cancel
Showing results for 
Search instead for 
Did you mean: 
Trevor
Starfighter Starfighter
Starfighter
  • 1,651 Views

Ansible Galaxy vs Ansible Automation Hub

Jump to solution

Ansible Automation Hub is the enterprise source marketplace for Ansible Automation Platform users. 

Ansible Galaxy is an online marketplace for open source Ansible Content Collections.

Is it possible to equate the purpose of these two resources?  That is, can I say that
Ansible Galaxy is to Ansible Core, what Ansible Automation Hub is to Ansible Automation
Platform?

 

Trevor "Red Hat Evangelist" Chandler
Labels (2)
1 Solution

Accepted Solutions
Travis
Moderator
Moderator
  • 1,609 Views

@Trevor -

This analogy kinda fits in terms of licensing and pricing (when looked at from a product level). However a better way to look at it would be ...

Galaxy => EPEL (RPMs)

Red Hat Automation Hub => Red Hat (RPMs)

One is a "secure" supply chain provided supported and signed modules, collecitons and a guarantee of support. The other is coming from an "upstream" project and open source location with no guarantees or supply chain security and no signatures that are "verified".

Yes, you need to import the EPEL GPG key to install EPEL packages, but who/what entity is behind it and providing the support? It is worse with Galaxy because anyone can publish there and sign their own packages.

 

Travis Michette, RHCA XIII
https://rhtapps.redhat.com/verify?certId=111-134-086
SENIOR TECHNICAL INSTRUCTOR / CERTIFIED INSTRUCTOR AND EXAMINER
Red Hat Certification + Training

View solution in original post

2 Replies
Travis
Moderator
Moderator
  • 1,610 Views

@Trevor -

This analogy kinda fits in terms of licensing and pricing (when looked at from a product level). However a better way to look at it would be ...

Galaxy => EPEL (RPMs)

Red Hat Automation Hub => Red Hat (RPMs)

One is a "secure" supply chain provided supported and signed modules, collecitons and a guarantee of support. The other is coming from an "upstream" project and open source location with no guarantees or supply chain security and no signatures that are "verified".

Yes, you need to import the EPEL GPG key to install EPEL packages, but who/what entity is behind it and providing the support? It is worse with Galaxy because anyone can publish there and sign their own packages.

 

Travis Michette, RHCA XIII
https://rhtapps.redhat.com/verify?certId=111-134-086
SENIOR TECHNICAL INSTRUCTOR / CERTIFIED INSTRUCTOR AND EXAMINER
Red Hat Certification + Training
Trevor
Starfighter Starfighter
Starfighter
  • 1,597 Views

Travis - 

Love the analogy!!!  You've served another response that 
makes perfect sense!!!

Thanks Travis

Trevor "Red Hat Evangelist" Chandler
0 Kudos
Join the discussion
You must log in to join this conversation.