Guidelines to use an Air-gapped Repository
Describes the guidelines to use for proper functioning of an air-gapped repository.
-
Always reuse the same
--data-dirfor cumulative updates. -
Use
--localwhen the canonical image has already been loaded on an isolated host and should not be pulled. -
Do not manually edit the active
repositorysymlink. -
Do not manually modify files inside the active publication.
-
Do not manually delete publication directories while synchronization is running.
-
Do not place credentials inside the persistent data directory.
-
Prefer
--repo-config-filefor authenticated repositories. -
Do not use
docker cpto move repository content between helper and serving containers; both use the same persistent host mount. -
Expect one active physical publication in steady state; old full repository publications are not retained for rollback.
-
Reserve enough temporary free space for the active publication plus the candidate publication during update.
-
Use
removewhen only the serving container should be deleted. -
Use
purge-data --yesonly for permanent cleanup. -
Serving-only lifecycle commands are offline operations and do not contact the upstream package repository.
-
Restrict host access while synchronization is running because the current
mapr-setup.shmay expose parsed credentials in child-process arguments.
pub/ content is preserved when installer packages are
installed. Update to the installer packages may refresh the pub/
content .