[foreman-users] Re: subscription expected behaviour?

2017-08-17 Thread Andrew Schofield
Activation keys are good for the initial host registration only. If you 
assign new products to a content view then you need to :

a) Add these to the activation key (so newly provisioned servers get the 
new repos)
b) Either manually / automatically subscribe servers to the new products 
from the host (command line / scripts / puppet etc) or use the web ui / 
hammer / api todo this

Subscription manager (from memory I'm probably wrong on timings) will 
auto-refresh every 4 hrs or so.

Thanks,
Andrew

On Thursday, August 17, 2017 at 2:08:32 AM UTC-4, Denis Müller wrote:
>
> Hi,
>
> do we always need to "reregister" the machine if we provide new content 
> like a new repo in a content-view or new Product to activation key?
>
> I thought the command "subscription-manager refresh" would tell the 
> machine to get the new content, but fotunately noi have to reregister 
> the machine all the time.
>
> Or maybe i'm doing something wrong?
>
> I would appreciate any advice.
>
> Greets,
> Denis
>

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Re: [foreman-users] Schedule Errata Installation ?

2017-08-17 Thread Klaas Demter
You could also use yum-cron and configure it via Puppet/Foreman, for example 
with https://github.com/treydock/puppet-yum_cron.
To automatically publish content views you can look at something like 
https://github.com/RedHatSatellite/katello-cvmanager to automatically publish 
content views with new packages/errata.

Greetings
Klaas Demter

ATIX - The Linux & Open Source Company
www.atix.de

- Ursprüngliche Mail -
Von: "Michael Bassler" 
An: foreman-users@googlegroups.com
Gesendet: Donnerstag, 17. August 2017 16:30:55
Betreff: Re: [foreman-users] Schedule Errata Installation ?

look at yum-security-plugin, you should be able to schedule the check for
updates from each machine vs your katello server needing to reach out to
every machine.

On Thu, Aug 17, 2017 at 6:16 AM TCK  wrote:

> Hi,
>
> thnaks for your answer, I will try it.
>
>
> Le mardi 20 juin 2017 11:07:43 UTC+2, Daniel Lobato a écrit :
>
>> On 06/19, TCK wrote:
>> > Hello,
>> >
>> > I'm a new user of Foreman/Katello. We want to use this tool on Lunix
>> server
>> > like we use WSUS on Windows server i.e. we want to schedule
>> installation
>> > patch security. I discover how to manually install errata but I don't
>> find
>> > how to schedule.
>> >
>> > Is it possible please ? With plugins Tasks maybe ?
>>
>> It's possible, you can use hammer (the Foreman CLI)
>> https://github.com/Katello/hammer-cli-katello and either:
>>
>> 1 - use cron or similar to run hammer errata install
>> 2 - use Foreman Remote execution to call hammer to install errata on
>> some hosts.
>>
>> >
>> > Best Regards.
>> >
>> > Nicolas
>> >
>> > --
>> > You received this message because you are subscribed to the Google
>> Groups "Foreman users" group.
>>
> > To unsubscribe from this group and stop receiving emails from it, send
>> an email to foreman-user...@googlegroups.com.
>> > To post to this group, send email to forema...@googlegroups.com.
>>
> > Visit this group at https://groups.google.com/group/foreman-users.
>> > For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> Daniel Lobato Garcia
>>
>> @dLobatog
>> blog.daniellobato.me
>> daniellobato.me
>>
>> GPG: http://keys.gnupg.net/pks/lookup?op=get=0x7A92D6DD38D6DE30
>> Keybase: https://keybase.io/elobato
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Foreman users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to foreman-users+unsubscr...@googlegroups.com.
> To post to this group, send email to foreman-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/foreman-users.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Re: [foreman-users] Schedule Errata Installation ?

2017-08-17 Thread Michael Bassler
look at yum-security-plugin, you should be able to schedule the check for
updates from each machine vs your katello server needing to reach out to
every machine.

On Thu, Aug 17, 2017 at 6:16 AM TCK  wrote:

> Hi,
>
> thnaks for your answer, I will try it.
>
>
> Le mardi 20 juin 2017 11:07:43 UTC+2, Daniel Lobato a écrit :
>
>> On 06/19, TCK wrote:
>> > Hello,
>> >
>> > I'm a new user of Foreman/Katello. We want to use this tool on Lunix
>> server
>> > like we use WSUS on Windows server i.e. we want to schedule
>> installation
>> > patch security. I discover how to manually install errata but I don't
>> find
>> > how to schedule.
>> >
>> > Is it possible please ? With plugins Tasks maybe ?
>>
>> It's possible, you can use hammer (the Foreman CLI)
>> https://github.com/Katello/hammer-cli-katello and either:
>>
>> 1 - use cron or similar to run hammer errata install
>> 2 - use Foreman Remote execution to call hammer to install errata on
>> some hosts.
>>
>> >
>> > Best Regards.
>> >
>> > Nicolas
>> >
>> > --
>> > You received this message because you are subscribed to the Google
>> Groups "Foreman users" group.
>>
> > To unsubscribe from this group and stop receiving emails from it, send
>> an email to foreman-user...@googlegroups.com.
>> > To post to this group, send email to forema...@googlegroups.com.
>>
> > Visit this group at https://groups.google.com/group/foreman-users.
>> > For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> Daniel Lobato Garcia
>>
>> @dLobatog
>> blog.daniellobato.me
>> daniellobato.me
>>
>> GPG: http://keys.gnupg.net/pks/lookup?op=get=0x7A92D6DD38D6DE30
>> Keybase: https://keybase.io/elobato
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Foreman users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to foreman-users+unsubscr...@googlegroups.com.
> To post to this group, send email to foreman-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/foreman-users.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Re: [foreman-users] Schedule Errata Installation ?

2017-08-17 Thread TCK
Hi,

thnaks for your answer, I will try it.

Le mardi 20 juin 2017 11:07:43 UTC+2, Daniel Lobato a écrit :
>
> On 06/19, TCK wrote: 
> > Hello, 
> > 
> > I'm a new user of Foreman/Katello. We want to use this tool on Lunix 
> server 
> > like we use WSUS on Windows server i.e. we want to schedule installation 
> > patch security. I discover how to manually install errata but I don't 
> find 
> > how to schedule. 
> > 
> > Is it possible please ? With plugins Tasks maybe ? 
>
> It's possible, you can use hammer (the Foreman CLI) 
> https://github.com/Katello/hammer-cli-katello and either: 
>
> 1 - use cron or similar to run hammer errata install 
> 2 - use Foreman Remote execution to call hammer to install errata on 
> some hosts. 
>
> > 
> > Best Regards. 
> > 
> > Nicolas 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups "Foreman users" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an email to foreman-user...@googlegroups.com . 
> > To post to this group, send email to forema...@googlegroups.com 
> . 
> > Visit this group at https://groups.google.com/group/foreman-users. 
> > For more options, visit https://groups.google.com/d/optout. 
>
>
> -- 
> Daniel Lobato Garcia 
>
> @dLobatog 
> blog.daniellobato.me 
> daniellobato.me 
>
> GPG: http://keys.gnupg.net/pks/lookup?op=get=0x7A92D6DD38D6DE30 
> Keybase: https://keybase.io/elobato 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Re: [foreman-users] Foreman 'Finish template' not executed

2017-08-17 Thread Costin Balan
Hello,

Thanks for the feedback. What kind of template should I use then for my 
needs?

Some post-installation configurations? Like DNS, network, Proxy etc..?

On Thursday, August 17, 2017 at 2:14:32 PM UTC+3, Lukas Zapletal wrote:
>
> Hello, 
>
> finish template only triggers when compute_attributes.present? && 
> image_build? && !image.try(:user_data) 
>
> In other words, this is only meant for image based provisioning on 
> virt or clouds. You may want to file a RFE if there is none present 
> already. 
>
> LZ 
>
> On Thu, Aug 17, 2017 at 8:32 AM, Costin Balan  > wrote: 
> > Hello, 
> > 
> > I have a physical server which I'm trying to install with Foreman via 
> PXE. 
> > The chosen OS is Ubuntu 17.04. 
> > 
> > In Foreman, this operating system has associated 3 templates: 
> > 
> > A PXELinux template type. 
> > A Provisioning template type. 
> > A Finish template type. 
> > 
> > When I start the Physical server in PXE, all goes well: 
> > 
> > It loads the Foreman discovery image 
> > After that, I provision the host from Foreman with Ubuntu 17.04 as an 
> OS. 
> > It successfully fetches the needed files and starts installation 
> > During installation it successfully uses the Provisioning template I 
> > provided for various configurations (partitioning, language selection, 
> user 
> > creation etc). 
> > After the installation the 'Finish template' will NOT be run (I don't 
> know 
> > why). This template has the network, DNS, Proxy and other configurations 
> > which are supposed to be done after the OS Installation. 
> > 
> > What is the issue? Why is the 'Finish template' not run? 
> > 
> > Any help or guidance will be appreciated 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups 
> > "Foreman users" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an 
> > email to foreman-user...@googlegroups.com . 
> > To post to this group, send email to forema...@googlegroups.com 
> . 
> > Visit this group at https://groups.google.com/group/foreman-users. 
> > For more options, visit https://groups.google.com/d/optout. 
>
>
>
> -- 
> Later, 
>   Lukas @lzap Zapletal 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Re: [foreman-users] Foreman 'Finish template' not executed

2017-08-17 Thread Lukas Zapletal
Hello,

finish template only triggers when compute_attributes.present? &&
image_build? && !image.try(:user_data)

In other words, this is only meant for image based provisioning on
virt or clouds. You may want to file a RFE if there is none present
already.

LZ

On Thu, Aug 17, 2017 at 8:32 AM, Costin Balan  wrote:
> Hello,
>
> I have a physical server which I'm trying to install with Foreman via PXE.
> The chosen OS is Ubuntu 17.04.
>
> In Foreman, this operating system has associated 3 templates:
>
> A PXELinux template type.
> A Provisioning template type.
> A Finish template type.
>
> When I start the Physical server in PXE, all goes well:
>
> It loads the Foreman discovery image
> After that, I provision the host from Foreman with Ubuntu 17.04 as an OS.
> It successfully fetches the needed files and starts installation
> During installation it successfully uses the Provisioning template I
> provided for various configurations (partitioning, language selection, user
> creation etc).
> After the installation the 'Finish template' will NOT be run (I don't know
> why). This template has the network, DNS, Proxy and other configurations
> which are supposed to be done after the OS Installation.
>
> What is the issue? Why is the 'Finish template' not run?
>
> Any help or guidance will be appreciated
>
> --
> You received this message because you are subscribed to the Google Groups
> "Foreman users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to foreman-users+unsubscr...@googlegroups.com.
> To post to this group, send email to foreman-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/foreman-users.
> For more options, visit https://groups.google.com/d/optout.



-- 
Later,
  Lukas @lzap Zapletal

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Re: [foreman-users] Katello 3.4.4 Released

2017-08-17 Thread Louis Bohm
We took a deeper look at the errors from apache and found that /etc/httpd there 
is a symlink for run to /run/httpd. That link was broken as /run/httpd got 
blown away somehow.  We recreated the links and was able to start apache fine.  
I am re-running the upgrade step now.

Louis
> On Aug 16, 2017, at 3:13 PM, Eric D Helms  wrote:
> 
> The installer run fails even when you comment out the line in ports.conf?
> 
> On Wed, Aug 16, 2017 at 9:27 AM, Louis Bohm  > wrote:
> No.  I re-ran it yesterday with the —scenario and with out it.  In both cases 
> it stops with trying to update apache and fails.
> 
> Louis
> 
>> On Aug 16, 2017, at 9:26 AM, Eric D Helms > > wrote:
>> 
>> What happens if you rerun the installer? Does it succeed?
>> 
>> On Aug 16, 2017 7:16 AM, "Louis Bohm" > > wrote:
>> Any suggestions since my last post?  Should I revert the VM and start over?
>> 
>> Louis
>> 
>>> On Aug 15, 2017, at 12:33 PM, Louis Bohm >> > wrote:
>>> 
>>> I commented out the Listen 443 line from /etc/httpd/conf.d/ports.conf.
>>> 
>>> Louis
 On Aug 15, 2017, at 12:23 PM, Eric D Helms > wrote:
 
 Which one did you remove? The one from sleeping.conf?
 
 
 On Aug 15, 2017 12:12 PM, "Louis Bohm" > wrote:
 OK.  I see what you are saying and that is what I ran:  foreman-installer 
 --scenario katello —upgrade
 
 When I run foreman-installer --scenario katello —upgrade apache fails to 
 start up.  When I fist look at the logs I see this:
 Aug 15 09:22:45 fm httpd: (98)Address already in use: AH00072: make_sock: 
 could not bind to address 0.0.0.0:443 
 
 If I remove one of the Listen 443 in the configurations and manually start 
 apache with katello-services —only httpd I then get these errors:
 
 [Tue Aug 15 09:25:32.571019 2017] [mime_magic:error] [pid 2600] (2)No such 
 file or directory: AH01515: mod_mime_magic: can't read magic file 
 /etc/httpd/NEVER_EVER_USE
 [Tue Aug 15 09:25:32.607742 2017] [ssl:warn] [pid 2600] AH02292: Init: 
 Name-based SSL virtual hosts only work for clients with TLS server name 
 indication support (RFC 4366)
 [Tue Aug 15 09:25:32.607817 2017] [suexec:notice] [pid 2600] AH01232: 
 suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
 [ 2017-08-15 09:25:32.6255 2601/7f5dfa9d0780 agents/Watchdog/Main.cpp:538 
 ]: Options: { 'analytics_log_user' => 'nobody', 'default_group' => 
 'nobody', 'default_python' => 'python', 'default_ruby' => 'ruby', 
 'default_user' => 'nobody', 'log_level' => '0', 'max_pool_size' => '12', 
 'passenger_root' => 
 '/usr/share/passenger//phusion_passenger/locations.ini', 
 'passenger_version' => '4.0.53', 'pool_idle_time' => '300', 
 'prestart_urls' => 
 'aHR0cDovL2ZtLnRkc29wcy5jb206ODAAaHR0cHM6Ly9mbS50ZHNvcHMuY29tOjQ0MwBodHRwczovL2ZtLnRkc29wcy5jb206ODE0MAA=',
  'temp_dir' => '/tmp', 'union_station_gateway_address' => 
 'gateway.unionstationapp.com ', 
 'union_station_gateway_port' => '443', 'user_switching' => 'true', 
 'web_server_passenger_version' => '4.0.53', 'web_server_pid' => '2600', 
 'web_server_type' => 'apache', 'web_server_worker_gid' => '48', 
 'web_server_worker_uid' => '48' }
 [ 2017-08-15 09:25:32.6409 2604/7f6b7cdbb780 
 agents/HelperAgent/Main.cpp:650 ]: PassengerHelperAgent online, listening 
 at unix:/tmp/passenger.1.0.2600/generation-0/request
 [ 2017-08-15 09:25:32.6930 2609/7fd0539ea880 
 agents/LoggingAgent/Main.cpp:321 ]: PassengerLoggingAgent online, 
 listening at unix:/tmp/passenger.1.0.2600/generation-0/logging
 [ 2017-08-15 09:25:32.6940 2601/7f5dfa9d0780 agents/Watchdog/Main.cpp:728 
 ]: All Phusion Passenger agents started!
 [Tue Aug 15 09:25:32.747844 2017] [so:warn] [pid 2600] AH01574: module 
 access_compat_module is already loaded, skipping
 [Tue Aug 15 09:25:32.747904 2017] [so:warn] [pid 2600] AH01574: module 
 actions_module is already loaded, skipping
 [Tue Aug 15 09:25:32.747920 2017] [so:warn] [pid 2600] AH01574: module 
 alias_module is already loaded, skipping
 [Tue Aug 15 09:25:32.748254 2017] [so:warn] [pid 2600] AH01574: module 
 auth_basic_module is already loaded, skipping
 [Tue Aug 15 09:25:32.748281 2017] [so:warn] [pid 2600] AH01574: module 
 auth_digest_module is already loaded, skipping
 [Tue Aug 15 09:25:32.748296 2017] [so:warn] [pid 2600] AH01574: module 
 authn_anon_module is already loaded, skipping
 [Tue Aug 15 09:25:32.748311 2017] [so:warn] [pid 2600] AH01574: module 
 

[foreman-users] Foreman 'Finish template' not executed

2017-08-17 Thread Costin Balan
Hello,

I have a physical server which I'm trying to install with Foreman via PXE. 
The chosen OS is Ubuntu 17.04.

In Foreman, this operating system has associated 3 templates:


   1. A PXELinux template type.
   2. A Provisioning template type.
   3. A Finish template type.

When I start the Physical server in PXE, all goes well:

   1. It loads the Foreman discovery image
   2. After that, I provision the host from Foreman with Ubuntu 17.04 as an 
   OS.
   3. It successfully fetches the needed files and starts installation
   4. During installation it successfully uses the Provisioning template I 
   provided for various configurations (partitioning, language selection, user 
   creation etc).
   5. After the installation the 'Finish template' will NOT be run (I don't 
   know why). This template has the network, DNS, Proxy and other 
   configurations which are supposed to be done after the OS Installation.

What is the issue? Why is the 'Finish template' not run?

Any help or guidance will be appreciated

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


[foreman-users] subscription expected behaviour?

2017-08-17 Thread 'Denis Müller' via Foreman users
Hi,

do we always need to "reregister" the machine if we provide new content 
like a new repo in a content-view or new Product to activation key?

I thought the command "subscription-manager refresh" would tell the machine 
to get the new content, but fotunately noi have to reregister the 
machine all the time.

Or maybe i'm doing something wrong?

I would appreciate any advice.

Greets,
Denis

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-users+unsubscr...@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.