Waldirio, Another thought/question…. If I can’t get access to the spacewalk server (nw-spcwlk-201) from my clients via the proxy, the next best thing would be to open up firewall rules. Could you provide me with the ports/directions (I have the IP addresses) for the firewall rules required to add a client to the spacewalk server and patch them?
Thanks. Marc. From: spacewalk-list-boun...@redhat.com [mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Waldirio Manhães Pinheiro Sent: Monday, November 24, 2014 2:45 PM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Management of baselines Marc I'll try to prepare a post tonight, although about your connection, can you access internet via console ?!, like elinks http://yum.spacewalkproject.org/2.2-client/<http://yum.spacewalkproject.org/2.2-client/RHEL/5/$basearch/> ?! About your proxy, is request user and password or you need just define the proxy port and the access will be without authentication ?! B'Regards ______________ Atenciosamente Waldirio msn: waldi...@gmail.com<mailto:waldi...@gmail.com> Skype: waldirio Site: www.waldirio.com.br<http://www.waldirio.com.br> Blog: blog.waldirio.com.br<http://blog.waldirio.com.br> LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 PGP: www.waldirio.com.br/public.html<http://www.waldirio.com.br/public.html> On Mon, Nov 24, 2014 at 5:19 PM, Szabo, Marc <marc.sz...@priceline.com<mailto:marc.sz...@priceline.com>> wrote: Hi Waldirio, I’m moving along on this implementation. I’ve successfully created Base Channels for CentOS5, CentOS6 for both the Base and Update Channels! I was also able to sync the errata using Steve’s script, but the erratas seem to be low (only 60 errata for CentOS6 32-bit, Just 6 for CentOS5 64-bit, 0 for CentOS5 32-bit and 318 for CentOS6 64-bit) does this sound correct? The reason for this post has to do with my next objective… to register clients to the spacewalk server channels! I’ve created the activation keys per channel, but when I attempt to install the spacewalk client, per the instructions I found here: https://fedorahosted.org/spacewalk/wiki/RegisteringClients I get the following problems. On a CentOS5 32-bit client server, I installed the yum repository, but when I try to install the clients I get the following error messages: [root@nw-vp-001 CentOS5]# yum install rhn-client-tools rhn-check rhn-setup rhnsd m2crypto yum-rhn-plugin (NOTE: fails the same with or without --enablerepo=spacewalk-client.repo) Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile http://repos.fedorapeople.org/repos/candlepin/subscription-manager/epel-6/i386/repodata/repomd.xml: [Errno 4] IOError: <urlopen error (111, 'Connection refused')> Trying other mirror. Error: Cannot retrieve repository metadata (repomd.xml) for repository: subscription-manager. Please verify its path and try again Here is the content of the repository: [root@nw-vp-001 CentOS5]# cat /etc/yum.repos.d/spacewalk-client.repo [spacewalk-client] name=Spacewalk Client Tools baseurl=http://yum.spacewalkproject.org/2.2-client/RHEL/5/$basearch/ gpgkey=http://yum.spacewalkproject.org/RPM-GPG-KEY-spacewalk-2012 enabled=1 gpgcheck=1 proxy=http://nw-iwsva.corp.pcln.com:8080 <-- I attempted to use our proxy setting, but it fails with or without this entry. Any thoughts on what I’m doing wrong now? Thanks again. Marc. From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com>] On Behalf Of Waldirio Manhães Pinheiro Sent: Friday, November 21, 2014 1:42 PM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines Hello Marc, no problem Sorry, I was talking about it with another Marc :-) I'll for sure create a new post in my blog talking about how to configure erratas in SW. ASAP I'll post here. B'Regards ______________ Atenciosamente Waldirio msn: waldi...@gmail.com<mailto:waldi...@gmail.com> Skype: waldirio Site: www.waldirio.com.br<http://www.waldirio.com.br> Blog: blog.waldirio.com.br<http://blog.waldirio.com.br> LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 PGP: www.waldirio.com.br/public.html<http://www.waldirio.com.br/public.html> On Fri, Nov 21, 2014 at 4:26 PM, Szabo, Marc <marc.sz...@priceline.com<mailto:marc.sz...@priceline.com>> wrote: Hi Waldirio, I’ve only tried Steve’s script (errata-import.pl<http://errata-import.pl> ) to this point… I feel that I’m very close to getting the desired results that I didn’t want to go into another direction until I’ve exhausted all attempts with this method. My time has been temporarily redirected to another issue, but I plan to continue again as soon as I can. In the meantime, if you could provide more detailed instructions on how to use these methods, that would be greatly appreciated! Thank you. Marc. From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com>] On Behalf Of Waldirio Manhães Pinheiro Sent: Friday, November 21, 2014 12:51 PM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines Marc, About the another errata script that you was trying a few days ago, no success !? I'll write a post talking about how configure both scripts. Take Care ______________ Atenciosamente Waldirio msn: waldi...@gmail.com<mailto:waldi...@gmail.com> Skype: waldirio Site: www.waldirio.com.br<http://www.waldirio.com.br> Blog: blog.waldirio.com.br<http://blog.waldirio.com.br> LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 PGP: www.waldirio.com.br/public.html<http://www.waldirio.com.br/public.html> On Fri, Nov 21, 2014 at 1:08 PM, Matthew Madey <mattma...@gmail.com<mailto:mattma...@gmail.com>> wrote: You can export the variable on the commandline or in a script. # export SPACEWALK_USER=your_username # export SPACEWALK_PASS=your_password On Fri, Nov 21, 2014 at 7:58 AM, Szabo, Marc <marc.sz...@priceline.com<mailto:marc.sz...@priceline.com>> wrote: Hi Matt, I’m trying to use the CEFS script to pull down the CentOS6.5 errata into my spacewalk channel, and I’m still getting an error message that I’m not sure what it means: I followed the instructions from Steve’s site: • Download the latest errata XML file HERE<http://cefs.steve-meier.de/errata.latest.xml> (last updated: November 21, 2014) • Download the errata-import.tar script HERE<http://cefs.steve-meier.de/errata-import.tar> • Extract the downloaded tarball in an empty directory (tar xf errata-import.tar) • Make the main script executeable (chmod 755 errata-import.pl<http://errata-import.pl>) • Run the script and follow the instructions (./errata-import.pl<http://errata-import.pl>) [root@nw-spcwlk-201 rh]# ls -tlrh total 6076 -rwxr-xr-x 1 root root 27K Oct 7 08:56 errata-import.pl<http://errata-import.pl> -rw-r--r-- 1 mszabo bin 5.9M Nov 21 03:29 errata.latest.xml And this is what I get: [root@nw-spcwlk-201 rh]# ./errata-import.pl<http://errata-import.pl> --server nw-spcwlk-201 --errata errata.latest.xml INFO: Server is running API version 15 INFO: API version 15 is supported ERROR: $SPACEWALK_USER not set What and where do I set up a spacewalk user? Thanks. Marc. From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com>] On Behalf Of Matt Micene Sent: Thursday, November 20, 2014 2:18 PM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines Marc, Ah so I thought you were having issues cloning exsiting errata in a channel. With a repo sync, there are some additional steps that need to be done since CentOS doesn’t publish errata in the repo (IIRC). There’s a few solutions for pulling and publishing errata to a CentOS channel such as CEFS, see here for a blog on how to use it http://blog.christian-stankowic.de/?p=5653&lang=en Hope that proves helpful, Matt Matt Micene Solution Architect RHCA# 100-002-435 Direct 703-773-1195<tel:703-773-1195> From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Szabo, Marc Sent: Thursday, November 20, 2014 12:34 PM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines Matt, This is the command I issue from my Spacewalk Server: [root@nw-spcwlk-201 ~]# spacewalk-repo-sync --channel centos5-i386 --url http://mirror.centos.org/centos/5/os/i386/ --type yum When the process completes, I only have the packages (2791) but 0 Erratas. So are you saying that if I just include a “-z” option to the above command it would pull down the errata as well? Thanks. Marc. From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Matt Micene Sent: Thursday, November 20, 2014 12:02 PM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines Marc, Errata should be cloned as part of the spacewalk-clone-by-date process based on the date provided by ‘-d’. The logic uses that to find the issue date of the errata, so if you are missing errata you may want to try the ‘-z’ option which expands the date criteria for finding relevant errata. What issues are you having with errata sync? Cheers, Matt Matt Micene Solution Architect RHCA# 100-002-435 Direct 703-773-1195<tel:703-773-1195> From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Szabo, Marc Sent: Thursday, November 20, 2014 11:17 AM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines Hi Matthew, This is great information… this is exactly what I’m trying to do. However, I’m having trouble sync’ing the Errata data. How are you sync’ing the errata, if you don’t mind me asking. Thank you in advance for your help. Marc. From: spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> [mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Matthew Madey Sent: Thursday, November 20, 2014 10:53 AM To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] Management of baselines This can easily be done, and I do something similar, but sync all Errata's on a monthly basis on patch tuesday. Create your baseline channel that is fully up to date. Sync this baseline channel nightly, so it's always current, but don't keep any systems subscribed to it. Clone that channel, and use the clone channel for patching systems. If you want to add a single Errata to the cloned channel, you simply go to Channels-->Manage Software Channels-->Your cloned channel-->Errata then click Add. You'll see your baseline channel as the source, and can pick and choose whatever Errata or packages you'd like to add into your clone channel. To refresh your clone channel on a monthly or quarterly basis, the easiest way to do this is setup a channel mapping configuration file, and use spacewalk-clone-by-date. Then you source your config file to that command like such: spacewalk-clone-by-date --config=/etc/rhn/channel-maps/datacenter-channels-rhel6.conf -d 2014-10-14 The below document explains in detail how to setup this kind of configuration. https://access.redhat.com/node/469173/40/0 On Thu, Nov 20, 2014 at 9:15 AM, Nicolas Michel <be.nicolas.mic...@gmail.com<mailto:be.nicolas.mic...@gmail.com>> wrote: Hello guys, I would want to create a baseline for my channels (a snapshot). And regularly push in that baseline either choosen packages in function of errata, or a full sync of the upstream channel. Here is a use case to illustrate what I'm saying: say that I have my baseline which is a snapshot of 1 month ago. We just discovered a critical security bug in a package (like Shellshock) so I have to patch all my servers with that particular set of packages (errata). I would want to push into my baseline only that set of packages defined by the errata. How can I do this? The other use case: every 3 months, I have to patch all my servers with all available patches. So I want to re-synchronize my baseline from upstream (create a new snapshot). Currently, here is what I have and how I expected to do (but I'm not sure it's the right way): - I have in spacewalk a channel which is synchronized daily to the upstream repository - I created a clone of that channel. So I have my snapshot. - Now I don't know how I can push in it selected erratas from my original channel. - I don't know either how to resynchronize the entire original channel. Thanks in advance, -- Nicolas MICHEL _______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com> https://www.redhat.com/mailman/listinfo/spacewalk-list _______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com> https://www.redhat.com/mailman/listinfo/spacewalk-list _______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com> https://www.redhat.com/mailman/listinfo/spacewalk-list _______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com> https://www.redhat.com/mailman/listinfo/spacewalk-list _______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com> https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
