Linux教程FG111-网络YUM/DNF存储库配置（官方/镜像源）

本文档风哥主要介绍网络YUM/DNF存储库的配置，包括网络YUM/DNF存储库的概念、网络YUM/DNF存储库类型、网络YUM/DNF存储库架构、网络YUM/DNF存储库基础配置详解、网络YUM/DNF存储库高级配置技巧、网络YUM/DNF存储库自动化管理、官方存储库配置实战案例、镜像源存储库配置实战案例、网络YUM/DNF存储库故障排查与解决等内容，参考Red Hat Enterprise Linux 10官方文档，适合Linux运维人员在学习和测试中使用，如果要应用于生产环境则需要自行确认。

Part01-基础概念与理论知识

1.1 网络YUM/DNF存储库的概念

网络YUM/DNF存储库是指通过HTTP、HTTPS、FTP等网络协议访问的远程软件包存储库。网络YUM/DNF存储库可以提供最新的软件包，支持软件包自动更新，便于软件包管理。网络YUM/DNF存储库包括官方存储库和第三方镜像源存储库。更多视频教程www.fgedu.net.cn

网络YUM/DNF存储库的主要特点：

提供最新的软件包
支持软件包自动更新
便于软件包管理
支持多种网络协议
支持官方和第三方源

1.2 网络YUM/DNF存储库类型

网络YUM/DNF存储库类型：

官方存储库：Red Hat官方提供的存储库
镜像源存储库：第三方提供的镜像源
HTTP存储库：基于HTTP协议的存储库
HTTPS存储库：基于HTTPS协议的存储库
FTP存储库：基于FTP协议的存储库

1.3 网络YUM/DNF存储库架构

网络YUM/DNF存储库架构：

客户端：DNF/YUM客户端
repo文件：存储库配置文件
网络协议：HTTP/HTTPS/FTP
存储库服务器：软件包存储服务器
元数据：软件包元数据

风哥提示：网络YUM/DNF存储库可以提供最新的软件包，支持软件包自动更新，便于软件包管理。建议根据实际需求选择合适的存储库。

Part02-生产环境规划与建议

2.1 网络YUM/DNF存储库在生产环境的规划

网络YUM/DNF存储库在生产环境的规划要点：

# 网络YUM/DNF存储库生产环境规划
– 选择合适的存储库类型
– 配置存储库优先级
– 配置存储库GPG检查
– 定期更新存储库
– 监控存储库状态

# 网络YUM/DNF存储库注意事项
– 确保网络连接稳定
– 选择可靠的存储库
– 配置存储库优先级
– 定期更新存储库
– 备份存储库配置

2.2 网络YUM/DNF存储库最佳实践

网络YUM/DNF存储库最佳实践：

网络稳定：确保网络连接稳定
可靠存储库：选择可靠的存储库
优先级配置：配置存储库优先级
定期更新：定期更新存储库
备份配置：备份存储库配置

2.3 网络YUM/DNF存储库安全配置建议

网络YUM/DNF存储库安全配置建议：

GPG检查：启用GPG检查
HTTPS协议：使用HTTPS协议
访问控制：配置访问控制
定期更新：定期更新存储库
备份恢复：备份存储库配置

生产环境建议：确保网络连接稳定，选择可靠的存储库，配置存储库优先级，定期更新存储库。学习交流加群风哥微信: itpux-com

Part03-生产环境项目实施方案

3.1 网络YUM/DNF存储库基础配置详解

3.1.1 查看现有存储库

# 1. 列出所有存储库
# dnf repolist –all
Updating Subscription Management repositories.
repo id repo name status
appstream Red Hat Enterprise Linux 10 – AppStream enabled: 10,123
baseos Red Hat Enterprise Linux 10 – BaseOS enabled: 5,456
crb Red Hat Enterprise Linux 10 – CRB disabled
extras Red Hat Enterprise Linux 10 – Extras enabled: 234

# 2. 查看已启用的存储库
# dnf repolist
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
repo id repo name
appstream Red Hat Enterprise Linux 10 – AppStream
baseos Red Hat Enterprise Linux 10 – BaseOS
extras Red Hat Enterprise Linux 10 – Extras

# 3. 查看存储库详细信息
# dnf repoinfo appstream
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
Repo-id : appstream
Repo-name : Red Hat Enterprise Linux 10 – AppStream
Repo-revision : 1234567890
Repo-updated : Thu Mar 31 09:00:00 2026
Repo-pkgs : 10,123
Repo-available-pkgs: 10,123
Repo-size : 5.2 G
Repo-baseurl : https://cdn.redhat.com/content/dist/rhel10/10/x86_64/appstream/os
Repo-expire : 172,800 second(s) (last: Thu Mar 31 10:00:00 2026)
Repo-filename : /etc/yum.repos.d/redhat.repo

3.1.2 配置官方存储库

# 1. 注册Red Hat订阅
# subscription-manager register –username=your_username –password=your_password
Registering to: subscription.rhsm.redhat.com:443/subscription
The system has been registered with ID: 12345678-1234-1234-1234-123456789012

# 2. 附加订阅
# subscription-manager attach –auto
Installed Product Current Status:
Product Name: Red Hat Enterprise Linux Server
Status: Subscribed

# 3. 验证订阅状态
# subscription-manager status
+——————————————-+
System Status Details
+——————————————-+
Overall Status: Current

System Purpose Status: Not Set

# 4. 列出可用存储库
# dnf repolist
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
repo id repo name
appstream Red Hat Enterprise Linux 10 – AppStream
baseos Red Hat Enterprise Linux 10 – BaseOS
extras Red Hat Enterprise Linux 10 – Extras

3.1.3 配置镜像源存储库

3.2 网络YUM/DNF存储库高级配置技巧

3.2.1 配置存储库优先级

# 1. 安装yum-plugin-priorities插件
# dnf install -y yum-plugin-priorities
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Installing:
yum-plugin-priorities noarch 1.1.31-54.el9_2 appstream 35 k

Transaction Summary
================================================================================
Install 1 Package

Total download size: 35 k
Installed size: 45 k
Downloading Packages:
yum-plugin-priorities-1.1.31-54.el9_2.noarch.rpm 35 kB/s | 35 kB 00:00
——————————————————————————–
Total 35 kB/s | 35 kB 00:00
Running transaction check
Transaction test succeeded
Running transaction
Preparing : 1/1
Installing : yum-plugin-priorities-1.1.31-54.el9_2.noarch 1/1
Running scriptlet: yum-plugin-priorities-1.1.31-54.el9_2.noarch 1/1
Verifying : yum-plugin-priorities-1.1.31-54.el9_2.noarch 1/1

Installed:
yum-plugin-priorities-1.1.31-54.el9_2.noarch

Complete!

# 2. 配置存储库优先级
# cat > /etc/yum.repos.d/local.repo << 'EOF' [BaseOS] name=Red Hat Enterprise Linux 10 - BaseOS (Local) baseurl=file:///mnt/iso/BaseOS enabled=1 gpgcheck=0 priority=1 [AppStream] name=Red Hat Enterprise Linux 10 - AppStream (Local) baseurl=file:///mnt/iso/AppStream enabled=1 gpgcheck=0 priority=1 EOF # cat > /etc/yum.repos.d/mirror.repo << 'EOF' [BaseOS] name=Red Hat Enterprise Linux 10 - BaseOS (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/BaseOS/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 priority=2 [AppStream] name=Red Hat Enterprise Linux 10 - AppStream (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/AppStream/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 priority=2 EOF # 3. 验证存储库优先级 # dnf repolist Updating Subscription Management repositories. Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026. repo id repo name BaseOS (Local) Red Hat Enterprise Linux 10 - BaseOS (Local) AppStream (Local) Red Hat Enterprise Linux 10 - AppStream (Local) BaseOS (Mirror) Red Hat Enterprise Linux 10 - BaseOS (Mirror) AppStream (Mirror) Red Hat Enterprise Linux 10 - AppStream (Mirror)

3.2.2 配置存储库GPG检查

# 1. 导入GPG密钥
# rpm –import https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10

# 2. 验证GPG密钥已导入
# rpm -qa gpg-pubkey*
gpg-pubkey-6a21bb4c-60ba6065

# 3. 配置GPG检查
# cat > /etc/yum.repos.d/mirror.repo << 'EOF' [BaseOS] name=Red Hat Enterprise Linux 10 - BaseOS (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/BaseOS/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 [AppStream] name=Red Hat Enterprise Linux 10 - AppStream (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/AppStream/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 EOF # 4. 验证GPG检查配置 # cat /etc/yum.repos.d/mirror.repo [BaseOS] name=Red Hat Enterprise Linux 10 - BaseOS (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/BaseOS/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 [AppStream] name=Red Hat Enterprise Linux 10 - AppStream (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/AppStream/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10

3.3 网络YUM/DNF存储库自动化管理

3.3.1 自动更新存储库

# 1. 创建自动更新脚本
# cat > /usr/local/bin/update-repo.sh << 'EOF' #!/bin/bash # 自动更新存储库脚本 # 清理YUM缓存 dnf clean all # 生成YUM缓存 dnf makecache # 检查更新 dnf check-update # 发送通知 if [ $? -eq 100 ]; then echo "Updates available" | mail -s "Repository Update Notification" admin@example.com fi EOF # 2. 设置脚本执行权限 # chmod +x /usr/local/bin/update-repo.sh # 3. 配置cron任务 # cat > /etc/cron.daily/update-repo << 'EOF' #!/bin/bash /usr/local/bin/update-repo.sh EOF # 4. 设置cron任务执行权限 # chmod +x /etc/cron.daily/update-repo # 5. 验证cron任务 # crontab -l 0 0 * * * /etc/cron.daily/update-repo

风哥提示：网络YUM/DNF存储库支持多种高级配置，如配置存储库优先级、配置存储库GPG检查、自动化管理等。学习交流加群风哥QQ113257174

Part04-生产案例与实战讲解

4.1 官方存储库配置实战案例

4.1.1 完整配置流程

# 2. 附加订阅
# subscription-manager attach –auto
Installed Product Current Status:
Product Name: Red Hat Enterprise Linux Server
Status: Subscribed

# 3. 验证订阅状态
# subscription-manager status
+——————————————-+
System Status Details
+——————————————-+
Overall Status: Current

System Purpose Status: Not Set

# 4. 列出可用存储库
# subscription-manager repos –list
+———————————————————-+
Repository ID | Repo Name
+———————————————————-+
rhel-10-for-x86_64-appstream-rpms | Red Hat Enterprise Linux 10 for x86_64 – AppStream (RPMs)
rhel-10-for-x86_64-baseos-rpms | Red Hat Enterprise Linux 10 for x86_64 – BaseOS (RPMs)
rhel-10-for-x86_64-crb-rpms | Red Hat Enterprise Linux 10 for x86_64 – CodeReady Builder (RPMs)

# 5. 启用存储库
# subscription-manager repos –enable=rhel-10-for-x86_64-appstream-rpms
Repository ‘rhel-10-for-x86_64-appstream-rpms’ is enabled for this system.

# subscription-manager repos –enable=rhel-10-for-x86_64-baseos-rpms
Repository ‘rhel-10-for-x86_64-baseos-rpms’ is enabled for this system.

# 6. 清理YUM缓存
# dnf clean all
0 files removed

# 7. 生成YUM缓存
# dnf makecache
Red Hat Enterprise Linux 10 for x86_64 – AppStream (RPMs) 1.2 MB/s | 3.5 MB 00:03
Red Hat Enterprise Linux 10 for x86_64 – BaseOS (RPMs) 1.5 MB/s | 5.2 MB 00:04
Metadata cache created.

# 8. 列出存储库
# dnf repolist
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
repo id repo name
rhel-10-for-x86_64-appstream-rpms Red Hat Enterprise Linux 10 for x86_64 – AppStream (RPMs)
rhel-10-for-x86_64-baseos-rpms Red Hat Enterprise Linux 10 for x86_64 – BaseOS (RPMs)

# 9. 测试安装软件包
# dnf install -y nginx
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Installing:
nginx x86_64 1.22.1-2.el9 appstream 35 k
Installing dependencies:
nginx-core x86_64 1.22.1-2.el9 appstream 540 k
nginx-filesystem noarch 1.22.1-2.el9 appstream 11 k

Transaction Summary
================================================================================
Install 3 Packages

Total download size: 586 k
Installed size: 1.9 M
Downloading Packages:
(1/3): nginx-filesystem-1.22.1-2.el9.noarch.rpm 11 kB/s | 11 kB 00:00
(2/3): nginx-1.22.1-2.el9.x86_64.rpm 35 kB/s | 35 kB 00:00
(3/3): nginx-core-1.22.1-2.el9.x86_64.rpm 540 kB/s | 540 kB 00:00
——————————————————————————–
Total 586 kB/s | 586 kB 00:00
Running transaction check
Transaction test succeeded
Running transaction
Preparing : 1/1
Installing : nginx-filesystem-1.22.1-2.el9.noarch 1/3
Installing : nginx-core-1.22.1-2.el9.x86_64 2/3
Installing : nginx-1.22.1-2.el9.x86_64 3/3
Running scriptlet: nginx-1.22.1-2.el9.x86_64 3/3
Verifying : nginx-1.22.1-2.el9.x86_64 1/3
Verifying : nginx-core-1.22.1-2.el9.x86_64 2/3
Verifying : nginx-filesystem-1.22.1-2.el9.noarch 3/3

Installed:
nginx-1.22.1-2.el9.x86_64
nginx-core-1.22.1-2.el9.x86_64
nginx-filesystem-1.22.1-2.el9.noarch

Complete!

4.2 镜像源存储库配置实战案例

4.2.1 完整配置流程

# 1. 创建镜像源repo文件
# cat > /etc/yum.repos.d/mirror.repo << 'EOF' [BaseOS] name=Red Hat Enterprise Linux 10 - BaseOS (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/BaseOS/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 [AppStream] name=Red Hat Enterprise Linux 10 - AppStream (Mirror) baseurl=https://mirrors.aliyun.com/rockylinux/10/AppStream/x86_64/os/ enabled=1 gpgcheck=1 gpgkey=https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 EOF # 2. 导入GPG密钥 # rpm --import https://mirrors.aliyun.com/rockylinux/RPM-GPG-KEY-Rocky-10 # 3. 验证GPG密钥已导入 # rpm -qa gpg-pubkey* gpg-pubkey-6a21bb4c-60ba6065 # 4. 清理YUM缓存 # dnf clean all 0 files removed # 5. 生成YUM缓存 # dnf makecache BaseOS (Mirror) 1.2 MB/s | 3.5 MB 00:03 AppStream (Mirror) 1.5 MB/s | 5.2 MB 00:04 Metadata cache created. # 6. 列出存储库 # dnf repolist Updating Subscription Management repositories. Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026. repo id repo name BaseOS (Mirror) Red Hat Enterprise Linux 10 - BaseOS (Mirror) AppStream (Mirror) Red Hat Enterprise Linux 10 - AppStream (Mirror) # 7. 测试安装软件包 # dnf install -y httpd Updating Subscription Management repositories. Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026. Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: httpd x86_64 2.4.53-7.el9 AppStream (Mirror) 1.4 M Installing dependencies: httpd-filesystem noarch 2.4.53-7.el9 AppStream (Mirror) 12 k httpd-tools x86_64 2.4.53-7.el9 AppStream (Mirror) 120 k Transaction Summary ================================================================================ Install 3 Packages Total download size: 1.5 M Installed size: 4.8 M Downloading Packages: (1/3): httpd-filesystem-2.4.53-7.el9.noarch.rpm 12 kB/s | 12 kB 00:00 (2/3): httpd-tools-2.4.53-7.el9.x86_64.rpm 120 kB/s | 120 kB 00:00 (3/3): httpd-2.4.53-7.el9.x86_64.rpm 1.4 MB/s | 1.4 MB 00:00 -------------------------------------------------------------------------------- Total 1.5 MB/s | 1.5 MB 00:00 Running transaction check Transaction test succeeded Running transaction Preparing : 1/1 Installing : httpd-filesystem-2.4.53-7.el9.noarch 1/3 Installing : httpd-tools-2.4.53-7.el9.x86_64 2/3 Installing : httpd-2.4.53-7.el9.x86_64 3/3 Running scriptlet: httpd-2.4.53-7.el9.x86_64 3/3 Verifying : httpd-filesystem-2.4.53-7.el9.noarch 1/3 Verifying : httpd-tools-2.4.53-7.el9.x86_64 2/3 Verifying : httpd-2.4.53-7.el9.x86_64 3/3 Installed: httpd-2.4.53-7.el9.x86_64 httpd-filesystem-2.4.53-7.el9.noarch httpd-tools-2.4.53-7.el9.x86_64 Complete!

4.3 网络YUM/DNF存储库故障排查与解决

4.3.1 存储库无法访问

# 问题现象：网络存储库无法访问
# 分析步骤：

# 1. 查看错误信息
# dnf repolist
Updating Subscription Management repositories.
Error: Failed to download metadata for repo ‘BaseOS’: Cannot download repomd.xml: Cannot open/read https://mirrors.aliyun.com/rockylinux/10/BaseOS/x86_64/os/repodata/repomd.xml

# 2. 检查网络连接
# ping -c 4 mirrors.aliyun.com
PING mirrors.aliyun.com (47.96.1.100) 56(84) bytes of data.
64 bytes from mirrors.aliyun.com (47.96.1.100): icmp_seq=1 ttl=52 time=15.2 ms
64 bytes from mirrors.aliyun.com (47.96.1.100): icmp_seq=2 ttl=52 time=15.1 ms
64 bytes from mirrors.aliyun.com (47.96.1.100): icmp_seq=3 ttl=52 time=15.3 ms
64 bytes from mirrors.aliyun.com (47.96.1.100): icmp_seq=4 ttl=52 time=15.2 ms
— mirrors.aliyun.com ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 3002ms
rtt min/avg/max/mdev = 15.1/15.2/15.3/0.1 ms

# 3. 测试HTTP连接
# curl -I https://mirrors.aliyun.com/rockylinux/10/BaseOS/x86_64/os/repodata/repomd.xml
HTTP/1.1 200 OK
Date: Thu, 31 Mar 2026 10:00:00 GMT
Content-Type: text/xml
Content-Length: 1234
Connection: keep-alive

# 4. 检查DNS解析
# nslookup mirrors.aliyun.com
Server: 8.8.8.8
Address: 8.8.8.8#53

Non-authoritative answer:
Name: mirrors.aliyun.com
Address: 47.96.1.100

# 5. 检查防火墙规则
# firewall-cmd –list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services: dhcpv6-client ssh
ports:
protocols:
forward: no
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:

# 6. 允许HTTP/HTTPS出站连接
# firewall-cmd –permanent –add-service=http
success
# firewall-cmd –permanent –add-service=https
success
# firewall-cmd –reload
success

# 7. 清理YUM缓存
# dnf clean all
0 files removed

# 8. 重新生成YUM缓存
# dnf makecache
BaseOS (Mirror) 1.2 MB/s | 3.5 MB 00:03
AppStream (Mirror) 1.5 MB/s | 5.2 MB 00:04
Metadata cache created.

# 9. 验证存储库可访问
# dnf repolist
Updating Subscription Management repositories.
Last metadata expiration check: 0:00:01 ago on Thu Mar 31 10:00:00 2026.
repo id repo name
BaseOS (Mirror) Red Hat Enterprise Linux 10 – BaseOS (Mirror)
AppStream (Mirror) Red Hat Enterprise Linux 10 – AppStream (Mirror)

# 10. 预防措施
# – 确保网络连接稳定
# – 检查防火墙规则
# – 配置DNS解析
# – 备份存储库配置

生产环境建议：网络YUM/DNF存储库故障排查需要耐心和细致。存储库无法访问需要检查网络连接、防火墙规则和DNS解析。更多学习教程公众号风哥教程itpux_com

Part05-风哥经验总结与分享

5.1 网络YUM/DNF存储库经验总结

网络YUM/DNF存储库经验总结：

网络稳定：确保网络连接稳定
可靠存储库：选择可靠的存储库
优先级配置：配置存储库优先级
定期更新：定期更新存储库
备份配置：备份存储库配置

5.2 网络YUM/DNF存储库检查清单

网络YUM/DNF存储库检查清单：

配置前：检查网络连接、选择可靠的存储库
配置时：创建repo文件、导入GPG密钥、配置优先级
配置后：清理YUM缓存、生成YUM缓存、验证存储库
使用时：测试安装软件包
维护时：定期更新存储库、备份存储库配置
故障排查：检查网络连接、防火墙规则、DNS解析

5.3 网络YUM/DNF存储库相关工具推荐

网络YUM/DNF存储库相关工具推荐：

dnf：DNF软件包管理器
subscription-manager：Red Hat订阅管理器
createrepo：创建存储库工具
reposync：同步存储库工具
mirrorlist：镜像列表工具