Feature Request: purge about puppet-yum HOT 5 OPEN

I need more information about your workflow and how you added / removed the repositories. If you want to remove some of the repositories you could use something like this:

[vagrant@centos-7 yum]$ cat data/common.yaml
---
yum::managed_repos:
  - 'base'
  - 'updates'
  - 'extras'
  - 'centosplus'
yum::repos:
  base:
    ensure: 'absent'
  updates:
    ensure: 'absent'
  extras:
    ensure: 'absent'
  centosplus:
    ensure: 'absent'

[vagrant@centos-7 yum]$ sudo /opt/puppetlabs/bin/puppet apply --modulepath=/home/vagrant/projects/modules -e 'include yum'
Notice: Compiled catalog for centos-7.vagrant.dev in environment production in 0.23 seconds
Notice: /Stage[main]/Yum/Yumrepo[base]/ensure: removed
Notice: /Stage[main]/Yum/Yumrepo[updates]/ensure: removed
Notice: /Stage[main]/Yum/Yumrepo[extras]/ensure: removed
Notice: /Stage[main]/Yum/Yumrepo[centosplus]/ensure: removed
Notice: Applied catalog in 0.15 seconds

from puppet-yum.

The repo removal process above is fine for managed repos, but what about the repos that are created by RPMs? (or naughty admins)

It causes significant issues in an environment that doesn't have Internet access, so we want to make sure that only "managed" repos are present. I guess its the difference between ensuring that one specific repo is present vs ensuring the repos are exactly what you want them to be.

Tommy

PS: We also tend to have to find all the modulexyz::manage_repo type settings and make them false for the same reason.

from puppet-yum.

Hello,

I am also very interrested in the feature (just to let you know that you're not the only ones =p).

from puppet-yum.

Current workaround for us:
Hiera

profile::yum::disable_repos:
    - CentOS-Base.repo
    - CentOS-AppStream.repo
    - CentOS-Extras.repo

Manifest

class profile::yum(
  Array $disable_repos = [],
) {
  # Disable some repos
  $disable_repos.each | $file | {

    exec { "mv /etc/yum.repos.d/$file /etc/yum.repos.d/$file.disabled-by-puppet":
      onlyif => "test -f /etc/yum.repos.d/$file"
    }
    ->
    file { "/etc/yum.repos.d/$file":
      ensure => absent,
    }

    # disable repos than configure some
    Exec <| onlyif == "test -f /etc/yum.repos.d/$file" |> -> Yumrepo <| |>

  }
}

from puppet-yum.

I am currently using crayfishx/purge module, which provides more granular options. For instance, you wouldn't want module to disable repositories managed by subscription-manager and not necessary to remove the repository, just disable it:

      purge { 'yumrepo':
        manage_property => 'enabled',
        state           => '0',
        unless          => ['baseurl', '=~', [$artifactory_url, $satellite_url]],
      }

or hiera

purge::resources:
  yumrepo:
    unless:
      - [ 'metalink', '=~', 'mirrors.fedoraproject.org' ]

from puppet-yum.