Quick Start

Prepare a directory

Put RPM and/or DEB files at the directory top level. sow create does not recurse and does not move or rename package files.

mkdir -p /srv/repo
cp /path/to/packages/*.rpm /path/to/packages/*.deb /srv/repo/

If one glob has no matches, copy the formats you actually have instead.

Generate metadata

sow create /srv/repo

An illustrative mixed-format result is:

created /srv/repo: rpm=1 deb=1 signed=0 removed=0 marker=false noop=false recovered=false

The directory now contains:

/srv/repo/
├── package.rpm
├── package.deb
├── repodata/       # RPM: repomd.xml plus primary, filelists, other
├── Packages        # DEB flat index
└── Packages.gz

Plain mode does not generate a DEB Release, InRelease, or Release.gpg. RPM and DEB metadata are generated in one operation; a parse or render failure prevents the new indexes from being committed.

Serve the directory

For a local check, any static file server is sufficient:

cd /srv/repo
python3 -m http.server --bind 127.0.0.1 8080

Verify the protocol entry points from another shell:

curl --fail http://127.0.0.1:8080/repodata/repomd.xml >/dev/null
curl --fail http://127.0.0.1:8080/Packages.gz >/dev/null

Python’s server is only a preview. Use a maintained HTTP server for persistent service.

Configure a client

Replace REPO_HOST with the address clients can reach.

# /etc/yum.repos.d/sow-quickstart.repo
[sow-quickstart]
name=SOW Quick Start
baseurl=http://REPO_HOST:8080/
enabled=1
gpgcheck=0
repo_gpgcheck=0

# /etc/apt/sources.list.d/sow-quickstart.list
deb [trusted=yes] http://REPO_HOST:8080/ ./

Then refresh and install a package:

sudo dnf makecache
sudo dnf install PACKAGE_NAME

sudo apt update
sudo apt install PACKAGE_NAME

The APT source ends in ./ because this is a flat repository. [trusted=yes] and the disabled DNF signature checks are appropriate only for this unsigned quick start. Use a signed Managed repository when authenticity matters.

Update the repository

Change the package files and run the same command again:

sow create /srv/repo

The directory contents are the complete Plain-mode state. With unchanged package bytes and options, including any explicit metadata timestamp, the generated metadata is deterministic and a repeat run reports noop=true.

For a YUM repository already used by clients, preserve its publication history when switching generators. SOW 0.5.0 adds --metadata-timestamp for that purpose; the default remains 0. Follow Migrate an Existing YUM Repository for backup, signing, and acceptance with cached clients.

For automation, request the versioned JSON envelope:

sow create /srv/repo --json