Product Repositories
Concurrent Real-Time provides software repositories for all of its standard products.
https://redhawk.concurrent-rt.com hosts YUM repositories (rpm packages) as well as Debian-style APT repositories (deb packages) for RedHawk systems running either CentOS/RHEL or Ubuntu, respectively.
Both the YUM repositories (rpms) and the APT repositories (debs) are compatible with their respective standard client access methods. Since the access methods differ significantly, their descriptions are split into two different sections:
Repository Content - Browsing
Online network repositories are available for most standard Concurrent Real-Time products.
Installation disc images are no longer included in the repositories, but they are available in another location.
Secure Sites
For customers that do not have access to Concurrent Real-Time's network from their secured systems, a browser can be used outside of your secured area to navigate repositories and download software for subsequent transport to secured areas.
Original product installation discs (ISO9660 images) or packages (rpms or debs) can be downloaded manually. In addition, customized Update Disc images can be created and downloaded for immediate installation.
Update Discs
For customers who prefer physical media or do not have access to Concurrent Real-Time's network from their secured systems, physical discs can be requested by contacting Concurrent Real-Time Software Distribution at [email protected].
Alternatively, you can create update disc ISO9660 images for your site and immediately download them for installation.
Repository Keys
Concurrent Real-Time signs selected repositories with a GPG-generated RSA and ElGamal key pair. Some installation techniques require Concurrent Real-Time's public key to be installed on your system so that the authenticity of these repositories can be verified.
You can download the ccur-public-keys file and import the key file as needed into your RPM-based or APT-based client systems. You should import the key file before attempting to access software from Concurrent Real-Time's repositories.
Importing Keys on Ubuntu/Debian
Recent versions of Debian and Ubuntu require that repositories be signed. Therefore, you must import Concurrent Real-Time's public keys, as shown in the commands below:
- wget -q https://redhawk.concurrent-rt.com/network/ccur-public-keys
- apt-key add ccur-public-keys
Importing Keys on CentOS/RHEL
Concurrent Real-Time does not currently sign its rpm-based repositories or RPMs, although that may change in the future. Currently this doesn't prohibit software installation because our repository definitions use the "gpgcheck=0" directive.
Thus, the following is optional at this time:
- wget -q https://redhawk.concurrent-rt.com/network/ccur-public-keys
- rpm --import ccur-public-keys
- gpg --import ccur-public-keys
Authenticity
If you wish to check the authenticity of the public keys you downloaded from Concurrent Real-Time, request the key fingerprints from Concurrent Real-Time Support and compare them to the fingerprints of the keys you downloaded. You can obtain the fingerprints you downloaded with the following command:
gpg --with-fingerprint ccur-public-keys