SUSE Manager/Register Centos minions

From MicroFocusInternationalWiki
Jump to: navigation, search

SUSE Manager Main Page

These instructions are for obtaining the necessary salt-minion binaries and dependencies for adding RHEL7 native or CentOS7 native minions.

Warning: Please reference the matrix of SUSE Manager clients on the main page of this wiki for support information.

  • Salt minions require The latest minor RHEL release 7.3 or later as Redhat does not provide required packages for earlier releases.
  • Earlier versions can be bootstrapped with SUSE Manager using the 'traditional' client stack. Such a client should then be migrated to a supported release and may then be converted to supported 'Salt' clients
  • In case a consultant/partner/DSE is available, earlier RH versions could try to get required Salt package from a different source and start with Salt on RH versions < 7.3 => however this method would be self-supported / best-effort only.

You can integrate these instructions into a bootstrap script if you wish, that may enable you to perform other actions at the time of registration.

On CentOS6/RHEL6 you may need to add a line at the end of the /etc/yum.conf line to allow self-signed certificates to pass:

sslverify=false

Create bootstrap repository and add tools channel

Use mgr-sync to add the SUSE Manager Tools channel for your version of RH - here is the example for RHEL7:

 mgr-sync add channel rhel7-suse-manager-tools-x86_64

This should add the channel (provided with your SUSE Manager subscription), and a new base channel with 0 packages in it

 rhel7-pool-x86_64

The bootstrap repository creation tool - mgr-create-bootstrap-repo - will use this base channel and its children to create the needed repo for registering new clients. Thus it is necessary to clone your native RHEL7 server channel here for dependency resolution. Use spacecmd to accomplish this:

spacecmd softwarechannel_clone
Select source channel:  <<native-rhel7-server-os>>
Channel Name:    <<clone-native-rhel7-server-os>>
Channel Label:   <<clone-native-rhel7-server-os>>
Select Parent:  rhel7-pool-x86_64
Copy source channel GPG details? [y/N]: y
Original State (No Errata) [y/N]: N

Once this channel is cloned and the Tools channel has completed its sync, you can create the bootstrap repo with this command:

mgr-create-bootstrap-repo --with-custom-channels -c RES7-x86_64

You must add the GPG key for this repository to your bootstrap script in the ORG_GPG_KEY= list. You will find SUSE GPG signing keys in the /srv/www/htdocs/pub/ directory. It is safe to add all the keys beginning with 'sle' and 'res'.


The tools channel should then be cloned (current state) as a child channel under the parent channel to which your systems are subscribed. Add this child to the appropriate Activation Key and to any already-registered RHEL systems to provide ongoing access to client software updates.

Install and register a RHEL 7 native or Centos 7 minion

1. Add the Open Build Service repo for Salt:
yum-config-manager --add-repo http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/products/RHEL_7/

Alternatively you can create a /etc/yum.repos.d/rhel7-salt.repo file with this content

[rhel7-salt]
name=rhel7-salt
baseurl=http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/products/RHEL_7/
enabled=1
sslverify=0

2. Import the repo key:
rpm --import http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/products/RHEL_7/repodata/repomd.xml.key

3. Check if there's any other repo that contains Salt.
yum list --showduplicates salt
If there's only one repo listed then you're fine. If not disable any other repo that contains Salt apart from the OBS one.

4. Install the Salt minion:
yum install salt salt-minion

5. Change the Salt configuration to point to the Suse Manager server:
mkdir -p /etc/salt/minion.d
echo "master: <server fqdn>" > /etc/salt/minion.d/susemanager.conf

6. Restart the minion:
systemctl restart salt-minion

7. Go to the Web UI and accept the minion key.