Merge pull request #16115 from Security-Onion-Solutions/reyesj2-patch-0

add sslverify=0 to minion repo config. Updates are pulled from the ma…
add sslverify=0 to minion repo config. Updates are pulled from the manager hosted repo
2026-07-25 02:05:43 +02:00 · 2026-07-24 19:06:28 -04:00 · 2026-07-24 16:59:42 -05:00 · 2026-07-24 23:40:45 +02:00
1 changed files with 6 additions and 0 deletions
@@ -60,6 +60,9 @@ so_repo:
  {% endif %}
    - enabled: 1
    - gpgcheck: 1
+  {% if not GLOBALS.is_manager %}
+    - sslverify: 0
+  {% endif %}

 # Only assign the kernel repo once this node's running salt matches the version this
 # SO release ships. During a soup the grid is mid-salt-upgrade; gating here keeps the
@@ -77,6 +80,9 @@ so_kernel_repo:
  {% endif %}
    - enabled: 1
    - gpgcheck: 1
+  {% if not GLOBALS.is_manager %}
+    - sslverify: 0
+  {% endif %}
    # Supplementary kernel repo: tolerate it being empty/unreachable (e.g. before the
    # manager has populated /nsm/kernelrepo) so a missing repomd.xml can't make every
    # dnf/pkg operation on the grid fail.
Author	SHA1	Message	Date
Mike ReevesandGitHub	162c66a705	Merge pull request #16115 from Security-Onion-Solutions/reyesj2-patch-0 add sslverify=0 to minion repo config. Updates are pulled from the ma…	2026-07-24 19:06:28 -04:00
reyesj2	14d11cc180	add sslverify=0 to minion repo config. Updates are pulled from the manager hosted repo	2026-07-24 16:59:42 -05:00
Josh BrowerandGitHub	112fcf7804	Merge pull request #16114 from Security-Onion-Solutions/fix/sigmapipelines Add already_running mapping	2026-07-24 23:40:45 +02:00