4.2. RHN Proxy Server 安​​​装​​​过​​​程​​​


以​​​下​​​的​​​内​​​容​​​介​​​绍​​​了​​​ RHN Proxy Server 的​​​安​​​装​​​过​​​程​​​:
  1. 使​​​用​​​包​​​含​​​ RHN Proxy Server 权​​​利​​​的​​​机​​​构​​​帐​​​户​​​和​​​命​​​令​​​ rhn_register 在​​​ Red Hat Network 中​​​注​​​册​​​新​​​安​​​装​​​的​​​ Red Hat Enterprise Linux 系​​​统​​​(可​​​以​​​通​​​过​​​中​​​央​​​ RHN 服​​​务​​​器​​​或​​​者​​​您​​​的​​​ RHN Satellite Server)。​​​
  2. 要​​​执​​​行​​​一​​​个​​​安​​​装​​​,请​​​输​​​入​​​以​​​下​​​命​​​令​​​:
    configure-proxy.sh
    
    Copy to Clipboard Toggle word wrap
    命​​​令​​​行​​​安​​​装​​​程​​​序​​​引​​​导​​​用​​​户​​​完​​​成​​​关​​​于​​​ RHN Proxy Server 安​​​装​​​和​​​初​​​始​​​配​​​置​​​详​​​情​​​提​​​示​​​,比​​​如​​​安​​​装​​​选​​​项​​​和​​​生​​​成​​​ SSL 证​​​书​​​。​​​以​​​下​​​说​​​明​​​描​​​述​​​了​​​安​​​装​​​的​​​过​​​程​​​:

    注意

    如​​​果​​​您​​​在​​​提​​​示​​​符​​​后​​​按​​​ Enter 而​​​不​​​是​​​输​​​入​​​一​​​个​​​条​​​目​​​,RHN Proxy Server 命​​​令​​​行​​​安​​​装​​​程​​​序​​​会​​​使​​​用​​​括​​​号​​​中​​​的​​​默​​​认​​​响​​​应​​​。​​​
    另​​​外​​​,如​​​果​​​您​​​要​​​使​​​用​​​没​​​有​​​任​​​何​​​用​​​户​​​互​​​动​​​的​​​默​​​认​​​答​​​案​​​,请​​​使​​​用​​​ --non-interactive 选​​​项​​​,就​​​会​​​使​​​用​​​所​​​有​​​默​​​认​​​的​​​响​​​应​​​。​​​
  3. 第​​​一​​​组​​​提​​​示​​​是​​​关​​​于​​​安​​​装​​​的​​​定​​​位​​​详​​​情​​​。​​​
    Proxy version to activate [5.3]:
    
    Copy to Clipboard Toggle word wrap
    「​​​Proxy 版​​​本​​​」​​​提​​​示​​​您​​​确​​​定​​​您​​​要​​​安​​​装​​​的​​​ RHN Proxy Server 版​​​本​​​。​​​
    RHN Parent [satserver.example.com]:
    
    Copy to Clipboard Toggle word wrap
    「​​​RHN Parent」​​​是​​​服​​​务​​​ Proxy 的​​​系​​​统​​​的​​​域​​​名​​​或​​​者​​​地​​​址​​​,可​​​能​​​是​​​ RHN 主​​​机​​​托​​​管​​​服​​​务​​​器​​​(xmlrpc.rhn.redhat.com)或​​​者​​​一​​​个​​​ RHN Satellite Server 服​​​务​​​器​​​。​​​
    Traceback email []:
    
    Copy to Clipboard Toggle word wrap
    「​​​回​​​溯​​​电​​​子​​​邮​​​件​​​」​​​是​​​要​​​将​​​与​​​错​​​误​​​相​​​关​​​的​​​回​​​溯​​​信​​​息​​​发​​​送​​​到​​​的​​​电​​​子​​​邮​​​件​​​地​​​址​​​,通​​​常​​​是​​​ Proxy 管​​​理​​​员​​​的​​​电​​​子​​​邮​​​件​​​。​​​在​​​这​​​个​​​提​​​示​​​中​​​使​​​用​​​逗​​​号​​​分​​​开​​​一​​​个​​​以​​​上​​​的​​​电​​​子​​​邮​​​件​​​地​​​址​​​。​​​
  4. 下​​​一​​​组​​​提​​​示​​​是​​​关​​​于​​​配​​​置​​​生​​​成​​​ SSL 证​​​书​​​的​​​详​​​情​​​,建​​​议​​​您​​​保​​​证​​​进​​​入​​​和​​​来​​​自​​​ RHN Proxy Server 的​​​流​​​量​​​。​​​
    Use SSL [Y/n]: y
    
    Copy to Clipboard Toggle word wrap
    在​​​「​​​使​​​用​​​ SSL」​​​提​​​示​​​后​​​,输​​​入​​​ y 将​​​ RHN Proxy Server 配​​​置​​​为​​​支​​​持​​​ SSL。​​​
    CA Chain [/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT]:
    
    Copy to Clipboard Toggle word wrap
    在​​​「​​​CA 链​​​」​​​提​​​示​​​符​​​后​​​按​​​ Enter 使​​​用​​​证​​​书​​​授​​​权​​​(CA)链​​​的​​​默​​​认​​​路​​​径​​​,如​​​果​​​ RHN 是​​​与​​​ RHN Satellite 沟​​​通​​​,则​​​该​​​值​​​通​​​常​​​为​​​ /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT。​​​如​​​果​​​与​​​ RHN 主​​​机​​​托​​​管​​​沟​​​通​​​,则​​​它​​​通​​​常​​​为​​​ /usr/share/rhn/RHNS-CA-CERT 文​​​件​​​。​​​
    HTTP Proxy []:
    
    Copy to Clipboard Toggle word wrap
    如​​​果​​​ RHN Proxy Server 是​​​通​​​过​​​ HTTP 代​​​理​​​服​​​务​​​器​​​连​​​接​​​,请​​​输​​​入​​​代​​​理​​​服​​​务​​​器​​​的​​​主​​​机​​​名​​​和​​​端​​​口​​​号​​​,比​​​如​​​ corporate.proxy.example.com:3128。​​​
    Regardless of whether you enabled SSL for the connection to the Proxy Parent
    Server, you will be prompted to generate an SSL certificate.
    This SSL certificate will allow client systems to connect to this Spacewalk Proxy
    securely. Refer to the Spacewalk Proxy Installation Guide for more information.
    Organization: Example Company
    Organization Unit [proxy1.example.com]:
    Common Name: proxy1.example.com
    City: New York
    State: New York
    Country code: US
    Email [admin@example.com]:
    
    Copy to Clipboard Toggle word wrap
    请​​​输​​​入​​​生​​​成​​​适​​​当​​​ SSL 服​​​务​​​器​​​证​​​书​​​所​​​需​​​详​​​情​​​,其​​​中​​​包​​​括​​​「​​​机​​​构​​​名​​​称​​​」​​​、​​​「​​​机​​​构​​​单​​​位​​​」​​​(比​​​如​​​ Engineering)、​​​「​​​通​​​用​​​名​​​」​​​(域​​​名​​​)以​​​及​​​城​​​市​​​、​​​省​​​和​​​国​​​家​​​详​​​情​​​。​​​最​​​后​​​,请​​​输​​​入​​​负​​​责​​​ SSL 证​​​书​​​的​​​管​​​理​​​员​​​或​​​者​​​技​​​术​​​联​​​络​​​主​​​管​​​的​​​电​​​子​​​邮​​​件​​​地​​​址​​​。​​​
  5. 命​​​令​​​行​​​安​​​装​​​程​​​序​​​提​​​示​​​您​​​为​​​ RHN Proxy Server 安​​​装​​​监​​​控​​​支​​​持​​​,这​​​样​​​可​​​允​​​许​​​您​​​为​​​今​​​后​​​的​​​ RHN Proxy Server 安​​​装​​​、​​​结​​​束​​​ SSL 配​​​置​​​和​​​修​​​改​​​配​​​置​​​作​​​为​​​运​​​行​​​ RHN Proxy Server 安​​​装​​​程​​​序​​​的​​​结​​​果​​​而​​​重​​​启​​​服​​​务​​​守​​​护​​​进​​​程​​​等​​​操​​​作​​​生​​​成​​​和​​​安​​​置​​​配​​​置​​​频​​​道​​​。​​​
    您没有安装监控。您要安装它吗?
    您要运行 'yum install spacewalk-proxy-monitoring' 吗?[Y/n]:n
    
    Copy to Clipboard Toggle word wrap
    确​​​定​​​是​​​否​​​要​​​在​​​ Proxy 服​​​务​​​器​​​中​​​安​​​装​​​ Monitoring。​​​
    Generating CA key and public certificate:
    CA password: 
    CA password confirmation: 
    Copying CA public certificate to /var/www/html/pub for distribution to clients:
    Generating SSL key and public certificate:
    CA password: 
    Backup made: 'rhn-ca-openssl.cnf' --> 'rhn-ca-openssl.cnf.1'
    Rotated: rhn-ca-openssl.cnf --> rhn-ca-openssl.cnf.1
    Installing SSL certificate for Apache and Jabberd:
    Preparing packages for installation...
    rhn-org-httpd-ssl-key-pair-proxy1.example-1.0-1
    
    Copy to Clipboard Toggle word wrap
    然​​​后​​​ configure-proxy.sh 程​​​序​​​会​​​配​​​置​​​ SSL,提​​​示​​​您​​​生​​​成​​​证​​​书​​​授​​​权​​​密​​​码​​​并​​​在​​​生​​​成​​​ SSL 密​​​钥​​​和​​​公​​​共​​​证​​​书​​​前​​​确​​​认​​​它​​​。​​​
    Create and populate configuration channel rhn_proxy_config_1000010000? [Y]:
    Using server name satserver.example.com
    Red Hat Network username: admin
    Password:
    Creating config channel rhn_proxy_config_1000010000
    Config channel rhn_proxy_config_1000010000 created
    using server name satserver.example.com
    Pushing to channel rhn_proxy_config_1000010000:
    Local file /etc/httpd/conf.d/ssl.conf -> remote file /etc/httpd/conf.d/ssl.conf
    Local file /etc/rhn/rhn.conf -> remote file /etc/rhn/rhn.conf
    Local file /etc/rhn/cluster.ini -> remote file /etc/rhn/cluster.ini
    Local file /etc/squid/squid.conf -> remote file /etc/squid/squid.conf
    Local file /etc/httpd/conf.d/cobbler-proxy.conf -> remote file /etc/httpd/conf.d/cobbler-proxy.conf
    Local file /etc/httpd/conf.d/rhn_proxy.conf -> remote file /etc/httpd/conf.d/rhn_proxy.conf
    Local file /etc/httpd/conf.d/rhn_broker.conf -> remote file /etc/httpd/conf.d/rhn_broker.conf
    Local file /etc/httpd/conf.d/rhn_redirect.conf -> remote file /etc/httpd/conf.d/rhn_redirect.conf
    Local file /etc/jabberd/c2s.xml -> remote file /etc/jabberd/c2s.xml
    Local file /etc/jabberd/sm.xml -> remote file /etc/jabberd/sm.xml
    
    Copy to Clipboard Toggle word wrap
    然​​​后​​​安​​​装​​​程​​​序​​​会​​​询​​​问​​​您​​​是​​​否​​​希​​​望​​​根​​​据​​​在​​​运​​​行​​​ configure-proxy.sh 时​​​所​​​生​​​成​​​的​​​配​​​置​​​文​​​件​​​创​​​建​​​配​​​置​​​频​​​道​​​。​​​安​​​装​​​程​​​序​​​接​​​着​​​会​​​根​​​据​​​安​​​装​​​ RHN Proxy Server 的​​​客​​​户​​​端​​​系​​​统​​​名​​​称​​​创​​​建​​​ RHN Satellite Server 配​​​置​​​频​​​道​​​(在​​​上​​​面​​​的​​​示​​​例​​​中​​​ sysID 为​​​ 1000010000),并​​​收​​​集​​​组​​​成​​​ Proxy 服​​​务​​​器​​​配​​​置​​​频​​​道​​​的​​​各​​​种​​​ httpd、​​​SSL、​​​squid 和​​​ jabberd 服​​​务​​​器​​​文​​​件​​​。​​​
  6. 最​​​后​​​,安​​​装​​​程​​​序​​​启​​​动​​​并​​​重​​​启​​​所​​​有​​​ RHN Proxy Server 相​​​关​​​的​​​服​​​务​​​并​​​在​​​完​​​成​​​后​​​退​​​出​​​。​​​
    Enabling Satellite Proxy
    Shutting down rhn-proxy...
    Shutting down Jabber router:                               [  OK  ]
    Stopping httpd:                                            [  OK  ]
    Stopping squid:                                            [  OK  ]
    Done.
    Starting rhn-proxy...
    init_cache_dir /var/spool/squid... Starting squid: .       [  OK  ]
    Starting httpd:                                            [  OK  ]
    Starting Jabber services                                   [  OK  ]
    Done.
    
    Copy to Clipboard Toggle word wrap

4.2.1. 回​​​答​​​文​​​件​​​

如​​​果​​​您​​​想​​​要​​​自​​​动​​​进​​​行​​​一​​​些​​​在​​​您​​​的​​​系​​​统​​​中​​​安​​​装​​​ RHN Proxy Server 的​​​过​​​程​​​,configure-proxy.sh 程​​​序​​​可​​​让​​​管​​​理​​​员​​​生​​​成​​​回​​​答​​​文​​​件​​​,里​​​面​​​包​​​含​​​预​​​先​​​填​​​写​​​的​​​对​​​安​​​装​​​程​​​序​​​中​​​提​​​示​​​的​​​回​​​应​​​。​​​
以​​​下​​​是​​​含​​​有​​​预​​​先​​​填​​​写​​​的​​​关​​​于​​​版​​​本​​​号​​​的​​​回​​​答​​​文​​​件​​​示​​​例​​​,RHN Satellite Server 服​​​务​​​器​​​是​​​父​​​服​​​务​​​器​​​、​​​SSL 和​​​另​​​一​​​个​​​配​​​置​​​参​​​数​​​。​​​有​​​关​​​生​​​成​​​和​​​使​​​用​​​回​​​答​​​文​​​件​​​的​​​详​​​情​​​请​​​参​​​考​​​ configure-proxy.sh 手​​​册​​​页​​​面​​​,即​​​在​​​ shell 提​​​示​​​符​​​后​​​输​​​入​​​ man configure-proxy.sh。​​​
# example of answer file for configure-proxy.sh
# for full list of possible option see
# man configure-proxy.sh

VERSION=5.2
RHN_PARENT=rhn-satellite.example.com
TRACEBACK_EMAIL=jsmith@example.com
USE_SSL=1
SSL_ORG="Red Hat"
SSL_ORGUNIT="Spacewalk"
SSL_CITY=Raleigh
SSL_STATE=NC
SSL_COUNTRY=US
INSTALL_MONITORING=N
ENABLE_SCOUT=N
CA_CHAIN=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
POPULATE_CONFIG_CHANNEL=Y
Copy to Clipboard Toggle word wrap
要​​​和​​​ configure-proxy.sh 一​​​同​​​使​​​用​​​回​​​答​​​文​​​件​​​(例​​​如​​​ answers.txt,请​​​输​​​入​​​以​​​下​​​命​​​令​​​:
configure-proxy.sh --answer-file=answers.txt
Copy to Clipboard Toggle word wrap
Red Hat logoGithubredditYoutubeTwitter

学习

尝试、购买和销售

社区

关于红帽文档

通过我们的产品和服务,以及可以信赖的内容,帮助红帽用户创新并实现他们的目标。 了解我们当前的更新.

让开源更具包容性

红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。欲了解更多详情,请参阅红帽博客.

關於紅帽

我们提供强化的解决方案,使企业能够更轻松地跨平台和环境(从核心数据中心到网络边缘)工作。

Theme

© 2026 Red Hat
返回顶部