Marc Check the documentation https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/5.6/html-single/Installation_Guide/index.html#sect-Installation_Guide-Additional_Requirements-Firewall
Tell me if this is sufficient for you. Take Care ______________ Atenciosamente Waldirio msn: waldi...@gmail.com Skype: waldirio Site: www.waldirio.com.br Blog: blog.waldirio.com.br LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 PGP: www.waldirio.com.br/public.html On Tue, Nov 25, 2014 at 1:37 PM, Szabo, Marc <marc.sz...@priceline.com> wrote: > Waldirio, > > > > Another thought/question…. If I can’t get access to the spacewalk server > (nw-spcwlk-201) from my clients via the proxy, the next best thing would be > to open up firewall rules. Could you provide me with the ports/directions > (I have the IP addresses) for the firewall rules required to add a client > to the spacewalk server and patch them? > > > > Thanks. > Marc. > > > > > > *From:* spacewalk-list-boun...@redhat.com [mailto: > spacewalk-list-boun...@redhat.com] *On Behalf Of *Waldirio Manhães > Pinheiro > *Sent:* Monday, November 24, 2014 2:45 PM > > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Marc > > > > I'll try to prepare a post tonight, although about your connection, can > you access internet via console ?!, like elinks > http://yum.spacewalkproject.org/2.2-client/ > <http://yum.spacewalkproject.org/2.2-client/RHEL/5/$basearch/> ?! > > > > About your proxy, is request user and password or you need just define the > proxy port and the access will be without authentication ?! > > > > B'Regards > > > ______________ > Atenciosamente > Waldirio > msn: waldi...@gmail.com > Skype: waldirio > Site: www.waldirio.com.br > Blog: blog.waldirio.com.br > > LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 > PGP: www.waldirio.com.br/public.html > > > > On Mon, Nov 24, 2014 at 5:19 PM, Szabo, Marc <marc.sz...@priceline.com> > wrote: > > Hi Waldirio, > > > > I’m moving along on this implementation. I’ve successfully created Base > Channels for CentOS5, CentOS6 for both the Base and Update Channels! I > was also able to sync the errata using Steve’s script, but the erratas seem > to be low (only 60 errata for CentOS6 32-bit, Just 6 for CentOS5 64-bit, 0 > for CentOS5 32-bit and 318 for CentOS6 64-bit) does this sound correct? > > > > The reason for this post has to do with my next objective… to register > clients to the spacewalk server channels! I’ve created the activation keys > per channel, but when I attempt to install the spacewalk client, per the > instructions I found here: > https://fedorahosted.org/spacewalk/wiki/RegisteringClients > > I get the following problems. > > > > On a CentOS5 32-bit client server, I installed the yum repository, but > when I try to install the clients I get the following error messages: > > > > [root@nw-vp-001 CentOS5]# yum install rhn-client-tools rhn-check > rhn-setup rhnsd m2crypto yum-rhn-plugin > > (NOTE: fails the same with or without > --enablerepo=spacewalk-client.repo) > > Loaded plugins: fastestmirror > > Loading mirror speeds from cached hostfile > > > http://repos.fedorapeople.org/repos/candlepin/subscription-manager/epel-6/i386/repodata/repomd.xml: > [Errno 4] IOError: <urlopen error (111, 'Connection refused')> > > Trying other mirror. > > Error: Cannot retrieve repository metadata (repomd.xml) for repository: > subscription-manager. Please verify its path and try again > > > > Here is the content of the repository: > > > > [root@nw-vp-001 CentOS5]# cat /etc/yum.repos.d/spacewalk-client.repo > > [spacewalk-client] > > name=Spacewalk Client Tools > > baseurl=http://yum.spacewalkproject.org/2.2-client/RHEL/5/$basearch/ > > gpgkey=http://yum.spacewalkproject.org/RPM-GPG-KEY-spacewalk-2012 > > enabled=1 > > gpgcheck=1 > > proxy=http://nw-iwsva.corp.pcln.com:8080 ß I attempted to use our > proxy setting, but it fails with or without this entry. > > > > Any thoughts on what I’m doing wrong now? > > > > Thanks again. > > Marc. > > > > > > *From:* spacewalk-list-boun...@redhat.com [mailto: > spacewalk-list-boun...@redhat.com] *On Behalf Of *Waldirio Manhães > Pinheiro > *Sent:* Friday, November 21, 2014 1:42 PM > > > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Hello Marc, no problem > > > > Sorry, I was talking about it with another Marc :-) > > > > I'll for sure create a new post in my blog talking about how to configure > erratas in SW. ASAP I'll post here. > > > > B'Regards > > > ______________ > Atenciosamente > Waldirio > msn: waldi...@gmail.com > Skype: waldirio > Site: www.waldirio.com.br > Blog: blog.waldirio.com.br > > LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 > PGP: www.waldirio.com.br/public.html > > > > On Fri, Nov 21, 2014 at 4:26 PM, Szabo, Marc <marc.sz...@priceline.com> > wrote: > > Hi Waldirio, > > > > I’ve only tried Steve’s script (errata-import.pl ) to this point… I > feel that I’m very close to getting the desired results that I didn’t want > to go into another direction until I’ve exhausted all attempts with this > method. > > > > My time has been temporarily redirected to another issue, but I plan to > continue again as soon as I can. In the meantime, if you could provide > more detailed instructions on how to use these methods, that would be > greatly appreciated! > > > > Thank you. > > > > Marc. > > > > *From:* spacewalk-list-boun...@redhat.com [mailto: > spacewalk-list-boun...@redhat.com] *On Behalf Of *Waldirio Manhães > Pinheiro > *Sent:* Friday, November 21, 2014 12:51 PM > > > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Marc, > > > > About the another errata script that you was trying a few days ago, no > success !? > > > > I'll write a post talking about how configure both scripts. > > > > Take Care > > > ______________ > Atenciosamente > Waldirio > msn: waldi...@gmail.com > Skype: waldirio > Site: www.waldirio.com.br > Blog: blog.waldirio.com.br > > LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646 > PGP: www.waldirio.com.br/public.html > > > > On Fri, Nov 21, 2014 at 1:08 PM, Matthew Madey <mattma...@gmail.com> > wrote: > > You can export the variable on the commandline or in a script. > > > > # export SPACEWALK_USER=your_username > > # export SPACEWALK_PASS=your_password > > > > On Fri, Nov 21, 2014 at 7:58 AM, Szabo, Marc <marc.sz...@priceline.com> > wrote: > > Hi Matt, > > > > I’m trying to use the CEFS script to pull down the CentOS6.5 errata into > my spacewalk channel, and I’m still getting an error message that I’m not > sure what it means: > > > > I followed the instructions from Steve’s site: > > > > · Download the latest errata XML file HERE > <http://cefs.steve-meier.de/errata.latest.xml> (last updated: *November > 21, 2014*) > > · Download the errata-import.tar script HERE > <http://cefs.steve-meier.de/errata-import.tar> > > · Extract the downloaded tarball in an empty directory (tar xf > errata-import.tar) > > · Make the main script executeable (chmod 755 errata-import.pl) > > · Run the script and follow the instructions (./errata-import.pl) > > > > [root@nw-spcwlk-201 rh]# ls -tlrh > > total 6076 > > -rwxr-xr-x 1 root root 27K Oct 7 08:56 errata-import.pl > > -rw-r--r-- 1 mszabo bin 5.9M Nov 21 03:29 errata.latest.xml > > > > And this is what I get: > > [root@nw-spcwlk-201 rh]# ./errata-import.pl --server nw-spcwlk-201 > --errata errata.latest.xml > > INFO: Server is running API version 15 > > INFO: API version 15 is supported > > ERROR: *$SPACEWALK_USER not set* > > > > What and where do I set up a spacewalk user? > > > > Thanks. > > Marc. > > > > *From:* spacewalk-list-boun...@redhat.com [mailto: > spacewalk-list-boun...@redhat.com] *On Behalf Of *Matt Micene > *Sent:* Thursday, November 20, 2014 2:18 PM > > > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Marc, > > > > Ah so I thought you were having issues cloning exsiting errata in a > channel. With a repo sync, there are some additional steps that need to be > done since CentOS doesn’t publish errata in the repo (IIRC). There’s a few > solutions for pulling and publishing errata to a CentOS channel such as > CEFS, see here for a blog on how to use it > http://blog.christian-stankowic.de/?p=5653&lang=en > > > > Hope that proves helpful, > > Matt > > > > Matt Micene > > Solution Architect > > RHCA# 100-002-435 > > Direct 703-773-1195 > > > > *From:* spacewalk-list-boun...@redhat.com [ > mailto:spacewalk-list-boun...@redhat.com > <spacewalk-list-boun...@redhat.com>] *On Behalf Of *Szabo, Marc > *Sent:* Thursday, November 20, 2014 12:34 PM > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Matt, > > > > This is the command I issue from my Spacewalk Server: > > > > [root@nw-spcwlk-201 ~]# *spacewalk-repo-sync --channel centos5-i386 --url > **http://mirror.centos.org/centos/5/os/i386/* > <http://mirror.centos.org/centos/5/os/i386/>* --type yum* > > > > When the process completes, I only have the packages (2791) but 0 Erratas. > > > > So are you saying that if I just include a “-z” option to the above > command it would pull down the errata as well? > > > > Thanks. > > Marc. > > > > *From:* spacewalk-list-boun...@redhat.com [ > mailto:spacewalk-list-boun...@redhat.com > <spacewalk-list-boun...@redhat.com>] *On Behalf Of *Matt Micene > *Sent:* Thursday, November 20, 2014 12:02 PM > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Marc, > > > > Errata should be cloned as part of the spacewalk-clone-by-date process > based on the date provided by ‘-d’. The logic uses that to find the issue > date of the errata, so if you are missing errata you may want to try the > ‘-z’ option which expands the date criteria for finding relevant errata. > > > > What issues are you having with errata sync? > > > > Cheers, > > Matt > > > > Matt Micene > > Solution Architect > > RHCA# 100-002-435 > > Direct 703-773-1195 > > > > *From:* spacewalk-list-boun...@redhat.com [ > mailto:spacewalk-list-boun...@redhat.com > <spacewalk-list-boun...@redhat.com>] *On Behalf Of *Szabo, Marc > *Sent:* Thursday, November 20, 2014 11:17 AM > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > Hi Matthew, > > > > This is great information… this is exactly what I’m trying to do. > However, I’m having trouble sync’ing the Errata data. How are you sync’ing > the errata, if you don’t mind me asking. > > > > Thank you in advance for your help. > > > > Marc. > > > > *From:* spacewalk-list-boun...@redhat.com [ > mailto:spacewalk-list-boun...@redhat.com > <spacewalk-list-boun...@redhat.com>] *On Behalf Of *Matthew Madey > *Sent:* Thursday, November 20, 2014 10:53 AM > *To:* spacewalk-list@redhat.com > *Subject:* Re: [Spacewalk-list] Management of baselines > > > > This can easily be done, and I do something similar, but sync all Errata's > on a monthly basis on patch tuesday. > > > > Create your baseline channel that is fully up to date. Sync this baseline > channel nightly, so it's always current, but don't keep any systems > subscribed to it. Clone that channel, and use the clone channel for > patching systems. If you want to add a single Errata to the cloned channel, > you simply go to Channels-->Manage Software Channels-->Your cloned > channel-->Errata then click Add. You'll see your baseline channel as the > source, and can pick and choose whatever Errata or packages you'd like to > add into your clone channel. > > > > To refresh your clone channel on a monthly or quarterly basis, the easiest > way to do this is setup a channel mapping configuration file, and use > spacewalk-clone-by-date. Then you source your config file to that command > like such: > > > > spacewalk-clone-by-date > --config=/etc/rhn/channel-maps/datacenter-channels-rhel6.conf -d 2014-10-14 > > > > > > The below document explains in detail how to setup this kind of > configuration. > > https://access.redhat.com/node/469173/40/0 > > > > On Thu, Nov 20, 2014 at 9:15 AM, Nicolas Michel < > be.nicolas.mic...@gmail.com> wrote: > > Hello guys, > > I would want to create a baseline for my channels (a snapshot). And > regularly push in that baseline either choosen packages in function of > errata, or a full sync of the upstream channel. Here is a use case to > illustrate what I'm saying: say that I have my baseline which is a > snapshot of 1 month ago. We just discovered a critical security bug in > a package (like Shellshock) so I have to patch all my servers with > that particular set of packages (errata). I would want to push into my > baseline only that set of packages defined by the errata. How can I do > this? > The other use case: every 3 months, I have to patch all my servers > with all available patches. So I want to re-synchronize my baseline > from upstream (create a new snapshot). > > Currently, here is what I have and how I expected to do (but I'm not > sure it's the right way): > - I have in spacewalk a channel which is synchronized daily to the > upstream repository > - I created a clone of that channel. So I have my snapshot. > - Now I don't know how I can push in it selected erratas from my > original channel. > - I don't know either how to resynchronize the entire original channel. > > Thanks in advance, > > -- > Nicolas MICHEL > > _______________________________________________ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > > > > > _______________________________________________ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > > > > > _______________________________________________ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > > > > > _______________________________________________ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > > > > > _______________________________________________ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > > > > _______________________________________________ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list >
_______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list