The SAKA utilizes the Dandified Yum (dnf) which is the next-generation version of the Yellowdog Updater, Modified (yum) for installing and updating operating system packages. By default, the appliance will try to reach out to the standard Rocky mirror list to download updates. This approach can become problematic after SAKA has been installed in a secure production environment.

Standard security practice is to block internet traffic to and from SAKA once it has been installed in a data center. While this is a smart security decision, it has the adverse effect of cutting off the appliance from system updates. Fortunately, it is a fairly straightforward process to create an internal Rocky Repository that can make updates accessible to the SAKA.

If SAKA is blocked from making calls to the Rocky mirror list, dedicate a server—or more likely a Virtual Machine (VM)—to the purpose of hosting Rocky packages for SAKA. This document describes setting up the repository server and configuring the SAKA server(s) to communicate with your new internal repository.