Installing Satellite Server from a Connected Network
Total Page:16
File Type:pdf, Size:1020Kb
Red Hat Satellite 6.9 Installing Satellite Server from a Connected Network Installing Red Hat Satellite Server from a Connected Network Last Updated: 2021-07-08 Red Hat Satellite 6.9 Installing Satellite Server from a Connected Network Installing Red Hat Satellite Server from a Connected Network Red Hat Satellite Documentation Team [email protected] Legal Notice Copyright © 2021 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/ . In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is an official trademark of Joyent. Red Hat is not formally related to or endorsed by the official Joyent Node.js open source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are the property of their respective owners. Abstract This guide describes how to install Red Hat Satellite from a connected network, perform initial configuration, and configure external services. Table of Contents Table of Contents .C . H. .A . P. .T .E . R. 1.. .P . R. .E . P. .A . R. .I N. .G . .Y . O. U. .R . .E .N . .V . I.R . O. .N . M. E. .N . T. F. .O . R. I.N . S. .T . A. .L .L . A. .T . I.O . N. .4 . 1.1. SYSTEM REQUIREMENTS 4 1.2. STORAGE REQUIREMENTS 5 1.3. STORAGE GUIDELINES 5 1.4. SUPPORTED OPERATING SYSTEMS 7 1.5. SUPPORTED BROWSERS 7 1.6. PORTS AND FIREWALLS REQUIREMENTS 8 1.7. ENABLING CONNECTIONS FROM A CLIENT TO SATELLITE SERVER 10 1.8. VERIFYING FIREWALL SETTINGS 11 1.9. VERIFYING DNS RESOLUTION 11 .C . H. .A . P. .T .E . R. 2. P. .R . E. .P . A. .R . I.N . G. Y. .O . .U . R. E. N. V. .I R. .O . N. .M . .E . N. .T . .F . O. .R . .S . A. .T .E . L. .L .I T. .E . .I N. .S . T. .A . L. L. .A . T. .I O. .N . I.N . .A . N. I.P . V. .6 . .N . E. .T . W. O. .R . K. 1. 3. 2.1. LIMITATIONS OF SATELLITE INSTALLATION IN AN IPV6 NETWORK 13 2.2. REQUIREMENTS FOR SATELLITE INSTALLATION IN AN IPV6 NETWORK 13 .C . H. .A . P. .T .E . R. 3. I. N. .S . T. A. .L . L. .I N. .G . S . A. .T . E. .L .L . I.T . E. S . E. .R . V. .E . R. 1.4 . 3.1. REGISTERING TO RED HAT SUBSCRIPTION MANAGEMENT 14 3.2. ATTACHING THE SATELLITE INFRASTRUCTURE SUBSCRIPTION 14 3.3. CONFIGURING REPOSITORIES 16 3.4. INSTALLING THE SATELLITE SERVER PACKAGES 16 3.5. SYNCHRONIZING THE SYSTEM CLOCK WITH CHRONYD 17 3.6. INSTALLING THE SOS PACKAGE ON THE BASE OPERATING SYSTEM 17 3.7. CONFIGURING SATELLITE SERVER 17 3.7.1. Configuring Satellite Manually 18 3.7.2. Configuring Satellite Automatically using an Answer File 19 3.8. IMPORTING A SUBSCRIPTION MANIFEST INTO SATELLITE SERVER 19 .C . H. .A . P. .T .E . R. 4. .P . E. R. .F . O. .R . M. I.N . G. .A . D. .D . I.T . I.O . .N . A. .L . C. O. .N . F. .I G. U. .R . A. .T .I O. N. O. N. S. A. .T . E. .L . L. I.T . E. S. .E .R . V. .E . R. 2. .1 . 4.1. USING RED HAT INSIGHTS WITH SATELLITE SERVER 21 4.2. DISABLING REGISTRATION TO RED HAT INSIGHTS 21 4.3. ENABLING THE SATELLITE TOOLS 6.9 REPOSITORY 22 4.4. SYNCHRONIZING THE SATELLITE TOOLS 6.9 REPOSITORY 22 4.5. CONFIGURING SATELLITE FOR UEFI HTTP BOOT PROVISIONING IN AN IPV6 NETWORK 23 4.6. CONFIGURING SATELLITE SERVER WITH AN HTTP PROXY 23 4.6.1. Adding a Default HTTP Proxy to Satellite 24 4.6.2. Configuring the HTTP Proxy to Connect to Red Hat CDN 24 4.6.3. Configuring SELinux to Ensure Access to Satellite on Custom Ports 25 4.6.4. Using an HTTP Proxy for all Satellite HTTP Requests 26 4.6.5. Excluding Hosts from Receiving Proxied Requests 26 4.6.6. Resetting the HTTP Proxy 26 4.7. ENABLING POWER MANAGEMENT ON MANAGED HOSTS 27 4.8. CONFIGURING DNS, DHCP, AND TFTP ON SATELLITE SERVER 27 4.9. DISABLING DNS, DHCP, AND TFTP FOR UNMANAGED NETWORKS 29 4.10. CONFIGURING SATELLITE SERVER FOR OUTGOING EMAILS 29 4.11. CONFIGURE AN ALTERNATE CNAME FOR SATELLITE 31 4.11.1. Configuring Satellite with an Alternate CNAME 31 4.11.2. Configuring Hosts to Use an Alternate Satellite CNAME for Content Management 32 4.12. CONFIGURING SATELLITE SERVER WITH A CUSTOM SSL CERTIFICATE 32 4.12.1. Creating a Custom SSL Certificate for Satellite Server 33 4.12.2. Deploying a Custom SSL Certificate to Satellite Server 34 4.12.3. Deploying a Custom SSL Certificate to Hosts 36 4.13. USING EXTERNAL DATABASES WITH SATELLITE 36 1 Red Hat Satellite 6.9 Installing Satellite Server from a Connected Network 4.13.1. MongoDB as an External Database Considerations 36 4.13.2. PostgreSQL as an External Database Considerations 37 4.13.3. Preparing a Host for External Databases 37 4.13.4. Installing MongoDB 38 4.13.5. Installing PostgreSQL 39 4.13.6. Configuring Satellite to use External Databases 40 4.14. RESTRICTING ACCESS TO MONGOD 41 4.15. TUNING SATELLITE SERVER WITH PREDEFINED PROFILES 41 .C . H. .A . P. .T .E . R. 5. C. .O . .N . F. .I G. .U . .R .I .N . G. S. .A . T. .E .L . L. .I T. .E . S. .E . R. .V . E. R. W. I.T . H. E. .X . T. .E .R . N. .A . .L . S. .E . R. V. .I .C . E. S. .4 .4 . 5.1. CONFIGURING SATELLITE SERVER WITH EXTERNAL DNS 44 5.2. CONFIGURING SATELLITE SERVER WITH EXTERNAL DHCP 45 5.2.1. Configuring an External DHCP Server to Use with Satellite Server 45 5.2.2. Configuring Satellite Server with an External DHCP Server 48 5.3. CONFIGURING SATELLITE SERVER WITH EXTERNAL TFTP 49 5.4. CONFIGURING SATELLITE SERVER WITH EXTERNAL IDM DNS 50 5.4.1. Configuring Dynamic DNS Update with GSS-TSIG Authentication 50 5.4.2. Configuring Dynamic DNS Update with TSIG Authentication 54 5.4.3. Reverting to Internal DNS Service 56 .A .P . P. .E . N. .D . I. X. A . .A .P . P. .L . Y. .I N. .G . C. .U . S. .T .O . .M . C . .O . N. .F . I.G . .U . R. .A .T . I.O . .N . .T . O. R. .E . D. H. .A . T. S. .A .T . E. .L . L. I.T . E. .5 . 8. .A .P . P. .E . N. .D . I. X. B . R. .E . S. .T .O . .R . I.N . G. .M . A. .N . .U . A. .L . C. .H . .A . N. .G . E. .S . .O . V. .E . R. .W . .R . I.T .T . E. .N . .B . Y. A. P. .U . P. .P . E. T. R. .U . N. .5 . 9. 2 Table of Contents 3 Red Hat Satellite 6.9 Installing Satellite Server from a Connected Network CHAPTER 1. PREPARING YOUR ENVIRONMENT FOR INSTALLATION Before you install Satellite, ensure that your environment meets the following requirements. 1.1. SYSTEM REQUIREMENTS The following requirements apply to the networked base operating system: x86_64 architecture The latest version of Red Hat Enterprise Linux 7 Server 4-core 2.0 GHz CPU at a minimum A minimum of 20 GB RAM is required for Satellite Server to function. In addition, a minimum of 4 GB RAM of swap space is also recommended. Satellite running with less RAM than the minimum value might not operate correctly. A unique host name, which can contain lower-case letters, numbers, dots (.) and hyphens (-) A current Red Hat Satellite subscription Administrative user (root) access A system umask of 0022 Full forward and reverse DNS resolution using a fully-qualified domain name Before you install Satellite Server, ensure that your environment meets the requirements for installation. Satellite Server must be installed on a freshly provisioned system that serves no other function except to run Satellite Server. The freshly provisioned system must not have the following users provided by external identity providers to avoid conflicts with the local users that Satellite Server creates: postgres mongodb apache qpidd qdrouterd squid foreman tomcat foreman-proxy puppet puppetserver 4 CHAPTER 1. PREPARING YOUR ENVIRONMENT FOR INSTALLATION Certified hypervisors Satellite Server is fully supported on both physical systems and virtual machines that run on hypervisors that are supported to run Red Hat Enterprise Linux.