{"id":368,"date":"2014-03-31T18:51:04","date_gmt":"2014-03-31T18:51:04","guid":{"rendered":"https:\/\/www.nicktailor.com\/?p=368"},"modified":"2020-06-17T09:04:38","modified_gmt":"2020-06-17T09:04:38","slug":"how-to-patch-using-rhn-satellite","status":"publish","type":"post","link":"https:\/\/nicktailor.com\/tech-blog\/how-to-patch-using-rhn-satellite\/","title":{"rendered":"How to patch using RHN Satellite 5.0"},"content":{"rendered":"

Create a roll back tag<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\n
\n
1.<\/span>Log into satellite<\/div>\n<\/div>\n
\n
2.<\/span>Click on Systems<\/div>\n
\n
\n
a.<\/span>Now select Systems Groups<\/div>\n<\/div>\n
\n
b.<\/span>Next to the group you wish to patch click on \u201cUse in SSM\u201d<\/div>\n<\/div>\n
\n
c.<\/span>Top right of screen click on Manage (you should see the number of machines for that group selected in brackets)<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
3.<\/span>Under Provisioning<\/div>\n
\n
\n
d.<\/span>Click on snapshot rollback<\/div>\n<\/div>\n
\n
e.<\/span>Now click on \u201cTag systems\u201d tab<\/div>\n<\/div>\n
\n
f.<\/span>Type in the name of the Tag as depending on the group ie (DEV1-Sept26-2013)<\/div>\n<\/div>\n
\n
g.<\/span>Click on Tag current snapshots (this will tag the whole group with a rollback tag, should you ever need to.<\/div>\n<\/div>\n
\n
h.<\/span>If you needed to roll back instead of \u201ctagsystems\u201d You would select the \u201cRollbback\u201d tab<\/em><\/div>\n<\/div>\n
\n
i.<\/span>Now Click on Manage again top right<\/em><\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
4.<\/span>Under Channels<\/div>\n
\n
\n
j.<\/span>Click on Channel memberships<\/div>\n<\/div>\n
\n
k.<\/span>Now Select Base Channels<\/div>\n<\/div>\n
\n
l.<\/span>Change the i386 channel to the Latest i386 channel available and do the same x86_64, you may also notice there are RHN5 & RHN6 channels.<\/div>\n<\/div>\n
\n
m.<\/span>Click on confirm subscriptions<\/div>\n<\/div>\n
\n
n.<\/span>Then click on Alter subscriptions bottom right<\/div>\n<\/div>\n
\n
o.<\/span>Now select child channels and ensure any childs you need are subscribed as well (Ie Clustering storage, Network tools, Vmware etc.<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
5.<\/span>Now click on Manage again, ensuring the correct number of servers is still being managed.<\/div>\n
\n
\n
p.<\/span>Click on Schedule errata updates<\/div>\n<\/div>\n
\n
q.<\/span>Scroll to bottom of screen and select all<\/div>\n<\/div>\n
\n
r.<\/span>Click on Apply Errata<\/div>\n<\/div>\n
\n
s.<\/span>And now Schedule Updates<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
6.<\/span>If you click on Schedule on the top menu should show you all the updates running<\/div>\n<\/div>\n
\n
7.<\/span>Click on Systems<\/div>\n
\n
\n
t.<\/span>Click on System Groups<\/div>\n<\/div>\n
\n
u.<\/span>Select the group you wish to view<\/div>\n<\/div>\n
\n
v.<\/span>Click on the \u201csystems\u201d tab inside the systems group<\/div>\n<\/div>\n
\n
w.<\/span>Now if you click on \u201csystems\u201d tab periodically you should see the patching counting down to zero, any server that is not counting down has an issue and you will need to log in as root to figure out what is wrong. (Refer Common problems and fixes)<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

Troubleshooting Guide <\/span><\/strong><\/p>\n

Errata does not appear to be counting down in systems group<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>Log into Culprit server<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>confirm that enabled = 1 <\/span><\/strong>is set in the file, cat \/<\/strong>etc<\/span>\/<\/strong>yum<\/span>\/<\/strong>pluginconf<\/span>.<\/strong>d<\/span>\/<\/strong>rhnplugin<\/span>.<\/strong>conf<\/span><\/div>\n

type cat<\/p>\n

If it isn’t set, the Satellite will try to use the local repos, and not the channels on the Satellite server<\/em><\/p>\n<\/div>\n

\n
\u2022<\/span>\u00a0<\/span>If the above doesn\u2019t work you may want to ensure the you can connect to the satellite server by running telnet to the satellite on the following ports<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>telnet kam1opapp99.connex.bclc.com 80<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>telnet kam1opapp99.connex.bclc.com 443<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>telnet kam1opapp99.connex.bclc.com 5222<\/div>\n
\n
\n
1.<\/span>The response you for all of these should look like<\/div>\n

Trying 10.20.0.8…<\/em><\/p>\n

Connected to kam1opapp99.connex.bclc.com.<\/em><\/p>\n

Escape character is ‘^]’.<\/em><\/p>\n

 <\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\u2022<\/span>\u00a0<\/span>Next run Yum \u2013y update, if you see any of the following errors<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>A common error is \u201ccpio<\/span><\/strong>:<\/span>\u00a0<\/span>open<\/span><\/strong>\u00a0<\/span>failed –<\/span>\u00a0<\/span>Permission denied<\/span> cpio<\/span><\/strong>:<\/span>\u00a0<\/span>open<\/span><\/strong>\u00a0<\/span>failed –<\/span>\u00a0<\/span>Permission denied“ <\/span><\/strong>or something similar<\/span><\/div>\n
\n
\n
2.<\/span>This usually means you have a mount point that is read only<\/div>\n<\/div>\n
\n
3.<\/span>Type mount<\/em> at the command prompt to see if that is the case.<\/div>\n

[root@kam1odapp19<dev>:~]# mount<\/p>\n

\/dev\/mapper\/vg_local-root on \/ type ext3 (rw)<\/p>\n

proc on \/proc type proc (rw)<\/p>\n

sysfs on \/sys type sysfs (rw)<\/p>\n

devpts on \/dev\/pts type devpts (rw,gid=5,mode=620)<\/p>\n

\/dev\/mapper\/vg_local-usr on \/usr type ext3 (rw,nodev)<\/p>\n

\/dev\/mapper\/vg_local-tmp on \/tmp type ext3 (rw,noexec,nosuid,nodev)<\/p>\n

\/dev\/mapper\/vg_local-home on \/home type ext3 (rw,nodev)<\/p>\n<\/div>\n<\/div>\n

\n
\n
\u2022<\/span>\u00a0<\/span>If you see (rw,nodev) on the \/usr mount<\/div>\n

(this mean you the partition is read only and yum can not write updates to the \/usr directory)<\/p>\n

\n
\n
\u25e6<\/span>\u00a0<\/span>To fix type mount \u2013o remount,rw \/usr<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>And yum \u2013y update again.<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n

\u2022<\/span>\u00a0<\/span>If this still fails then escalate to a Senior Linux System Administrator..hahaha, JUST JOKES \ud83d\ude1b<\/strong><\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\u2022<\/span>\u00a0<\/span>Upon reboot Server does not come backup<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>This could be the result of many things, however the most common is grub failure, to correct this we need to re-install grub manually from a RHN boot CD<\/div>\n
\n
\n
4.<\/span>Mount the VM or Server to a redhat disk 1.img file and boot to the prompt<\/div>\n<\/div>\n
\n
5.<\/span>At the prompt type \u201cLinux Rescue\u201d and hit <enter><\/div>\n<\/div>\n
\n
6.<\/span>Once you reach the boot prompt type \u201cchroot \/mnt\/sysimage\u201d (you should see a note telling you above the prompt on how to do it.<\/div>\n<\/div>\n
\n
7.<\/span>Now you want to view grub conf \u201ccat \/boot\/grub\/grub.conf\u201d and write down the following lines somewhere in notepad as you will need them<\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>kernel \/vmlinuz-2.6.18-348.6.1.el5 ro root=\/dev\/vg_local\/root rhgb quiet audit=1<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>initrd \/initrd-2.6.18-348.6.1.el5.img<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
8.<\/span>next cd into the \/boot directory<\/div>\n<\/div>\n
\n
9.<\/span>type \u201cgrub\u201d <enter> this will take you to the grub prompt<\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>now you need to tell grub to load the kernel & initrd manually indicated below<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>grub> kernel \/boot\/ vmlinuz-2.6.18-348.6.1.el5<\/div>\n

(result will look something like this)<\/em><\/strong><\/p>\n

[Linux-bzImage, setup=0x1400, size=0x15f464]<\/p>\n<\/div>\n

\n
\u25e6<\/span>\u00a0<\/span>grub> initrd \/boot\/ initrd-2.6.18-348.6.1.el5.img<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>(result will look something like this )<\/em><\/strong><\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>[Linux-initrd @ 0x376000, 0x79e3d bytes]<\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>If the initrd gives an error don\u2019t worry, it does that sometimes, proceed to setting up the on boot partition anyway<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>grub> setup (hd0)<\/div>\n

(Result \u2013should look like below)<\/em><\/strong><\/p>\n

Checking if “\/boot\/grub\/stage1” exists… yes<\/p>\n

Checking if “\/boot\/grub\/stage2” exists… yes<\/p>\n

Checking if “\/boot\/grub\/e2fs_stage1_5” exists… yes<\/p>\n

Running “embed \/boot\/grub\/e2fs_stage1_5 (hd0)”… failed (this is not fatal)<\/p>\n

Running “embed \/boot\/grub\/e2fs_stage1_5 (hd0,2)”… failed (this is not fatal)<\/p>\n

Running “install \/boot\/grub\/stage1 (hd0) \/boot\/grub\/stage2 p \/boot\/grub\/menu.lst “… succeeded<\/p>\n<\/div>\n

\n
\u25e6<\/span>\u00a0<\/span>Done.<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>Reboot image<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
10.<\/span>If that does not work escalate to Senior Systems Administrator
\nHAHAH…JUST JOKES \ud83d\ude1b<\/strong><\/em><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>File System Check Fails upon reboot<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>If you see the following message after a reboot<\/div>\n

G<\/span>ive root password for maintenance (or type Control-D to continue)<\/span><\/p>\n<\/div>\n

\n
\u25e6<\/span>\u00a0<\/span>You will need to boot into single user mode and run an fsck on the partition that is failing a file system check.<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>To boot into\u00a0<\/span>single user<\/span>\u00a0mode you edit the boot instructions for the GRUB menu entry you wish to boot and add the kernel parameter\/option\u00a0<\/span>single<\/span>. Brief instructions for how to do this are below.<\/span><\/div>\n
\n
\n
11.<\/span>Select (highlight) the GRUB boot menu entry you wish to use.<\/span><\/div>\n<\/div>\n
\n
12.<\/span>Press\u00a0<\/span>e<\/span>\u00a0to edit the GRUB boot commands for the selected boot menu entry.<\/span><\/div>\n<\/div>\n
\n
13.<\/span>Look near the bottom of the list of commands for lines similar to<\/div>\n

kernel \/vmlinuz-2.6.18-348.12.1.el5PAE ro root=LABEL=\/<\/p>\n<\/div>\n

\n
14.<\/span>You want to add \u201cinit=\/bin\/sh\u201d to the end of the kernel line and then hit \u201cB\u201d to Boot<\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>It should look like so<\/div>\n

kernel \/vmlinuz-2.6.18-348.12.1.el5PAE ro root=LABEL=\/ init=\/bin\/sh<\/p>\n<\/div>\n<\/div>\n<\/div>\n

\n
15.<\/span>Next you want to run fsck \u2013y <whatever partition that needs to checked><\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>You will run this on a unmounted partition, never run on a mounted partition as you can corrupt the data if you do.<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n


\nRHN Satellite Package <\/span>upgrade<\/span> and downgrade processes<\/span><\/strong><\/p>\n

Listing packages installed or available for upgrading on a host.<\/span><\/strong><\/p>\n

\n
\n
1.<\/span>Click on systems<\/div>\n
\n
\n
a.<\/span>Next click on the target hostname<\/div>\n<\/div>\n
\n
b.<\/span>Now click on the software tab<\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>If you click on list\/remove<\/strong> Installed packages this will show you the current listed packages for the target host, you can also search by the specific package in the search field above the listed packages<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>If you click on upgrade packages<\/strong>, this will only list the current available packages the host system is currently subscribed to.<\/div>\n

Note: just because you don\u2019t see newer packages available does not mean they are not out there.<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

Package Search on all available channels<\/span><\/strong><\/p>\n

.<\/span><\/span><\/p>\n<\/div>\n

\n
2.<\/span>There are two ways you can do this<\/div>\n
\n
\n
c.<\/span>Method 1 \u2013 Click on Channels<\/em> at the very top, then package search, next type in the package name<\/em><\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>Once you have found the package, click on the package name, and it will take you to a details screen, on that screen it will have available from: in that section it will list out the channels that are subscribed to satellite that have the package you are looking for available from.<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
d.<\/span>Method 2 \u2013 This is the way I like to do it \u2013 Click on systems<\/em>, then software tab<\/em>, and then install new packages<\/em><\/div>\n
\n
\n
\u2022<\/span>\u00a0<\/span>Next search for the package you wish to install, this will the latest available package from all channels available, and if you click on the package it will show the available channels for that specified package.<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

Upgrading packages<\/span><\/strong><\/p>\n

\n
\n
3.<\/span>Click on systems<\/em>, select the host, then software tab<\/em>, and then upgrade<\/span><\/div>\n
\n
\n
e.<\/span>Search for the packages you wish to upgrade and select them by checking the box to to the left of it<\/div>\n

Note: if you are going to do select all, I would recommend against this, as if you select this button, even its not listed on the page it will literally select all the packages available. So select them individually is the way to go.<\/em><\/strong><\/p>\n<\/div>\n

\n
f.<\/span>Once completed check boxing scroll down to the bottom right and select upgrade packages, it will go to another confirmation screen, click on confirm.<\/div>\n<\/div>\n
\n
g.<\/span>This will then be queued.<\/div>\n<\/div>\n
\n
h.<\/span>If you click on Events, you should see it there and shortly within 5 min window it should disappear, if it does not then something is wrong, and you need to get a hold of satellite admin to investigate.<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

Downgrading packages<\/span><\/strong><\/p>\n<\/div>\n

\n
4.<\/span>Click on systems<\/em>, select the host, then software tab<\/em>, and then profiles<\/div>\n
\n
\n
i.<\/span>Select the stored profile of the date\/time that Under \u201cCompare to Stored Profile\u201d and hit compare.<\/div>\n<\/div>\n
\n
j.<\/span>You should see a list of packages that it is now going to synch back to, select sync package bottom right.<\/div>\n<\/div>\n
\n
k.<\/span>You should see it go the events page, after about 5 mins it should no longer be listed in events, which means the server picked up the process and should begin downgrading shortly.<\/div>\n

.<\/span><\/span><\/p>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Create a roll back tag . 1.Log into satellite 2.Click on Systems a.Now select Systems Groups b.Next to the group you wish to patch click on \u201cUse in SSM\u201d c.Top right of screen click on Manage (you should see the number of machines for that group selected in brackets) 3.Under Provisioning d.Click on snapshot rollback e.Now click on \u201cTag systems\u201dRead More …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-368","post","type-post","status-publish","format-standard","hentry","category-red-hat-satellite"],"_links":{"self":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/comments?post=368"}],"version-history":[{"count":12,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/368\/revisions"}],"predecessor-version":[{"id":1072,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/368\/revisions\/1072"}],"wp:attachment":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/media?parent=368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/categories?post=368"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/tags?post=368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}