Configuring yum

How to configure the RPM package manager

This page explains how to configure yum to pull packages from the Seal artifact server based on your existing setup.

Make sure you have the access token for the server ready.

Pull directly from the artifact server

Yum's configuration is saved in the yum.repos.d directory.

Our goal is to add https://rpm.sealsecurity.io/ as a remote repository.

1. Run:

vim /etc/yum.repos.d/.repo

1. We want the .repofile to look like this:

[seal]
name=seal
baseurl=https://rpm.sealsecurity.io/centos/$releasever/updates/$basearch/
username=$SEAL_PROJECT
password=$SEAL_TOKEN
enabled=1
gpgcheck=0

1. In the $SEAL_PROJECT put the name of your project. This value will later be used in the reporting to indicate which project pulled which vulnerable package.

2. In the $SEAL_TOKEN put the access token to the Seal artifact server.