Document how to install on RHEL/CentOS 8/9 #838
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it
This PR documents how to install the Tanzu CLI on RHEL/CentOS 8 and 9.
The idea is that users should install the CLI as follows when running on RHEL/CentOS 8 and 9:
Why we need to run
rpm --import
manually?When testing on a real VM running Centos 9, I learned that because both key are configured in the
/etc/yum.repos.d/tanzu-cli.repo
file, yum will run anrpm --import
on both and will fail on the standard keyTANZU-PACKAGING-GPG-RSA-KEY.gpg
and the installation will still fail.So, I did two things to fix this:
1- put the
TANZU-PACKAGING-GPG-RSA-KEY-CENTOS9.gpg
key first in the list of keys in the/etc/yum.repos.d/tanzu-cli.repo
file. This means that on a firstyum install
the key will be imported successfully, although theyum install
will still fail; this allows to runyum install
a second time, and have it succeed because it will find the required key.2- have the user run
rpm --import
manually first, to avoid the first failure.With the instructions in this PR, there should be no
yum install
failure at all.An alternative since we ask users to import the new
TANZU-PACKAGING-GPG-RSA-KEY-CENTOS9.gpg
key manually, is that we could remove that key from the/etc/yum.repos.d/tanzu-cli.repo
file. The value in doing that is that it would keep the instructions the same as for the normaltanzu-cli
package except for therpm –import
and theyum install tanzu-cli-centos9
. The value in leaving that second key in the file is that if the user forgets to run therpm –import
, then runningyum install
twice will work.Which issue(s) this PR fixes
Fixes # N/A
Describe testing done for PR
Let CI run
Release note
Additional information
Special notes for your reviewer
The new
tanzu-cli-centos
packages will only be made available starting with CLIv1.5.2
.To make them available for already released versions would require building each RPM package with the new name and signing it with the new key. This would take more effort than we felt was worthwhile.
To install older versions on Centos 8/9, users will need to deactivate the gpg check using
--nogpgcheck
; I have specified this in the documentation update in this PR.