Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes #32180: Unset system proxy and SSL environment variables for th… #665

Merged
merged 1 commit into from Mar 23, 2021

Conversation

ehelms
Copy link
Member

@ehelms ehelms commented Mar 23, 2021

…e duration of the install

Moves from checking for http proxy and SSL environment variables and
failing if they are present to a model of unsetting them during
the duration of the install run. This does not change them on
the system itself.

…e duration of the install

Moves from checking for http proxy and SSL environment variables and
failing if they are present to a model of unsetting them during
the duration of the install run. This does not change them on
the system itself.
@ehelms ehelms merged commit 1de17d5 into theforeman:develop Mar 23, 2021
@khobbits
Copy link

khobbits commented Feb 15, 2023

Posting here (instead of redmine), because this was the first result on google, when searching for the issue.

Out of curiosity, why do you need to unset these variables?

My machine was unable to unable to pull down required packages via yum/dnf after unsetting these variables, as access to the internet was via http_proxy.

I worked around this, by adding a proxy definition into the /etc/yum.conf instead.

@ekohl
Copy link
Member

ekohl commented Feb 15, 2023

I worked around this, by adding a proxy definition into the /etc/yum.conf instead.

This is indeed the intended solution. Within the installer itself we have various places where we do make some HTTP calls (like to register the Smart Proxy to Foreman) and they end up respecting the proxy settings, but most of the time it actually fails because you can't reach the Foreman via the HTTP proxy. Or it breaks client certificate based authentication.

Perhaps we should change those calls, but this is the what we decided would be best for most users.

@khobbits
Copy link

Just a query...

Do you need to make any API calls, before doing the package install?

If not, it might make sense to pull down any external dependencies, like packages, before breaking internet access.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
4 participants