<div dir="ltr">Another option, if you are familiar with creating custom RPM's, is to simply create an RPM that contains the prerequisite packages and their dependencies. Upon installation of the RPM on the client, the needed packages for registration are extracted and installed locally. You can even add in a script to handle the registration if you like. This way you only need to deploy a single file to each of your client systems. This method has worked very well for me. </div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 19, 2015 at 6:08 PM, <span dir="ltr"><<a href="mailto:prmarino1@gmail.com" target="_blank">prmarino1@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="background-color:rgb(255,255,255);line-height:initial"><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Why don't you use the bootstrap script for those clients? It's really easy to copy the template and plugin the few pieces of information you need to get it to work for your environment. In my environment I have several spanning RHEL, Scientific Linux CentOS and soon Oracle Linux (yuck) for a multi-org environment.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">That said the bootstrap scripts could use some enhancement and I've been thinking about writing a RFE laying out what's needed.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Simply stated there should be a web page to generate them for specific distros and activation keys.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Further more the base packages it installs to get the registration to work should come from the distro specific base and the spacewalk client repo for that distro instead of thr RHEL version which is its builtin behavior like the kickstarts attempt to do as well. I've implemented a hack in mine to do that but it should be configurable via the Web page in a similar manner to kickstarts. Incidentally the kickstarts are where I get the URI for the correct repos on the spacewalk server and they don't require authentication.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">I think I get what you are doing with the vhost it's similar to what a lot of people do with mrepo but you can do it with a directory instead of a vhost and there are a few components of spacewalk that at least historically don't interact with other vhosts‎ on the same box. I also do something similar with ISOs mounted on a loopback and a directory statement in my apache config to initially populate new versions of distros into spacewalk.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br name="BB10"></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">That is unless I have it all wrong and you are spoofing the DNS domains for the public yum repos to redirect them to your box.</div><span class=""><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><span style="font-size:initial;text-align:initial;line-height:initial"><br name="BB10"></span></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br name="BB10"></div> <div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Sent from my BlackBerry 10 smartphone.</div> </span><table width="100%" style="background-color:white;border-spacing:0px"> <tbody><tr><td colspan="2" style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)"> <div style="border-style:solid none none;border-top-color:rgb(181,196,223);border-top-width:1pt;padding:3pt 0in 0in;font-family:Tahoma,'BB Alpha Sans','Slate Pro';font-size:10pt"> <div><b>From: </b>Joe Belliveau</div><div><b>Sent: </b>Monday, January 19, 2015 17:57</div><div><div class="h5"><div><b>To: </b><a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a></div><div><b>Reply To: </b><a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a></div><div><b>Subject: </b>Re: [Spacewalk-list] general inquiry about client install/registration</div></div></div></div></td></tr></tbody></table><div><div class="h5"><div style="border-style:solid none none;border-top-color:rgb(186,188,209);border-top-width:1pt;font-size:initial;text-align:initial;background-color:rgb(255,255,255)"></div><br><div>The host sits on a squid proxy, I rsync just the repos i need from epel and only allow that specific url to pass from the web server. spacewalk uses the proxy as well. However my spacewalk servers are all linked to each other… so only 1 has internet access to retrieve packages… matter of fact the one only reach out to a specific redhat server to pull patches. the web server hosting the epel packages are not on spacewalk… they reside on one of my corporate web servers and its a simple host to a locked folder.<div><br></div><div>Every host in my infrastructure does not see the outside world at all. This is why we use spacewalk and spacewalk slaves.</div><div><br></div><div>Every aspect is controlled.. I hardly think medical environments are as heavily scrutinized as financial institutions but I have never dealt with many fins.</div><div><br></div><div>the vhost is just a redirect to a locked up folder, it makes it easier to setup and also makes it easier for systems that do not have all packages installed… when we purchase redhat based appliances we rely heavily on getting spacewalk access to these hosts, for reporting back to the vendors. A simple yum repo file and we can easily install the packages we need to get spacewalk on the host.</div><div><br></div><div>Again this is my environment and has worked quite well for us. What works for me may not work for you. But Im just giving the user who asked a simple solution.</div><div><br></div><div>—Joe</div><div><br><div><blockquote type="cite"><div>On Jan 19, 2015, at 5:14 PM, <a href="mailto:prmarino1@gmail.com" target="_blank">prmarino1@gmail.com</a> wrote:</div><br><div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);width:1171px;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)">I've worked for two stock exchanges, ‎I've done infosec for several banks and currently work in a mission critical environment where a large portion of my job is infosec and there is a fairly high probability if I can set the time aside that I will get a CISP cert this year. None of my production servers except for my spacewalk servers are in a isolated vlan which has outbound internet access that is only to natted private IPs. Furthermore when I worked for the stock exchanges our satellite servers went through a squid proxy which limited them to specific URI's and virus scanned all traffic. so I really do understand security but again I'm failing to understand the requirement and even so the whole adding a vhost to the spacewalk server is superfluous and in the case of spacewalk may cause problems.</div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);width:1171px;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)"><br></div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);width:1171px;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)">If some one can give a full explanation of the specific security concerns and requirements I can suggest ‎several ranging from simple to more elaborate methods for handling them which have been tested and follow best practices appropriate to the environment.</div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);width:1171px;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)"><br></div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);width:1171px;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)">By the way rsync won't work with the spacewalk repos you need to use wget recursively "-r" instead</div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);width:1171px;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)"><br></div><div style="font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);font-size:initial;font-family:Calibri,'Slate Pro',sans-serif;color:rgb(31,73,125)">Sent from my BlackBerry 10 smartphone.</div><table width="100%" style="font-family:Helvetica;letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;background-color:white;border-spacing:0px"><tbody><tr><td colspan="2" style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)"><div style="border-style:solid none none;border-top-color:rgb(181,196,223);border-top-width:1pt;padding:3pt 0in 0in;font-family:Tahoma,'BB Alpha Sans','Slate Pro';font-size:10pt"><div><b>From:<span> </span></b>Brian Kinney</div><div><b>Sent:<span> </span></b>Monday, January 19, 2015 15:00</div><div><b>To:<span> </span></b><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list@redhat.com</a></div><div><b>Reply To:<span> </span></b><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list@redhat.com</a></div><div><b>Subject:<span> </span></b>Re: [Spacewalk-list] general inquiry about client install/registration</div></div></td></tr></tbody></table><div style="font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:initial;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);border-style:solid none none;border-top-color:rgb(186,188,209);border-top-width:1pt;font-size:initial"></div><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:white"><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I have to agree with Joe here.</span></div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I am not overly security paranoid, but I’d plan to lock down the OS deployment/patch services for 90% of the servers in my company too – whether or not I had a gov’t contract to protect. Also, I am not finding this a “complicated solution.” After working for a banking system, this is comparatively trivial.<span> </span></span></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Brian</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"></span></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p><div><div style="border-style:solid none none;border-top-color:rgb(225,225,225);border-top-width:1pt;padding:3pt 0in 0in"><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"><span> </span><a href="mailto:spacewalk-list-bounces@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list-bounces@redhat.com</a><span> </span>[mailto:<a href="mailto:spacewalk-list-bounces@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list-bounces@redhat.com</a>]<span> </span><b>On Behalf Of<span> </span></b><a href="mailto:prmarino1@gmail.com" style="color:purple;text-decoration:underline" target="_blank">prmarino1@gmail.com</a><br><b>Sent:</b><span> </span>Monday, January 19, 2015 10:49 AM<br><b>To:</b><span> </span><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list@redhat.com</a>;<span> </span><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list@redhat.com</a><br><b>Subject:</b><span> </span>Re: [Spacewalk-list] general inquiry about client install/registration</span></div></div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;background-color:white"><span style="font-family:Calibri,sans-serif;color:rgb(31,73,125)">Wow you guys do like complicated solutions why not just put the repo in a subdirectory of /pub off the docroot ‎spacewalk doesn't password protect that directly off the webserver for just such uses.</span></div></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;background-color:white"><span style="font-family:Calibri,sans-serif;color:rgb(31,73,125)"><br><br></span></div></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;background-color:white"><span style="font-family:Calibri,sans-serif;color:rgb(31,73,125)">Just to be clear what repos precisely are you intending to mirror? Server, client, EPEL or what?</span><span style="color:rgb(31,73,125)"></span></div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;background-color:white;background-repeat:initial initial"><span style="font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif;background-color:white"><span style="font-family:Calibri,sans-serif;color:rgb(31,73,125)">Sent from my BlackBerry 10 smartphone.</span></div></div><table border="0" cellpadding="0" width="100%" style="width:1171px;background-color:white;border-spacing:0px;background-repeat:initial initial"><tbody><tr><td style="padding:0.75pt;font-size:initial;text-align:initial"><div style="border-style:solid none none;border-top-color:rgb(181,196,223);border-top-width:1pt;padding:3pt 0in 0in"><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:10pt;font-family:Tahoma,sans-serif">From:<span> </span></span></b><span style="font-size:10pt;font-family:Tahoma,sans-serif">Joe Belliveau</span></div></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:10pt;font-family:Tahoma,sans-serif">Sent:<span> </span></span></b><span style="font-size:10pt;font-family:Tahoma,sans-serif">Monday, January 19, 2015 12:38</span></div></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:10pt;font-family:Tahoma,sans-serif">To:<span> </span></span></b><span style="font-size:10pt;font-family:Tahoma,sans-serif"><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list@redhat.com</a></span></div></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:10pt;font-family:Tahoma,sans-serif">Reply To:<span> </span></span></b><span style="font-size:10pt;font-family:Tahoma,sans-serif"><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank">spacewalk-list@redhat.com</a></span></div></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:10pt;font-family:Tahoma,sans-serif">Subject:<span> </span></span></b><span style="font-size:10pt;font-family:Tahoma,sans-serif">Re: [Spacewalk-list] general inquiry about client install/registration</span></div></div></div></td></tr></tbody></table><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">Also here is another one. if you want to use nfs as well.</div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><a href="http://wiki.centos.org/HowTos/CreateLocalRepos?action=fullsearch&value=linkto:%22HowTos/CreateLocalRepos%22&context=180" style="color:purple;text-decoration:underline" target="_blank">http://wiki.centos.org/HowTos/CreateLocalRepos?action=fullsearch&value=linkto%3A%22HowTos/CreateLocalRepos%22&context=180</a></div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">—Joe</div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><blockquote style="margin-top:5pt;margin-bottom:5pt"><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">On Jan 19, 2015, at 12:18 PM, Brian Kinney <<a href="mailto:brian.kinney@memeo-inc.com" style="color:purple;text-decoration:underline" target="_blank">brian.kinney@memeo-inc.com</a>> wrote:</div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Sounds great! Never built a mirror like this. Any suggestions/URLs where a quality example could be found?</span></div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p><div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Brian</span></div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:7.5pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">This e-mail is private and may be confidential and is for the intended recipient only. If misdirected, please notify us by telephone and confirm that it has been deleted from your system and any copies destroyed. If you are not the intended recipient you are strictly prohibited from using, printing, copying, distributing or disseminating this e-mail or any information contained in it. We use reasonable measures to virus scan all E-mails leaving UNICOM Global but no warranty is given that this E-mail and any attachments are virus free. You should ensure you have adequate measures in place for your own virus checking.</span></div></div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span></p><div><div style="border-style:solid none none;border-top-color:rgb(225,225,225);border-top-width:1pt;padding:3pt 0in 0in"><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></span><span style="font-size:11pt;font-family:Calibri,sans-serif"><a href="mailto:spacewalk-list-bounces@redhat.com" style="color:purple;text-decoration:underline" target="_blank"><span style="color:purple">spacewalk-list-bounces@redhat.com</span></a><span> </span>[mailto:<a href="mailto:spacewalk-list-bounces@redhat.com" style="color:purple;text-decoration:underline" target="_blank"><span style="color:purple">spacewalk-list-bounces@redhat.com</span></a>]<span> </span><b>On Behalf Of<span> </span></b>Joe Belliveau<br><b>Sent:</b><span> </span>Monday, January 19, 2015 5:52 AM<br><b>To:</b><span> </span><a href="mailto:spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank"><span style="color:purple">spacewalk-list@redhat.com</span></a><br><b>Subject:</b><span> </span>Re: [Spacewalk-list] general inquiry about client install/registration</span></div></div></div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">This can be done easily.</div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">I mirror the packages to a local apache redirect on the spacewalk server… </div></div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">It can easily be done.</div></div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">—Joe</div></div></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><blockquote style="margin-top:5pt;margin-bottom:5pt"><div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif">On Jan 19, 2015, at 8:32 AM, Edsall, William (WJ) <<a href="mailto:WJEdsall@dow.com" style="color:purple;text-decoration:underline" target="_blank"><span style="color:purple">WJEdsall@dow.com</span></a>> wrote:</div></div></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p><div><p class="MsoNormal" style="margin:0in 0in 5pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif">Hello list,</span></p><p class="MsoNormal" style="margin:0in 0in 5pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif">Just a general question about clients.<span> </span></span></p><div style="margin-bottom:5pt"><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></p></div><p class="MsoNormal" style="margin:0in 0in 5pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif">One reason for my investigation into satellite/spacewalk is due to network security and lack of internet access to our linux machines. I was surprised when the spacewalk documentation mentioned external yum installs in order to get spacewalk ready; was really hoping this was done 100% internal with the spacewalk server.</span></p><div style="margin-bottom:5pt"><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></p></div><p class="MsoNormal" style="margin:0in 0in 5pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif">So my question is – what’s the best practice to move everything internal? Can it be done? Should I look further into the bootstrap procedure?</span></p><div style="margin-bottom:5pt"><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></p></div><div style="margin-bottom:5pt"><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></p></div><div style="margin-bottom:5pt"><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></p></div><p class="MsoNormal" style="margin:0in 0in 5pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif">Thanks,</span></p><p class="MsoNormal" style="margin:0in 0in 5pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif">William</span></p><div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:11pt;font-family:Calibri,sans-serif"> </span></p></div><div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:9pt;font-family:Helvetica,sans-serif">_______________________________________________<br>Spacewalk-list mailing list<br></span><a href="mailto:Spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank"><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:purple">Spacewalk-list@redhat.com</span></a><span style="font-size:9pt;font-family:Helvetica,sans-serif"><br></span><a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" style="color:purple;text-decoration:underline" target="_blank"><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:purple">https://www.redhat.com/mailman/listinfo/spacewalk-list</span></a></div></div></div></blockquote></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><span style="font-size:9pt;font-family:Helvetica,sans-serif">_______________________________________________<br>Spacewalk-list mailing list<br></span><a href="mailto:Spacewalk-list@redhat.com" style="color:purple;text-decoration:underline" target="_blank"><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:purple">Spacewalk-list@redhat.com</span></a><span style="font-size:9pt;font-family:Helvetica,sans-serif"><br></span><a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" style="color:purple;text-decoration:underline" target="_blank"><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:purple">https://www.redhat.com/mailman/listinfo/spacewalk-list</span></a></div></div></blockquote></div><p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"> </p></div><div style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:'Times New Roman',serif"><br><br></div></div></div><br></div><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);float:none;display:inline!important">_______________________________________________</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);float:none;display:inline!important">Spacewalk-list mailing list</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><a href="mailto:Spacewalk-list@redhat.com" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" target="_blank">Spacewalk-list@redhat.com</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><a href="https://www.redhat.com/mailman/listinfo/spacewalk-list_______________________________________________" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list_______________________________________________</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);float:none;display:inline!important">Spacewalk-list mailing list</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><a href="mailto:Spacewalk-list@redhat.com" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" target="_blank">Spacewalk-list@redhat.com</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)"><a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a></div></blockquote></div><br></div><br></div></div></div></div><br>_______________________________________________<br> Spacewalk-list mailing list<br> <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>_______________________________________________<br> Spacewalk-list mailing list<br> <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br></blockquote></div><br></div>