/images/pxeboot/{initrd.img,upgrade.img,vmlinuz} --directory-prefix="${REPOS_RACINE}"/"$DIST"/$REPARCH/os/images/pxeboot/
;;
armv7hl)
# récupération des images d'install
for FICHIER in $(curl -s "$MIRROR"/isos/$REPARCH/ | grep Minimal | egrep '<a href=.*\.(txt|xz)' | sed 's|.*">\(.*\)</a>.*|\1|'); do
wget -N "$MIRROR"/isos/$REPARCH/$FICHIER --directory-prefix="${REPOS_RACINE}"/"$DIST"/$ARCH/isos/
done
;;
armv5tel|armv6l)
LASTIMG="$(curl -s http://ftp.redsleeve.org/pub/el7-devel/el7/rootfs/ | grep raspi-redsleeve7 | sed 's|.*href="\(raspi-redsleeve7[^"]*\)".*|\1|' | grep img.xz$ | sort | tail -n1)"
wget -N http://ftp.redsleeve.org/pub/el7-devel/el7/rootfs/"$LASTIMG" --directory-prefix="${REPOS_RACINE}"/"$DIST"/$ARCH/isos/
;;
esac
for REPO in $(grep '^\[' "${YUM_CONF}"/$DIST-$ARCH.repo | sed 's/\[repo-\(.*\)\]/\1/' | fgrep -v '[main]'); do
if [ $(sed -n '/\[repo-'$REPO'\]/,/^$/ p' "${YUM_CONF}"/$DIST-$ARCH.repo | egrep -c 'enabled[\s]*=[\s]*0') -eq 0 ]; then
if [ ! -d "${REPOS_RACINE}"/"$DIST"/$REPARCH/${REPO/base/os} ]; then
mkdir "${REPOS_RACINE}"/"$DIST"/$REPARCH/${REPO/base/os}
fi
BASEURL="$(sed -n '/\[repo-'$REPO'\]/,/^$/ p' "${YUM_CONF}"/$DIST-$ARCH.repo | egrep ^baseurl= | cut -d= -f2)"
echo "Synchro du dépôt $REPO"
# --only-missing
#echo "open $BASEURL && mirror --continue --delete Packages ${REPOS_RACINE}/$DIST/$REPARCH/${REPO/base/os}/ && exit" | lftp
echo "open $BASEURL && mirror --parallel=20 --continue --delete . ${REPOS_RACINE}/$DIST/$REPARCH/${REPO/base/os}/ && exit" | lftp &
#reposync --config="${YUM_CONF}"/"$DIST"-"$ARCH".repo --arch=$ARCH --norepopath --repoid=repo-$REPO --tempcache --delete --download_path="${REPOS_RACINE}"/"$DIST"/$REPARCH/${REPO/base/os}/ --cachedir=/dev/shm/yum
#createrepo "${REPOS_RACINE}"/"$DIST"/$REPARCH/${REPO/base/os}/
fi
done
done
#for i in base updates epel; do
# reposync --config="${YUM_CONF}"/"$DIST"-"$ARCH"-"$REPO".repo --arch=$ARCH --repoid=repo-$i --tempcache --download_path="${REPOS_RACINE}"/"$DIST"/$ARCH/${i/base/os}/Packages/
# createrepo "${REPOS_RACINE}"/"$DIST"/$ARCH/${i/base/os}/
#done
rm -f /var/run/update_mirror
echo "End: $(date)"

View file

@ -0,0 +1,74 @@
[main]
exactarch=0
# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#
[repo-base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/os/armhfp/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/armhfp/RPM-GPG-KEY-CentOS-7
#released updates
[repo-updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=7&arch=armhfp&repo=updates&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/updates/armhfp/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/armhfp/RPM-GPG-KEY-CentOS-7
#additional packages that may be useful
[repo-extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/extras/armhfp/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/armhfp/RPM-GPG-KEY-CentOS-7
enabled=1
#additional packages that extend functionality of existing packages
[repo-centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/centosplus/armhfp/
gpgcheck=1
enabled=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/armhfp/RPM-GPG-KEY-CentOS-7
[repo-kernel-rpi2]
name=CentOS-7 - Kernel Raspberry Pi 2
baseurl=http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-rpi2/
gpgcheck=1
enabled=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/armhfp/RPM-GPG-KEY-CentOS-7
[repo-kernel-generic]
name=CentOS-7 - Kernel generic
baseurl=http://mirror.centos.org/altarch/7/kernel/armhfp/kernel-generic/
gpgcheck=1
enabled=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/armhfp/RPM-GPG-KEY-CentOS-7
[repo-epel]
name=Epel rebuild for armhfp
baseurl=https://armv7.dev.centos.org/repodir/epel-pass-1/
enabled=1
gpgcheck=0

View file

@ -0,0 +1,53 @@
[main]
exactarch=0
# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#
[repo-base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/os/i386/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/i386/RPM-GPG-KEY-CentOS-7
#released updates
[repo-updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=7&arch=i386&repo=updates&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/updates/i386/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/i386/RPM-GPG-KEY-CentOS-7
#exactarch=1
#additional packages that may be useful
[repo-extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/extras/i386/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/i386/RPM-GPG-KEY-CentOS-7
enabled=0
#additional packages that extend functionality of existing packages
[repo-centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus&infra=$infra
baseurl=http://mirror.centos.org/altarch/7/centosplus/i386/
gpgcheck=1
enabled=0
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/altarch/7/os/i386/RPM-GPG-KEY-CentOS-7

View file

@ -0,0 +1,164 @@
[main]
exactarch=0
# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#
[repo-base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os&infra=$infra
baseurl=http://mirror.centos.org/centos/7/os/x86_64/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/centos-7/7/os/x86_64/RPM-GPG-KEY-CentOS-7
#released updates
[repo-updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=updates&infra=$infra
baseurl=http://mirror.centos.org/centos/7/updates/x86_64/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/centos-7/7/os/x86_64/RPM-GPG-KEY-CentOS-7
#additional packages that may be useful
[repo-extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras&infra=$infra
baseurl=http://mirror.centos.org/centos/7/extras/x86_64/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/centos-7/7/os/x86_64/RPM-GPG-KEY-CentOS-7
#additional packages that extend functionality of existing packages
[repo-centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus&infra=$infra
baseurl=http://mirror.centos.org/centos/7/centosplus/x86_64/
gpgcheck=1
enabled=0
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
gpgkey=http://mirror.centos.org/centos-7/7/os/x86_64/RPM-GPG-KEY-CentOS-7
[repo-tor]
name=Tor repo
enabled=1
baseurl=https://deb.torproject.org/torproject.org/rpm/el/7/x86_64/
gpgcheck=1
gpgkey=https://deb.torproject.org/torproject.org/rpm/RPM-GPG-KEY-torproject.org.asc
[repo-epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
baseurl=http://download.fedoraproject.org/pub/epel/7/x86_64/
#mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
[repo-rpmforge]
name=RHEL $releasever - RPMforge.net - dag
baseurl=http://mirrors.ircam.fr/pub/dag/redhat/el7/en/x86_64/rpmforge/
#mirrorlist=http://mirrorlist.repoforge.org/el7/mirrors-rpmforge
#mirrorlist=file:///etc/yum.repos.d/mirrors-rpmforge
enabled=1
protect=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag
gpgcheck=1
[repo-nux-dextop]
name=Nux.Ro RPMs for general desktop use
baseurl=http://li.nux.ro/download/nux/dextop/el7/x86_64/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-nux.ro
protect=0
### Name: ELRepo.org Community Enterprise Linux Repository for el7
### URL: http://elrepo.org/
[repo-elrepo]
name=ELRepo.org Community Enterprise Linux Repository - el7
baseurl=http://elrepo.org/linux/elrepo/el7/x86_64/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
protect=0
[repo-elrepo-testing]
name=ELRepo.org Community Enterprise Linux Testing Repository - el7
baseurl=http://elrepo.org/linux/testing/el7/x86_64/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
protect=0
[repo-elrepo-kernel]
name=ELRepo.org Community Enterprise Linux Kernel Repository - el7
baseurl=http://elrepo.org/linux/kernel/el7/x86_64/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
protect=0
[repo-elrepo-extras]
name=ELRepo.org Community Enterprise Linux Extras Repository - el7
baseurl=http://elrepo.org/linux/extras/el7/x86_64/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org
protect=0
[repo-rbu-dracut-crypt-ssh]
name=Copr repo for dracut-crypt-ssh owned by rbu
baseurl=https://copr-be.cloud.fedoraproject.org/results/rbu/dracut-crypt-ssh/epel-7-x86_64/
skip_if_unavailable=True
gpgcheck=1
gpgkey=https://copr-be.cloud.fedoraproject.org/results/rbu/dracut-crypt-ssh/pubkey.gpg
enabled=1
[repo-forensics]
name=CERT Forensics Tools Repository
baseurl=http://www.cert.org/forensics/repository/centos/cert/7/x86_64/
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cert-forensics-2018-04-07
gpgcheck=1
[repo-forensics-splunk]
name=CERT Forensics Tools Repository - Splunk
baseurl=http://www.cert.org/forensics/repository/centos/splunk/7/x86_64/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-splunk
enabled=1
gpgcheck=1
[repo-forensics-sip]
name=CERT Forensics Tools Repository - SiLK, IPA, and Postgresql
baseurl=http://www.cert.org/forensics/repository/centos/sip/7/x86_64/
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cert-forensics-2018-04-07
gpgcheck=1
[repo-ansible]
name=Ansible
baseurl=http://releases.ansible.com/ansible/rpm/release/epel-7-x86_64/
enable=yes
gpgkey=http://releases.ansible.com/keys/RPM-GPG-KEY-ansible-release.pub
gpgcheck=1
[repo-docker-ce]
name=Ansible
baseurl=https://download.docker.com/linux/centos/7/x86_64/stable/
enable=yes
gpgkey=https://download.docker.com/linux/centos/gpg
gpgcheck=1

View file

@ -0,0 +1,71 @@
# RedSleeve-base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for RedSleeve updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#
[repo-base]
name=RedSleeve-7 - Base
#mirrorlist=http://ftp.redsleeve.org/pub/el$releasever-devel/el$releasever/mirrors
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/7/base/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-RedSleeve-7
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-7-testing
#released updates
[repo-updates]
name=RedSleeve-7 - Updates
#mirrorlist=http://ftp.redsleeve.org/pub/el$releasever-devel/el$releasever/mirrors-updates
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/7/updates/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-RedSleeve-7
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-7-testing
#redsleeve extra
[repo-extra]
name=RedSleeve-7 - Extra
#mirrorlist=http://ftp.redsleeve.org/pub/el$releasever-devel/el$releasever/mirrors-extra
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/7/extra/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-7-testing
#upstream extra
[repo-upstream-extra]
name=RedSleeve-7 - Upstream Extra
#mirrorlist=http://ftp.redsleeve.org/pub/el$releasever-devel/el$releasever/mirrors-upstream-extra
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/7/upstream-extra/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-7-testing
[repo-raspberrypi]
name=RedSleeve-7 - Raspberry Pi
failovermethod=priority
#mirrorlist=http://ftp.redsleeve.org/pub/el$releasever-devel/el$releasever/raspberrypi/mirrors
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/raspberrypi/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-7-testing
[repo-kirkwood]
name=RedSleeve-7 - Kirkwood
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/kirkwood/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-release
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redsleeve-7-testing
[repo-el7-epel]
name=EPEL 7
failovermethod=priority
#mirrorlist=http://ftp.redsleeve.org/pub/el7-devel/el7/EPEL-full/mirrors
baseurl=http://ftp.redsleeve.org/pub/el7-devel/el7/EPEL-full/
enabled=1
metadata_expire=0s
gpgcheck=0
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-epel

View file

@ -0,0 +1,39 @@
[core]
name=Springdale core Base $releasever - $basearch
mirrorlist=http://springdale.princeton.edu/data/springdale/7/i386/os/mirrorlist
#baseurl=http://springdale.princeton.edu/data/springdale/7/i386/os
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-springdale
enabled=0
[updates]
name=Springdale core Updates $releasever - $basearch
mirrorlist=http://springdale.princeton.edu/data/springdale/updates/7/en/os/i386/mirrorlist
#baseurl=http://springdale.princeton.edu/data/springdale/updates/7/en/os/i386
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-springdale
enabled=0
[addons-core]
name=Springdale addons Base $releasever - $basearch
mirrorlist=http://springdale.princeton.edu/data/springdale/7/i386/os/Addons/mirrorlist
#baseurl=http://springdale.princeton.edu/data/springdale/7/i386/os/Addons
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-springdale
enabled=0
[addons-updates]
name=Springdale addons Updates $releasever - $basearch
mirrorlist=http://springdale.princeton.edu/data/springdale/updates/7/en/Addons/i386/mirrorlist
#baseurl=http://springdale.princeton.edu/data/springdale/updates/7/en/Addons/i386
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-springdale
enabled=0
[unsupported]
name=Springdale Unsupported $releasever - $basearch
baseurl=http://springdale.princeton.edu/data/springdale/unsupported/7/i386/
gpgcheck=1
#gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-springdale
enabled=1

View file

@ -0,0 +1,26 @@
[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=0
debuglevel=2
logfile=/var/log/yum.log
exactarch=0
obsoletes=1
gpgcheck=1
plugins=1
installonly_limit=5
bugtracker_url=http://bugs.centos.org/set_project.php?project_id=23&ref=http://bugs.centos.org/bug_report_page.php?category=yum
distroverpkg=centos-release
# This is the default, if you make this bigger yum won't see if the metadata
# is newer on the remote and so you'll "gain" the bandwidth of not having to
# download the new metadata and "pay" for it by yum not having correct
# information.
# It is esp. important, to have correct metadata, for distributions like
# Fedora which don't keep old packages around. If you don't like this checking
# interupting your command line usage, it's much better to have something
# manually check the metadata once an hour (yum-updatesd will do this).
# metadata_expire=90m
# PUT YOUR REPOS HERE OR IN separate files named file.repo
# in /etc/yum.repos.d