Hub deployment

1. Install a container host with SL Micro. For more information about SL Micro as a container host, see installation-and-upgrade:container-deployment/mlm/server-deployment-mlm.adoc#deploy-mlm-server-micro.

2. On the container host, deploy SUSE Multi-Linux Manager as the hub server using the third party certificate. Add --hubxmlrpc-replicas 1 to the mgradm install command line. For example:

   mgradm install podman --ssl-ca-root CA-Certificate.crt --ssl-server-cert hub.crt --ssl-server-key hub.key --ssl-db-ca-root CA-Certificate.crt --ssl-db-cert hud-db.crt --ssl-db-key hub-db.key --hubxmlrpc-replicas 1

1. Preliminary Requirement: A certificate for every peripheral server and its database (for example, server.crt) and a key (for example, server.key).

2. Preliminary Requirement: CA Certificate.

3. Preliminary Requirement: Hub server installation. For more information, see Hub server installation.

   • On every peripheral server host, copy the same CA to /etc/pki/trust/anchors/ and run update-ca-certificates.

   • On every peripheral server host, install SUSE Multi-Linux Manager using the following command (replace appropriately the names of the certificates):

   mgradm install podman --ssl-ca-root CA-Certificate.crt --ssl-server-cert server.crt --ssl-server-key server.key --ssl-db-ca-root CA-Certificate.crt --ssl-db-cert db.crt --ssl-db-key db.key

1. Install a container host with SL Micro. For more information about SL Micro as a container host, see installation-and-upgrade:container-deployment/mlm/server-deployment-mlm.adoc#deploy-mlm-server-micro.

2. On the container host, deploy SUSE Multi-Linux Manager as the hub server. Add --hubxmlrpc-replicas 1 to the mgradm install command line. For example:

   mgradm install podman MLM.example.com --hubxmlrpc-replicas 1

1. Preliminary Requirement: Hub server installation. For more information, see Hub server installation.

2. On the container host of the hub server, enter the server container with:

   mgrctl term

3. Inside the container, run rhn-ssl-tool for every peripheral server:

   rhn-ssl-tool --gen-server --dir="/root/ssl-build" --set-country="COUNTRY" \
     --set-state="STATE" --set-city="CITY" --set-org="ORGANIZATION" \
     --set-org-unit="ORGANIZATION UNIT" --set-email="name@example.com" \
     --set-hostname=PERIPHAL-FQDN

4. For every peripheral server:

   • From the hub server container, copy /root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT, /root/ssl-build/<hostname>/server.crt and /root/ssl-build/<hostname>/server.key to the peripheral server host.

   • On every peripheral server host, copy RHN-ORG-TRUSTED-SSL-CERT to /etc/pki/trust/anchors/, and run update-ca-certificates.

   • On every peripheral server host, deploy SUSE Multi-Linux Manager with:

   mgradm install podman --ssl-ca-root RHN-ORG-TRUSTED-SSL-CERT --ssl-server-cert server.crt --ssl-server-key server.key --ssl-db-ca-root RHN-ORG-TRUSTED-SSL-CERT --ssl-db-cert server.crt --ssl-db-key server.key