Retail Uyuni Server Setup
This section covers SUSE Manager for Retail Server setup, using these procedures:
-
Set up SUSE Manager with YaST
-
Create the main administration account
-
Add Software Channels
-
Check Synchronization Status
-
Trust GPG Keys on Clients
-
Register the Branch Server and Terminals as Clients
1. Set up SUSE Manager with YaST
This section guides you through SUSE Manager setup procedures.
-
On the SUSE Manager Server, at the command prompt, as root, start YaST:
yast2
-
Navigate to
to begin set up. -
From the introduction screen, select
and click Next to continue. -
Type an email address to receive status notifications and click Next to continue. SUSE Manager can sometimes send a large volume of notification emails. You can disable email notifications in the Web UI after setup, if you need to.
-
Type your certificate information and provide a password. Passwords must be at at least seven characters in length, and must not contain spaces, single or double quotation marks (
'
or"
), exclamation marks (!
), or dollar signs ($
). Always store your passwords in a secure location. You must have the certificate password to set up the SUSE Manager Proxy.Click btn:[Next] to continue.
-
Navigate to
screen, type a database username and password, and click Next to continue. Passwords must be at at least seven characters in length, and must not contain spaces, single or double quotation marks ('
or"
), exclamation marks (!
), or dollar signs ($
). Always store your passwords in a secure location.Click btn:[Next] to continue.
-
Click Yes to begin the setup process.
-
When setup is complete, click Next to continue. Take note of the address to access the SUSE Manager Web UI.
-
Click Finish to complete SUSE Manager setup.
2. Create the Main Administration Account
This section covers how to create your organization’s main administration account for SUSE Manager.
The main administration account has the highest authority within SUSE Manager. Ensure you keep access information for this account secure. We recommend that you create lower level administration accounts for organizations and groups. Do not share the main administration access details. |
-
In your web browser, enter the address for the SUSE Manager Web UI. This address was provided after you completed setup. For more information, see Set up SUSE Manager with YaST.
-
Sign in to the Web UI, navigate to the
field, and enter your organization name. -
In the
and fields, enter your username and password. -
Complete the
Account Information
fields, including an email for system notifications. -
Click Create Organization to finish creating your administration account.
When you have completed the SUSE Manager Web UI setup, you are taken to the
page.3. Add Software Channels
Before you register SUSE Manager branch servers and terminals to your SUSE Manager Server, check that you have the openSUSE product enabled, and the required channels are fully synchronized.
The products you need for this procedure are:
OS Version | Base Channel | Client Channel | Updates Channel | Other Channels |
---|---|---|---|---|
openSUSE Leap 15.3 |
opensuse_leap15_2 |
opensuse_leap15_2-uyuni-client |
opensuse_leap15_2-updates |
uyuni-proxy-stable-leap-152 |
-
SUSE Manager 서버의 명령 프롬프트에서 루트로
spacewalk-common-channels
명령을 사용하여 적절한 채널을 추가합니다.spacewalk-common-channels \ <base_channel_name> \ <child_channel_name_1> \ <child_channel_name_2> \ ... <child_channel_name_n>
-
채널을 다음과 같이 동기화합니다.
mgr-sync refresh --refresh-channels
4. Check Synchronization Status
-
In the SUSE Manager Web UI, navigate to
, then click the channel associated to the repository. -
Navigate to the
Repositories
tab, then clickSync
and checkSync Status
.
-
At the command prompt on the SUSE Manager Server, as root, use the
tail
command to check the synchronization log file:tail -f /var/log/rhn/reposync/<channel-label>.log
-
Each child channel generates its own log during the synchronization progress. You will need to check all the base and child channel log files to be sure that the synchronization is complete.
openSUSE channels can be very large. Synchronization can sometimes take several hours. |
5. Trust GPG Keys on Clients
By default, some operating systems do not trust the GPG key for the SUSE Manager client tools. The clients can be successfully bootstrapped without the GPG key being trusted. However, you will not be able to install new client tool packages or update them until the keys are trusted.
-
On the SUSE Manager Server, at the command prompt, check the contents of the
/srv/www/htdocs/pub/
directory. This directory contains all available public keys. Take a note of the key that applies to the client you are registering. -
Open the relevant bootstrap script, locate the
ORG_GPG_KEY=
parameter and add the required key. For example:uyuni-gpg-pubkey-0d20833e.key
You do not need to delete any previously stored keys. . If you are bootstrapping clients from the {productname} {webui}, you will need to use a Salt state to trust the key. Create the Salt state and assign it to the organization. You can then use an activation key and configuration channels to deploy the key to the clients.
6. Create Activation Key for a Branch Server and the Retail Terminals
The branch server is based on the SUSE Manager Proxy. Its activation key must contain these child channels:
-
openSUSE Leap 15.3 Updates (x86_64)
-
Uyuni Client Tools for openSUSE Leap 15.3 (x86_64)
-
Uyuni Proxy Stable for openSUSE Leap 15.3 (x86_64)
The activation key for retail terminals based on openSUSE Leap 15.3 must contain these child channels:
-
openSUSE Leap 15.3 Updates (x86_64)
-
Uyuni Client Tools for openSUSE Leap 15.3 (x86_64)
For more information about creating activation keys, see 활성화 키.
7. Register the Branch Server and Terminals as Clients
You register both the branch server and the terminals as openSUSE clients. To register your openSUSE clients, you need a bootstrap repository. By default, bootstrap repositories are automatically created, and regenerated daily for all synchronized products. You can manually create the bootstrap repository from the command prompt, using this command:
mgr-create-bootstrap-repo --with-custom-channels
For more information on registering your clients, see 클라이언트 등록 개요.
7.1. Register the Branch Server
A retail branch server is registered as an openSUSE proxy. The proxy can be bootstrapped using the Web UI, or at the command prompt. Ensure you use the activation key you created for the proxy.
For more information about proxies, see 프록시 등록. For more information about activation keys, see 활성화 키.
-
Check that the
Uyuni Proxy Stable for openSUSE Leap 15.3 (x86_64)
channel is assigned to the proxy on the system profile page. -
At the command prompt on the proxy, as root, install the proxy pattern:
zypper in -t pattern uyuni_proxy
-
Finalize the proxy setup:
configure-proxy.sh
[command]``configure-proxy.sh`` is an interactive script. For more information about the proxy setup script, see xref:installation:uyuni-proxy-setup.adoc#uyuni-proxy-setup-confproxy[].
-
OPTIONAL: If you want to use the same system also as a build host, navigate to the client’s system profile and check
OS Image Build Host
as aAdd-On System Types
. -
Configure the proxy to run as a branch server. For example:
retail_branch_init <branch_server_minion_id> --dedicated-nic eth1 \ --branch-ip 192.168.7.5 \ --netmask 255.255.255.0 \ --dyn-range 192.168.7.100 192.168.7.200 \ --server-domain branch.example.org \ --branch-prefix uyuni
For additional options, use the [command]``retail_branch_init --help`` command.