dnf

Primary endpoint

Use https://mirror.kargadan.ir/repository/rhel-group/ as the canonical baseurl in your client configuration.

3 archives

Companion archives included

Primary archive plus 2 companion archives (security ยท updates ยท backports โ€” listed below).

Anonymous

No sign-in required

Public read access over HTTPS. Plain HTTP is available for legacy clients that cannot validate the certificate.

Repository URL

Drop one of the URLs below into your client configuration. HTTPS is the right choice in almost every case.

HTTPS ยท recommended
https://mirror.kargadan.ir/repository/rhel-group/
HTTP ยท legacy clients only
http://mirror.kargadan.ir/repository/rhel-group/

Companion repositories

This distribution requires more than one archive โ€” list each one below in your client configuration.

NameURL
rhel-ubi-proxyhttps://mirror.kargadan.ir/repository/rhel-ubi-proxy/
epel-proxyhttps://mirror.kargadan.ir/repository/epel-proxy/

Subscription-only RHEL channels require entitlement certificates that Nexus cannot present, so they cannot be proxied. Only the publicly available UBI content is mirrored here. For full RHEL coverage, deploy Red Hat Satellite or Capsule.

Quick verification

Run this from any machine that can reach the mirror. It should complete in under a second once metadata is cached.

# Quick smoke test (UBI 9)
curl -fsSL https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/x86_64/baseos/os/repodata/repomd.xml | head

Default client configuration

Drop this file at /etc/yum.repos.d/redhat.repo on the target host for the recommended default release (ubi9). See configuration by release for every supported suite.

; /etc/yum.repos.d/redhat.repo  (Red Hat Enterprise Linux 9 โ€” UBI public content only)
; Subscription-required Red Hat content cannot be proxied without entitlement
; certificates and is intentionally NOT cached. UBI (Universal Base Image)
; content is publicly available and IS cached through rhel-ubi-proxy.

[ubi-9-baseos]
name=Red Hat UBI 9 - BaseOS
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/$basearch/baseos/os/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

[ubi-9-appstream]
name=Red Hat UBI 9 - AppStream
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/$basearch/appstream/os/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

[ubi-9-codeready-builder]
name=Red Hat UBI 9 - CodeReady Linux Builder
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/$basearch/codeready-builder/os/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

[epel]
name=Extra Packages for Enterprise Linux 9
baseurl=https://mirror.kargadan.ir/repository/rhel-group/9/Everything/$basearch/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9

; LIMITATION: subscription-only repos (rhel-9-for-x86_64-baseos-rpms,
; rhel-9-for-x86_64-appstream-rpms etc.) are blocked by Red Hat unless the
; client presents an entitlement certificate. Use Satellite / Capsule for that.

Configuration by release

Each block below is a complete, copy-ready configuration for one suite or release. Install path: /etc/yum.repos.d/redhat.repo. The same patterns are committed under /opt/client-configs/rhel/redhat.repo on the mirror host (default release only).

Red Hat UBI 9 default

Subscription-only RHEL channels are not mirrored โ€” UBI content only.

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/x86_64/baseos/os/repodata/repomd.xml | head

Client configuration

; /etc/yum.repos.d/redhat.repo  (Red Hat UBI 9 โ€” public UBI only)

[ubi-9-baseos]
name=Red Hat UBI 9 - BaseOS
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/$basearch/baseos/os/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

[ubi-9-appstream]
name=Red Hat UBI 9 - AppStream
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi9/9/$basearch/appstream/os/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

Red Hat UBI 8

Subscription-only RHEL channels are not mirrored โ€” UBI content only.

Quick verification

curl -fsSL https://mirror.kargadan.ir/repository/rhel-group/ubi8/8/x86_64/baseos/os/repodata/repomd.xml | head

Client configuration

; /etc/yum.repos.d/redhat.repo  (Red Hat UBI 8 โ€” public UBI only)

[ubi-8-baseos]
name=Red Hat UBI 8 - BaseOS
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi8/8/$basearch/baseos/os/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

[ubi-8-appstream]
name=Red Hat UBI 8 - AppStream
baseurl=https://mirror.kargadan.ir/repository/rhel-group/ubi8/8/$basearch/appstream/os/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

CI / container example

A minimal snippet you can paste into a Dockerfile or pipeline step.

# Dockerfile snippet
FROM rhel:ubi9
COPY redhat.repo /etc/yum.repos.d/redhat.repo
RUN dnf clean all && dnf -y makecache

Mirror information

DistributionRed Hat (UBI)
Package managerdnf
Mirror format (Nexus)yum
Default suite / branchubi9
AuthenticationNot required (anonymous read)
ProtocolsHTTPS ยท HTTP
Notes & limitations

Subscription-only RHEL channels require entitlement certificates that Nexus cannot present, so they cannot be proxied. Only the publicly available UBI content is mirrored here. For full RHEL coverage, deploy Red Hat Satellite or Capsule.