Connecting your RHEL systems through the Red Hat Lightspeed proxy
Red Hat Lightspeed proxy allows those with constraints preventing Internet access to connect to Red Hat Lightspeed
Abstract
Chapter 1. Red Hat Lightspeed proxy overview Copy linkLink copied to clipboard!
Red Hat Lightspeed is a Software-as-a-Service (SaaS) application included with every subscription to Red Hat Enterprise Linux, Red Hat OpenShift, and Red Hat Ansible Automation Platform. Red Hat Lightspeed provides predictive analytics, automatically discovers relevant insights, recommends tailored actions, and automates tasks.
If you have constraints that prevent your systems from directly accessing the Internet, Red Hat Lightspeed proxy provides capabilities and features for securely and efficiently connecting your systems to Red Hat Lightspeed, including:
Easy Access
The Red Hat Lightspeed proxy resolves architectural, technical and firewall configuration issues, freeing you from troubleshooting these issues yourself.
Security
The Red Hat Lightspeed proxy protects your systems from malware threats by filtering traffic and scanning for malicious content. It can also serve as a firewall.
Quickly view and execute recommendations
You can view and execute recommendations to keep your fleet efficient, secure, compliant, and updated. Simply send a subset of log data to the Red Hat Lightspeed service by using a single proxy.
Patching
You can connect to Red Hat as needed to pull the most recent patches into your network. This enables you to push updates to systems behind your firewall, using your own tools and schedules.
Chapter 2. Installing and configuring the Red Hat Lightspeed proxy Copy linkLink copied to clipboard!
To set up the Red Hat Lightspeed proxy, you will need to modify Red Hat Subscription Manager (RHSM) and your firewall. You will install the proxy and create a new rhproxy user. You will accept the automatically generated security certificate or create your own. Then, you will configure your client systems. You can customize your proxy by setting configuration options, running commands with options, and integrating with third-party servers.
2.1. Enabling the subscription manager repository Copy linkLink copied to clipboard!
Red Hat Subscription Manager (RHSM) tracks the Red Hat products that your organization has purchased and the systems that the products are installed on. To start setting up the Red Hat Lightspeed proxy, enable the RHSM repository.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- For the Red Hat Lightspeed proxy installation, you have at least one system running RHEL version 9.
- You are logged in to the system as root or have sudo permissions.
- Your architectural environment is Intel or Arm.
Procedure
- Open your command-line interface (CLI).
Depending on your architectural environment, enter one of the following commands:
Intel architecture system:
subscription-manager repos --enable=insights-proxy-for-rhel-10-x86_64-rpms
[root@server ~]# subscription-manager repos --enable=insights-proxy-for-rhel-10-x86_64-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow ARM (AARCH64) architecture system:
subscription-manager repos--enable=insights-proxy-for-rhel-10-aarch64-rpms
[root@server ~]# subscription-manager repos--enable=insights-proxy-for-rhel-10-aarch64-rpmsCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
If you successfully enabled RHSM, you will see the following output in the CLI:
Repository
insights-proxy-for-rhel-10-x86_64-rpmsis enabled for this system.
Additional resources
2.2. Installing the rhproxy and service controller Copy linkLink copied to clipboard!
Install the rhproxy Red Hat Package Manager (RPM), which in turn installs the service controller. Then, use the service controller to install and manage the rhproxy service.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- For the Red Hat Lightspeed proxy installation, you have at least one system running RHEL version 9.
- You are logged in to the system as root or have sudo permissions.
- Your architectural environment is Intel or Arm.
Procedure
Open the command-line interface (CLI) and run the following command:
[root@server ~] # dnf install -y rhproxy
[root@server ~] # dnf install -y rhproxyCopy to Clipboard Copied! Toggle word wrap Toggle overflow
The /usr/bin/rhproxy path is now available for you to use.
Verification step
Verify the installation was successful by running the following command. If the installation is successful, the installed version is confirmed in the output. If the installation is unsuccessful, the output indicates that the procedure failed:
rpm -q rhproxy
[root@server ~]# rpm -q rhproxyCopy to Clipboard Copied! Toggle word wrap Toggle overflow
2.3. Creating a new proxy user and logging into Podman Copy linkLink copied to clipboard!
By default, rhproxy runs without root permissions. Create a new user named rhproxy and then log in to Podman to manage your systems.
Prerequisites
- Podman is installed on your system.
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- For the Red Hat Lightspeed proxy installation, you have at least one system running RHEL version 9.
- You are logged in to the system as root or have sudo permissions.
- Your architectural environment is Intel or Arm.
Procedure
To add your new
rhproxyuser, run the following command in the CLI:useradd rhproxy
[root@server ~]# useradd rhproxyCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that your new user has been successfully added by running the following command:
id rhproxy
[root@server ~]# id rhproxyCopy to Clipboard Copied! Toggle word wrap Toggle overflow The following output displays:
uid=1002(rhproxy) gid=1002(rhproxy) groups=1002(rhproxy)
-
This output confirms that the user
rhproxyexists in the system. It also prints the user and group IDs and the group that the user resides in.
-
Switch to your new
rhproxyuser account. Log in to Podman with your Red Hat credentials and run the following command as the
rhproxyuser:podman login registry.redhat.io
[rhproxy@server ~]$ podman login registry.redhat.ioCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verification
- If your login is successful, the following output displays:
- Login succeeded.
2.4. Configuring the firewalls for bidirectional communication with Red Hat Lightspeed Copy linkLink copied to clipboard!
After you have installed Red Hat Lightspeed proxy you must configure your firewalls to allow bidirectional communication with Red Hat Lightspeed. This includes configuring the firewall on the system where the Red Hat Lightspeed proxy is installed and also configuring any global firewalls that might be in place between your clients and the Red Hat Lightspeed services.
2.4.1. Configuring your Red Hat Lightspeed proxy firewall Copy linkLink copied to clipboard!
After you have installed the Red Hat Lightspeed proxy and configured the firewall, you must also configure any global firewalls to allow bidirectional communication with Red Hat Lightspeed. Allow all Red Hat subscription management and Red Hat Lightspeed client tools to communicate with the Red Hat Lightspeed services through the proxy.
For your systems to be able to access the Red Hat Lightspeed proxy, you must open ports 3128 and 8443 and restart the service. These required ports are also specified in the rhproxy.env file that gets created when you install Red Hat Lightspeed proxy.
If you are using your own proxy to connect to Red Hat Lightspeed, or you want the most up-to-date list of required ports to configure, see the rhproxy.env file in the Red Hat Lightspeed rhproxy GitHub repository.
The following procedure describes how to configure the required Red Hat ports on your firewall.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- Your RHEL system(s) are version 8 or 9.
- You have created a new rhproxy user.
- Your architectural environment is either Intel or Arm.
Procedure
From the CLI, use the following commands to add required ports 3128 and 8443:
[root@server ~] # firewall-cmd --permanent --add-port=3128/tcp
[root@server ~] # firewall-cmd --permanent --add-port=3128/tcpCopy to Clipboard Copied! Toggle word wrap Toggle overflow [root@server ~] # firewall-cmd --permanent --add-port=8443/tcp
[root@server ~] # firewall-cmd --permanent --add-port=8443/tcpCopy to Clipboard Copied! Toggle word wrap Toggle overflow [root@server ~] # firewall-cmd --reload
[root@server ~] # firewall-cmd --reloadCopy to Clipboard Copied! Toggle word wrap Toggle overflow Now that you have made adjustments to your firewall, you will need to install and start the rhproxy service:
[rhproxy@server ~] $ rhproxy install
[rhproxy@server ~] $ rhproxy installCopy to Clipboard Copied! Toggle word wrap Toggle overflow [rhproxy@server ~] $ rhproxy start
[rhproxy@server ~] $ rhproxy startCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Result
After a few seconds, you will be able to forward Red Hat Lightspeed traffic to http://<rhproxy-hostname>:3128.
Verification steps
Verify that the firewall configuration was successful by checking the status of the rhproxy service:
[rhproxy@server ~] $ rhproxy status
[rhproxy@server ~] $ rhproxy statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow - When successful, the output confirms that the rhproxy service is active and running, and the most recent activity is logged.
- Enter the following command to test the functionality:
curl -L -x http://$(hostname):3128 https://mirrors.fedoraproject.org/
[rhproxy@server ~]$ curl -L -x http://$(hostname):3128 https://mirrors.fedoraproject.org/
Additional resources
2.4.2. Configuring your global firewall for bidirectional communication with Red Hat Lightspeed Copy linkLink copied to clipboard!
To enable your client systems to securely access Red Hat Lightspeed, allow access to the Red Hat hostnames in your firewall or proxy.
If you are connecting to Red Hat Lightspeed with your own web proxy instead of the Red Hat Lightspeed proxy, you must also complete the global firewall configuration.
2.4.2.1. Adding the required Red Hat hostnames to your firewall allowlist Copy linkLink copied to clipboard!
To allow bidirectional communication with Red Hat Lightspeed, configure a firewall or proxy on the outgoing network to permit traffic to Red Hat hostnames. If clients in your environment use any other repositories with additional hostnames, you must also allow traffic to those nodes.
When you install Red Hat Lightspeed proxy, the /home/rhproxy/.config/rhproxy/env/redhat.servers allowlist file gets created. This file contains the required hostnames for bidirectional communication with Red Hat Lightspeed.
If you are using your own proxy to connect to Red Hat Lightspeed, or if you want to view the most up-to-date list, see the Red Hat Lightspeed rhproxy GitHub repository.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- Your systems are running RHEL version 8 or later.
-
You created a new
rhproxyuser. - Your architectural environment is Intel or Arm.
- You completed the steps in Configuring your Red Hat Lightspeed proxy firewall.
Procedure
- Log on as a System Administrator on the outgoing network firewall or proxy.
Add the following Red Hat hostnames to the allowlist configuration:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow -
Optional: If clients in your environment use any other repositories with additional hostnames, and you enabled those hostnames in the
mirror.serversfile on the Red Hat Lightspeed proxy node, make the corresponding changes to the firewall proxy. -
Optional: If you use Extra Packages for Enterprise Linux (EPEL) in your environment, configure the outgoing network firewall or proxy to permit traffic to the required hostnames. These hostnames are defined in the
epel.serversallowlist file. - Restart your firewall service to ensure that your allowlist changes take effect.
Verification steps
You can now connect and use Red Hat Lightspeed to gain visibility of your systems and proactively identify and mitigate operational and vulnerability risks.
- Enter the following curl command to test the functionality:
curl -L -x http://$(hostname):3128 https://mirrors.fedoraproject.org/
[rhproxy@server ~]$ curl -L -x http://$(hostname):3128 https://mirrors.fedoraproject.org/
Additional resources
2.5. Obtaining a security certificate Copy linkLink copied to clipboard!
In order to establish a secure connection, you will need a certificate for accessing any resources served by the proxy. Note that the rhproxy service creates a self-signed certificate for downloads if none are found in the /home/rhproxy/.local/share/rhproxy/certs/ file.
If you prefer, you can provide your own HTTPS certificate and key, and record them in appropriate files. If you chose this route:
Record your certificate in the following file:
/home/rhproxy/.local/share/rhproxy/certs/rhproxy.crtRecord your key in the following file:
/home/rhproxy/.local/share/rhproxy/certs/rhproxy.key
Additional resources
2.6. Configuring client systems Copy linkLink copied to clipboard!
After the Red Hat Lightspeed proxy is installed and running, you must configure your client systems so that Red Hat Subscription Manager (RHSM) and the Red Hat Lightspeed client tools can communicate with Red Hat Lightspeed through the proxy. You only need to do this configuration one time after the initial installation by using the helper script, configure-client.sh.
Prerequisites
- You have root user access.
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- You have at least one system running RHEL version 8 or later.
-
You created a new
rhproxyuser. - Your architectural environment is Intel or Arm.
If you change the hostname or IP address of your Red Hat Lightspeed proxy, you must rerun the configure-client.sh script on each client system.
Procedure
In the CLI, run the following the curl command to download the helper script to
configure-client.sh:curl -k -L https://<rhproxy-hostname>:8443/download/bin/configure-client.sh -o configure-client.sh
[root@client ~]# curl -k -L https://<rhproxy-hostname>:8443/download/bin/configure-client.sh -o configure-client.shCopy to Clipboard Copied! Toggle word wrap Toggle overflow chmod +x configure-client.sh
[root@client ~]# chmod +x configure-client.shCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the following script:
./configure-client.sh --configure --proxy-host <rhproxy-hostname>
[root@client ~]# ./configure-client.sh --configure --proxy-host <rhproxy-hostname>Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification step
Run the following command on the client systems:
insights-client --test-connection
[root@client ~]# insights-client --test-connectionCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the following command on the Red Hat Lightspeed proxy server:
rhproxy status
[rhproxy@server ~]$ rhproxy statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
2.7. Viewing the proxy server tag for a Red Hat Lightspeed client Copy linkLink copied to clipboard!
Once you have configured a registered Red Hat Lightspeed client system to use a proxy server, you can view the client system with its tag in the Hybrid Cloud Console. The insights-proxy:<proxy-hostname> tag indicates which Red Hat Lightspeed proxy host the system uses.
The Red Hat Lightspeed proxy server itself does not use the tag for identification. Only systems connected to a proxy server have the insights-proxy:<proxy-hostname> tag.
For more information about how to view client systems and their associated proxy servers in inventory, see Assessing and filtering your inventory.
Chapter 3. Customizing the Red Hat Lightspeed proxy Copy linkLink copied to clipboard!
With Red Hat Lightspeed proxy, you can designate additional dnf or yum servers, customize the rhproxy configuration, and use customized commands and configuration options.
3.1. Designating optional dnf and yum servers Copy linkLink copied to clipboard!
To add additional third-party servers, including non-Red Hat and non-EPEL servers, create a custom allowlist for rhproxy.
Save the hostnames of systems providing dnf repositories in the following file:
/home/rhproxy/.config/rhproxy/env/mirror.servers-
Open the
/home/rhproxy/.config/rhproxy/env/mirror.serversfile, and add the hostnames of any systems that provide dnf repositories. After adding your systems, restart the service:
rhproxy restart
[rhproxy@server ~]$ rhproxy restartCopy to Clipboard Copied! Toggle word wrap Toggle overflow
-
Open the
Verification step
Run the following command to ensure that your third-party services were added:
curl -x http://$(hostname):3128 https://<hostname>
[root@server ~]# curl -x http://$(hostname):3128 https://<hostname>Copy to Clipboard Copied! Toggle word wrap Toggle overflow
3.2. Customizing the rhproxy configuration Copy linkLink copied to clipboard!
You can further customize your rhproxy configuration. For a list of configurable options and their descriptions, see Appendix A.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- For the Red Hat Lightspeed proxy installation, you have at least one system running RHEL version 9.
- You are logged in to the system as root or have sudo permissions.
- Your architectural environment is Intel or Arm.
-
You are logged in as the
rhproxyuser.
Procedure
- Log in to the Red Hat Lightspeed proxy server.
-
Edit the
/home/rhproxy/.config/rhproxy/env/rhproxy.envfile and make changes to the default configuration. Run the following command to restart the Red Hat Lightspeed proxy and enable your configuration edits to take effect:
rhproxy restart
[rhpproxy@server ~]$ rhproxy restartCopy to Clipboard Copied! Toggle word wrap Toggle overflow The allowed upstream servers are listed in the following files:
Red Hat servers are listed in:
/home/rhproxy/.config/rhproxy/env/redhat.servers
/home/rhproxy/.config/rhproxy/env/redhat.serversCopy to Clipboard Copied! Toggle word wrap Toggle overflow - The DNF or YUM EPEL servers are listed in:
/home/rhproxy/.config/rhproxy/env/epel.servers
/home/rhproxy/.config/rhproxy/env/epel.servers
The preceding files get overwritten with rhproxy RPM updates. When the files are overwritten, you must reapply the manual configuration updates that you make.
3.3. Unconfiguring client systems when you want to disable the Red Hat Lightspeed proxy Copy linkLink copied to clipboard!
You might decide to stop using the Red Hat Lightspeed proxy. Use the following procedure to unconfigure your client systems so that they no longer go through the Red Hat Lightspeed proxy.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- You have at least one system running RHEL version 9, for the Red Hat Lightspeed proxy installation.
- You are logged in to the system as root or have sudo permissions.
- Your architectural environment is either Intel or Arm.
Procedure
- Open your command-line interface, and navigate to the specific client system you want to remove from the Red Hat Lightspeed proxy.
Run the following command on your client system:
[root@client ~] ./configure-client.sh --unconfigure
[root@client ~] ./configure-client.sh --unconfigureCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verification step
If the procedure is successful, you will see the following output:
Un-configuring insights-client/rhsm/rhc/rhcd from proxying to Red Hat Lightspeed
3.4. Appendix A: Command options for the Red Hat Lightspeed proxy Copy linkLink copied to clipboard!
You can use the following options with the rhproxy command:
| Option | Description |
|---|---|
| install | Installs the Red Hat Lightspeed proxy. |
| uninstall [-f] |
Uninstalls the Red Hat Lightspeed proxy. Specify |
| start | Starts the Red Hat Lightspeed proxy. |
| stop | Stops the Red Hat Lightspeed proxy. |
| restart | Restarts the Red Hat Lightspeed proxy. |
| status | Displays the status of the proxy’s running service and connection logs. |
| update | If you change the default 3128 port, you will need to use this option to update the configure-client.sh script. |
3.5. Appendix B: Configuration options for the Red Hat Lightspeed proxy Copy linkLink copied to clipboard!
If you want to run your proxy with non-default parameters, see the following table for a list of available options that you can set in the /home/rhproxy/.config/rhproxy/env/rhproxy.env configuration file.
| Option | Description |
|---|---|
| RHPROXY_DISABLE | This option will disable an active proxy. This defaults to 0. |
| RHPROXY_DEBUG_CONFIG | Use this option to log environment variables and Nginx configuration upon startup. This defaults to 0. |
| RHPROXY_SERVICE_PORT | Use this option to define the listening port of the Red Hat Lightspeed proxy. This defaults to 3128. |
| RHPROXY_DNS_SERVER | Use this option to define which DNS server to use for name resolution. This defaults to 1.1.1.1. The rhproxy service will use the system DNS resolver if defined, otherwise it defaults to 1.1.1.1. |
| RHPROXY_WEB_SERVER_DISABLE | Use this option to disable the Red Hat Lightspeed proxy web server. This defaults to 0. |
| RHPROXY_WEB_SERVER_PORT | Use this option to define the listening port of the Red Hat Lightspeed proxy web server. This defaults to 8443. |
Chapter 4. Connecting to Red Hat Lightspeed through your own proxy Copy linkLink copied to clipboard!
You might choose to use your own proxy to act as a gateway between the public Internet and your private network. This is a good security measure to protect your systems from malicious activity. To connect your systems to Red Hat Lightspeed you must add hostnames, ports and allow additional URLs.
4.1. Connecting to Red Hat Lightspeed through your own proxy Copy linkLink copied to clipboard!
If you are a Red Hat Satellite user, no proxy is required because Satellite serves as a proxy itself. For more information, see: How to configure Red Hat Satellite 6 with proxy server.
To connect to Red Hat Lightspeed, you must include specific hostnames and ports on your proxy’s outgoing network.
Prerequisites
- You have at least one active Red Hat Enterprise Linux subscription.
- You are logged in to the system as root or have sudo permissions.
- Your system is registered with Red Hat Subscription Manager (RHSM).
Procedure
Navigate to your outgoing network configuration and add the following addresses and ports:
https://cert-api.access.redhat.com:443
https://cert-api.access.redhat.com:443Copy to Clipboard Copied! Toggle word wrap Toggle overflow https://cert.cloud.redhat.com:443
https://cert.cloud.redhat.com:443Copy to Clipboard Copied! Toggle word wrap Toggle overflow https://cert.console.redhat.com:443
https://cert.console.redhat.com:443Copy to Clipboard Copied! Toggle word wrap Toggle overflow Add the Red Hat Hybrid Cloud Console URL so that you can manage your account and hosts in the Red Hat Lightspeed Web UI:
https://console.redhat.com:443
https://console.redhat.com:443Copy to Clipboard Copied! Toggle word wrap Toggle overflow Add the URL for Single-Sign-On to Red Hat to allow access to authorization:
https://sso.redhat.com:443
https://sso.redhat.com:443Copy to Clipboard Copied! Toggle word wrap Toggle overflow
For each host that uses your proxy, add the following details the /etc/rhsm/rhsm.conf file:
This information is required for RHSM, Red Hat Lightspeed client and remote host configuration (rhc).
Add your HTTP proxy server’s URL:
proxy_hostname =
proxy_hostname =Copy to Clipboard Copied! Toggle word wrap Toggle overflow Add the proxy scheme to allow authorization. HTTP is the default:
proxy_scheme = http
proxy_scheme = httpCopy to Clipboard Copied! Toggle word wrap Toggle overflow Add the port for your proxy server:
proxy_port =
proxy_port =Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: If your proxy requires authentication, add your user name and password:
proxy_user =
proxy_user =Copy to Clipboard Copied! Toggle word wrap Toggle overflow proxy_password =
proxy_password =Copy to Clipboard Copied! Toggle word wrap Toggle overflow Add any domains that you want to opt out from the proxy:
no_proxy =
no_proxy =Copy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: Edit the
insights-client.confconfiguration file to change the proxy. By default, Red Hat Lightspeed client uses RHSM’s configuration for a proxy./etc/insights-client/insights-client.conf
/etc/insights-client/insights-client.confCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Open your command line interface (CLI) and run the following command as root:
insights-client --test-connection --net-debug
[root@server ~]# insights-client --test-connection --net-debugCopy to Clipboard Copied! Toggle word wrap Toggle overflow If connectivity is successful, you will see the following output in your CLI:
End API URL Connection Test: SUCCESS Connectivity tests completed successfully See `/var/log/insights-client/insights-client.log` for more details.
End API URL Connection Test: SUCCESS Connectivity tests completed successfully See `/var/log/insights-client/insights-client.log` for more details.Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional resources
Chapter 5. Updating the Red Hat Lightspeed proxy service Copy linkLink copied to clipboard!
When you need to update the Red Hat Lightspeed proxy service, you will receive errata emails and Hybrid Cloud Console alerts. These messages typically happen monthly and are based on our analysis of Common Vulnerabilities and Exposures (CVEs).
The following procedure describes how to complete a Red Hat Lightspeed proxy upgrade.
Prerequisites
- You have at least one active Red Hat Enterprise Linux (RHEL) subscription.
- You have at least one system running RHEL version 9.
- You are logged in to the system as root or have sudo permissions.
- Your architectural environment is Intel or Arm.
Procedure
Open your command-line interface (CLI), and run the following
dnf updatecommand:[root@server ~] # dnf update -y rhproxy
[root@server ~] # dnf update -y rhproxyCopy to Clipboard Copied! Toggle word wrap Toggle overflow Switch to your
rhproxyuser account and run the following two commands:Run the following command to reinstall the Red Hat Lightspeed proxy service so that the files from the updated package can be used:
rhproxy reinstall
[rhproxy@server ~]$ rhproxy reinstallCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the following command to restart the service:
[rhproxy@server ~] # rhproxy restart
[rhproxy@server ~] # rhproxy restartCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Because changes have been made to the configuration script, you must download and run the configuration script again on the client systems. Run the following curl command to download the helper script and
configure-client.sh:curl -k -L https://<rhproxy-hostname>:8443/download/bin/configure-client.sh -o configure-client.sh chmod +x configure-client.sh
[root@client ~]# curl -k -L https://<rhproxy-hostname>:8443/download/bin/configure-client.sh -o configure-client.sh [root@client ~]# chmod +x configure-client.shCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the following script:
./configure-client.sh --configure --proxy-host <rhproxy-hostname>
[root@client ~]# ./configure-client.sh --configure --proxy-host <rhproxy-hostname>Copy to Clipboard Copied! Toggle word wrap Toggle overflow Run the following Podman command to delete old images that are on the proxy node:
[rhproxy@server ~] $ podman rmi $(podman images --filter reference=registry.redhat.io/insights-proxy/insights-proxy-container-rhel9 --filter "containers=false" -q)
[rhproxy@server ~] $ podman rmi $(podman images --filter reference=registry.redhat.io/insights-proxy/insights-proxy-container-rhel9 --filter "containers=false" -q)Copy to Clipboard Copied! Toggle word wrap Toggle overflow
The syntax containers = false ensures that you are deleting outdated images.
Verification
Run the following commands to test for successful configuration:
Run the following command on the client systems:
insights-client --test-connection
[root@client ~]# insights-client --test-connectionCopy to Clipboard Copied! Toggle word wrap Toggle overflow Run the following command on the Red Hat Lightspeed proxy server:
rhproxy status
[rhproxy@server ~]$ rhproxy statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the Red Hat Lightspeed proxy service restarted. If the attempt was successful, the output states that the rhproxy service is active and running:
rhproxy status
[rhproxy@server ~]$ rhproxy statusCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Providing feedback on Red Hat documentation Copy linkLink copied to clipboard!
We appreciate and prioritize your feedback regarding our documentation. Provide as much detail as possible, so that your request can be quickly addressed.
Prerequisites
- You are logged in to the Red Hat Customer Portal.
Procedure
To provide feedback, perform the following steps:
- Click the following link: Create Issue
- Describe the issue or enhancement in the Summary text box.
- Provide details about the issue or requested enhancement in the Description text box.
- Type your name in the Reporter text box.
- Click the Create button.
This action creates a documentation ticket and routes it to the appropriate documentation team. Thank you for taking the time to provide feedback.