13.5. 시스템 그룹에 업데이트 배포

사전 요구 사항

• management-client는 cron 작업 또는 별도의 systemd 서비스를 사용하여 서버에 대한 향후 연결을 처리합니다.

프로세스

• 다음 특성을 사용하여 관리 서비스를 생성합니다. 시스템을 업그레이드할 시기를 결정합니다.

  FROM registry.redhat.io/rhel10/rhel-bootc:latest
  # Management services determine when to upgrade the system.
  # Disable bootc-fetch-apply-updates.timer if it is included in the base image.
  RUN systemctl disable bootc-fetch-apply-updates.timer
  
  # Install the client from dnf, or some other method that applies for your client
  RUN dnf install management-client -y && dnf clean all
  
  # Inject the credentials for the management service into the image
  ARG activation_key=
  
  # The existence of .run_next_boot acts as a flag to determine if the
  # registration is required to run when booting
  RUN touch /etc/management-client/.run_next_boot
  
  COPY <<"EOT" /usr/lib/systemd/system/management-client.service
  [Unit]
  Description=Run management client at boot
  After=network-online.target
  ConditionPathExists=/etc/management-client/.run_client_next_boot
  
  [Service]
  Type=oneshot
  EnvironmentFile=/etc/management-client/.credentials
  ExecStart=/usr/bin/management-client register --activation-key ${CLIENT_ACTIVATION_KEY}
  ExecStartPre=/bin/rm -f /etc/management-client/.run_next_boot
  ExecStop=/bin/rm -f /etc/management-client/.credentials
  
  [Install]
  WantedBy=multi-user.target
  EOT
  
  # Link the service to run at startup
  RUN ln -s /usr/lib/systemd/system/management-client.service /usr/lib/systemd/system/multi-user.target.wants/management-client.service
  
  # Store the credentials in a file to be used by the systemd service
  RUN echo -e "CLIENT_ACTIVATION_KEY=${activation_key}" > /etc/management-client/.credentials
  
  # Set the flag to enable the service to run one time
  # The systemd service will remove this file after the registration completes the first time
  RUN touch /etc/management-client/.run_next_boot

  1. 기본 이미지에 포함된 경우 bootc-fetch-apply-updates.timer 를 비활성화합니다.
  2. dnf 를 사용하여 클라이언트 또는 클라이언트에 적용되는 다른 방법을 사용하여 클라이언트를 설치합니다.
  3. 관리 서비스의 자격 증명을 이미지에 삽입합니다.