[Open-scap] Mommy, where do openscap repos come from?

[Greg Elin]

Thanks Simon and Petr. 

The specific context of installing on Amazon's Linux raised the larger question. 

I thought I was installing OpenSCAP on Centos via EPEL. But I was wrong. It is coming from a Centos repo. (Away from desk so don't have specific.)

I am not in favor of random rpm's Martin. It certainly made sense to me to try and install OpenSCAP on Amazon Linux and see what would happen. But since the OpenSCAP repo was not even being found, it was clear I did not understand OpenSCAP install process as well as I thought!

Best solution is to have Amazon include OpenSCAP. I think we could make a case to Amazon engineers. 

Greg Elin
P: 917-304-3488
E:  gregelin at gitmachines.com

Sent from my iPhone

>> On Sep 4, 2014, at 11:12 AM, Simon Lukasik <slukasik at redhat.com> wrote:
>> 
>>> On 09/04/2014 04:58 PM, Petr Lautrbach wrote:
>>> On 09/04/2014 02:51 PM, Greg Elin wrote:
>>> What repos host openscap?
>>> 
>>> I've been asked to install OpenSCAP on Amazon Linux. I thought I was
>>> getting OpenSCAP from Fedora EPEL (
>>> http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm),
>>> but testing on Amazon Linux, that now seems incorrect.
>> 
>> As Martin already wrote, openscap can't be part of epel repository since
>> it's part of RHEL. However, RHEL is upstream for several distributions
>> like CentOS so you could try to look there:
>> 
>> http://mirror.centos.org/centos/6/os/x86_64/
> 
> The centos version of the package may or may not work. No assurance. We cannot fix things for you on Amazon.
> 
> More correct approach would be to ask Amazon to include OpenSCAP package. That way you could actually get some support.
> 
> Good luck!
> 
> -- 
> Simon Lukasik
> Security Technologies, Red Hat, Inc.