<div dir="ltr">All,<div> I ran into another issue today.</div><div><br></div><div>When I was trying to register a client and usuing my local yum repo I created. I am trying to install the initial packages and I get the following error. I didn't get SSL error before. Any ideas?</div><div><br></div><div><div>rpm -Uvh <a href="http://spacewalk-seerver.com/pub/spacewalk-local-repo/CentOS/7/x86_64/packages/packages/spacewalk-client-repo-2.3-2.el7.noarch.rpm">http://spacewalk-seerver.com/pub/spacewalk-local-repo/CentOS/7/x86_64/packages/packages/spacewalk-client-repo-2.3-2.el7.noarch.rpm</a></div><div>Retrieving <a href="http://spacewalk-seerver.com/pub/spacewalk-local-repo/CentOS/7/x86_64/packages/packages/spacewalk-client-repo-2.3-2.el7.noarch.rpm">http://spacewalk-seerver.com/pub/spacewalk-local-repo/CentOS/7/x86_64/packages/packages/spacewalk-client-repo-2.3-2.el7.noarch.rpm</a></div><div>curl: (60) Peer's Certificate issuer is not recognized.</div><div>More details here: <a href="http://curl.haxx.se/docs/sslcerts.html">http://curl.haxx.se/docs/sslcerts.html</a></div><div><br></div><div>curl performs SSL certificate verification by default, using a "bundle"</div><div> of Certificate Authority (CA) public keys (CA certs). If the default</div><div> bundle file isn't adequate, you can specify an alternate file</div><div> using the --cacert option.</div><div>If this HTTPS server uses a certificate signed by a CA represented in</div><div> the bundle, the certificate verification probably failed due to a</div><div> problem with the certificate (it might be expired, or the name might</div><div> not match the domain name in the URL).</div><div>If you'd like to turn off curl's verification of the certificate, use</div><div> the -k (or --insecure) option.</div></div><div><br></div><div>Jason</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jun 17, 2015 at 1:47 AM, Robert Paschedag <span dir="ltr"><<a href="mailto:robert.paschedag@web.de" target="_blank">robert.paschedag@web.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The bootstrap script installs some basic packages so the client is able to login to spacewalk. For SLES there is an "installation repo" under "/var/www/html/pub/repositories" that is used to install these packages.<br> <div class="HOEnZb"><div class="h5"><br> Am 16.06.2015 10:42 nachm. schrieb Jason Calafiore <<a href="mailto:jason.calafiore@gmail.com">jason.calafiore@gmail.com</a>>:<br> ><br> > Hi All, <br> ><br> > I still find we have not reached a solution to register a large group of existing servers to Spacewalk easily. I would think there must be some easier method than creating the yum repo, installing the packages and use the bootstrap scripts. <br> ><br> ><br> > I noticed if i just run the bootstrap.sh without installing the packages it shows up in Spacewalk. I was wondering is it possible to use the bootstrap script and then push out the required yum packages through spacewalk? Or has someone found an easier way to register existing offline clients?<br> ><br> ><br> > Thank you,<br> ><br> > Jason<br> ><br> ><br> > <br> ><br> > From: <a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a> [mailto:<a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a>] On Behalf Of Kalchik, Jeffery<br> > Sent: Friday, June 12, 2015 9:42 AM<br> > To: <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a><br> > Subject: [External] Re: [Spacewalk-list] Registering Offline servers to Spacewalk<br> ><br> > <br> ><br> > Good morning, Jason, et al.<br> ><br> > <br> ><br> > To register an existing server, you’ll need to install the Spacewalk client tools & libraries first. That’ll extend the capabilities of yum (or the appropriate update manager,) to communicate with a Spacewalk service. Once that’s done, you’ll need to run /usr/sbin/rhn_register, /usr/sbin/rhnreg_ks or the bootstrap script (bootstrap runs rhnreg_ks internally.)<br> ><br> > <br> ><br> > The registration script normally gets generated into /var/www/html/pub/bootstrap.<br> ><br> > <br> ><br> > The bootstrap script does perform some other activities, such as a full system update (through yum, zypper, etc.,) downloading SSL certs, and so forth. You might want to run it, you also might want to manually register your clients, depending on your local requirements.<br> ><br> > <br> ><br> > Jeff Kalchik<br> ><br> > Systems Engineering<br> ><br> > Land O’Lakes<br> ><br> > <br> ><br> > From: <a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a> [mailto:<a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a>] On Behalf Of Jason Calafiore<br> > Sent: Thursday, June 11, 2015 7:55 AM<br> > To: <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a><br> > Subject: Re: [Spacewalk-list] Registering Offline servers to Spacewalk<br> ><br> > <br> ><br> > Hi Marino,<br> ><br> > I have add the spacewalk repo as a child for my base channels, but I am dealing with the initial implementation of spacewalk in my existing environment, so I don't understand how kickstart would be applicable.<br> ><br> > <br> ><br> > Can you explain a little more about the registration script? Where is it exactly and how could i modify it as you are suggesting to register existing servers?<br> ><br> ><br> > Thank you,<br> ><br> > Jason<br> ><br> > <br> ><br> > _______________________________________________________________<br> ><br> > I always include the spacewalk clients in a child repo of my base channels then include it in my kickstarts. Then I can view the kickstart and pick out the URI‎ yum has an option to install using an adhock yumrepo. Also you may not be aware of this but spacewalk generates a boilerplate registration script for you in the public directory for apache you can use as a template to modify into your own custom registration script.<br> ><br> > Additionally yum and the rpm command can install packages over a network by specifying the URI as the package name.<br> ><br> > <br> ><br> > From: Jason Calafiore<br> ><br> > Sent: Wednesday, June 10, 2015 17:51<br> ><br> > To: <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a><br> ><br> > Reply To: <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a><br> ><br> > Subject: [Spacewalk-list] Registering Offline servers to Spacewalk<br> ><br> > <br> ><br> > Hi All,<br> ><br> > I am trying to figure out a an easy to register servers that are already created and offline without have to reach out to the internet to get the necessary packages.<br> ><br> > <br> ><br> > The only way I could do this was to do the following below by creating a yum repo with the necessary packages and then on a client server configure a .repo file that get the necessary packages. <br> ><br> > <br> ><br> > Is there any easier way to do this? I would think spacewalk would have an easy way to register clients especially offline servers. I had asked this before and someone suggested a scripts on github, but couldn't figure it out.<br> ><br> > <br> ><br> > Thanks,<br> ><br> > Jason<br> ><br> > <br> ><br> > Create Local Repo on the spacewalk Server<br> ><br> > <br> ><br> > mkdir /var/www/html/pub/spacewalk-client<br> ><br> > <br> ><br> > cd /var/www/html/pub/spacewalk-client<br> ><br> > <br> ><br> > repotrack -a x86_64 -p /var/www/html/pub/spacewalk-client rhn-client-tools rhn-check rhn-setup rhnsd m2crypto yum-rhn-plugin<br> ><br> > <br> ><br> > rm *i686* -f<br> ><br> > <br> ><br> > wget <a href="http://yum.spacewalkproject.org/2.3-client/RHEL/7/x86_64/spacewalk-client-repo-2.3-2.el7.noarch.rpm" rel="noreferrer" target="_blank">http://yum.spacewalkproject.org/2.3-client/RHEL/7/x86_64/spacewalk-client-repo-2.3-2.el7.noarch.rpm</a><br> ><br> > wget <a href="http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm" rel="noreferrer" target="_blank">http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm</a><br> ><br> > <br> ><br> > creapterepo /var/www/html/pub/spacewalk-client<br> ><br> > <br> ><br> > <br> ><br> > Register Server to Spacewalk<br> ><br> > <br> ><br> > vi/etc/yum.repos.d/spacewalk-local.repo<br> ><br> > <br> ><br> > [spacewalk-local-install-repo]<br> ><br> > name=Spacewalk Client Install<br> ><br> > baseurl=<a href="http://spacewalk-server.com/pub/spacewalk-client" rel="noreferrer" target="_blank">http://spacewalk-server.com/pub/spacewalk-client</a><br> ><br> > gpgcheck=0<br> ><br> > gpgkey=<br> ><br> > enabled=1<br> ><br> > <br> ><br> > Disable other repos in /yum.repos.d<br> ><br> > <br> ><br> > yum install rhn-client-tools rhn-check rhn-setup rhnsd m2crypto yum-rhn-plugin<br> ><br> > <br> ><br> > # rpm -Uvh <a href="http://spacewalk-server.com/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm" rel="noreferrer" target="_blank">http://spacewalk-server.com/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm</a><br> ><br> > <br> ><br> > <br> ><br> > <br> ><br> > rhnreg_ks --serverUrl=<a href="https://spacewalk-server.com/XMLRPC" rel="noreferrer" target="_blank">https://spacewalk-server.com/XMLRPC</a> --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-centos-server-7<br> ><br> > <br> ><br> > This message may contain confidential material from Land O'Lakes, Inc. (or its subsidiary) for the sole use of the intended recipient(s) and may not be reviewed, disclosed, copied, distributed or used by anyone other than the intended recipient(s). If you are not the intended recipient, please contact the sender by reply email and delete all copies of this message. </div></div></blockquote></div><br></div>