Red Hat Satellite 6.8 Installing Satellite Server from a Disconnected Network Installing Red Hat Satellite Server from a Disconnected Network Last Updated: 2021-06-25 Red Hat Satellite 6.8 Installing Satellite Server from a Disconnected Network Installing Red Hat Satellite Server from a Disconnected Network Red Hat Satellite Documentation Team [email protected] Legal Notice Copyright © 2021 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/ . In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is an official trademark of Joyent. Red Hat is not formally related to or endorsed by the official Joyent Node.js open source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are the property of their respective owners. Abstract This guide describes how to install Red Hat Satellite from a disconnected network, perform initial configuration, and configure external services. Table of Contents Table of Contents .C . H. .A . P. .T .E . R. 1.. .P . R. .E . P. .A . R. .I N. .G . .Y . O. U. .R . .E .N . .V . I.R . O. .N . M. E. .N . T. F. .O . R. I.N . S. .T . A. .L .L . A. .T . I.O . N. .4 . 1.1. SYSTEM REQUIREMENTS 4 1.2. STORAGE REQUIREMENTS 5 1.3. STORAGE GUIDELINES 5 1.4. SUPPORTED OPERATING SYSTEMS 7 1.5. SUPPORTED BROWSERS 7 1.6. PORTS AND FIREWALLS REQUIREMENTS 8 1.7. ENABLING CONNECTIONS FROM A CLIENT TO SATELLITE SERVER 10 1.8. VERIFYING FIREWALL SETTINGS 11 1.9. VERIFYING DNS RESOLUTION 11 .C . H. .A . P. .T .E . R. 2. I.N . .S .T . A. .L . L. .I N. .G . .S . A. .T . E. L. .L . I.T . E. .S . E. .R . V. .E .R . 1. 3. 2.1. DOWNLOADING THE BINARY DVD IMAGES 13 2.2. CONFIGURING THE BASE OPERATING SYSTEM WITH OFFLINE REPOSITORIES 14 2.3. INSTALLING THE SATELLITE PACKAGES FROM THE OFFLINE REPOSITORIES 14 2.4. RESOLVING PACKAGE DEPENDENCY ERRORS 15 2.5. SYNCHRONIZING THE SYSTEM CLOCK WITH CHRONYD 16 2.6. INSTALLING THE SOS PACKAGE ON THE BASE OPERATING SYSTEM 16 2.7. CONFIGURING SATELLITE SERVER 17 2.7.1. Configuring Satellite Manually 17 2.7.2. Configuring Satellite Automatically using an Answer File 18 2.8. ENABLING THE DISCONNECTED MODE 19 2.9. IMPORTING A SUBSCRIPTION MANIFEST INTO SATELLITE SERVER 19 .C . H. .A . P. .T .E . R. 3. P. .E . R. .F . O. .R . M. I.N . G. .A . D. .D . I.T . I.O . N. A. .L . C. .O . .N . F. .I G. .U . R. .A . T. .I O. N. O. .N . S. A. .T . E. .L .L . I.T . E. S. E. .R . V. .E . R. 2. .1 . 3.1. CONFIGURING SATELLITE TO SYNCHRONIZE CONTENT WITH A LOCAL CDN SERVER 21 3.2. IMPORTING KICKSTART REPOSITORIES 22 3.2.1. Importing Kickstart Repositories for Red Hat Enterprise Linux 7 22 3.2.2. Importing Kickstart Repositories for Red Hat Enterprise Linux 8 23 3.3. ENABLING THE SATELLITE TOOLS 6.8 REPOSITORY 27 3.4. SYNCHRONIZING THE SATELLITE TOOLS 6.8 REPOSITORY 28 3.5. ENABLING POWER MANAGEMENT ON MANAGED HOSTS 28 3.6. CONFIGURING DNS, DHCP, AND TFTP ON SATELLITE SERVER 29 3.7. DISABLING DNS, DHCP, AND TFTP FOR UNMANAGED NETWORKS 30 3.8. CONFIGURING SATELLITE SERVER FOR OUTGOING EMAILS 31 3.9. CONFIGURING SATELLITE SERVER WITH A CUSTOM SSL CERTIFICATE 33 3.9.1. Creating a Custom SSL Certificate for Satellite Server 33 3.9.2. Deploying a Custom SSL Certificate to Satellite Server 35 3.9.3. Deploying a Custom SSL Certificate to Hosts 36 3.10. USING EXTERNAL DATABASES WITH SATELLITE 36 3.10.1. MongoDB as an External Database Considerations 37 3.10.2. PostgreSQL as an External Database Considerations 37 3.10.3. Preparing a Host for External Databases 38 3.10.4. Installing MongoDB 39 3.10.5. Installing PostgreSQL 39 3.10.6. Configuring Satellite to use External Databases 41 3.11. RESTRICTING ACCESS TO MONGOD 41 3.12. TUNING SATELLITE SERVER WITH PREDEFINED PROFILES 42 .C . H. .A . P. .T .E . R. 4. .C . O. .N . F. .I G. U. .R . I.N . G. .S .A . T. .E . L. L. .I T. .E . .S .E . R. .V . E. .R . W. I. T. H. E. .X . T. .E . R. .N . A. .L . S. .E . R. .V . I.C . E. .S . .4 . 5. 4.1. CONFIGURING SATELLITE SERVER WITH EXTERNAL DNS 45 4.2. CONFIGURING SATELLITE SERVER WITH EXTERNAL DHCP 46 1 Red Hat Satellite 6.8 Installing Satellite Server from a Disconnected Network 4.2.1. Configuring an External DHCP Server to Use with Satellite Server 46 4.2.2. Configuring Satellite Server with an External DHCP Server 49 4.3. CONFIGURING SATELLITE SERVER WITH EXTERNAL TFTP 50 4.4. CONFIGURING SATELLITE SERVER WITH EXTERNAL IDM DNS 51 4.4.1. Configuring Dynamic DNS Update with GSS-TSIG Authentication 51 4.4.2. Configuring Dynamic DNS Update with TSIG Authentication 55 4.4.3. Reverting to Internal DNS Service 57 .A .P . P. .E . N. .D . I. X. A . .A .P . P. .L . Y. .I N. .G . C. .U . S. .T .O . .M . C . .O . N. .F . I.G . .U . R. .A .T . I.O . .N . .T . O. R. .E . D. H. .A . T. S. .A .T . E. .L . L. I.T . E. .5 . 9. .A .P . P. .E . N. .D . I. X. B . R. .E . S. .T .O . .R . I.N . G. .M . A. .N . .U . A. .L . C. .H . .A . N. .G . E. .S . .O . V. .E . R. .W . .R . I.T .T . E. .N . .B . Y. A. P. .U . P. .P . E. T. R. .U . N. .6 .0 . .A .P . P. .E . N. .D . I. X. C . .R .E . V. .E . R. .T .I .N . G. S. .A . T. .E .L . L. .I T. .E . T. .O . D . .O . W. N. .L . O. .A . D. .C . O. .N . T. .E . N. .T . .F .R . O. M. .R .E . D. H. .A . T. C. .D . N. 6. .1 . 2 Table of Contents 3 Red Hat Satellite 6.8 Installing Satellite Server from a Disconnected Network CHAPTER 1. PREPARING YOUR ENVIRONMENT FOR INSTALLATION Before you install Satellite, ensure that your environment meets the following requirements. 1.1. SYSTEM REQUIREMENTS The following requirements apply to the networked base operating system: x86_64 architecture The latest version of Red Hat Enterprise Linux 7 Server 4-core 2.0 GHz CPU at a minimum A minimum of 20 GB RAM is required for Satellite Server to function. In addition, a minimum of 4 GB RAM of swap space is also recommended. Satellite running with less RAM than the minimum value might not operate correctly. A unique host name, which can contain lower-case letters, numbers, dots (.) and hyphens (-) A current Red Hat Satellite subscription Administrative user (root) access A system umask of 0022 Full forward and reverse DNS resolution using a fully-qualified domain name Before you install Satellite Server, ensure that your environment meets the requirements for installation. Satellite Server must be installed on a freshly provisioned system that serves no other function except to run Satellite Server. The freshly provisioned system must not have the following users provided by external identity providers to avoid conflicts with the local users that Satellite Server creates: postgres mongodb apache qpidd qdrouterd squid foreman tomcat foreman-proxy puppet puppetserver 4 CHAPTER 1. PREPARING YOUR ENVIRONMENT FOR INSTALLATION Certified hypervisors Satellite Server is fully supported on both physical systems and virtual machines that run on hypervisors that are supported to run Red Hat Enterprise Linux. For more information about certified hypervisors, see Which hypervisors are certified to run Red Hat Enterprise Linux? . SELinux Mode SELinux must be enabled, either in enforcing or permissive mode. Installation with disabled SELinux is not supported. .FIPS Mode You can install Satellite Server on a Red Hat Enterprise Linux system that is operating in FIPS mode. For more information, see Enabling FIPS Mode in the Red Hat Enterprise Linux Security Guide. 1.2. STORAGE REQUIREMENTS The following table details storage requirements for specific directories. These values are based on expected use case scenarios and can vary according to individual environments.