Chapter 3. Migrating from Internal Satellite Databases to External Databases

Procedure

1. Use the instructions in Attaching the Satellite Infrastructure Subscription to attach a Satellite subscription to your server.

2. Disable all repositories and enable only the following repositories:

   # subscription-manager repos --disable '*'
   # subscription-manager repos --enable=rhel-server-rhscl-7-rpms \
   --enable=rhel-7-server-rpms

Procedure

1. To install MongoDB, enter the following command:

   # yum install rh-mongodb34 rh-mongodb34-syspaths

2. Start and enable the rh-mongodb34 service:

   # systemctl start rh-mongodb34-mongod
   # systemctl enable rh-mongodb34-mongod

3. Create a Pulp user on MongoDB for database pulp_database:

   # mongo pulp_database \
   --eval "db.createUser({user:'pulp',pwd:'pulp_password',roles:[{role:'dbOwner', db:'pulp_database'},{ role: 'readWrite', db: 'pulp_database'}]})"

4. In the /etc/opt/rh/rh-mongodb34/mongod.conf file, specify the bind IP:

   bindIp: your_mongodb_server_bind_IP,::1

5. Edit the /etc/opt/rh/rh-mongodb34/mongod.conf file to enable authentication in the security section:

   security:
     authorization: enabled

6. Restart the rh-mongodb34-mongod service:

   # systemctl restart rh-mongodb34-mongod

7. Open port 27017 for MongoDB:

   # firewall-cmd --add-port=27017/tcp
   # firewall-cmd --runtime-to-permanent

8. From Satellite Server, test that you can access the database. If the connection succeeds, the command returns 1.

   # scl enable rh-mongodb34 " mongo --host mongo.example.com \
   -u pulp -p pulp_password --port 27017 --eval 'ping:1' pulp_database"

Procedure

1. To install PostgreSQL, enter the following command:

   # yum install postgresql-server

2. To initialize, start, and enable PostgreSQL service, enter the following commands:

   # postgresql-setup initdb
   # systemctl start postgresql
   # systemctl enable postgresql

3. Edit the /var/lib/pgsql/data/postgresql.conf file:

   # vi /var/lib/pgsql/data/postgresql.conf

4. Remove the # and edit to listen to inbound connections:

   listen_addresses = '*'

5. Edit the /var/lib/pgsql/data/pg_hba.conf file:

   # vi /var/lib/pgsql/data/pg_hba.conf

6. Add the following line to the file:

     host  all   all   Satellite_ip/24   md5

7. Restart PostgreSQL service to update with the changes:

   # systemctl restart postgresql

8. Open the postgresql port on the external PostgreSQL server:

   # firewall-cmd --add-service=postgresql
   # firewall-cmd --runtime-to-permanent

9. Switch to the postgres user and start the PostgreSQL client:

   $ su - postgres -c psql

10. Create two databases and dedicated roles, one for Satellite and one for Candlepin:

    CREATE USER "foreman" WITH PASSWORD 'Foreman_Password';
    CREATE USER "candlepin" WITH PASSWORD 'Candlepin_Password';
    CREATE DATABASE foreman OWNER foreman;
    CREATE DATABASE candlepin OWNER candlepin;

11. Exit the postgres user:

    # \q

12. From Satellite Server, test that you can access the database. If the connection succeeds, the commands return 1.

    # PGPASSWORD='Foreman_Password' psql -h postgres.example.com  -p 5432 -U foreman -d foreman -c "SELECT 1 as ping"
    # PGPASSWORD='Candlepin_Password' psql -h postgres.example.com -p 5432 -U candlepin -d candlepin -c "SELECT 1 as ping"

Procedure

1. On Satellite Server, stop the satellite-maintain services:

   # satellite-maintain service stop

2. Start the postgreSQL and mongod services:

   # systemctl start postgresql
   # systemctl start mongod

3. Back up the internal databases:

   # satellite-maintain backup online --skip-pulp-content --preserve-directory -y /var/migration_backup

4. Transfer the data to the new external databases:

   PGPASSWORD='Foreman_Password' pg_restore -h postgres.example.com -U foreman -d foreman < /var/migration_backup/foreman.dump
   PGPASSWORD='Candlepin_Password' pg_restore -h postgres.example.com -U candlepin -d candlepin < /var/migration_backup/candlepin.dump
   mongorestore --host mongo.example.com --db pulp_database --username pulp_user --password pulp_password /var/migration_backup/mongo_dump/pulp_database/

5. Use the satellite-installer command to update Satellite to point to the new databases:

   satellite-installer --scenario satellite \
       --foreman-db-host postgres.example.com \
       --foreman-db-password Foreman_Password \
       --foreman-db-database foreman \
       --foreman-db-manage false \
       --katello-candlepin-db-host postgres.example.com \
       --katello-candlepin-db-name candlepin \
       --katello-candlepin-db-password Candlepin_Password \
       --katello-candlepin-manage-db false \
       --katello-pulp-db-username pulp \
       --katello-pulp-db-password pulp_password \
       --katello-pulp-db-seeds mongo.example.com:27017 \
       --katello-pulp-db-name pulp_database \
       --katello-pulp-manage-db false