add rpm, and use runit for workaround for init issue on rhel
add certs from data bag