XCP-HL yum repositories

Signed RPM repositories for XCP-ng HomeLab Edition. Built for XCP-ng 8.3.

Repository ID	Package	Base URL
`xcp-hl-base`	`xcp-hl-release`	`/xcp-hl/8.3/x86_64/`
`xcp-hl-xolite`	`xo-lite-ce`	`/xolite-ce/8.3/x86_64/`
`xcp-hl-xoa-proxy`	`xoa-proxy`	`/xoa-proxy/8.3/x86_64/`
`xcp-hl-xoa-proxy-testing`	`xoa-proxy` candidates	`/xoa-proxy/testing/8.3/x86_64/`

Add the repositories

On an XCP-ng 8.3 host, as root:

curl -o /etc/yum.repos.d/xcp-hl.repo https://rpm.xcp-hl.org/xcp-hl.repo
rpm --import https://rpm.xcp-hl.org/xcp-ng-ce-public.asc
yum clean all && yum install xcp-hl-release

Installing xcp-hl-release replaces the bootstrap file with the packaged copy, after which repository configuration is managed by yum.

Verification

Each repodata/repomd.xml carries a detached armored signature, checked by repo_gpgcheck=1. The signed repomd.xml records a SHA-256 of primary.xml, which records a SHA-256 of every package. Per-package checking is off (gpgcheck=0) on purpose: rpm 4.11 on XCP-ng 8.3 dom0 cannot verify signatures made by a signing subkey.

Master key fingerprint:

2F59 1DB9 D2C1 28C4 C3D9  63F4 6DA0 0DCA 5BBA 215A

Signing subkeys expire 2027-05-10. After that date, signature verification fails until the subkeys are extended and xcp-ng-ce-public.asc is refreshed here.