Salt SSH Push
Salt SSH Push is intended to be used in environments where your Salt clients cannot reach the SUSE Manager server directly to regularly checking in and, for example, fetch package updates.
|
Push via SSH
This feature is not related to Push via SSH for the traditional clients. For Push via SSH, see xref:bp.contact.methods.ssh.push[Salt SSH Push]. |
Overview
Salt provides “Salt SSH”
(salt-ssh), a feature to manage clients from a server.
It works without installing Salt related software on clients.
Using Salt SSH there is no need to have clients connected to the Salt master.
Using this as a SUSE Manager connect method, this feature provides similar functionality for Salt clients as the traditional Push via SSH feature for traditional clients.
This feature allows:
-
Managing Salt entitled systems with the Push via SSH contact method using Salt SSH.
-
Bootstrapping such systems.
Requirements
-
SSH daemon must be running on the remote system and reachable by the
salt-apidaemon (typically running on the SUSE Manager server). -
Python must be available on the remote system (Python must be supported by the installed Salt). Currently: python 2.6.
|
Unsupported Systems
Red Hat Enterprise Linux and CentOS versions ⇐ 5 are not supported because they do not have Python 2.6 by default. |
Bootstrapping
To bootstrap a Salt SSH system, proceed as follows:
-
Open the ).
-
Fill out the required fields. Select an contact method configured. For more information about activation keys, see: xref:ref.webui.systems.activ-keys.
-
Check the Manage system completely via SSH option.
-
Confirm with clicking the Bootstrap button.
Now the system will be bootstrapped and registered in SUSE Manager. If done successfully, it will appear in the Systems list.
Configuration
There are two kinds of parameters for Push via Salt SSH:
-
Bootstrap-time parameters - configured in the Bootstrapping page:
-
Host
-
Activation key
-
Password - used only for bootstrapping, not saved anywhere; all future SSH sessions are authorized via a key/certificate pair
-
-
Persistent parameters - configured SUSE Manager-wide:
-
sudo user - same as in bp.contact.methods.ssh.push.sudo.
-
Action Execution
The Push via Salt SSH feature uses a taskomatic job to execute scheduled actions using salt-ssh.
The taskomatic job periodically checks for scheduled actions and executes them.
While on traditional clients with SSH push configured only mgr_check is executed via SSH, the Salt SSH push job executes a complete salt-ssh call based on the scheduled action.
Known Limitation
-
OpenSCAP auditing is not available on Salt SSH clients.
-
Beacons do not work with Salt SSH.
-
Installing a package on a system using
zypperwill not invoke the package refresh. -
Virtual Host functions (for example, a host to guests) will not work if the virtual host system is Salt SSH-based.
-