RHEL image building doesn't work

[sujit-jadhav]

options:
layer_type: 'base'
name: 'rhel-base'
publish_tags: '9.6'
pkg_manager: 'dnf'
parent: 'scratch'
publish_registry: 'demo.openchami.cluster:5000/demo'
registry_opts_push:
- '--tls-verify=false'

repos:

• alias: 'RHEL_9_BaseOS'
  url: 'https://cdn.redhat.com/content/dist/rhel9/9.6/x86_64/baseos/os/'
  gpgcheck: false
  sslverify: false
• alias: 'RHEL_9_AppStream'
  url: 'https://cdn.redhat.com/content/dist/rhel9/9.6/x86_64/appstream/os/'
  gpgcheck: false
  sslverify: false

package_groups:

• 'Minimal Install'
• 'Development Tools'

packages:

• kernel
• wget
• dracut-live
• cloud-init
• chrony
• rsyslog
• sudo

cmds:

• cmd: 'dracut --add "dmsquash-live livenet network-manager" --kver $(basename /lib/modules/*) -N -f --logfile /tmp/dracut.log 2>/dev/null'
  loglevel: INFO
• cmd: 'echo DRACUT LOG:; cat /tmp/dracut.log'
  loglevel: INFO

Specifying the above in base.yaml does not work as RHEL is subscription OS and it doesn't allow pulling packages via container, it results into certificate error:

INFO - created by dnf config-manager from https://cdn. 0.0 B/s | 0 B 00:08
ERROR - Errors during downloading metadata for repository 'cdn.redhat.com_content_dist_rhel9_9.6_x86_64_appstream_os_':
ERROR - - Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://cdn.redhat.com/content/dist/rhel9/9.6/x86_64/appstream/os/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
ERROR - Error: Failed to download metadata for repo 'cdn.redhat.com_content_dist_rhel9_9.6_x86_64_appstream_os_': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
ERROR - Error installing packages: Command '['dnf', '--setopt=reposdir=/home/builder/.local/share/containers/storage/overlay/3277d29122b410bdb538aa99a41a70a1be99ccf8fcf28e9558b578d8866eeeb1/merged/etc/yum.repos.d', '--setopt=logdir=/var/tmp/image-build-0bbfh5j9/dnf/log', '--setopt=cachedir=/var/tmp/image-build-0bbfh5j9/dnf/cache', 'groupinstall', '-y', '--nogpgcheck', '--installroot', '/home/builder/.local/share/containers/storage/overlay/3277d29122b410bdb538aa99a41a70a1be99ccf8fcf28e9558b578d8866eeeb1/merged', 'Minimal Install', 'Development Tools']' returned non-zero exit status 1.
INFO - dca547da9a85b996fd59622652cf2ea1173774bfe842ef6d5851226915a2e270

Have you tried installing RHEL OS using OpenCHAMI ?