Chapter 4. Upgrading Satellite or Capsule to Red Hat Enterprise Linux 8 In-Place Using Leapp

Procedure

1. Configure the repositories to obtain Leapp.

   On Red Hat Enterprise Linux, enable the rhel-7-server-extras-rpms repository:

   # subscription-manager repos --enable=rhel-7-server-extras-rpms

2. Install required packages:

   # satellite-maintain packages install leapp leapp-repository

3. For Leapp to perform the upgrade in a disconnected environment, download the metadata and manually extract, as described in Leapp utility metadata in-place upgrades of RHEL for disconnected upgrades.

4. Set up the following repositories to perform the upgrade in a disconnected environment:

   1. /etc/yum.repos.d/rhel8.repo:

      [BaseOS]
      name=rhel-8-for-x86_64-baseos-rpms
      baseurl=http://server.example.com/rhel8/BaseOS/
      
      [AppStream]
      name=rhel-8-for-x86_64-appstream-rpms
      baseurl=http://server.example.com/rhel8/AppStream/

   2. /etc/yum.repos.d/satellite.repo:

      [satellite-6.11-for-rhel-8-x86_64-rpms]
      name=satellite-6.11-for-rhel-8-x86_64-rpms
      baseurl=http://server.example.com/sat6/Satellite/
      
      [satellite-maintenance-6.11-for-rhel-8-x86_64-rpms]
      name=satellite-maintenance-6.11-for-rhel-8-x86_64-rpms
      baseurl=http://server.example.com/sat6/Maintenance/

5. Configure Leapp to keep Tomcat packages to ensure the upgrade does not fail:

   # echo tomcat >> /etc/leapp/transaction/to_keep
   # echo tomcat-lib >> /etc/leapp/transaction/to_keep

6. Let Leapp analyze your system:

   # leapp preupgrade

   If you run Satellite in a disconnected environment, add the --no-rhsm and --enablerepo parameters:

   # leapp preupgrade \
   --no-rhsm \
   --enablerepo BaseOS \
   --enablerepo AppStream \
   --enablerepo satellite-6.11-for-rhel-8-x86_64-rpms \
   --enablerepo satellite-maintenance-6.11-for-rhel-8-x86_64-rpms

   The first run is expected to fail but report issues and inhibit the upgrade. Examine the report in the /var/log/leapp/leapp-report.txt file, answer all questions (using leapp answer), and manually resolve the other reported problems.

   The following commands show the most common steps required:

   # rmmod pata_acpi
   # echo PermitRootLogin yes | tee -a /etc/ssh/sshd_config
   # leapp answer --section remove_pam_pkcs11_module_check.confirm=True

   If leapp preupgrade inhibits the upgrade with Unsupported network configuration because there are multiple legacy named network interfaces, follow the instructions shown by Leapp to rename the interfaces, followed by an installer run to reconfigure Satellite or Capsule to use the new interface names:

   # satellite-installer --help |grep 'interface.*eth'
       --foreman-proxy-dhcp-interface  DHCP listen interface (current: "eth0")
       --foreman-proxy-dns-interface  DNS interface (current: "eth0")

   If eth0 was renamed to em0, call the installer to use the new interface name with:

   # satellite-installer --foreman-proxy-dhcp-interface=em0 --foreman-proxy-dns-interface=em0

7. Ensure leapp preupgrade has no issues.

8. Run:

   # leapp upgrade

   If you run Satellite in a disconnected environment, add the --no-rhsm and --enablerepo parameters:

   # leapp upgrade \
   --no-rhsm \
   --enablerepo BaseOS \
   --enablerepo AppStream \
   --enablerepo satellite-6.11-for-rhel-8-x86_64-rpms \
   --enablerepo satellite-maintenance-6.11-for-rhel-8-x86_64-rpms

9. Reboot the system.

   After the system reboots, a live system conducts the upgrade, reboots to fix SELinux labels, then reboots into the final Red Hat Enterprise Linux 8 system.

10. Leapp finishes the upgrade, watch it with:

    # journalctl -u leapp_resume -f

11. Complete these procedures in Upgrading from RHEL 7 to RHEL 8:

    1. Unlock packages:

       # satellite-maintain packages unlock

    2. Verifying the post-upgrade state of the RHEL 8 system
    3. Performing post-upgrade tasks

    4. Lock packages:

       # satellite-maintain packages lock

12. For Satellite only and not Capsule, if you require SELinux to be in enforcing mode, run the following command before changing SELinux to enforcing mode:

    # dnf reinstall foreman-selinux katello-selinux --disableplugin=foreman-protector

13. Complete the steps for changing SELinux to enforcing mode described in Changing SELinux mode to enforcing in the Upgrading from RHEL 7 to RHEL 8 guide.

14. Unset the subscription-manager release:

    # subscription-manager release --unset