Capsule Installation

Hardware Requirements

The Capsule server is only supported on x86_64 Operating Systems

• 2 Two Logical CPUs
• 4 GB of memory
• Disk space usage is similar to that of the main Katello server Installation

Required Ports

At a minimum, the following ports need to be open to external connections for installation:

• 80 TCP - HTTP, used for provisioning purposes
• 443 TCP - HTTPS, used for web access and api communication
• 9090 TCP - HTTPS - used for communication with the smart proxy

See the User Guide for additional information about Capsule services and required ports.

Installation

Install needed packages:

The same yum repositories need to be configured on the Capsule server as the main Katello server. See the installation guide for the list of required repositories.

Once you get the repositories configured, install the foreman-installer-katello package on the capsule

yum install -y foreman-installer-katello

Generate Certificates for the Capsules

Prior to installing the Capsule, we need to generate certificates on the main Katello server:

capsule-certs-generate --capsule-fqdn "mycapsule.example.com"\
                       --certs-tar    "~/mycapsule.example.com-certs.tar"

In the above example, replace ‘mycapsule.example.com’ with your Capsule’s fully qualified domain name. This will generate a tar file containing all the needed certificates. You will need to transfer those certificates to the server that you will install your Capsule on using whatever method you prefer (e.g. SCP).

The capsule-certs-generate command will output an example installation command. For example:

Installing             Done                     [100%] [.....................]
  Success!

  To finish the installation, follow these steps:

  1. Ensure that the foreman-installer-katello package is installed on the system.
  2. Copy ~/mycapsule.example.com-certs.tar to the system mycapsule.example.com
  3. Run the following commands on the capsule (possibly with the customized
     parameters, see foreman-installer --scenario capsule --help and
     documentation for more info on setting up additional services):

  yum -y localinstall http://katello.example.com/pub/katello-ca-consumer-latest.noarch.rpm
  subscription-manager register --org "Default_Organization"
  foreman-installer --scenario capsule\
                    --parent-fqdn           "katello.example.com"\
                    --register-in-foreman   "true"\
                    --foreman-base-url      "https://katello.example.com"\
                    --trusted-hosts         "katello.example.com"\
                    --trusted-hosts         "mycapsule.example.com"\
                    --oauth-consumer-key    "UVrAZfMaCfBiiWejoUVLYCZHT2xhzuFV"\
                    --oauth-consumer-secret "ZhH8p7M577ttNU3WmUGWASag3JeXKgUX"\
                    --pulp-oauth-secret     "TPk42MYZ42nAE3rZvyLBh7Lxob3nEUi8"\
                    --certs-tar             "~/mycapsule.example.com-certs.tar"
  The full log is at /var/log/capsule-certs-generate.log

Install Capsule

Use the provide installation command from capsule-certs-generate, and tailor for your own purposes as needed. The defaults will give you a Capsule ready for Content-related services.

See the User Guide to learn about setting up provisioning related services, as well as the Foreman manual