第6章 設定の手動スクリプト化

First, install the latest client RPMs to the system.
Second, reconfigure the clients to talk to the correct server.
Third, install the SSL client certificate for your company's
RHN Satellite Server or RHN Proxy Server.
Fourth, reconfigure the clients to use the new SSL certificate.
Fifth, download the GPG key needed to validate custom packages.
Sixth, import that GPG key to your GPG keyring.

# First, install the latest client RPMs to the system.

rpm -Uvh \
	http://proxy-or-sat.example.com.com/pub/rhn_register-2.8.27-1.7.3.i386.rpm \
	http://proxy-or-sat.example.com.com/pub/rhn_register-gnome-2.8.27-1.7.3.i386.rpm \
	http://proxy-or-sat.example.com.com/pub/up2date-3.0.7-1.i386.rpm \
	http://proxy-or-sat.example.com.com/pub/up2date-gnome-3.0.7-1.i386.rpm


# Second, reconfigure the clients to talk to the correct server.

perl -p -i -e 's/s/www\.rhns\.redhat\.com/proxy-or-sat\.example\.com/g' \
	/etc/sysconfig/rhn/rhn_register \
	/etc/sysconfig/rhn/up2date


# Third, install the SSL client certificate for your company's
# RHN Satellite Server or RHN Proxy Server.

rpm -Uvh http://proxy-or-sat.example.com/pub/rhn-org-trusted-ssl-cert-*.noarch.rpm


# Fourth, reconfigure the clients to use the new SSL certificate.

perl -p -i -e 's/^sslCA/#sslCA/g;' \
	/etc/sysconfig/rhn/up2date /etc/sysconfig/rhn/rhn_register
echo "sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT" \
	>> /etc/sysconfig/rhn/up2date
echo "sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT" \
	>> /etc/sysconfig/rhn/rhn_register


# Fifth, download the GPG key needed to validate custom packages.

wget -O - -q http://proxy-or-sat.example.com.com/pub/YOUR-RPM-GPG-KEY


# Sixth, import that GPG key to your GPG keyring.

rpm --import /path/to/YOUR-RPM-GPG-KEY

gpg $(up2date --gpg-flags) --import /path/to/YOUR-RPM-GPG-KEY

gpg $(up2date --gpg-flags) --import /path/to/YOUR-RPM-GPG-KEY

wget -O - http://proxy-or-sat.example.com.com/pub/bootstrap_script | bash

wget -O - http://proxy-or-sat.example.com.com/pub/bootstrap_script | bash