Installation Guide

Procedure 2.1. Installing the Managed Database

1. Register to Red Hat Subscription Management. Run the following command to register your system, entering your Customer Portal user name and password when prompted:

   # subscription-manager register
   

   The command displays output similar to the following:

   Registering to: subscription.rhsm.redhat.com:443/subscription
   Username: user_name
   Password: password
   The system has been registered with ID: aa2e5c34-b8d0-4388-b912-6be761c632b1
   

2. Identify and attach the Red Hat Enterprise Linux and Red Hat Satellite subscriptions.
   List all available subscriptions.

   # subscription-manager list --all --available
   

   Attach the subscriptions. If there are multiple subscriptions to be attached, repeat the --pool=pool_id parameter.

   # subscription-manager attach --pool=pool_id

3. Enable the Red Hat Enterprise Linux repository appropriate to your operating system version.
   For Red Hat Enterprise Linux 6

   # subscription-manager repos --enable rhel-6-server-rpms
   

   For Red Hat Enterprise Linux 5

   # subscription-manager repos --enable rhel-5-server-rpms
   

4. Mount the Red Hat Satellite installation media.
   Mount as a CD:

   # mkdir /media/cdrom
   # mount /dev/cdrom /media/cdrom
   

   Mount as an ISO:

   # mkdir /media/cdrom
   # mount -o loop iso_filename /media/cdrom
   

5. Change to the mounted directory.

   # cd /media/cdrom
   

6. Run the install.pl script with the --managed-db and --disconnected options.

   # ./install.pl --managed-db --disconnected
   

   Note

   The --disconnected option is required to prevent the installer attempting to connect to Red Hat Network.
7. The install.pl script asks for the following information.
   • Database name
   • Database user
   • Database password
   • A comma-separated list of local addresses to listen. Leave blank for all addresses.
   • A comma-separated list of remote addresses of Satellite servers, in address/netmask format. The Managed Database allows connections from these addresses.

   Database name: mydb
   Database user: mydbuser
   Database password:  mydbpassword
   Local addresses to listen on (comma-separated, RETURN for all): 127.0.0.1
   Remote addresses to allow connection from (address/netmask format, comma-separated): 192.168.1.10/32
   Initializing database:                                     [  OK  ]
   Starting postgresql service:                               [  OK  ]
   

   The script installs the necessary packages for your Managed Database. This includes a set of management tools for database.
   The script also prepares the database for your Red Hat Satellite installation.
8. Enable the Managed DB repository according to the Red Hat Enterprise Linux version, and hardware platform.
   For Red Hat Enterprise Linux 6 and AMD64 and Intel 64

   # subscription-manager repos --enable=rhel-6-server-satellite-manageddb-5.6-rpms
   

   For Red Hat Enterprise Linux 6 and IBM System z

   # subscription-manager repos --enable=rhel-6-system-z-satellite-manageddb-5.6-rpms
   

   For Red Hat Enterprise Linux 5 and AMD64 and Intel 64

   # subscription-manager repos --enable=rhel-5-server-satellite-manageddb-5.6-rpms
   

   Red Hat Enterprise Linux 5 and IBM System z

   # subscription-manager repos --enable=rhel-5-system-z-satellite-manageddb-5.6-rpms
   

9. When the script completes, install your Red Hat Satellite using the instructions from Chapter 4, Installation.

Procedure 4.1. Mounting from a disc

1. Log into the machine as root.
2. Insert the Red Hat Satellite Server CD or DVD containing the installation files.
3. Red Hat Enterprise Linux might automount the disc. If so, it mounts the disc to the /media/cdrom/ directory. If Red Hat Enterprise Linux does not automount the disc, manually mount it to the /media/cdrom/ directory with the following commands:

   # mkdir /media/cdrom
   # mount /dev/cdrom /media/cdrom
   

Procedure 4.2. Mounting from an ISO image

1. Log into the machine as root.
2. Download the ISO image from the Red Hat Customer Portal.
3. Mount the ISO image to a location on your filesystem:

   # mkdir /media/cdrom
   # mount -o loop iso_filename /media/cdrom
   

Procedure 4.3. Installing with an Answers File

1. Copy the example answers.txt file to /tmp/answers.txt

   # cp answers.txt /tmp/answers.txt
   

2. Edit the file and add your organization's desired options.
3. Once the answer file is ready, use the --answer-file option when starting the installation process from the command line:

   # ./install.pl --answer-file=/tmp/answers.txt --disconnected
   

   The Red Hat Satellite Installation Script looks for answers in the file. For any option not filled out in the file, the Installation Script prompts the user for the missing information.

   Note

   The --disconnected option is required to prevent the installer attempting to connect to Red Hat Network.

Procedure 4.4. Installing Red Hat Satellite behind an HTTP Proxy - Pre-Configuration

1. Complete a minimal installation of Red Hat Enterprise Linux.
2. Configure the system so that it can connect to Red Hat Network behind the HTTP proxy. Edit the file /etc/sysconfig/rhn/up2date as follows:

   enableProxy=1
   enableProxyAuth=1
   httpProxy=<http-proxy-fqdn>
   proxyUser=<proxy-username>
   proxyPassword=<proxy-password>
   

3. Register the system to Red Hat Network.
4. Begin the installation of Red Hat Satellite with the disconnected option:

   ./install.pl --disconnected
   

Procedure 4.5. Running Installation Script

1. Run the installer script with an option to install with either Embedded Database, Managed Database, or External Database.
   Regardless of which database option is used, the --disconnected option is required to prevent the installer attempting to connect to Red Hat Network.
   1. Embedded Database - From the /media/cdrom/ directory, enter the following command to start the Installation Script:

      # ./install.pl --disconnected
      

   2. Managed Database - From the /media/cdrom/ directory, enter the following command to start the Installation Script:

      # ./install.pl --external-postgresql --disconnected
      

      Make sure you have completed the Managed Database requirements before running this command. See Section 2.3.2, “Managed Database Requirements” for these requirements.
   3. External Database - From the /media/cdrom/ directory, enter one of the following commands to start the Installation Script:
      For a PostgreSQL External Database:

      # ./install.pl --external-postgresql --disconnected
      

      For an Oracle External Database:

      # ./install.pl --external-oracle --disconnected
      

2. The script first completes prerequisite checks. These checks determine all prerequisites from Chapter 2, Requirements are met before proceeding with the installation.

   * Starting the Red Hat Satellite installer.
   * Performing pre-install checks.
   * Pre-install checks complete.  Beginning installation.
   * RHN Registration.
   ** Registration: Disconnected mode.  Not registering with RHN.
   

   The Satellite registration with Red Hat Network does not apply, because the installer is being run in disconnected mode.
3. The installer then continues to install its prerequisite packages. Reply y to the prompt Do you want the installer to resolve dependencies [y/N]?.

   * Checking for uninstalled prerequisites.
   ** Checking if yum is available ...
   
     There are some packages from Red Hat Enterprise Linux that are not part
     of the @base group that Satellite will require to be installed on this
     system. The installer will try resolve the dependencies automatically.
     However, you may want to install these prerequisites manually.
     Do you want the installer to resolve dependencies [y/N]?y
   * Installing RHN packages.
   .
   .
   * Now running spacewalk-setup.
   * Setting up Selinux..
   

Procedure 4.6. Switch to Connected Mode

1. Edit the Red Hat Network configuration file /etc/rhn/rhn.conf and make the following changes:
2. 1. Edit the server.satellite.rhn_parent line as follows.

      # server.satellite.rhn_parent = satellite.rhn.redhat.com
      

   2. Change the line disconnected=1 to disconnected=0.

      disconnected=0
      

3. Validate the configuration changes.

   1. # spacewalk-cfg-get get server disconnected
      

      The expected output is 0, confirming that disconnected mode is not enabled.

   2. # spacewalk-cfg-get get server.satellite rhn_parent
      

      The expected output is satellite.rhn.redhat.com.
4. Reactivate the Satellite Server.

   # rhn-satellite-activate -vvv --rhn-cert=Satellite-56.cert
   RHN_PARENT: satellite.rhn.redhat.com
   

   The rhn-satellite-activate command requires as input the certificate downloaded in Section 4.1.3, “Obtaining an Entitlement Certificate”. In this example, the certificate was saved in file Satellite-56.cert.
   When the Satellite Server is reactivated, you may see the message ERROR: Server not registered? No systemid: /etc/sysconfig/rhn/systemid. This can be safely ignored because the systemid file is the Red Hat Network system ID and no longer relevant.

Procedure 5.2. To Configure Servers for Enhanced Entitlements Reporting

1. Access the terminal on your SAM server using root permissions.
2. Generate an SSH key pair on the SAM server:

   [root@sam13] # su - splice -s /bin/sh -c 'ssh-keygen -t rsa -f /var/lib/splice/id_rsa-sat -N ""'
   

   Make a note of the content of the public key file:

   [root@sam13] # cat /var/lib/splice/id_rsa-sat.pub
   

3. Access the terminal on your Satellite 5 server using root permissions.
4. Create a new swreport user on the Satellite 5 machine and provide the user with a .ssh directory.

   [root@sat56] # useradd swreport
   [root@sat56] # mkdir /home/swreport/.ssh
   

5. Append the /home/swreport/.ssh/authorized_keys file with the contents of the /var/lib/splice/id_rsa-sat.pub file on your chosen Subscription Management Application.
6. Prepend the SAM public key content in /home/swreport/.ssh/authorized_keys with the following:

   command="/usr/bin/spacewalk-report $SSH_ORIGINAL_COMMAND"
   

   This ensures the swreport user only uses the spacewalk-report command.
7. Set permissions and the SELinux content on the .ssh directory and authorized_keys file for the swreport user.

   [root@sat56] # chown -R swreport:swreport /home/swreport/.ssh
   [root@sat56] # chmod 700 /home/swreport/.ssh
   [root@sat56] # chmod 600 /home/swreport/.ssh/authorized_keys
   [root@sat56] # restorecon -R /home/swreport/.ssh
   

8. The swreport user requires permissions to read rhn.conf and connect to the database. Add this user to the apache group.

   [root@sat56] # gpasswd -a swreport apache
   

9. Test your connection. Switch to the Subscription Asset Manager server and run the following command:

   [root@sam13] # su - splice -s /bin/bash
   [splice@sam13] # ssh -i /var/lib/splice/id_rsa-sat swreport@sat56-hostname splice-export
   

   Substitute sat56-hostname for the hostname of the Subscription Asset Manager server.

   Important

   This command is required to accept the Satelite 5 server's fingerprint.
10. Edit the /etc/splice/checkin.conf on the Subscription Asset Manager server.

    [root@sam13] # vi /etc/splice/checkin.conf
    

11. Edit the following sections:

    [spacewalk]
    host=hostname
    ssh_key_path=/var/lib/splice/id_rsa-sat
    login=swreport
    
    [katello]
    hostname=localhost
    port=443
    proto=https
    api_url=/sam
    admin_user=admin
    admin_pass=password

    Substitute hostname for the hostname of the Satellite 5 server and password for your SAM administration password. Enter the location of the SAM SSH key for the ssh_key_path parameter. Save your changes.
12. Run spacewalk-splice-checkin tool as the splice user to generate organizations from the Satellite 5 server.

    [root@sam13] # su - splice -s /bin/bash
    [splice@sam13] $ spacewalk-splice-checkin
    

Procedure 5.3. To Download an Enhanced Entitlements Manifest

1. Navigate to the Red Hat Customer Portal (access.redhat.com) in your web browser.
2. Navigate to Subscriptions → Subscription Management → Subscription Management Applications.
3. Click the Satellite tab.
4. Click the name of the Red Hat Satellite 5 server.
5. Click the Download manifest button and choose a location to save your manifest.

   Important

   The Download manifest button is only available if subscriptions are attached. Ensure to add subscriptions to your manifest by clicking the Attach a subscription link.

Procedure 5.4. Upload Subscription Manifest

1. Log in to your Subscription Asset Manager as an administrative user.
2. Make sure you set the organization to the root organization from your Satellite 5 server.
3. Click the Content → Subscriptions → Red Hat Subscriptions menu.
4. Click the +Import Manifest link.
5. On the Subscription Manifest Import tab, click the Browse button to specify the location of the manifest.
6. Click the Upload button to upload the subscription manifest.

Procedure 5.5. To Split Subscriptions between Organizations

1. Log in to your Subscription Asset Manager as an administrative user.
2. Using the organization drop-down menu, set the organization to the root organization from your Satellite 5 server.
3. Navigate to Content → Subscriptions → Subscription Management Applications.
4. Click a distributor that represents the chosen organization to receive subscriptions.
5. In the right window, scroll to Available Sunscriptions and select the subscriptions and quantity to attach.
6. Click the Attach button at the bottom of the window.
7. Using the organization drop-down menu, change to the organization with the newly attached subscriptions.
8. Navigate to Content → Subscriptions → Red Hat Subscriptions.
9. Click the +Import Manifest link.
10. Click the Refresh Manifest button.

Procedure 5.6. To View Enhanced Entitlements Reports in Subscription Asset Manager

1. Log in to your Subscription Asset Manager as an administrative user.
2. Navigate to Administer → Reports.
3. The Filter Criteria page appears. Choose a report and click Run Report.

Procedure 6.1. Obtain the Channel Content ISOs

1. Log into the web interface.
2. Click Channels in the top navigation bar.
3. Click on the Red Hat Satellite channel. Ensure you select the Satellite channel that corresponds to your version of Satellite.
4. Click the Downloads tab and use the instructions on the page to obtain the Channel Content ISOs, available by version of Red Hat Enterprise Linux.
5. If the desired Channel Content ISOs do not appear, ensure your Red Hat Entitlement Certificate has been uploaded to Red Hat Network and correctly identifies the target channels.

Procedure 6.2. Mount and copy Channel Content ISOs

1. Log into the machine as root.
2. Create a directory in /mnt/ to store the file(s) with the command:

   # mkdir /mnt/import/
   

3. Mount the ISO file using the following command:

   # mount [iso_filename] /mnt/import -o loop
   

4. Create a target directory for the files:

   # mkdir /var/rhn-sat-import/
   

5. This sample command assumes the administrator wants to copy the contents of the ISO (mounted in /mnt/import/) into /var/rhn-sat-import/:

   # cp -ruv /mnt/import/* /var/rhn-sat-import/
   

6. Then unmount /mnt/import in preparation for the next ISO:

   # umount /mnt/import
   

7. Repeat these steps for each Channel Content ISO of every channel to be imported.

1. List the channels available for import.

   # satellite-sync --list-channels --mount-point /var/rhn-sat-import
   

2. Initiate the import of a specific channel using a channel label presented in the previous list.

   # satellite-sync -c [channel-label] --mount-point /var/rhn-sat-import
   

   Note

   Importing package data can take up to two hours per channel. Register systems to channels as soon as they appear in the Red Hat Satellite web interface. No packages are necessary for registration, although updates cannot be retrieved from the Satellite until the channel is completely populated.
3. Repeat this step for each channel or include them all within a single command by passing each channel label preceded with an additional -c flag, like so:

   # satellite-sync -c [channel-label-1] -c [channel-label-2] --mount-point /var/rhn-sat-import
   

Procedure 6.3. Moving Exporter Content

1. Log into the machine as root.
2. Create a target directory for the files, such as:

   # mkdir /var/rhn-sat-import/
   

3. Make the export data available on the local machine in the directory created in the previous step. Either copy the data directly, or mount the data from another machine using NFS. Copy the data into the new directory with the following command:

   # scp -r root@storage.example.com:/var/rhn-sat-export/* /var/rhn-sat-import
   

1. List the channels available for import with the command:

   # satellite-sync --list-channels --mount-point /var/rhn-sat-import
   

2. Initiate the import of a specific channel using a channel label presented in the previous list. Run the following command :

   # satellite-sync -c [channel-label] --mount-point /var/rhn-sat-import
   

   Note

   Importing package data can take up to two hours per channel. Register systems to channels as soon as they appear in the Red Hat Satellite web interface. No packages are necessary for registration, although updates cannot be retrieved from the Satellite until the channel is completely populated.
   Repeat this step for each channel or include them all within a single command by passing each channel label preceded by an additional -c flag:

   # satellite-sync -c channel-label-1 -c channel-label-2 -mount-point /var/rhn-sat-import
   

3. The population of channels executes until completion. Verify all of the packages are moved out of the repository with the following command:

   # cd /var/rhn-sat-import/; ls -alR | grep rpm
   

   If all RPMs are installed and moved to their permanent locations, the count appears as zero. If so, remove the temporary /var/rhn-sat-import/ repository.

   # rm -rf /var/rhn-sat-import