My Favorites

Close

Please to see your favorites.


How to update Red Hat Enterprise Linux with SMT 10 SP3

This document (7001751) is provided subject to the disclaimer at the end of this document.

Environment

Subscription Management Tool (SMT) for SUSE Linux Enterprise 10
SUSE Linux Enterprise Server 10 Service Pack 3
Red Hat Enterprise Linux 6.0
Red Hat Enterprise Linux 5.2 (or newer)
Red Hat Enterprise Linux 4.7 (or newer)
Red Hat Enterprise Linux 3.9


Situation

Subscription Management Tool (SMT) for SUSE Linux Enterprise 10 Service Pack 3 (SMT10 SP3) enables customers that possess the required entitlements to mirror updates for Red Hat Enterprise Linux (RHEL). Refer to  http://www.novell.com/products/server/expandedsupport/offering_summary.html for details on SUSE Linux Enterprise Server Subscription with Expanded Support.
This document discusses the actions required to configure SMT server and clients (RHEL servers) for this solution.
NOTE : Configuring this with Subscription Management Tool 11 for running on SUSE Linux Enterprise Server 11 is slightly different and described in TID 7004324 - How to update Red Hat Enterprise Linux with SMT 11.

Resolution

On the SMT server perform the following steps to prepare it for mirroring and publishing updates for RHEL.
  1. Install (SUSE Linux Enterprise Server (SLES) 10 SP3 with) the SMT10 SP3 add-on product as per the documentation on the respective products.
  2. During SMT setup, use mirroring credentials that have access to Novell-provided RHEL update catalogs
  3. Update the 'smt' package with one that provides support for mirroring  RHEL, which means version 1.0.6-0.2 and newer.
    The update can be obtained either from http://download.novell.com or an SMT repository that is mirroring the SLE10-SP3-SMT-Updates catalog.
  4. Update list of products known by the SMT server with the following command :
    # smt-ncc-sync
  5. Verify that the mirror credentials have access to download updates for the RedHat products with
    # smt-catalogs -m | grep RES
  6. Enable mirroring of the RHEL update catalog(s) for the desired architecture(s)
    # smt-catalogs -e <catalog-name> <architecture>
  7. Mirror the updates and log verbose output :
    # smt-mirror -d -L /var/log/smt-mirror.log
    The updates for RHEL will also be mirrored automatically as part of the default nightly SMT mirroring cron job.
    When the mirror process of the catalogs for your RHEL products has completed, the updates are available via http://<smt-server.your-domain.top/repo/$RCE/<catalog-name>/<architecture>/
  8. To enable gpg checking of the repositories, the key used to sign the repositories needs to be made available to the RHEL clients. The simplest way to do this is to download and publish it within the SMT repository structure like this:
    • Go to the Signing Keys page on the Novell Customer Center portal. This page can be accessed by hovering over the My Products link on the left navigation menu and selecting Signing Keys (right below Mirror Credentials). Here you will find the gpg key that is used to sign the RHEL repositories that you mirror with SMT.
    • Download the key file from the link at the bottom of the page and save it to for example $MirrorTo/repo/res-signingkey.txt/
      e.g. /srv/www/htdocs/repo/res-signingkey.txt
    • Verify that the key file is accessible from a client
    Now the key is available to the clients and can be imported into their RPM database as described later.

Configuring the YUM client on RHEL 5.2 (or newer) and RHEL 6.0 to consume updates from SMT :
  1. Import the repository signing key downloaded above into the local RPM database with a command like :
    # rpm --import http://<smt-server.domain.top>/repo/res-signingkey.txt
  2. Create a file in /etc/yum.repos.d/ and name it RES5.repo or RES6.repo respectively
  3. Edit the file and enter the repository data and point to the catalog on the SMT server as follows :
    [smt]
    name=SMT repository
    baseurl=http://<smt-server.domain.top>/repo/$RCE/<catalog-name>/<architecture>/
    enabled=1
    gpgcheck=1


    Examples of baseurl : http://smt.mycompany.com/repo/$RCE/RES5/i386/
                   
    http://smt.mycompany.com/repo/$RCE/RES6/x86_64
  4. Save the file
  5. Disable standard RedHat repositories by setting
    "enabled=0"
    in the repository entries in other files in /etc/yum.repos.d/ (if any are enabled).
Both yum and the update notification applet should work correctly now and notify of available updates when applicable. It might be needed to restart the applet.

Configuring the UP2DATE client on RHEL 3.9 and 4.7 (or newer) to consume updates from SMT :
  1. Import the repository signing key downloaded above into the local RPM database with a command like :
    # rpm --import http://<smt-server.domain.top>/repo/res-signingkey.txt
  2. Edit the file /etc/sysconfig/rhn/sources and make the following changes:
  3. Comment out any lines starting with "up2date".
    Normally, there will be a line like this that says "up2date default".
  4. Add an entry pointing to the SMT repository (all in one line):
    yum <repo-name> http://<smt-server.domain.top>/repo/$RCE/<catalog-name>/<architecture>/
    where <repo-name> should be set to RES3 for 3.9 and RES4 for 4.7 (or newer).
  5. Save the file
Both up2date and the update notification applet should work correctly now, pointing to the SMT repository and signaling updates when applicable. It might be needed to restart the applet.

In order to ensure correct reporting of the RedHat Enterprise systems in Novell Customer Center, they need to be registered against your SMT server. For this a special suseRegisterRES package is provided through the RES* catalogs and it should be installed, configured and executed as described below.

Registering RHEL 5.2 (or newer) and RHEL 6.0 against SMT :
  1. Install the suseRegisterRES package
    # yum install suseRegisterRES
    Note: you might need to install perl-Crypt-SSLeay andperl-XML-Parser packages from the original RHEL media.
  2. Copy the SMT certificate to the system :
    # wget http://<smt-server.domain.top>/smt.crt
    # cat smt.crt >> /etc/pki/tls/cert.pem
  3. Edit /etc/suseRegister.conf to point to SMT by changing the url value to :
    url = https://<smt-server.domain.top>/center/regsvc/
  4. Register the system :
    # suse_register
Registering RHEL 4.7 (or newer) and RHEL 3.9 against SMT :
  1. Install the suseRegisterRES package :
    # up2date --get suseRegisterRES
    # up2date --get perl-XML-Writer
    # rpm -ivh /var/spool/up2date/suseRegisterRES*.rpm /var/spool/up2date/perl-XML-Writer-0*.rpm
    Note: you might need to install perl-Crypt-SSLeay package from the original RHEL media.
  2. Copy the SMT certificate to the system :
    # wget http://<smt-server.domain.top>/smt.crt
    # cat smt.crt >> /usr/share/ssl/cert.pem
  3. Edit /etc/suseRegister.conf to point to SMT by changing the url value to :
    url = https://<smt-server.domain.top>/center/regsvc/
  4. Register the system :
    # suse_register

Disclaimer

This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7001751
  • Creation Date:28-OCT-08
  • Modified Date:27-APR-12
    • SUSESubscription Management Tool
      SUSE Linux Enterprise Server

Did this document solve your problem? Provide Feedback