|
<%#
|
|
kind: snippet
|
|
name: redhat_register
|
|
%>
|
|
# Red Hat Registration Snippet
|
|
#
|
|
# Set these parameters if you're using rhnreg_ks:
|
|
#
|
|
# spacewalk_type = 'site' (local Spacewalk/Satellite server)
|
|
# = 'hosted' (RHN hosted)
|
|
# spacewalk_host = <hostname> (hostname of Spacewalk server, optional for
|
|
# RHN hosted)
|
|
#
|
|
# Set these parameters if you're using subscription-manager:
|
|
#
|
|
# subscription_manager = 'true' (you're going to use subscription-manager)
|
|
#
|
|
# subscription_manager_username = <username> (if using hosted RHN)
|
|
#
|
|
# subscription_manager_password = <password> (if using hosted RHN)
|
|
#
|
|
# subscription_manager_certpkg_url = <url> (url of cert package when using
|
|
# when using foreman with katello
|
|
# for example:
|
|
# http://fqdn/pub
|
|
# /katello-ca-consumer-latest.noarch.rpm)
|
|
#
|
|
# subscription_manager_host = <hostname> (deprecated for
|
|
# subscription_manager_certpkg_url:
|
|
# hostname of SAM/Katello
|
|
# installation, if using SAM.
|
|
# hostname is used to determine the
|
|
# consumer cert url.)
|
|
#
|
|
# subscription_manager_org = <org name> (organization name, if using
|
|
# SAM/Katello)
|
|
#
|
|
# subscription_manager_repos = <repos> (comma separated list of repos (like
|
|
# rhel-6-server-optional-rpms) to
|
|
# enable after registration)
|
|
#
|
|
# subscription_manager_pool = <pool> (specific pool to be used for
|
|
# registration)
|
|
#
|
|
# http-proxy = <host> (proxy hostname to be used for registration)
|
|
#
|
|
# http-proxy-port = <port> (proxy port to be used for registration)
|
|
#
|
|
# http-proxy-user = <user> (proxy user to be used for registration)
|
|
#
|
|
# http-proxy-password = <password> (proxy password to be
|
|
# used for registration)
|
|
#
|
|
#
|
|
# Set this parameter regardless of which registration method you're using:
|
|
#
|
|
# activation_key = <key> (activation key string, not needed if using
|
|
# subscription-manager with hosted RHN)
|
|
#
|
|
|
|
<% unless host_param('subscription_manager') %>
|
|
<% type = host_param('spacewalk_type') || 'hosted' %>
|
|
|
|
<% if host_param('activation_key') %>
|
|
# Discovered Activation Key <%= host_param('activation_key') %>
|
|
rhn_activation_key="<%= host_param('activation_key') -%>"
|
|
|
|
<% if type == 'site' -%>
|
|
satellite_hostname="<%= host_param('spacewalk_host') -%>"
|
|
rhn_cert_file="RHN-ORG-TRUSTED-SSL-CERT"
|
|
<% else -%>
|
|
satellite_hostname="<%= host_param('spacewalk_host') || 'xmlrpc.rhn.redhat.com' -%>"
|
|
rhn_cert_file="RHNS-CA-CERT"
|
|
<% end -%>
|
|
|
|
echo "Registering to RHN Satellite at [$satellite_hostname]"
|
|
echo "Using Registration Key [$rhn_activation_key]"
|
|
|
|
<% if type == 'site' -%>
|
|
# Obtain our RHN Satellite Certificate
|
|
echo "Obtaining RHN SSL certificate"
|
|
curl -o /usr/share/rhn/$rhn_cert_file -k https://$satellite_hostname/pub/$rhn_cert_file
|
|
<% if @host.operatingsystem.name == 'SLES' -%>
|
|
# if SLES then add CA Cert to CA Certs for curl
|
|
cp /usr/share/rhn/$rhn_cert_file /etc/ssl/certs/
|
|
ln -s /etc/ssl/certs/$rhn_cert_file /etc/ssl/certs/`openssl x509 -hash -noout -in /etc/ssl/certs/$rhn_cert_file`.0
|
|
<% end -%>
|
|
<% end -%>
|
|
|
|
# Update our up2date configuration file
|
|
echo "Updating SSL CA Certificate to /usr/share/rhn/$rhn_cert_file"
|
|
sed -i -e "s|^sslCACert=.*$|sslCACert=/usr/share/rhn/$rhn_cert_file|" /etc/sysconfig/rhn/up2date
|
|
|
|
# Update our Satellite Hostname
|
|
echo "Updating Satellite Hostname to [$satellite_hostname]"
|
|
sed -i -e "s|^serverURL=.*$|serverURL=https://$satellite_hostname/XMLRPC|" /etc/sysconfig/rhn/up2date
|
|
sed -i -e "s|^noSSLServerURL=.*$|noSSLServerURL=https://$satellite_hostname/XMLRPC|" /etc/sysconfig/rhn/up2date
|
|
|
|
# Restart messagebus/HAL to try and prevent hardware detection errors in rhnreg_ks
|
|
echo "Restarting services..."
|
|
<% if @host.operatingsystem.name == 'SLES' -%>
|
|
<% if @host.operatingsystem.major.to_i < 12 -%>
|
|
service haldaemon restart
|
|
<% end -%>
|
|
<% else -%>
|
|
service messagebus restart
|
|
service hald restart
|
|
<% end -%>
|
|
|
|
# Now, perform our registration
|
|
# (might get hardware errors here, due to dbus/messagebus lameness. These are safe to ignore.)
|
|
echo -n "Performing RHN Registration... "
|
|
rhnreg_ks --activationkey=$rhn_activation_key
|
|
echo "done."
|
|
|
|
# Check we registered
|
|
echo -n "Checking System Registration... "
|
|
if ! rhn_check; then
|
|
echo "FAILED"
|
|
echo " >> RHN Registration FAILED. Please Investigate. <<"
|
|
else
|
|
echo "registration successful."
|
|
fi
|
|
<% else %>
|
|
# Not registering - host.params['activation_key'] not found.
|
|
<% end %>
|
|
<% else %>
|
|
echo "Starting the subscription-manager registration process"
|
|
if [ -f /usr/bin/dnf ]; then
|
|
dnf -y install subscription-manager <%= @host.operatingsystem.major.to_i >= 6 ? 'yum-config-manager' : '' %>
|
|
else
|
|
yum -t -y install subscription-manager <%= @host.operatingsystem.major.to_i >= 6 ? 'yum-config-manager' : '' %>
|
|
fi
|
|
<% if @host.operatingsystem.major.to_i >= 6 %>
|
|
<% ( enabled_repos = "yum-config-manager --enable #{host_param('subscription_manager_repos').gsub(',', ' ')}") if host_param('subscription_manager_repos') %>
|
|
<% else %>
|
|
<% ( enabled_repos = "subscription-manager repos --enable #{host_param('subscription_manager_repos').gsub(',', ' --enable')}") if host_param('subscription_manager_repos') %>
|
|
<% end %>
|
|
<% if host_param('http-proxy') %>
|
|
subscription-manager config --server.proxy_hostname="<%= host_param('http-proxy') %>"
|
|
<% if host_param('http-proxy-user') %>
|
|
subscription-manager config --server.proxy_user="<%= host_param('http-proxy-user') %>"
|
|
<% end %>
|
|
<% if host_param('http-proxy-password') %>
|
|
subscription-manager config --server.proxy_password="<%= host_param('http-proxy-password') %>"
|
|
<% end %>
|
|
<% if host_param('http-proxy-port') %>
|
|
subscription-manager config --server.proxy_port="<%= host_param('http-proxy-port') %>"
|
|
<% end %>
|
|
<% end %>
|
|
<% if host_param('subscription_manager_username') && host_param('subscription_manager_password') %>
|
|
<% if host_param('subscription_manager_pool') %>
|
|
subscription-manager register --name="<%= @host.name %>" --username="<%= host_param('subscription_manager_username') %>" --password="<%= host_param('subscription_manager_password') %>"
|
|
subscription-manager attach --pool="<%= host_param('subscription_manager_pool') %>"
|
|
<% else %>
|
|
subscription-manager register --name="<%= @host.name %>" --username="<%= host_param('subscription_manager_username') %>" --password="<%= host_param('subscription_manager_password') %>" --auto-attach
|
|
<% end %>
|
|
# workaround for RHEL 6.4 bug https://bugzilla.redhat.com/show_bug.cgi?id=1008016
|
|
subscription-manager repos --list > /dev/null
|
|
<%= enabled_repos if enabled_repos %>
|
|
<% elsif host_param('activation_key') %>
|
|
<% if host_param('subscription_manager_certpkg_url') %>
|
|
rpm -Uvh <%= host_param('subscription_manager_certpkg_url') %>
|
|
<% elsif host_param('subscription_manager_host') %>
|
|
rpm -Uvh <%= host_param('subscription_manager_host') %>/pub/candlepin-cert-consumer-latest.noarch.rpm
|
|
<% end %>
|
|
subscription-manager register --name="<%= @host.name %>" --org="<%= host_param('subscription_manager_org') %>" --activationkey="<%= host_param('activation_key') %>"
|
|
# workaround for RHEL 6.4 bug https://bugzilla.redhat.com/show_bug.cgi?id=1008016
|
|
subscription-manager repos --list > /dev/null
|
|
<%= enabled_repos if enabled_repos %>
|
|
<% else %>
|
|
# Not registering host.params['activation_key'] not found.
|
|
<% end %>
|
|
<% end %>
|
|
# End Red Hat Registration Snippet
|
