[SOLVED] Subscription: Update PVE with no Internet Access

[Denny Fuchs]

hi,

because of a very restrict policy (PCI DSS), it isn't allowed to get access to the internet from the pve. Also a proxy isn't an easy thing to get it working with a PCI auditor in the background. For all repos we a have internal APT server for that. So my question is: is it possible to mirroring the enterprise repo with valid subscription keys?
To pick up the packages out from cache/apt/archives isn't the best thing, I think.

 

[fireon]

The only way is to get the packages directly from an PVEhost. So in your way you can copy from an other pvehost "/var/cache/apt/archives", or give temporary internet access from another way. Wlan stick with mobilephone is working fine.... crazy example, but it is working.

 

[Denny Fuchs]

Hi,

I thought of a apt-proxy on one Proxmox host and sync it with a dmz reprepo ...

 

[AlexKir]

You can create mirror for debian/pve no-subscription repository using debmirror and any linux
For subscription repo I use wget --mirror
http-user -> Subscription Key
http-password -> Server ID

 

[Denny Fuchs]

hi Alex,

jepp, I use reprepro with update configuration and Subscription Key / Server ID to get it

Didn't ththink, that it is so easy.

Thanks