The application base images had RPM repositories disabled for multiple reasons. We ensured that our images contained all dependencies for our products. With customer-facing images we can no longer anticipate user needs.

Changes:

• keep repo files in /etc/yum.repos.d/
• keep all RHEL repos in "redhat.repo" enabled
• leave vendor repo configuration in /etc/yum.repos.d/, but keep the repos disabled
• ensure that we do not leak SSL client cert configuration from RHSM
• at the end of the build, rewrite vendor repo files to use public repo URLs

I'm leaving vendor repos disabled, because I don't know how disconnected case and Satellite behave. With repo files available, it is very easy to enable e.g. CUDA or ROCm repos.