[ansible/artifactory] Postgresql 13 is available in RHEL's AppStream

bbaassssiiee commented 1 year ago

Artifactory is needed to secure our software supply chain, yet it does not take full advantage of the RHEL 8 distribution.

Installing Artifactory on-premises is a bit hard given the requirements of the postgres and nginx roles in the ansible installer. These rely on postgresql.org and nginx.org, which in our case would need to be allowed in our proxy.

https://github.com/jfrog/JFrog-Cloud-Installers/blob/eb802aacb2c5b6caf3bb35d7ff37febee142e986/Ansible/ansible_collections/jfrog/platform/roles/postgres/tasks/RedHat.yml#L43

No need to create a new repository which would require internet access & proxy configuration. Recent versions of RHEL/Rocky/AlmaLinux have Postgresql in their appstream, you only need to enable it.

dnf install -y @postgresql:13

Or

yum module install postgresql:13

bbaassssiiee commented 1 year ago

You could offer a choice like https://github.com/dockpack/base_postgres/blob/0aa7ad17b572aeb800f392041542cd3f852cf107/tasks/main.yml#L31

- name: Install from the package manager
  when: not use_postgresql_org_repo
  include_tasks: on_prem_install.yml

- name: Install from internet
  when: use_postgresql_org_repo|bool
  include_tasks: internet_install.yml

bbaassssiiee commented 1 year ago

Similar to #111 we'd like to be able to install in an air-gapped environment with URLs for RedHat packages and repo keys.

bbaassssiiee commented 8 months ago

Issues related to the dependency on https://www.postgresql.org:

bbaassssiiee commented 7 months ago

Now that Centos7/RHEL7 are no longer supported it's simpler to implement.

jfrog / JFrog-Cloud-Installers

[ansible/artifactory] Postgresql 13 is available in RHEL's AppStream #300