Chapter 1. Introducing Red Hat Satellite 6.12

Red Hat Satellite now loads the new UI for host details by default. The functionality previously available under Hosts > Content Hosts is now available on the new Hosts page. To reach the page, navigate to Hosts > All Hosts and select the host you want to see in more detail.

Additions:

Previously, the ID column was not searchable for certain entities. With this release, you can sort and order all entities by ID. For example:

hammer ansible roles list --order 'id DESC'

Previously, the satellite-installer command installed the default set of Apache httpd modules, some of which were not required for most Satellite deployments. With this release, the set of Apache modules is reduced to include only required modules. You can check the currently enabled Apache modules by running the httpd -M command. You can enable additional modules by adding the apache::default_mods: parameter to the /etc/foreman-installer/custom-hiera.yaml file. For example:

apache::default_mods:
 - additional_module_1
 - additional_module_2

After editing the custom-hiera.yaml file, run satellite-installer to install the additional modules.

Previously, booting from disk was temporarily suspended as the default boot entry for UEFI provisioning when using the PXEGrub2 default local boot template. Consequently, you had to force the local boot from disk using a global setting. With this release, the local boot from disk is restored as the default boot entry. As a result, you do not have to force the workflow.

After the upgrade to 6.12, reset the global setting to its default value. In the Satellite web UI, navigate to Administer > Settings > Provisioning and clear the value of Default PXE local template entry.

Satellite now includes the ability to scan systems for vulnerabilities using the OVAL standard data feed provided by Red Hat.

foreman_openscap contains the API to upload the OVAL content used to trigger the OVAL oscap scans. The results are parsed for CVEs and sent to Satellite which then generates reports of managed hosts and the CVEs that effect them.

This release introduces a job invocation wizard in the Lab Features menu as a Technology Preview.

Options from the previous job invocation form remain the same in the job invocation wizard, and there are also new search options.

Note that the wizard is not enabled by default. You can enable it in settings by going to Administer > Settings > Show Experimental Lab.

This release introduces the Alternate Content Sources feature as a Technology Preview. Using the alternate content sources feature, you can populate a repository with content that is locally stored or geographically closer to you. This can be used to speed up repository synchronization, as only the metadata will be pulled in from the repository server, while the content itself will be synchronized from the alternate content source.

The alternate content source can be set up for a Satellite server, as well as for Capsule servers.

To create alternate content sources, navigate to Lab Features > Alternate Content Sources > Add Source.

For more information, see Using Alternate Content Sources With Satellite 6.12 (Tech Preview).

If the Puppet plug-in was disabled with the -f, --remove-all-data argument and you attempt to enable it again, Satellite maintain fails.

BZ#(2087067)

When you run an Ansible job against multiple hosts and the execution fails on some hosts, the results of the execution on all hosts are marked as failed in the job invocation details. As a result, partial failure of jobs is not respected and you can see the failed result status even for hosts on which execution succeeded.

BZ#(2167396)

This is fixed in the 6.12.4 update.

When you provision a discovered host, after selecting a host group and trying to customize the host entry, many critical pieces of information are missing. This results in a failed deployment attempt.

As a workaround, perform one of the following actions:

BZ#(2069324)

Due to a modularity issue, the dnf tool currently cannot detect the relevant version of the rubygem-foreman_maintain package.

Consequently, the satellite-maintain upgrade list-versions command does not list Red Hat Satellite version 6.12 for running an upgrade after enabling the satellite-maintenance-6.12-for-rhel-8-x86_64-rpms repository, therefore Satellite Servers and Capsule Servers cannot be upgraded to the version 6.12.

To work around this problem, use the below commands to enable the satellite 6.12 repositories after enabling the satellite-maintenance-6.12-for-rhel-8-x86_64-rpms repository.

For Satellite Server: # subscription-manager repos --enable satellite-6.12-for-rhel-8-x86_64-rpms

For Capsule Server: # subscription-manager repos --enable satellite-capsule-6.12-for-rhel-8-x86_64-rpms

For more information, see the Knowledgebase Solution.

BZ#(2143451)

During host provisioning, the host is registered with Red Hat Insights by running the command insights-client —register –verbose. It ended up with a logging error after package installation.

However, it requires no workaround as this error occurs only once and it does not repeat after the initial output. More details for the same can be found in the provisioning log.

BZ#(2129254)

When you switch to a new host using the breadcrumb switcher, the Insights tab continues to show data from the previous host.

To work around this issue, refresh the page in your web browser to view the recommendations for the newly selected host.

BZ#(2120640)

When you invoke a remote job execution on a host in pull mode and the yggdrasild service is not running at that time, then after yggdrasild restarts, the service drops the job instead of executing it. You must invoke the job again with yggdrasild running on the host.

BZ#(2124419)

qpidd or katello_agent from hammer ping fails during the database restore process.

As a workaround, restart the foreman by systemctl restart foreman and repeat the process.

BZ#(2124215)

Entitlement-based Subscription Management is deprecated and will be removed in a future release.

It is recommended to use Simple Content Access, which simplifies the entitlement experience for administrators in regards to subscriptions as a substitute.