rhel update URLs can come from env