How to ensure Package Signature Checking is Globally Activated
The gpgcheck option should be used to ensure that checking of an RPM package’s signature always occurs prior to its installation.
To force yum to check package signatures before installing them, ensure that the following line appears in /etc/yum.conf in the [main] section:
How to manually Check for Package Updates
The following command prints a list of packages that need to be updated:
To actually install these updates, run:
Disable the rhnsd Daemon
The rhnsd daemon polls the Red Hat Network web site for scheduled actions. Unless it is actually
necessary to schedule updates remotely through the RHN website, it is recommended that the service
be disabled.
The rhnsd daemon is enabled by default, but until the system has been registered with the Red Hat
Network, it will not run. However, once the registration process is complete, the rhnsd daemon
will run in the background and periodically call the rhn check utility. It is the rhn check
utility that communicates with the Red Hat Network web site.
Configure Connection to the RHN RPM Repositories
The first step in configuring a system for updates is to register with the Red Hat Network (RHN). For most systems, this is done during the initial installation. Successfully registered systems will appear on the RHN web site. If the system is not listed, run the Red Hat Network Registration tool, which can be found in the Applications menu under System Tools or on the command line:
Follow the prompts on the screen. If successful, the system will appear on the RHN web site and be subscribed to one or more software update channels. Additionally, a new daemon, rhnsd, will be enabled. If the system will not have access to the Internet, it will not be able to directly subscribe to the RHN update repository. Updates will have to be downloaded from the RHN web site manually. The command line tool yum and the graphical front-ends pirut and pup can be configured to handle this situation.
How to Ensure Red Hat GPG Key is Installed.
To ensure that the system can cryptographically verify update packages (and also connect to the Red Hat Network to receive them if desired), run the following command to ensure that the system has the Red Hat GPG key properly installed:
Example below shows on a Centos Server.
The command should return the string: gpg(Red Hat, Inc. (release key ) for redhat systems.
Home serverbuddies
© 2025 ServerBuddies Support Blog.Original WP theme by: nodethirtythree
www.serverbuddies.com