红帽全球峰会此内容没有您所选择的语言版本。
3.6. Running the Red Hat Satellite Proxy Installation Script
The command-line installation program guides you through the actual Satellite Proxy installation process. This program presents a series of prompts regarding Satellite Proxy installation and initial configuration details, such as installation options and SSL certificate generation. You need root access to the server to perform this step.
Important
Before you run the installation script, the Satellite Proxy requires the SSL files from your Satellite server. Create the
/root/ssl-build directory:
[root@satproxy ~]# mkdir /root/ssl-build
Copy the public certificate and CA certificate from the desired Red Hat Satellite to the new directory:
[root@satproxy ~]# scp 'root@satellite.example.com:/root/ssl-build/{RHN-ORG-PRIVATE-SSL-KEY,RHN-ORG-TRUSTED-SSL-CERT,rhn-ca-openssl.cnf}' /root/ssl-build
Alternatively, append the
--force-own-ca option when you run the installation script.
Run the following installation script to install Red Hat Satellite Proxy Server:
# configure-proxy.shNote
You can press Enter at any prompt to use the default response enclosed in brackets. Alternatively, use the
--non-interactive option with the installation script if you want to use default answers without any user interaction.
Gathering Satellite Proxy Server Installation Information
The installation script requests details about the Satellite Proxy installation specific to the machine where you are performing the installation.
- RHN Parent
- The Satellite Server domain name or address of the system that serves content to the Satellite Proxy.
- CA Chain
- Press Enter to use the default path for the Certificate Authority (CA) Chain.If the Satellite Proxy is communicating with Red Hat Satellite, then this value is usually
/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT. Otherwise, custom SSL certificates must be located in the/usr/share/rhn/directory. - Satellite Proxy version to activate
- Request for confirmation of the version of Satellite Proxy to install.
- HTTP Proxy
- If the Satellite Proxy server connects through an HTTP proxy, enter the proxy host name and port number, for example, corporate.proxy.example.com:3128
- Traceback email
- A comma-separated list of email addresses to which error-related traceback messages are sent, usually the email of the Satellite Proxy administrator.
- Use SSL
- Press Enter or type
yto configure the Satellite Proxy to use SSL. - SSL Certificate
- Enter the details necessary to generate a valid SSL server certificate. Example 3.1, “Example Generation of an SSL Certificate” demonstrates generating such a certificate.
Example 3.1. Example Generation of an SSL Certificate
Regardless of whether you enabled SSL for the connection to the Satellite Proxy Parent Server, you will be prompted to generate an SSL certificate. This SSL certificate will allow client systems to connect to this Satellite Proxy securely. See the Satellite Proxy Installation Guide for more information. Organization: Example Company Organization Unit [proxy1.example.com]: Common Name: proxy1.example.com City: New York State: New York Country code: US Email [admin@example.com]:
The installation script installs multiple sets of packages and will ask for your permission to install them. Select
Y at each prompt.
