Chapter 6. Patching Your Systems
To patch your systems through Satellite Server, you need to register your systems first, and then choose to install Katello agent or use remote execution. Remote execution is enabled by default. This chapter covers both methods. Choose the option that suits your environment
Note that the Katello agent is deprecated and will be removed in a future Satellite version. Migrate your workloads to use the remote execution feature to update clients remotely. For more information, see Host Management Without Goferd and Katello Agent in the Managing Hosts Guide.
6.1. Registering Existing Hosts Copy linkLink copied to clipboard!
This section explains how to register Red Hat Enterprise Linux Hosts and Atomic Hosts.
6.1.1. Registering an Existing Red Hat Enterprise Linux Host Copy linkLink copied to clipboard!
On the host, clear any old data to ensure updated data is uploaded correctly.
subscription-manager clean
# subscription-manager clean
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Install the katello-ca-consumer-latest RPM.
rpm -Uvh http://satellite.example.com/pub/katello-ca-consumer-latest.noarch.rpm
# rpm -Uvh http://satellite.example.com/pub/katello-ca-consumer-latest.noarch.rpm
Copy to Clipboard Copied! Toggle word wrap Toggle overflow This installs the proper certificates which allow communication between the client and the Satellite Server.
Register the host.
subscription-manager register --org="Default_Organization" \ --activationkey=ak-Reg_To_Dev_EL7
# subscription-manager register --org="Default_Organization" \ --activationkey=ak-Reg_To_Dev_EL7
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
6.1.2. Registering an Atomic Host Copy linkLink copied to clipboard!
The following procedure explains how to register an Atomic Host with Subscription Manager.
Retrieve
katello-rhsm-consumer
from the Satellite Server:wget http://satellite.example.com/pub/katello-rhsm-consumer
[root@atomic_client ~]# wget http://satellite.example.com/pub/katello-rhsm-consumer
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Change the mode of
katello-rhsm-consumer
in order to make it executable:chmod +x katello-rhsm-consumer
[root@atomic_client ~]# chmod +x katello-rhsm-consumer
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Run
katello-rhsm-consumer
:./katello-rhsm-consumer
[root@atomic_client ~]# ./katello-rhsm-consumer
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Register with Red Hat Subscription Manager:
subscription-manager register
[root@atomic_client ~]# subscription-manager register
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Because Atomic is functionally an appliance, we do not recommend that you try to install katello-agent
on it.
6.2. Patching Your System Using Katello Agent Copy linkLink copied to clipboard!
6.2.1. Installing Katello Agent Copy linkLink copied to clipboard!
Note that the Katello agent is deprecated and will be removed in a future Satellite version. Migrate your workloads to use the remote execution feature to update clients remotely. For more information, see Host Management Without Goferd and Katello Agent in the Managing Hosts Guide.
On the content host, install the katello-agent
RPM package.
yum install katello-agent
# yum install katello-agent
The goferd service must be running so that the Red Hat Satellite Server or Capsule Server can provide information about errata that are applicable for content hosts.
Ensure goferd is running:
On Red Hat Enterprise Linux 6, run the following command:
service goferd start
# service goferd start
Copy to Clipboard Copied! Toggle word wrap Toggle overflow On Red Hat Enterprise Linux 7, run the following command:
systemctl start goferd
# systemctl start goferd
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
6.2.2. Applying Errata to Content Hosts Copy linkLink copied to clipboard!
Applying Errata to Content Hosts Using the Web UI
-
Go to Hosts
Content Hosts and click on auth01.example.com
. - Select the Errata tab to view the list of errata applicable to the content host.
- From the list, select an errata.
- Click Apply Selected.
- A confirmation message appears. Click Apply.
Verify that the errata has been applied to the client.
yum list-sec
[root@client ~]# yum list-sec
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
6.3. Patching Your System Using Remote Execution Copy linkLink copied to clipboard!
6.3.1. Enabling Remote Execution on a Host Copy linkLink copied to clipboard!
During Satellite Server installation, an internal Capsule Server is automatically installed along with a public SSH key. The internal Capsule Server loads the SSH key from /usr/share/foreman-proxy/.ssh/id_rsa_foreman_proxy
. You can enable remote execution by distributing the public SSH key to a host.
On the Satellite Server, distribute the key to the host.
ssh-copy-id -i ~foreman-proxy/.ssh/id_rsa_foreman_proxy.pub root@auth01.example.com
# ssh-copy-id -i ~foreman-proxy/.ssh/id_rsa_foreman_proxy.pub root@auth01.example.com
6.3.2. Installing Errata on Your Host Copy linkLink copied to clipboard!
Satellite provides default job templates for executing remote jobs, one of which is for installing errata.
-
Go to Hosts
All hosts and click the check box next to the host’s name. - Click Select Action and select Schedule Remote Job from the drop-down menu.
- In the Job category drop-down menu, select Katello.
- In the Job template drop-down menu, select Install Errata-Katello SSH Default.
- In the errata field, enter the errata ID.
- Select Execute now and click Submit.