Skip to content

Commit

Permalink
Merge pull request #42 from mikedep333/README_label_existing_ports
Browse files Browse the repository at this point in the history
Update README.md for non-standard SELinux ports
  • Loading branch information
mikedep333 authored Dec 22, 2021
2 parents d2a6ef4 + 67392b1 commit aab4745
Showing 1 changed file with 11 additions and 2 deletions.
13 changes: 11 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ If any of the remote repos you are trying to connect to are hosted on non-standa
HTTP/HTTPS ports, you can configure Pulp to be able to talk to them like in the following example
for port `10011`.

`sudo semanage port -a -t http_port_t -p tcp 10011`
`sudo semanage port -a -t http_port_t -p tcp 10011`

## Adding support for proxy servers running on custom ports

Expand All @@ -62,7 +62,16 @@ If Pulp is configured to use a proxy server (in order to talk to remote repos),
server is on a non-standard port, you can configure Pulp to be able to talk to them like in the
following example for port `10012`.

`sudo semanage port -a -t http_cache_port_t -p tcp 10012`
`sudo semanage port -a -t http_cache_port_t -p tcp 10012`

**NOTE**: If you get the following error:

`ValueError: Port tcp/10012 already defined`

That means that the port number is already labelled for some other purpose by SELinux. No change was
made to your system. Run this command instead (substitute `http_port_t` for remote repos):

`sudo semanage port -m -t http_cache_port_t -p tcp 10012`

**NOTE**: Technically Pulp can talk to any remote repo or proxy server running on any SELinux-recognized
ports for web servers or for proxy servers. (They are effectively one cumulative list.)
Expand Down

0 comments on commit aab4745

Please sign in to comment.