Getting the most out of Red Hat Network Satellite. Clifford Perry RHN Sustaining Engineer

Transcription

1 Getting the most out of Red Hat Network Satellite Clifford Perry RHN Sustaining Engineer

2 Agenda Backup & Recovery Further understanding of RHN Satellite Overview Structure Services Tips on deploying and administration of a RHN Satellite Questions Appendix of Technical Data Backing up the database RHN SSL Tool Bootstrap script creation Disable up2date register Control over registrations Delete old systems Applet Activation Monitoring Oracle space usage Change Control Standby Satellite DHCP PXE Boot environment Sources of further information Contacting Red Hat Support

3 What is Red Hat Network? Red Hat Network (RHN) is a means to manage and deploy Red Hat Enterprise Linux systems in your environment See Bret's presentation Introduction to Red Hat Network for more details RHN Components RHN Core Technologies Update Up2date Client Management RHN ( Provisioning RHN Satellite Monitoring (new) RHN Proxy

4 What is RHN Satellite? Software Management Provisioning Enhancements to Custom Content Management Monitoring (new) Solaris (new)

5 RHN Satellite Overview Background Daemons Apache based Application Server (mod_perl, mod_python, java)

6 Tip #1 Backup & Recovery Problem When performing backups of RHN Satellite, other than the database backup files, what other directories are of interest? Solution /etc/sysconfig/rhn/ /etc/rhn/ /etc/tnsnames.ora /etc/httpd/ /var/www/rhns/ /var/www/html/pub/ /var/satellite/redhat/1/ Further details are available in the RHN Satellite Guide

7 Tip #2 Backing up the database Problem How could I automate the backing up of the embedded Oracle database? Solution The following sequence of commands can be scripted for daily backups export VER=`date +%j` service rhn-satellite stop su - oracle -p -c mkdir backup-$ver su - oracle -p -c db-control backup backup-$ver service rhn-satellite start su - oracle -p -c db-control verify backup-$ver

8 Tip #3 RHN SSL Tool Problem The hostname for my RHN Proxy server has changed, how can I replace its SSL Certificates? Solution Generate a new SSL Certificate rhn-ssl-tool --gen-server \ --set-hostname=rhn-proxy.example.com Install resulting rpm onto RHN Proxy server rpm -Uvh \ rhn-org-httpd-ssl-key-pair-rhn-proxy noarch.rpm

9 Tip #4 Bootstrap script creation Problem How can I create a new bootstrap script for my RHN Proxy server's new hostname? Solution Copy resulting files onto RHN Proxy server in /var/www/html/pub/ rhn-bootstrap --script=bootstrap-rhn-proxy.sh \ --hostname=rhn-proxy.example.org \ --activation-keys=7bddfb01d2eba4b703dddffde0c3d5d0 \ --overrides=client-config-overrides-rhn-proxy.txt * bootstrap overrides (written): '/var/www/html/pub/bootstrap/client-config-overrides-rhn-proxy.txt' * bootstrap script (written): '/var/www/html/pub/bootstrap/bootstrap-rhn-proxy.sh'

10 Tip #5 Disable up2date register Problem How can I disable all users from being able to register to my RHN Satellite using up2date --register? Solution Create an activation key which is Universal Default Usage limit of zero

11 Tip #6 Control over registrations Problem How can I control how many systems my users register to my Satellite? Solution Use activation keys to register all systems Disable up2date register registrations (see Tip #5) Setup a usage limit within the users activation key Users are forced to use rhnreg_ks with activation key for registrations rhnreg_ks --activationkey=7bddfb01d2eba4b703dddffde0c3d5d0

12 Tip #7 Delete old systems Problem I want to delete all systems that have been inactive for 35+ days. How can I do that? Solution Login to Satellite Web Interface Systems > Advanced Search Search for: 35 Field to Search: Days Since Last Checkin Search Select All Manage > Delete > Confirm Deletions

13 Tip #8 Applet Activation Problem I want to automate the activating the RHN Applet for all my client systems, how can this be done? Solution Ensure that rhn applet actions package from the rhn tools channel is installed Run command PYTHONPATH=/usr/share/rhn/actions python \ -c "import rhn_applet; rhn_applet.use_satellite ();"

14 Tip #9 Monitoring Oracle space usage Problem How can I monitor my Oracle tablespace usage level? Solution Using output of command db-control report Red Hat provides within our knowledgebase an example shell script which can be added as a cron script which will out an alert if the usage on any table exceeds 89%

15 Tip #10 Change Control Problem I want to control and test what packages are available to my clients before they can download them, how would I do this with a RHN Satellite? Solution Multiple Cloned Channels Clone Errata from Base Channel Test new packages associated with Errata Clone Errata from test clone channel into production clone channel

16 Tip #11 Standby Satellite Problem How can I deploy a standby Satellite in my network? Solution Satellite hostname can point to either system Have /var/satellite/ content shared Install 2 nd Satellite (Skip SSL Certificate Generation) Copy /root/ssl-build/ and Apache SSL Certificates Copy /etc/rhn/rhn.conf configuration file Sync the nightly database backup onto the standby Satellite When needed route hostname to standby Satellite, restore database, bring up satellite services

17 Tip #12 DHCP PXE Boot environment Problem I want my system to have a fully working OS with no user intervention, just plug 'n' go. Can I do this with RHN Satellite? Use PXE Boot technology Pronounced pixie Pre Boot Execution Environment Network card with PXE support enabled will send out a broadcast request for DHCP information on boot up PXE aware installation server configured to respond RHN Satellite has the capability to perform 'bare metal' provisioning of Red Hat Enterprise Linux systems. To do this though you need to have a DHCP and TFTP server setup and configured. See also Chapter 3 of the Enterprise Linux 4 System Administrators Guide

18 Tip #12 DHCP PXE Boot environment Solution The basic steps to do this are Create kickstart profile as4 Install & Configure dhcp Install tftp and then configure using pxeos command pxeos -a -i "Fresh AS 4 Install" -p HTTP -D 0 \ -s satellite.example.org -L /ty/xxxxxxxxx new-as4 Edit the tftp configuration for the Satellite default 1 append initrd=new-as4/initrd.img ramdisk_size=10000 ksdevice=eth0 \ ks= More information can be found within the Red Hat Knowledgebase article

19 Tip #13 Sources of further information Problem Where can I find further information on RHN Satellite? Solution Red Hat Knowledgebase RHN Documentation RHN Satellite Users mailing list satellite users RHN Satellite comes with 24/7 support

20 Tip #14 Contacting Red Hat Support Problem My Satellite is not working, what should I do? Solution 1) Gather data, include RHN Satellite Debug /usr/bin/satellite-debug System Report /usr/sbin/sysreport RHN Proxy Debug (if needed) /usr/bin/rhn-proxy-debug 2) Contact Red Hat Support with data

21 End of presentation Questions? Appendix of technical on data RHN Satellite follows. Presentations still to come from RHN Life cycle management with Red Hat Network Provisioning Tracking performance with Red Hat Network Integrating and extending Red Hat Network: Custom content and APIs Is there any questions?

22 Appendix Technical Data RHN Satellite Components Apache Java & RHN Push Monitoring Database & Taskomatic Misc data

23 RHN Satellite Components Web Server Apache Satellite Web UI /XMLRPC /API Java Tomcat (new) RHN Push Jabber osa dispatcher (server side) osad (client side) Monitoring Technology (new) Monitoring Backend Monitoring Scout Database Server Oracle 9i Scheduled tasks Taskomatic

24 RHN Satellite Apache Apache processes within RHN Apache writes to various log files in Satellite handle multiple types of the follow locations requests /var/log/rhn/ Satellite Web UI with perl and /var/log/httpd/ java components /XMLRPC, /API & /APPLET via python Main configuration files /etc/httpd/conf/httpd.conf Misc files of note SSL Certificates used by Apache /etc/httpd/conf/ssl.key/server.key /etc/httpd/conf/ssl.crt/server.crt /etc/httpd/conf/rhn/ /etc/rhn/rhn.conf Runs with standard httpd daemon on ports 80 and 443

25 RHN Satellite Java & RHN Push Tomcat is communicated to via The jabber protocol is being used by Apache for portions of the Java Web RHN as a means of being able to UI within RHN Satellite 4.0 push scheduled actions to systems. Main configuration file Satellite connects to jabber (osa /etc/tomcat5/tomcat5.conf dispatcher) Main log directory Clients connect to jabber (osad) /var/log/tomcat5/ Main configuration files for push Tomcat daemon listens to ports 8005 technology /etc/jabberd/jabberd.cfg 8009 /etc/rhn/rhn.conf 8080 Main log files are /var/log/messages /var/log/rhn/osa dispatcher.log

26 RHN Satellite Monitoring Monitoring Backend Monitoring has one main nanny script Monitoring Scout which is gogo.pl Scout can also be on the same Nearly all Monitoring logging is done server as the backend within Some of the monitoring configuration /home/nocpulse/var/ files /opt/notification/var/ /etc/rhn/rhn.conf /etc/rhn/cluster.ini /etc/nocpulse.ini /etc/httpd/conf/rhn/rhn_monitoring.conf Specific to Scout /home/nocpulse/etc/satcluster.ini

27 RHN Satellite Database & Taskomatic RHN Satellite needs communication Taskomatic is a daemon that runs to an Oracle 9i Database Server constantly on RHN Satellite. It is used Embedded or External Oracle to execute scheduled tasks which are Main configuration files for database /etc/tnsnames.ora /etc/rhn/rhn.conf /opt/apps/oracle/config/9.2.0/spfil queued in the database. Uses /etc/rhn/rhn.conf configuration file. Logs into /var/log/messages erhnsat.ora Listener daemon (tnslsnr) runs localhost only on port 1290 Main log files for Oracle /var/log/rhn/rhn_database.log /rhnsat/admin/rhnsat/bdump/alert _rhnsat.log

28 Anything else I should know? The most important configuration file /etc/rhn/rhn.conf Two common general options of interest that can be changed traceback_mail change the default address alerts go to. Check this address for traceback s if something goes wrong debug default is 1, setting to 5 or 6 is enough for troubleshooting Restart RHN Satellite services using command service rhn-satellite restart This will run the following service scripts jabberd rhn-database osa-dispatcher taskomatic tomcat5 httpd Monitoring MonitoringScout