Excluding OpenIAM infrastructure components from OS patching

In case users need to patch the Operating System and want OpenIAM infrastructure components to stay intact, there are few ways of doing it safely. The most applicable ones are given below.

Permanent exclusion (configuration file)

To permanently exclude packages from all future yum operations (updates, installs, etc.), edit the main YUM configuration file - /etc/yum.conf.

1. Open the configuration file using a text editor (like nano or vi):

sudo nano /etc/yum.conf

2. Add an exclude line to the [main] section of the file, specifying the packages in a space-separated list. Wildcards are supported.

[main]
exclude=kernel* httpd php*

This will prevent any package name matching "kernel", "httpd", or "php" from being updated automatically.

Per-repository exclusion

You can also exclude packages from a specific repository by editing its configuration file in the /etc/yum.repos.d/ directory.

1. Open the relevant repository file, e.g., for the EPEL repository.

sudo nano /etc/yum.repos.d/epel.repo

2. Add the exclude line under the specific [repository] section.

[epel]
name=Extra Packages for Enterprise Linux 8 - $basearch
# ... other settings ...
exclude=mysql*