1.3. Installing MicroShift from an RPM package

Procedure

1. For all lifecycles, enable the repository for your release by running the following command:

   $ sudo subscription-manager repos \
       --enable rhocp-4.17-for-rhel-9-$(uname -m)-rpms \
       --enable fast-datapath-for-rhel-9-$(uname -m)-rpms

2. For extended support (EUS) releases, also enable the EUS repositories by running the following command:

   $ sudo subscription-manager repos \
       --enable rhel-9-for-$(uname -m)-appstream-eus-rpms \
       --enable rhel-9-for-$(uname -m)-baseos-eus-rpms

3. Avoid unintended future updates into an unsupported configuration by locking your operating system version with the following command:

   $ sudo subscription-manager release --set=9.4

4. Install MicroShift by running the following command:

   $ sudo dnf install -y microshift

5. Download your installation pull secret from the Red Hat Hybrid Cloud Console to a temporary folder, for example, $HOME/openshift-pull-secret. This pull secret allows you to authenticate with the container registries that serve the container images used by Red Hat build of MicroShift.

6. To copy the pull secret to the /etc/crio folder of your RHEL machine, run the following command:

   $ sudo cp $HOME/openshift-pull-secret /etc/crio/openshift-pull-secret

7. Make the root user the owner of the /etc/crio/openshift-pull-secret file by running the following command:

   $ sudo chown root:root /etc/crio/openshift-pull-secret

8. Make the /etc/crio/openshift-pull-secret file readable and writeable by the root user only by running the following command:

   $ sudo chmod 600 /etc/crio/openshift-pull-secret

9. If your RHEL machine has a firewall enabled, you must configure a few mandatory firewall rules. For firewalld, run the following commands:

   $ sudo firewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16

   $ sudo firewall-cmd --permanent --zone=trusted --add-source=169.254.169.1

   $ sudo firewall-cmd --reload

10. If the Volume Group (VG) that you have prepared for MicroShift used the default name rhel, no further configuration is necessary. If you have used a different name, or if you want to change more configuration settings, see the "Using the MicroShift configuration file" section.