|
<%#
|
|
kind: snippet
|
|
name: redhat_register
|
|
%>
|
|
# Red Hat Registration Snippet
|
|
#
|
|
# Set these parameters if you're using rhnreg_ks:
|
|
#
|
|
# spacewalk_type = 'site' (local Spacewalk/Satellite server)
|
|
# = 'hosted' (RHN hosted)
|
|
# spacewalk_host = <hostname> (hostname of Spacewalk server, optional for
|
|
# RHN hosted)
|
|
#
|
|
# Set these parameters if you're using subscription-manager:
|
|
#
|
|
# subscription_manager = 'true' (you're going to use subscription-manager)
|
|
#
|
|
# subscription_manager_username = <username> (if using hosted RHN)
|
|
#
|
|
# subscription_manager_password = <password> (if using hosted RHN)
|
|
#
|
|
# subscription_manager_certpkg_url = <url> (url of cert package when using
|
|
# when using foreman with katello
|
|
# for example:
|
|
# http://fqdn/pub
|
|
# /katello-ca-consumer-latest.noarch.rpm)
|
|
#
|
|
# subscription_manager_host = <hostname> (deprecated for
|
|
# subscription_manager_certpkg_url:
|
|
# hostname of SAM/Katello
|
|
# installation, if using SAM.
|
|
# hostname is used to determine the
|
|
# consumer cert url.)
|
|
#
|
|
# subscription_manager_org = <org name> (organization name, if using
|
|
# SAM/Katello)
|
|
#
|
|
# subscription_manager_repos = <repos> (comma separated list of repos (like
|
|
# rhel-6-server-optional-rpms) to
|
|
# enable after registration)
|
|
#
|
|
# subscription_manager_pool = <pool> (specific pool to be used for
|
|
# registration)
|
|
#
|
|
# http-proxy = <host> (proxy hostname to be used for registration)
|
|
#
|
|
# http-proxy-port = <port> (proxy port to be used for registration)
|
|
#
|
|
# http-proxy-user = <user> (proxy user to be used for registration)
|
|
#
|
|
# http-proxy-password = <password> (proxy password to be
|
|
# used for registration)
|
|
#
|
|
#
|
|
# Set this parameter regardless of which registration method you're using:
|
|
#
|
|
# activation_key = <key> (activation key string, not needed if using
|
|
# subscription-manager with hosted RHN)
|
|
#
|
|
|
|
<% unless @host.params['subscription_manager'] %>
|
|
<% type = @host.params['spacewalk_type'] || 'hosted' %>
|
|
|
|
<% if @host.params['activation_key'] %>
|
|
# Discovered Activation Key <%= @host.params['activation_key'] %>
|
|
rhn_activation_key="<%= @host.params['activation_key'] -%>"
|
|
|
|
<% if type == 'site' -%>
|
|
satellite_hostname="<%= @host.params['spacewalk_host'] -%>"
|
|
rhn_cert_file="RHN-ORG-TRUSTED-SSL-CERT"
|
|
<% else -%>
|
|
satellite_hostname="<%= @host.params['spacewalk_host'] || 'xmlrpc.rhn.redhat.com' -%>"
|
|
rhn_cert_file="RHNS-CA-CERT"
|
|
<% end -%>
|
|
|
|
echo "Registering to RHN Satellite at [$satellite_hostname]"
|
|
echo "Using Registration Key [$rhn_activation_key]"
|
|
|
|
<% if type == 'site' -%>
|
|
# Obtain our RHN Satellite Certificate
|
|
echo "Obtaining RHN SSL certificate"
|
|
curl -o /usr/share/rhn/$rhn_cert_file -k https://$satellite_hostname/pub/$rhn_cert_file
|
|
<% if @host.operatingsystem.name == 'SLES' -%>
|
|
# if SLES then add CA Cert to CA Certs for curl
|
|
cp /usr/share/rhn/$rhn_cert_file /etc/ssl/certs/
|
|
ln -s /etc/ssl/certs/$rhn_cert_file /etc/ssl/certs/`openssl x509 -hash -noout -in /etc/ssl/certs/$rhn_cert_file`.0
|
|
<% end -%>
|
|
<% end -%>
|
|
|
|
# Update our up2date configuration file
|
|
echo "Updating SSL CA Certificate to /usr/share/rhn/$rhn_cert_file"
|
|
sed -i -e "s|^sslCACert=.*$|sslCACert=/usr/share/rhn/$rhn_cert_file|" /etc/sysconfig/rhn/up2date
|
|
|
|
# Update our Satellite Hostname
|
|
echo "Updating Satellite Hostname to [$satellite_hostname]"
|
|
sed -i -e "s|^serverURL=.*$|serverURL=https://$satellite_hostname/XMLRPC|" /etc/sysconfig/rhn/up2date
|
|
sed -i -e "s|^noSSLServerURL=.*$|noSSLServerURL=https://$satellite_hostname/XMLRPC|" /etc/sysconfig/rhn/up2date
|
|
|
|
# Restart messagebus/HAL to try and prevent hardware detection errors in rhnreg_ks
|
|
echo "Restarting services..."
|
|
<% if @host.operatingsystem.name == 'SLES' -%>
|
|
<% if @host.operatingsystem.major.to_i < 12 -%>
|
|
service haldaemon restart
|
|
<% end -%>
|
|
<% else -%>
|
|
service messagebus restart
|
|
service hald restart
|
|
<% end -%>
|
|
|
|
# Now, perform our registration
|
|
# (might get hardware errors here, due to dbus/messagebus lameness. These are safe to ignore.)
|
|
echo -n "Performing RHN Registration... "
|
|
rhnreg_ks --activationkey=$rhn_activation_key
|
|
echo "done."
|
|
|
|
# Check we registered
|
|
echo -n "Checking System Registration... "
|
|
if ! rhn_check; then
|
|
echo "FAILED"
|
|
echo " >> RHN Registration FAILED. Please Investigate. <<"
|
|
else
|
|
echo "registration successful."
|
|
fi
|
|
<% else %>
|
|
# Not registering - host.params['activation_key'] not found.
|
|
<% end %>
|
|
<% else %>
|
|
echo "Starting the subscription-manager registration process"
|
|
yum -t -y -e 0 install subscription-manager yum-utils
|
|
<% (enabled_repos = "yum-config-manager --enable #{@host.params['subscription_manager_repos'].gsub(',', ' ')}") if @host.params['subscription_manager_repos'] %>
|
|
<% if @host.params['http-proxy'] %>
|
|
subscription-manager config --server.proxy_hostname="<%= @host.params['http-proxy'] %>"
|
|
<% if @host.params['http-proxy-user'] %>
|
|
subscription-manager config --server.proxy_user="<%= @host.params['http-proxy-user'] %>"
|
|
<% end %>
|
|
<% if @host.params['http-proxy-password'] %>
|
|
subscription-manager config --server.proxy_password="<%= @host.params['http-proxy-password'] %>"
|
|
<% end %>
|
|
<% if @host.params['http-proxy-port'] %>
|
|
subscription-manager config --server.proxy_port="<%= @host.params['http-proxy-port'] %>"
|
|
<% end %>
|
|
<% end %>
|
|
<% if @host.params['subscription_manager_username'] && @host.params['subscription_manager_password'] %>
|
|
<% if @host.params['subscription_manager_pool'] %>
|
|
subscription-manager register --username="<%= @host.params['subscription_manager_username'] %>" --password="<%= @host.params['subscription_manager_password'] %>"
|
|
subscription-manager attach --pool="<%= @host.params['subscription_manager_pool'] %>"
|
|
<% else %>
|
|
subscription-manager register --username="<%= @host.params['subscription_manager_username'] %>" --password="<%= @host.params['subscription_manager_password'] %>" --auto-attach
|
|
<% end %>
|
|
# workaround for RHEL 6.4 bug https://bugzilla.redhat.com/show_bug.cgi?id=1008016
|
|
subscription-manager repos --list > /dev/null
|
|
<%= enabled_repos if enabled_repos %>
|
|
<% elsif @host.params['activation_key'] %>
|
|
<% if @host.params['subscription_manager_certpkg_url'] %>
|
|
rpm -Uvh <%= @host.params['subscription_manager_certpkg_url'] %>
|
|
<% elsif @host.params['subscription_manager_host'] %>
|
|
rpm -Uvh <%= @host.params['subscription_manager_host'] %>/pub/candlepin-cert-consumer-latest.noarch.rpm
|
|
<% end %>
|
|
subscription-manager register --org="<%= @host.params['subscription_manager_org'] %>" --activationkey="<%= @host.params['activation_key'] %>"
|
|
# workaround for RHEL 6.4 bug https://bugzilla.redhat.com/show_bug.cgi?id=1008016
|
|
subscription-manager repos --list > /dev/null
|
|
<%= enabled_repos if enabled_repos %>
|
|
<% else %>
|
|
# Not registering host.params['activation_key'] not found.
|
|
<% end %>
|
|
<% end %>
|
|
# End Red Hat Registration Snippet
|
