DNF (RHEL /RPM)

Collect an SBOM component using the DNF Package Manager.

Details

Transfer Tag

hoppr.core_plugins.collect_dnf_plugin

Supported PURLs

rpm

System Dependencies

dnf

Transfer File Example

---
schemaVersion: v1
kind: transfer

stages:
  collect:
    plugins:
      - name: hoppr.core_plugins.collect_dnf_plugin
        config:
          process_timeout: 60

max_processes: 3

Configuration Options

Option	Details
dnf_command	String. Defaults to dnf. Command to be used to execute dnf commands. May be overridden with another command that uses the same syntax, or a fully qualified path if dnf is not on the default $PATH.
process_timeout	Number of seconds to attempt collect before timeout. Default: 60
base_arch	String. Value for the $base_arch dnf variable to parse to in local repositories. Default: None
release_ver	String. Value for the $release_ver dnf variable to parse to in local repositories. Default: None
vars_dir	Path. Directory to look for dnf variable files when parsing local repositories.Default: /etc/dnf/vars, /etc/yum/vars

Proxy and Certificate Configuration

To configure proxies, set the following environment variables:

Environment Variable Name	Description
http_proxy	Proxy for the HTTP protocol.
https_proxy	Proxy for the HTTPS protocol.
no_proxy	Comma-separated list of domains where proxies won't be used.

By default all certificates trusted by the system are used for the verification of the server certificate by DNF. For information on how to install a root CA certificate in Certificate System, see [https://access.redhat.com/documentation/en-us/red_hat_certificate_system/9/html/planning_installation_and_deployment_guide/setting_up_a_root_certificate_authority].

Authentication Configuration

If using cert authentication, you can set paths to your cert and key in the repo config file. To specify credentials, you need a credentials file.

Sample credentials file:

---
schemaVersion: v1
kind: Credentials

metadata:
  name: Registry Credentials
  version: v1
  description: Sample credentials file

credential_required_services:
  - url: registry.gitlab.com
    user_env: CI_REGISTRY_USER
    pass_env: CI_REGISTRY_PASSWORD

SBOM Generation Tools

• syft (cli tool)

note

For more tools visit the CycloneDX Tool Center