Skip to content

add vex tarball downloader for IoP#638

Open
pfreyburg wants to merge 9 commits into
theforeman:masterfrom
pfreyburg:RHINENG-25683-add-vex-tarball-downloader
Open

add vex tarball downloader for IoP#638
pfreyburg wants to merge 9 commits into
theforeman:masterfrom
pfreyburg:RHINENG-25683-add-vex-tarball-downloader

Conversation

@pfreyburg

@pfreyburg pfreyburg commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Why are you introducing these changes? (Problem description, related links)

RHINENG-25683

Implement a systemd timer and service to download the VEX tarball and necessary files from the official Red Hat Product Security location (https://security.access.redhat.com/data/csaf/v2/vex/)

Key requirements:

  • Read archive_latest.txt to determine the current tarball name
  • Download the tarball and its .asc signature file
  • Store using a stable name in the IoP environment: vex-latest.tar.zst
  • Update Satellite installer (foremanctl Ansible) to generate the systemd unit files (timer and service)
  • Set timer frequency to weekly, aligned with Red Hat ProdSec's update schedule

What are the changes introduced in this pull request?

  • script for downloading,
  • systemd service for running the script,
  • systemd timer for triggering the service.

How to test this pull request

Steps to reproduce:

Enable IoP using foremanctl and then:

  • vex-latest.tar.zst is downloaded into /var/www/html/pub/iop/data/csaf/v2/vex/,
  • weekly timer for upcoming downloads is set.

Checklist

  • Tests added/updated (if applicable)
  • Documentation updated (if applicable)

@pfreyburg
pfreyburg force-pushed the RHINENG-25683-add-vex-tarball-downloader branch from a565e1c to 42e6d49 Compare July 9, 2026 06:39
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2 Outdated
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2 Outdated
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2
@ehelms

ehelms commented Jul 9, 2026

Copy link
Copy Markdown
Member

@pfreyburg The PR description lacks information and references a private Red Hat Jira issue.

Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2 Outdated
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2 Outdated
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2 Outdated
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2 Outdated
Comment thread src/roles/iop_vex_downloader/templates/iop-vex-downloader.sh.j2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants