Chapter 6. Managing content delivery servers
CDS nodes provide content to RHUI clients.
You can use the Content Delivery Server (CDS) Management screen to list, add, delete, and reinstall CDS nodes.
6.1. Registering a new CDS Copy linkLink copied to clipboard!
The Red Hat Update Infrastructure Management Tool provides several options for configuring a CDS within the RHUI.
Prerequisites
-
Make sure
sshdis running on the CDS node and thatport 443is open.
Answering yes (y) to the below question: Update instance(s) after reinstalling? (y/n): will result in a dnf update being run on the instance after it is registered. This may require a reboot of the instance. Answering no (n) to this question will result in the dnf update not being run.
Procedure
Navigate to the Red Hat Update Infrastructure Management Tool home screen:
rhui-manager
[root@rhua ~]# rhui-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
Press
cto select manage content delivery servers (CDS). -
From the Content Delivery Server (CDS) Management screen, press
ato add a new CDS instance. Enter the hostname of the CDS to add:
Hostname of the CDS instance to register: cds1.example.com
Hostname of the CDS instance to register: cds1.example.comCopy to Clipboard Copied! Toggle word wrap Toggle overflow Enter the user name that will have SSH access to the CDS and have sudo privileges.
Username with SSH access to <cds1.example.com> and sudo privileges: <cloud-user>
Username with SSH access to <cds1.example.com> and sudo privileges: <cloud-user>Copy to Clipboard Copied! Toggle word wrap Toggle overflow Enter the absolute path to the SSH private key for logging in to the CDS and press
Enter.Absolute path to an SSH private key to log into <cds1.example.com> as <cloud-user>: /home/<cloud-user>/.ssh/id_rsa_rhua
Absolute path to an SSH private key to log into <cds1.example.com> as <cloud-user>: /home/<cloud-user>/.ssh/id_rsa_rhuaCopy to Clipboard Copied! Toggle word wrap Toggle overflow Update the instance with the latest versions of available packages
Update instance after registering? (y/n): y
Update instance after registering? (y/n): yCopy to Clipboard Copied! Toggle word wrap Toggle overflow Optional: If you wish to use custom SSL certificates, enter the absolute path to the custom SSL certificate, SSL Key, and SSL crt files.
NoteIf you do not provide an SSL certificate, it will be automatically generated.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - If adding the content delivery server fails, check that the firewall rules permit access between the RHUA and the CDS.
Run the
mountcommand to see if shared storage is mounted as read-write.mount | grep rhui
[root@rhua ~]# mount | grep rhui nfs.example.com:/export on /var/lib/rhui/remote_share type nfs4 (rw,relatime,vers=4.2,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=10.8.41.163,local_lock=none,addr=10.8.41.163)Copy to Clipboard Copied! Toggle word wrap Toggle overflow - After successful configuration, repeat these steps for all remaining CDS nodes.
6.2. Listing all known CDS instances managed by RHUI 4 Copy linkLink copied to clipboard!
You can use the Content Delivery Server (CDS) Management screen to list all CDS nodes managed by Red Hat Update Infrastructure 4.
Procedure
Navigate to the Red Hat Update Infrastructure Management Tool home screen:
rhui-manager
[root@rhua ~]# rhui-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
Press
cto select manage content delivery servers (CDS): From the Content Delivery Server (CDS) Management screen, press
lto list all known CDS nodes that Red Hat Update Infrastructure 4 manages:Hostname: <cds1.example.com> SSH Username: <cloud-user> SSH Private Key: /<cloud-user>/.ssh/id_rsa_rhua
Hostname: <cds1.example.com> SSH Username: <cloud-user> SSH Private Key: /<cloud-user>/.ssh/id_rsa_rhuaCopy to Clipboard Copied! Toggle word wrap Toggle overflow
6.3. Reinstalling and reapplying configuration to a CDS Copy linkLink copied to clipboard!
You may encounter a situation where you need to reinstall and reapply the configuration for a CDS. The Red Hat Update Infrastructure Management Tool provides an easy way to accomplish this task.
Prerequisites
- At least one installed CDS
Answering yes (y) to the below question: Update instance(s) after reinstalling? (y/n): will result in a dnf update being run on the instance after it is reinstalled. This may require a reboot of the instance. Answering no (n) to this question will result in the dnf update not being run.
Procedure
Navigate to the Red Hat Update Infrastructure Management Tool home screen:
rhui-manager
[root@rhua ~]# rhui-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
Press
cto select manage content delivery servers (CDS). -
From the Content Delivery Server (CDS) Management screen, press
rto select reinstall and reapply configuration to an existing CDS instance. The Red Hat Update Infrastructure Management Tool automatically performs all reinstallation and reconfiguration tasks. Select the CDS to reinstall:
1 - Hostname: <cds1.example.com> SSH Username: <cloud-user> SSH Private Key: /<cloud-user>/.ssh/id_rsa_rhua1 - Hostname: <cds1.example.com> SSH Username: <cloud-user> SSH Private Key: /<cloud-user>/.ssh/id_rsa_rhuaCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
Enter a value or
bto abort: 1: 1 Update instance(s) after reinstalling? (y/n): y
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
Check that you successfully reinstalled and reconfigured the CDS by viewing the code output:
Ensuring that instance ports are reachable ... Done.
Ensuring that instance ports are reachable ... Done.Copy to Clipboard Copied! Toggle word wrap Toggle overflow
6.4. Configuring a CDS to accept legacy CAs Copy linkLink copied to clipboard!
By default, a content delivery server (CDS) node only accepts entitlement certificates signed by the Certificate Authority (CA) that is currently configured on your RHUI system. However, you might want to accept previously created CAs so that clients can continue to work in case you change your main CA or when the CA certificate expires.
This procedure provides instructions to support legacy CAs on RHUI by installing CA certificates on your CDS nodes.
Prerequisites
Ensure you are running the latest version of RHUI.
NoteIf you have installed an older version of RHUI, you must reinstall your CDS nodes in
rhui-manager.
Procedure
On the CDS node, create the
/etc/pki/rhui/legacydirectory if it does not already exist:mkdir /etc/pki/rhui/legacy
# mkdir /etc/pki/rhui/legacyCopy to Clipboard Copied! Toggle word wrap Toggle overflow - Save the legacy CA certificate in the directory.
Verification
- The CDS node starts accepting legacy CAs as soon as you store the CA certificate in the directory.
6.5. Configuring a CDS to stop accepting legacy CAs Copy linkLink copied to clipboard!
To limit your content delivery servers (CDS) nodes from accepting legacy certificate authorities (CAs), remove the respective CA certificates.
Prerequisites
- Clients are no longer using the CA.
Procedure
On the CDS node, navigate to the
/etc/pki/rhui/legacy/directory:cd /etc/pki/rhui/legacy/
# cd /etc/pki/rhui/legacy/Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Optional: Back up the existing CA certificates:
Delete the CA certificate that corresponds to the CA you want to limit:
rm example-legacy.crt
# rm example-legacy.crtCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Verification
- The CDS node stops accepting legacy CAs as soon as you delete the CA certificate.
6.6. Unregistering a CDS Copy linkLink copied to clipboard!
You can unregister (delete) a CDS instance that you are not going to use.
Procedure
Navigate to the Red Hat Update Infrastructure Management Tool home screen:
rhui-manager
[root@rhua ~]# rhui-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow -
Press
cto select manage content delivery servers (CDS). -
From the Content Delivery Server (CDS) Management screen, press
dto delete a CDS instance. Enter the hostname of the CDS to delete:
Hostname of the CDS instance to unregister: cds1.example.com
Hostname of the CDS instance to unregister: cds1.example.comCopy to Clipboard Copied! Toggle word wrap Toggle overflow