Sepia Lab Wiki

User Tools

Site Tools

Trace:
services:satellite

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
services:satellite [2022/06/09 16:19] – [Summary] djgallowayservices:satellite [2023/11/30 19:57] (current) – [Summary] dmick
Line 6: Line 6:
  
 **Web Login**: https://satellite.front.sepia.ceph.com\\ **Web Login**: https://satellite.front.sepia.ceph.com\\
-**Username**: root\\+**Username**: admin\\
 **Password**: Standard root password **Password**: Standard root password
  
Line 24: Line 24:
  
 # First get the list of available products # First get the list of available products
-hammer> product list --organization-id 1+hammer> product list --organization-id 5
  
 ----|----------------------------------------------------------------------------------|-------------|--------------|--------------|------------------ ----|----------------------------------------------------------------------------------|-------------|--------------|--------------|------------------
 ID  | NAME                                                                             | DESCRIPTION | ORGANIZATION | REPOSITORIES | SYNC STATE        ID  | NAME                                                                             | DESCRIPTION | ORGANIZATION | REPOSITORIES | SYNC STATE       
 ----|----------------------------------------------------------------------------------|-------------|--------------|--------------|------------------ ----|----------------------------------------------------------------------------------|-------------|--------------|--------------|------------------
-234 | Red Hat Enterprise Linux Server                                                  |             | Ceph         | 19           | Syncing Complete. +712 | Red Hat Enterprise Linux Server                                                  |             | Ceph         | 19           | Syncing Complete. 
-58  | Red Hat Enterprise Linux High Availability for RHEL Server                       |             | Ceph         | 3            | Syncing Complete.+746 | Red Hat Enterprise Linux High Availability for RHEL Server                       |             | Ceph         | 3            | Syncing Complete.
  
  
 # Next get all the repositories available for that product (This will take a LONG time to return) # Next get all the repositories available for that product (This will take a LONG time to return)
-hammer> repository-set list --organization-id 1 --product-id 234+hammer> repository-set list --organization-id 5 --product-id 712
 -----|-----------|--------------------------------------------------------------------------------- -----|-----------|---------------------------------------------------------------------------------
 ID   | TYPE      | NAME                                                                             ID   | TYPE      | NAME                                                                            
Line 42: Line 42:
 2476 | yum       | Red Hat Enterprise Linux 7 Server - Supplementary (RPMs)                         2476 | yum       | Red Hat Enterprise Linux 7 Server - Supplementary (RPMs)                        
  
-hammer> repository-set list --organization-id 1 --product-id 58+hammer> repository-set list --organization-id 5 --product-id 746
 2762 | yum  | Red Hat Enterprise Linux High Availability (for RHEL 7 Server) (RPMs)            2762 | yum  | Red Hat Enterprise Linux High Availability (for RHEL 7 Server) (RPMs)           
  
  
 # Next, enable the new version of RHEL for those repos # Next, enable the new version of RHEL for those repos
-hammer> repository-set enable --id 2463 --product-id 234 --organization-id 1 --releasever 7.8 --basearch x86_64+hammer> repository-set enable --id 2463 --product-id 712 --organization-id 5 --releasever 7.8 --basearch x86_64
 Repository enabled. Repository enabled.
-hammer> repository-set enable --id 2456 --product-id 234 --organization-id 1 --releasever 7.8 --basearch x86_64+hammer> repository-set enable --id 2456 --product-id 712 --organization-id 5 --releasever 7.8 --basearch x86_64
 Repository enabled. Repository enabled.
-hammer> repository-set enable --id 2476 --product-id 234 --organization-id 1 --releasever 7.8 --basearch x86_64+hammer> repository-set enable --id 2476 --product-id 712 --organization-id 5 --releasever 7.8 --basearch x86_64
 Repository enabled. Repository enabled.
-hammer> repository-set enable --id 2762 --product-id 58 --organization-id 1 --releasever 7.8 --basearch x86_64+hammer> repository-set enable --id 2762 --product-id 746 --organization-id 5 --releasever 7.8 --basearch x86_64
 Repository enabled. Repository enabled.
 </code> </code>
Line 59: Line 59:
 **SHORT VERSION FOR RHEL7.9** **SHORT VERSION FOR RHEL7.9**
 <code> <code>
-for id in 2463 2456 2476; do hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --id $id --product-id 234 --organization-id 1 --releasever 7.9 --basearch x86_64; done +RELEASEVER=7.9; for id in 2463 2456 2476; do hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --id $id --product-id 712 --organization-id 5 --releasever $RELEASEVER --basearch x86_64; done 
-hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --id 2762 --product-id 58 --organization-id 1 --releasever 7.9 --basearch x86_64+hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --id 2762 --product-id 746 --organization-id 5 --releasever $RELEASEVER --basearch x86_64
 </code> </code>
  
Line 66: Line 66:
  
 <code> <code>
-hammer> repository-set list --organization-id 1 --product-id 249+hammer> repository-set list --organization-id 5 --product-id 608
 -----|-----------|-------------------------------------------------------------------- -----|-----------|--------------------------------------------------------------------
 ID   | TYPE      | NAME                                                                ID   | TYPE      | NAME                                                               
Line 92: Line 92:
 -----|-----------|-------------------------------------------------------------------- -----|-----------|--------------------------------------------------------------------
  
-hammer> repository-set enable --organization-id 1 --id 7416 --product-id 249 --releasever 8.2 --basearch x86_64+hammer> repository-set enable --organization-id 5 --id 7416 --product-id 608 --releasever 8.2 --basearch x86_64
 Repository enabled. Repository enabled.
-hammer> repository-set enable --organization-id 1 --id 7441 --product-id 249 --releasever 8.2 --basearch x86_64+hammer> repository-set enable --organization-id 5 --id 7441 --product-id 608 --releasever 8.2 --basearch x86_64
 Repository enabled. Repository enabled.
  
-hammer> repository-set list --organization-id 1 --product-id 239+hammer> repository-set list --organization-id 5 --product-id 633
 -----|------|---------------------------------------------------------------- -----|------|----------------------------------------------------------------
 ID   | TYPE | NAME                                                            ID   | TYPE | NAME                                                           
Line 105: Line 105:
 7956 | yum  | Red Hat CodeReady Linux Builder for RHEL 8 x86_64 (Source RPMs) 7956 | yum  | Red Hat CodeReady Linux Builder for RHEL 8 x86_64 (Source RPMs)
 -----|------|---------------------------------------------------------------- -----|------|----------------------------------------------------------------
-hammer> repository-set enable --organization-id 1 --id 7954 --product-id 239 --releasever 8.2 --basearch x86_64+hammer> repository-set enable --organization-id 5 --id 7954 --product-id 633 --releasever 8.2 --basearch x86_64
 Repository enabled. Repository enabled.
  
 +</code>
 +
 +**SHORT VERSION FOR RHEL8.6**
 +<code>
 +RELEASEVER=8.6; hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --organization-id 5 --id 7416 --product-id 608 --releasever $RELEASEVER; hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --organization-id 5 --id 7441 --product-id 608 --releasever $RELEASEVER; hammer -c /etc/hammer/cli.modules.d/foreman.yml repository-set enable --organization-id 5 --id 7954 --product-id 633 --releasever $RELEASEVER
 </code> </code>
  
Line 130: Line 135:
  
 ===== Errors and Fixes ===== ===== Errors and Fixes =====
-=== Unable to verify server's identity: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:618) ===+==== Error: Loading repository 'rhel-8-for-x86_64-baseos-rpms' has failed ==== 
 +If RHEL clients are failing to perform yum/dnf transactions, check ''dmesg -T'' output on the Satellite server for OOM. 
 + 
 +<code> 
 +[root@smithi077 ~]# dnf -v update 
 +Loaded plugins: builddep, changelog, config-manager, copr, debug, debuginfo-install, download, generate_completion_cache, groups-manager, kpatch, needs-restarting, playground, product-id, repoclosure, repodiff, repograph, repomanage, reposync, subscription-manager, uploadprofile 
 +Updating Subscription Management repositories. 
 +DNF version: 4.7.0 
 +cachedir: /var/cache/dnf 
 +User-Agent: constructed: 'libdnf (Red Hat Enterprise Linux 8.6; generic; Linux.x86_64)' 
 +repo: using cache for: copr:copr.fedorainfracloud.org:ceph:python3-asyncssh 
 +copr:copr.fedorainfracloud.org:ceph:python3-asyncssh: using metadata from Tue 27 Jul 2021 07:25:39 PM UTC. 
 +repo: using cache for: epel 
 +epel: using metadata from Tue 09 Aug 2022 02:13:36 AM UTC. 
 +repo: using cache for: lab-extras 
 +lab-extras: using metadata from Thu 28 Jan 2021 11:16:50 PM UTC. 
 +Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                                                                                                                        157 kB/s | 2.8 kB     00:00     
 +reviving: 'rhel-8-for-x86_64-appstream-rpms' can be revived - repomd matches. 
 +rhel-8-for-x86_64-appstream-rpms: using metadata from Mon 08 Aug 2022 05:07:41 AM UTC. 
 +Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)                                                                                                                                                                                            89 kB/s | 1.5 kB     00:00     
 +reviving: 'rhel-8-for-x86_64-baseos-rpms' can be revived - repomd matches. 
 +loading repo 'rhel-8-for-x86_64-baseos-rpms' failure: loading of MD_TYPE_PRIMARY has failed. 
 +Error: Loading repository 'rhel-8-for-x86_64-baseos-rpms' has failed 
 +</code> 
 + 
 +After you resolve the OOM issue, you will need to resync the repository.  If BaseOS is the one that was failing: 
 +<code> 
 +for id in $(hammer -c /etc/hammer/cli.modules.d/foreman.yml repository list | grep -i "baseos" | awk '{ print $1 }'); do hammer -c /etc/hammer/cli.modules.d/foreman.yml repository synchronize --async --validate-contents true --id $id; done 
 +</code> 
 + 
 +==== Unable to verify server's identity: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:618) ====
 <code> <code>
 mv -f /etc/rhsm/rhsm.conf.kat-backup /etc/rhsm/rhsm.conf mv -f /etc/rhsm/rhsm.conf.kat-backup /etc/rhsm/rhsm.conf
Line 137: Line 172:
 yum reinstall http://satellite.front.sepia.ceph.com/pub/katello-ca-consumer-latest.noarch.rpm yum reinstall http://satellite.front.sepia.ceph.com/pub/katello-ca-consumer-latest.noarch.rpm
 </code> </code>
 +
 +==== The DMI UUID of this host (00000000-0000-0000-0000-0CC47AD93748) matches other registered hosts ====
 +Satellite 6.4 and before didn't care if you reused a hostname and the UUID was never checked.  This was [[https://access.redhat.com/solutions/4396951|introduced in 6.5]].
 +
 +An option to ignore this was [[https://bugzilla.redhat.com/show_bug.cgi?id=1772199|added in 6.7]].
 +
 +<code>
 +[root@satellite ~]# grep uuid /etc/candlepin/candlepin.conf 
 +candlepin.use_system_uuid_for_matching=false
 +</code>
 +
 +Turns out this doesn't work.  So instead, I modified a file to throw a warning instead of an error if Candlepin detects a duplicate UUID.
 +<code>
 +# diff /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.14.0.32/app/services/katello/registration_manager.rb.orig /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.14.0.32/app/services/katello/registration_manager.rb
 +92c92,93
 +<         registration_error("The DMI UUID of this host (%{uuid}) matches other registered hosts: %{existing}", uuid: host_uuid, existing: joined_hostnames(hosts))
 +---
 +> #        registration_error("The DMI UUID of this host (%{uuid}) matches other registered hosts: %{existing}", uuid: host_uuid, existing: joined_hostnames(hosts))
 +>         Rails.logger.warn("The DMI UUID of this host (%s) matches another host." % host_name)
 +</code>
 +
 +None of this actually ended up working so...
 +
 +====== Solved On SATELLITE 6.12 ======
 +
 +Despite this, in Jan 2023 we had to install a new Satellite instance, and it's version 6.12; this was chosen for allowing continued support, but initially suffered from the same issue.  A support case, https://access.redhat.com/support/cases/#/case/03399123, was opened to deal with it and the solution was this - https://github.com/ceph/ceph-cm-ansible/pull/717
 +https://github.com/ceph/ceph-cm-ansible/pull/718
services/satellite.1654791551.txt.gz · Last modified: by djgalloway