Installation Guide

Procedure 2.1. Downloading Entitlements from the customer portal

1. Go to the customer portal at http://access.redhat.com and click on the Subscriptions link.
2. Scroll down to the Manage section and click the RHUI link.
3. Click Register a RHUI.
   

   Figure 2.1. Create a New RHUI

4. On the Register a New RHUI page, enter the name of the Red Hat Update Appliance instance, select a version, and click Register.
   

   Figure 2.2. Register a New RHUI

5. Your new Red Hat Update Appliance instance will not yet have any subscriptions applied to it. Add a subscription by clicking Attach a subscription in the bottom right corner. A list of available subscriptions will be displayed. Select the check box next to the desired subscription and click Attach Selected to add it to the instance.
   

   Figure 2.3. Adding Subscriptions

6. Download the entitlement certificate by clicking Download in the Entitlement Certificate column of the subscriptions table. Save the entitlement certificate on your local machine and note down the location. You will need this information later when you install the Red Hat Update Infrastructure ISO.
   

   Figure 2.4. Download Entitlement Certificate

   Note

   The Entitlement Certificate downloaded here is used as a Content Certificate in the Red Hat Update Infrastructure package installation.
7. Download Red Hat Public CA Certificate by clicking Download Red Hat Public CA Certificate in the upper left corner. Save the Red Hat Public CA Certificate on your local machine and note down the location. You will need this information later when you install the Red Hat Update Infrastructure ISO.
   

   Figure 2.5. Download Red Hat Public CA Certificate

Procedure 2.2. Installing the Red Hat Update Infrastructure packages on the Red Hat Update Appliance Server

1. Download the ISO from the Customer Portal.
2. Change the hostname of the Red Hat Update Appliance Server and all CDS instances to a resolvable fully qualified domain name (FQDN).
   Change the hostname in your current session:

   # hostname new_hostname

   To make the hostname change persistent, edit /etc/sysconfig/network using your preferred text editor:

   NETWORKING=yes
   HOSTNAME=new_hostname
   ...
   

   Important

   If the hostname is unset and its value is reported as localhost.localdomain or localhost, you will not be able to proceed. In this guide, the example hostname for Red Hat Update Appliance is rhua.example.com, and the example hostname for the first CDS instance is cds01.example.com.
3. Mount the ISO:

   # mkdir -p /mnt/example
   # mount -o loop <ISO> /mnt/example

4. Change directory to /mnt/example.

   # cd /mnt/example

5. On the Red Hat Update Appliance Server, run install_RHUA.sh to install Red Hat Update Appliance packages.

   # ./install_RHUA.sh
   

Procedure 2.3. Installing the Red Hat Update Infrastructure packages on the Content Delivery Server (CDS)

1. On the CDS instance, follow steps 1 to 4 in the previous procedure.
2. Run the following commands to register the system to Red Hat Subscription Manager and give the system a basic Red Hat Enterprise Linux entitlement.
   1. Register the system to Red Hat Subscription Manager:

      # subscription-manager register
      

   2. Attach the system:

      # subscription-manager attach --auto
      

   3. Disable all existing repositories:

      # subscription-manager repos --disable=*
      

   4. Enable the Red Hat Enterprise Linux repository:

      # subscription-manager repos --enable=rhel-6-server-rpms
      

3. Run install_CDS.sh to install CDS packages.

   # ./install_CDS.sh
   

Procedure 3.4. Editing the Answers File

1. Copy /etc/rhui/answers.sample to another location on your local machine:

   # cp /etc/rhui/answers.sample /etc/rhui/myanswersfile

2. Open the local copy of the file in your preferred text editor. The answers file is divided into three sections: General, RHUA, and CDS Instances.

3. General

   The General section contains all the general configuration options for Red Hat Update Infrastructure.

   1. version

      Red Hat Update Infrastructure Installer needs to generate configuration RPMs. These RPMs will be given the version number 2.1 by default. To make the RPMs use a different version number, enter it here:

      [general]
      version: 2.1
      

      By default, this setting will apply to all the configuration RPMs that were created using this answers file. However, it can be overridden for specific sub-sections. For example, if in the General section version is set to version: 2.1, all the CDS RPMs will be version 2.1. Similarly, if you set Red Hat Update Appliance section version to version: 2.5, all the Red Hat Update Appliance RPMs will be version 2.5.

   2. dest_dir

      Enter the full path to the location where Red Hat Update Infrastructure Installer should create the configuration RPMs. Every RPM will be located in this directory after it runs and temporary files will be located in a sub-directory.

      dest_dir: /tmp/rhui
      

4. Red Hat Update Appliance

   The Red Hat Update Appliance section contains configuration options for the Red Hat Update Appliance (RHUA). There must be only one Red Hat Update Appliance section on the answers file.

   1. rpm_name

      Enter a name for the Red Hat Update Appliance configuration RPM. This name will have the version and architecture information added to it during the creation process, so there is no need to specify them here:

      rpm_name: rh-rhua-config
      

   2. hostname

      Enter the fully qualified domain name (FQDN) of the Red Hat Update Appliance instance. This must not be an IP address, but a resolvable DNS name. Ensure that your SSL certificate has been created for this DNS name, as they must match exactly:

      hostname: rhua.example.com

   3. ssl_cert and ssl_key

      Enter the full paths to the SSL certificate and its private key. These will be used to configure Apache on the Red Hat Update Appliance instance:

      ssl_cert: /path/to/ssl_RHUA.crt
      ssl_key: /path/to/ssl_RHUA.key

   4. ca_cert

      Enter the full path to the certificate authority (CA) certificate:

      ca_cert: /path/to/ca.crt

   5. Optional Proxy Parameters

      It is possible to specify optional parameters to be used as a proxy server when the Red Hat Update Appliance attempts to access the internet (external to the cloud) and download packages from Red Hat.

      proxy_server_host: proxy.example.com
      proxy_server_port: 443
      proxy_server_username: admin
      proxy_server_password: password
      

      For non-authenticating proxy servers, only proxy_server_host and proxy_server_port need to be defined.

      Important

      When specifying the proxy_server_host parameter, ensure you do not have a trailing slash in the URL, as resolution of the address will fail. For example, use proxy.example.com not proxy.example.com/ to avoid errors.

5. CDS Instances

   The CDS section contains configuration options for each CDS instance. Create a new section under the CDS Instances heading for each CDS instance, giving each one a unique title with a cds- prefix, for example:

   [cds-1]
   -- parameters for a CDS --
   
   [cds-2]
   -- parameters for a different CDS --
   

   1. rpm_name

      Enter a name for the CDS configuration RPM. This name will have the version and architecture information added to it during the creation process, so there is no need to specify them here:

      rpm_name: rh-cds1-config
      

   2. hostname

      Enter the fully qualified domain name (FQDN) of the CDS instance. This must not be an IP address, but a resolvable DNS name. Ensure that your SSL certificate has been created for this DNS name as they must match exactly:

      hostname: cds01.example.com

   3. ssl_cert and ssl_key

      Enter the full paths to the SSL certificate and its private key. These will be used to configure Apache on the CDS instance:

      ssl_cert: /path/to/ssl_cds01.crt
      ssl_key: /path/to/ssl_cds01.key

   Note

   To create a new CDS after Red Hat Update Infrastructure is deployed, refer to Section 3.3, “Adding a Content Delivery Server”.
6. To execute the file and create the configuration RPMs, change to root user and run the rhui-installer command:

   # rhui-installer /etc/rhui/myanswersfile

   The configuration RPMs will be saved to the location you specified in Step 3.b. There will be a configuration RPM for both the Red Hat Update Appliance and the CDS instances, using the names you gave for each.
7. Copy the Red Hat Update Appliance configuration RPM to the Red Hat Update Appliance and install it:

   # yum install /tmp/rhui/rh-rhua-config-2.1-2.el6.noarch.rpm

8. Copy the CDS configuration RPM for each CDS instance (as defined by the hostname in the [cds-1] section) and install it:

   # yum install /tmp/rhui/rh-cds1-config-2.1-2.el6.noarch.rpm

Procedure 3.5.  Generate SSL certificate for the new CDS

1. Generate the CDS SSL key, using the following command:

   # openssl genrsa -out ssl_cds02.key 2048
   

2. Generate a certificate request using the openssl command:

   # openssl req -new -key ssl_cds02.key -out ssl_cds02.csr

   The tool will prompt you for further information, and then create an output file called ssl_cds02.csr.
3. Use the CSR file to create a SSL certificate for the new CDS instance with the following command:

   # openssl x509 -req -days 365 -CA ca.crt -CAkey ca.key -in ssl_cds02.csr -out ssl_cds02.crt

Procedure 3.6. Prepare the answers file and generate RPM for the new CDS

1. Change directory to the answers file created in Procedure 3.4, “Editing the Answers File”

   # cd /etc/rhui/myanswersfile

2. Edit the /etc/rhui/myanswersfile answers file using your preferred text editor to include the correct details under [cds-2].

   [cds-2]
   rpm_name: rh-cds2-config
   hostname: cds02.example.com
   ssl_cert: ssl_cds02.crt
   ssl_key: ssl_cds02.key
   

3. To execute the file and create the configuration RPMs, change to root user and run the rhui-installer command:

   # rhui-installer /etc/rhui/myanswersfile

4. Finally, install /tmp/rhui/rh-cds2-config-2.1-2.el6.noarch.rpm on cds02.example.com.

   # yum install /tmp/rhui/rh-cds2-config-2.1-2.el6.noarch.rpm