<div dir="ltr"><div>Thank you so very much!</div><div> </div><div>Since I have two types of clients, Ubuntu 16.04 and 18.04, do I need two different activation keys? I currently do have one setup.</div><div> </div><div>Respectfully,</div><div> </div><div>James</div><div> </div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">-- -- James W. Krych CCNP, CCNA, Net+, Security+, A+, Linux+ Mobile: 843-847-1446 <a href="mailto:james.w.krych@gmail.com" target="_blank">james.w.krych@gmail.com</a> </div></div></div> </div></div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jan 29, 2019 at 2:07 PM Paul-Andre Panon <<a href="mailto:paul-andre.panon@avigilon.com">paul-andre.panon@avigilon.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Tue, 29 Jan 2019 13:22:30 -0500, James Krych <<a href="mailto:james.w.krych@gmail.com" target="_blank">james.w.krych@gmail.com</a>> wrote: >>For Ubuntu / Debian, these default bootstrap scripts do not work. You have to create your own." >Is there a source of these scripts for use with Debian clients? >Very respectfully, >James We use something like the script below. You will want to adjust it for your environment. It has the advantage that you can use it on CentOS or Ubuntu clients, so you can just put it in /var/www/html/pub/ on your spacewalk server and have people download and run it. You will need to customize it to use your activation key names (and set up the activation keys to add your preferred channels for each distribution). It also needs a few more files set up on the spacewalk server in the /var/www/html/pub directory: the packages for Ubuntu 18.04 (in pub/bionic-debs), and a stub configuration file for the <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1187189" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1187189</a> workaround. It might need a few more tweaks but it should be enough to get you started. #!/bin/bash # # Install the SpaceWalk client on three possible O/S targets, CentOS 7, Ubuntu 14.04, and Ubuntu 16.04 # Register the client with the Avigilon Spacewalk server # spacewalkserver="yourspacewalkserver.yourdomain" install_centos7_client() { echo Installing Spacewalk client for CentOS 7.X rpm -Uvh <a href="http://yum.spacewalkproject.org/2.6-client/RHEL/7/x86_64/spacewalk-client-repo-2.6-0.el7.noarch.rpm" rel="noreferrer" target="_blank">http://yum.spacewalkproject.org/2.6-client/RHEL/7/x86_64/spacewalk-client- repo-2.6-0.el7.noarch.rpm</a> wget <a href="https://muug.ca/mirror/fedora-epel/RPM-GPG-KEY-EPEL-7" rel="noreferrer" target="_blank">https://muug.ca/mirror/fedora-epel/RPM-GPG-KEY-EPEL-7</a> rpm --import ./RPM-GPG-KEY-EPEL-7 BASEARCH=$(uname -i) rpm -Uvh <a href="http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm" rel="noreferrer" target="_blank">http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm</a> yum -y install rhn-client-tools rhn-check rhn-setup rhnsd m2crypto yum-rhn-plugin rpm -Uvh http://$spacewalkserver/pub/rhn-org-trusted-ssl-cert-1.0-2.noarch.rpm rhnreg_ks --serverUrl=https://$spacewalkserver/XMLRPC --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-centos7-x86_64 # enable osad yum install osad /bin/perl -pi -e "s/osa_ssl_cert =/osa_ssl_cert = \/usr\/share\/rhn\/RHN-ORG-TRUSTED-SSL-CERT/" /etc/sysconfig/rhn/osad.conf /bin/systemctl enable osad /bin/systemctl osad start # enable openscap yum install openscap-scanner spacewalk-oscap wget <a href="https://copr-be.cloud.fedoraproject.org/results/openscapmaint/openscap-latest/epel-7-x86_64/00482175-scap-security-guide/scap-security-guide-0.1.31-2.el7.centos.noarch.rpm" rel="noreferrer" target="_blank">https://copr-be.cloud.fedoraproject.org/results/openscapmaint/openscap-lat est/epel-7-x86_64/00482175-scap-security-guide/scap-security-guide-0.1.31 -2.el7.centos.noarch.rpm</a> rpm -ivh scap-security-guide-0.1.31-2.el7.centos.noarch.rpm yum history sync } install_ubuntu14.04_client() { echo Installing Spacewalk client for Ubuntu 14.04 if [ -n "`which rhnreg_ks`" ] ; then echo rhnreg_ks is already installed. Aborting; exit; fi # Install some pre-requisites before our packages apt-get -y install python-dbus python-newt python-dmidecode python-gudev python-dbus-dev python-support python-libxml2 python-gobject python-gi python-g object-2 python-ethtool python-jabber apt-get -y install apt-transport-spacewalk python-rhn rhn-client-tools rhnsd wget "https://$spacewalkserver/pub/spacewalk.gpg.pubkey" apt-key add spacewalk.gpg.pubkey # Now set up and register with our Spacewalk server mkdir /var/lock/subsys wget https://$spacewalkserver/pub/RHN-ORG-TRUSTED-SSL-CERT -O /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT rhnreg_ks --force --serverUrl=https://$spacewalkserver/XMLRPC --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-avo-ubuntu-trusty-key # Take updates and security patches for main and universe from spacewalk echo "deb spacewalk://$spacewalkserver/XMLRPC channels: main trusty-updates trusty-backports trusty-security" > /etc/apt/sources.list.d/spacewalk.list cp /etc/apt/sources.list /etc/apt/sources.list.bak # and not from the standard repositories perl -pi -e 's/^deb([-src]*) (.*) trusty main/#deb$1 $2 trusty main/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) trusty-updates ([m|u][^u])/#deb$1 $2 trusty-updates $3/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) trusty-security ([m|u][^u])/#deb$1 $2 trusty-security $3/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) trusty-backports/#deb$1 $2 trusty-backports/' /etc/apt/sources.list # Work around <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1187189" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1187189</a> wget https://$spacewalkserver/pub/49spacewalk-workaround -O /etc/apt/apt-conf.d/49spacewalk-workaround # clean up and test popd rm -Rf /tmp/trusty-debs apt-get update } install_ubuntu16.04_client() { echo Installing Spacewalk client for Ubuntu 16.04 apt-get -y install apt-transport-spacewalk python-rhn python-ethtool rhnsd rhn-client-tools python-jabber if [ `dpkg -l apt-transport-spacewalk | wc -l` -lt 6 ]; then echo "Could not download necessary prerequisites. Aborting" exit fi wget https://$spacewalkserver/pub/RHN-ORG-TRUSTED-SSL-CERT -O /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT rhnreg_ks --force --serverUrl=https://$spacewalkserver/XMLRPC --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-avo-ubuntu-xenial-key wget "https://$spacewalkserver/pub/spacewalk.gpg.pubkey" apt-key add spacewalk.gpg.pubkey # Take updates and security patches for main and universe from spacewalk echo 'deb spacewalk://$spacewalkserver/XMLRPC channels: main xenial-updates xenial-backports xenial-security' > /etc/apt/sources.list.d/spacewalk.list cp /etc/apt/sources.list /etc/apt/sources.list.bak # and not from the standard repositories perl -pi -e 's/^deb([-src]*) (.*) xenial main/#deb$1 $2 xenial main/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) xenial-updates ([m|u][^u])/#deb $2 xenial-updates $3/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) xenial-security ([m|u][^u])/#deb$1 $2 xenial-security $3/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) xenial-backports/#deb$1 $2 xenial-backports/' /etc/apt/sources.list if [ ! -d /var/lib/up2date ] then mkdir /var/lib/up2date fi # Work around <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1187189" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1187189</a> wget https://$spacewalkserver/pub/49spacewalk-workaround -O /etc/apt/apt.conf.d/49spacewalk-workaround # and test apt-get update } install_ubuntu18.04_client() { echo Installing Spacewalk client for Ubuntu 18.04 if [ -n "`which rhnreg_ks`" ] ; then echo rhnreg_ks is already installed. Aborting; exit; fi # Install some pre-requisites before our packages apt-get -y install gir1.2-gudev-1.0 libgudev-1.0-0 python-dbus python-newt python-dmidecode python-dbus-dev python-libxml2 python-gobject python-gi python-gobject-2 python-ethtool python-jabber python-apt python-openssl apt-get -y -f install # Download and install our spacewalk packages, which are newer than in the default 18.04 repo mkdir /tmp/bionic-debs pushd /tmp/bionic-debs wget https://$spacewalkserver/pub/bionic-debs/apt-transport-spacewalk_1.0.7-1_a ll.deb wget https://$spacewalkserver/pub/bionic-debs/python-gudev_147.2-3_amd64.deb wget https://$spacewalkserver/pub/bionic-debs/python-rhn_2.5.72-1_all.deb wget https://$spacewalkserver/pub/bionic-debs/<a href="http://rhn-client-tools_2.3.5-1_amd64.de" rel="noreferrer" target="_blank">rhn-client-tools_2.3.5-1_amd64.de</a> b wget https://$spacewalkserver/pub/bionic-debs/rhnsd_5.0.4-3_amd64.deb wget https://$spacewalkserver/pub/bionic-debs/python-ethtool_0.12-1.1_amd64.deb dpkg -i *.deb apt-get -y -f install wget "https://$spacewalkserver/pub/spacewalk.gpg.pubkey" apt-key add spacewalk.gpg.pubkey # Now set up and register with our Spacewalk server mkdir /var/lock/subsys wget https://$spacewalkserver/pub/RHN-ORG-TRUSTED-SSL-CERT -O /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT rhnreg_ks --force --serverUrl=https://$spacewalkserver/XMLRPC --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-avo-ubuntu-bionic-key # Take updates and security patches for main and universe from spacewalk echo "deb spacewalk://$spacewalkserver/XMLRPC channels: main bionic-updates bionic-backports bionic-security" > /etc/apt/sources.list.d/spacewalk.list cp /etc/apt/sources.list /etc/apt/sources.list.bak # and not from the standard repositories perl -pi -e 's/^deb([-src]*) (.*) bionic main/#deb$1 $2 bionic main/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) bionic-updates ([m|u][^u])/#deb$1 $2 bionic-updates $3/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) bionic-security ([m|u][^u])/#deb$1 $2 bionic-security $3/' /etc/apt/sources.list perl -pi -e 's/^deb([-src]*) (.*) bionic-backports/#deb$1 $2 bionic-backports/' /etc/apt/sources.list # Work around <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1187189" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1187189</a> wget https://$spacewalkserver/pub/49spacewalk-workaround -O /etc/apt/apt-conf.d/49spacewalk-workaround # clean up and test popd rm -Rf /tmp/bionic-debs apt-get update } if [ ! -d /usr/local/share/ca-certificates/york.lan ] then mkdir -p /usr/local/share/ca-certificates/york.lan wget -P /usr/local/share/ca-certificates/york.lan "https://$spacewalkserver/pub/cacerts/AVO-IssCA1.crt" --no-check-certificate wget -P /usr/local/share/ca-certificates/york.lan "https://$spacewalkserver/pub/cacerts/AVO-IssCA2.crt" --no-check-certificate wget -P /usr/local/share/ca-certificates/york.lan "https://$spacewalkserver/pub/cacerts/AVO-rootca.crt" --no-check-certificate sudo update-ca-certificates fi if [ -n "`which rhnreg_ks`" ] then echo rhnreg_ks is already installed. Aborting exit fi if [ -e /etc/centos-release ] then CENTOS_RELEASE=`cat /etc/centos-release` if [ "`expr substr \"$CENTOS_RELEASE\" 1 23`" = "CentOS Linux release 7." ] then install_centos7_client fi elif [ -e `which lsb_release` ] then OTHER_DISTRIB=`lsb_release -a | fgrep "Description:"` if [ `expr match "$OTHER_DISTRIB" ".*Ubuntu.*"` -ge 6 ] then if [ `expr match "$OTHER_DISTRIB" ".*14\.04.*"` -ge 5 ] then install_ubuntu14.04_client elif [ `expr match "$OTHER_DISTRIB" ".*16\.04.*"` -ge 5 ] then install_ubuntu16.04_client elif [ `expr match "$OTHER_DISTRIB" ".*18\.04.*"` -ge 5 ] then install_ubuntu18.04_client fi fi fi _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com" target="_blank">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> </blockquote></div>