RPM (dnf and yum)
Add a dnf or yum repository that points at the Package Firewall, with the base URL path the default Fedora mirror needs.
| Repository URL | https://packages.vulnetix.com/rpm/<path on the mirror> |
| Ecosystem ID | rpm |
| Plan | Add-on |
| Mode | gate: anything under repodata/ is streamed unchanged; <name>-<version>-<release>.<arch>.rpm is checked |
| Cooldown | no |
| Default mirror | https://dl.fedoraproject.org |
| Automatic setup | none, needs root |
The path after /rpm is appended to the mirror URL unchanged. With the default mirror, the Fedora release tree is under /pub/fedora/linux/releases/.
Configuration
/etc/yum.repos.d/vulnetix.repo:
[vulnetix]
name=Vulnetix Package Firewall
baseurl=https://packages.vulnetix.com/rpm/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
enabled=1
gpgcheck=1
username=YOUR_ORG_UUID
password=YOUR_API_KEYDisable the distribution’s own repositories for the same content (sudo dnf config-manager setopt fedora.enabled=0 on dnf5) so packages are not fetched directly.
For RHEL, Rocky, Alma or an internal mirror, add that mirror as the rpm mirror and write baseurl relative to it.
Use and verify
sudo dnf clean all
sudo dnf repolist
sudo dnf install curlrepomd.xml signatures still verify. Keep gpgcheck=1.