This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| spacewalk_centos6 [2015/03/05 09:45] – herwarth | spacewalk_centos6 [2015/03/05 10:05] (current) – herwarth | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | installation spacewalk | + | ======Spacewalk server with own default organization |
| + | =====Installation===== | ||
| + | ====Repositories==== | ||
| + | rpm -Uvh http:// | ||
| + | rpm -Uvh http:// | ||
| + | <code - / | ||
| + | [jpackage-generic] | ||
| + | name=JPackage generic | ||
| + | # | ||
| + | mirrorlist=http:// | ||
| + | enabled=1 | ||
| + | gpgcheck=1 | ||
| + | gpgkey=http:// | ||
| + | </ | ||
| + | ====Installation of the packages==== | ||
| + | < | ||
| yum install spacewalk-setup-embedded-postgresql | yum install spacewalk-setup-embedded-postgresql | ||
| yum install spacewalk-postgresql | yum install spacewalk-postgresql | ||
| yum install perl-TermReadKey | yum install perl-TermReadKey | ||
| + | </ | ||
| - | # vi / | + | =====Configuration===== |
| + | ====Iptables==== | ||
| + | <code - / | ||
| + | . | ||
| + | . | ||
| -A INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j ACCEPT | -A INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j ACCEPT | ||
| -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT | -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT | ||
| Line 17: | Line 35: | ||
| -A INPUT -m state --state NEW -m udp -p udp --dport 25150 -j ACCEPT | -A INPUT -m state --state NEW -m udp -p udp --dport 25150 -j ACCEPT | ||
| -A INPUT -m state --state NEW -m tcp -p tcp --dport 25151 -j ACCEPT | -A INPUT -m state --state NEW -m tcp -p tcp --dport 25151 -j ACCEPT | ||
| + | . | ||
| + | . | ||
| + | </ | ||
| - | # service iptables restart | + | |
| + | ====GPG==== | ||
| + | gpg --gen-key | ||
| - | # gpg --gen-key | + | |
| - | # gpg --list-keys | + | < |
| / | / | ||
| ------------------------ | ------------------------ | ||
| Line 27: | Line 50: | ||
| uid Helux < | uid Helux < | ||
| sub | sub | ||
| - | + | </ | |
| - | # gpg --list-secret-keys | + | gpg --list-secret-keys |
| + | < | ||
| / | / | ||
| ------------------------ | ------------------------ | ||
| Line 34: | Line 58: | ||
| uid Helux < | uid Helux < | ||
| ssb | ssb | ||
| + | </ | ||
| - | # gpg --export -a B06EB1AF > / | + | |
| - | # gpg --export-secret-keys -a B06EB1AF > / | + | gpg --export-secret-keys -a B06EB1AF > / |
| - | # only when the keys are not on the system anymore | + | Only when the keys are not on the system anymore |
| + | gpg --import / | ||
| + | gpg --allow-secret-key-import --import / | ||
| - | # gpg --import | + | Change organization name |
| - | # gpg --allow-secret-key-import --import | + | vi /usr/share/spacewalk/setup/spacewalk-public.cert |
| - | # vi / | + | ====First |
| - | change organization name | + | spacewalk-setup --disconnected |
| - | + | You will get the following error: | |
| - | # spacewalk-setup --disconnected | + | < |
| . | . | ||
| . | . | ||
| There was a problem activating the satellite: Could not parse certificate file. | There was a problem activating the satellite: Could not parse certificate file. | ||
| - | # | + | </ |
| - | # gpg --list-keys | + | ====Create a new certificate signed by our own key==== |
| + | | ||
| + | < | ||
| / | / | ||
| ------------------------ | ------------------------ | ||
| Line 61: | Line 90: | ||
| pub | pub | ||
| uid Red Hat, Inc (Red Hat Network) < | uid Red Hat, Inc (Red Hat Network) < | ||
| + | </ | ||
| - | # | + | Download the magic script {{: |
| - | # ./ | + | |
| - | # spacewalk-setup --disconnected --skip-db-install | + | ====Second setup run==== |
| + | | ||
| - | # vi / | + | ====PAM authentication==== |
| + | <code - / | ||
| #%PAM-1.0 | #%PAM-1.0 | ||
| auth required / | auth required / | ||
| Line 74: | Line 106: | ||
| auth required / | auth required / | ||
| account required / | account required / | ||
| - | + | </ | |
| - | # vi / | + | <code - / |
| pam_auth_service = rhn-satellite | pam_auth_service = rhn-satellite | ||
| + | </ | ||
| - | cobbler get-loaders | + | ====Cobbler/ |
| - | cd / | + | |
| - | cp * / | + | cd / |
| - | + | cp * / | |
| - | done! | + | |