#Combined Debian and RPM repository

The deb_rpm section checks .deb and .rpm packages from one upstream through one OSA Proxy route. Use it for upstreams that serve both formats, such as Zabbix, ClickHouse, or Microsoft.

deb_rpm:
  enabled: true
  repository:
    - name: zabbix
      registry: https://repo.zabbix.com
      scan-package: true
      work-mode: strict_wait

In the APT or DNF configuration, replace the upstream URL with https://osa-proxy.example.com/zabbix, preserving the remaining path and signature verification settings.

• .deb and .udeb files are checked as Debian packages and .rpm files as RPM packages at any path depth. Component names and versions come from package headers rather than filenames.
• Distribution is inferred from the path (/ubuntu/22.04/, /rhel/9/) or version marker (+ubuntu22.04, .el9). It is omitted when signals are absent or contradictory. The distro field is not supported in this section.
• APT indexes, repodata, signing keys, and repository configuration files pass through without checks or modification, so a blocked version remains visible in an index.
• file-type-filter uses the combined Debian and RPM extension list. Operational indexes, keys, and .repo/.list files remain allowed when filtering is enabled. ClickHouse .tgz archives are not checked; if clients need them with filtering enabled, allow them through additional-allowed-extensions.

For header reading and error handling, see Debian and RPM.