Barman - secure installation - any insights, comments etc.

Not sure if this is the correct place to post this but......

We are currently looking at Barman and have just installed it on a test server.

However, our Sys Admin has said:

A couple of notes though, the work order asks for the instructions found at http://docs.pgbarman.org/ be followed for installation. However they request that you add an additional repository to the server in order to access the rpms. We cannot add additional repos to servers and so to get the packages installed on the box they were downloaded manually on a desktop machine and then moved to the server and installed locally. This method will not scale to production and someone will need to take ownership of this piece of software and provide us with rpms (or preferably in the long term a local repo containing them) ensuring that they have been provided by a trusted source.

I'll be the first to admit that I don't fully understand all aout rpms etc. etc. so does anybody have any any insights, comments etc. on how to proceed here?

Many thanks

Austen

Austen Birchall Senior Database Administrator
Met Office