Re: PGP on IBM i

Working with IBM on a support ticket to resolve this issue.

Now working.

First we added ibmi-base and ibmi-release per Jacks note below.

Then IBM had us update as follows:

Lets try making the following edits to those 3 repo files (url changed):

Per IBM:
setting the enabled=0 for the ibm.repo and adding sslverify=0 line to the other 2.
See if this will let you see and install the ibmi-repos and ca-certificates and ca-certificates-mozilla packages and whatever else you need to install.
But after installing the ca-certificates and ca-certificates-mozilla packages you could try removing the sslverify=0 lines and see if you can now connect.

ibmi.repo
[ibm]
name=ibm
baseurl=ftp://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo
enabled=0
gpgcheck=0

ibmi-release.repo
[ibmi-release]
name=IBM i $releasever
baseurl=https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo-$releasever/
enabled=1
gpgcheck=0
skip_if_unavailable=1
sslverify=0

ibmi-base.repo
[ibmi-base]
name=IBM i base
baseurl=https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo-base-7.3/
enabled=1
gpgcheck=0
skip_if_unavailable=1
sslverify=0

This enabled us to install ibmi-repos.

Then we tried updating/installing packages but all failed and we got "No more mirrors to try".

We removed the sslverify=0 line and now we can update/install packages from ACS.

Voila!

Regards,

Jerry


On 7/19/2023 10:19 AM, Jack Woehr wrote:

Not sure how iACS co-ordinates with changes to repos.d after initial bootstrap.
I only have used iACS in this context for initial bootstrap.
What does yum at the command line show?

On Wed, Jul 19, 2023 at 10:48 AM Jerry Draper <midrangel@xxxxxxxxxxxxx> wrote:

We added these two repo files to our /QOpenSys/etc/yum/repos.d/
but they still don't display in ACS.

J

On 7/18/2023 9:14 PM, Jack Woehr wrote:

Here are my repo files:

/QOpenSys/etc/yum/repos.d/ibmi-base.repo
====
*[ibmi-base]
name=IBM i base
baseurl=https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo-base-7.3/
enabled=1
gpgcheck=0
skip_if_unavailable=1*

/QOpenSys/etc/yum/repos.d/ibmi-release.repo
====
*[ibmi-release]
name=IBM i $releasever
baseurl=https://public.dhe.ibm.com/software/ibmi/products/pase/rpms/repo-$releasever/
enabled=1
gpgcheck=0
*
*skip_if_unavailable=1*



On Tue, Jul 18, 2023, 17:33 Jerry Draper
<midrangel@xxxxxxxxxxxxx> wrote:

Our core issue turns out that we are running to deprecated
ibm repos and not the current repos so new RPMs are not
available via ACS.

We don't see the ibmi-repos RPM which should set us up for
the new repos.

tips?

--

*JACK WOEHR, IBM Champion 2021-2023 <https://www.credly.com/users/jack-woehr/badges>**
*

*SENIOR IBM i ENGINEER*

303.847.8442 <tel:303.847.8442>
jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx
<https://www.linkedin.com/in/jackwoehr/> stay connected <https://www.linkedin.com/company/absolute-performance-inc./>

<https://www.absolute-performance.com/>

www.absolute-performance.com <https://www.absolute-performance.com/>

NON-DISCLOSURE NOTICE:  This communication including any and all attachments is for the intended recipient(s) only and may contain

confidential and privileged information.  If you are not the intended recipient of this communication, any disclosure, copying further

distribution or use of this communication is prohibited. If you received this communication in error, please contact the sender and

delete/destroy all copies of this communication immediately.