b37a1e27cb
For 'satellite' mode of registration, rpm for rhel SSL certificate is hard coded to 'katello-ca-consumer-latest.noarch.rpm'. This commit adds functionality that provides an option to set this as defined in their satellite server. Change-Id: Ib176cfa209f5ac8a4b5da71419327b4237330904 Closes-Bug: 1749947
126 lines
3.4 KiB
Bash
Executable File
126 lines
3.4 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# This script deals quite a bit with passwords, which we don't ever want
|
|
# included in trace output
|
|
# dib-lint: disable=dibdebugtrace
|
|
|
|
set -eu
|
|
set -o pipefail
|
|
|
|
opts=
|
|
attach_opts=
|
|
repos="repos --enable rhel-7-server-rpms"
|
|
satellite_repo="rhel-7-server-rh-common-rpms"
|
|
REG_SAT_CERT=${REG_SAT_CERT:-"katello-ca-consumer-latest.noarch.rpm"}
|
|
|
|
if [ -n "${REG_AUTO_ATTACH:-}" ]; then
|
|
opts="$opts --auto-attach"
|
|
|
|
if [ -n "${REG_SERVICE_LEVEL:-}" ]; then
|
|
opts="$opts --servicelevel $REG_SERVICE_LEVEL"
|
|
fi
|
|
|
|
if [ -n "${REG_RELEASE:-}" ]; then
|
|
opts="$opts --release=$REG_RELEASE"
|
|
fi
|
|
else
|
|
if [ -n "${REG_SERVICE_LEVEL:-}" ]; then
|
|
echo "WARNING: REG_SERVICE_LEVEL set without REG_AUTO_ATTACH."
|
|
fi
|
|
|
|
if [ -n "${REG_RELEASE:-}" ]; then
|
|
echo "WARNING: REG_RELEASE set without REG_AUTO_ATTACH."
|
|
fi
|
|
|
|
if [ -n "${REG_POOL_ID:-}" ]; then
|
|
attach_opts="$attach_opts --pool=$REG_POOL_ID"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${REG_BASE_URL:-}" ]; then
|
|
opts="$opts --baseurl=$REG_BASE_URL"
|
|
fi
|
|
|
|
if [ -n "${REG_ENVIRONMENT:-}" ]; then
|
|
opts="$opts --env=$REG_ENVIRONMENT"
|
|
fi
|
|
|
|
if [ -n "${REG_FORCE:-}" ]; then
|
|
opts="$opts --force"
|
|
fi
|
|
|
|
if [ -n "${REG_SERVER_URL:-}" ]; then
|
|
opts="$opts --serverurl=$REG_SERVER_URL"
|
|
fi
|
|
|
|
if [ -n "${REG_ACTIVATION_KEY:-}" ]; then
|
|
opts="$opts --activationkey=$REG_ACTIVATION_KEY"
|
|
|
|
if [ -z "${REG_ORG:-}" ]; then
|
|
echo "WARNING: REG_ACTIVATION_KEY set without REG_ORG."
|
|
fi
|
|
else
|
|
if [ -n "${REG_PASSWORD:-}" ]; then
|
|
opts="$opts --password $REG_PASSWORD"
|
|
fi
|
|
|
|
if [ -n "${REG_USER:-}" ]; then
|
|
opts="$opts --username $REG_USER"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${REG_MACHINE_NAME:-}" ]; then
|
|
opts="$opts --name $REG_MACHINE_NAME"
|
|
fi
|
|
|
|
if [ -n "${REG_ORG:-}" ]; then
|
|
opts="$opts --org=$REG_ORG"
|
|
fi
|
|
|
|
if [ -n "${REG_REPOS:-}" ]; then
|
|
for repo in $(echo $REG_REPOS | tr ',' '\n'); do
|
|
repos="$repos --enable $repo"
|
|
done
|
|
fi
|
|
|
|
if [ -n "${REG_TYPE:-}" ]; then
|
|
opts="$opts --type=$REG_TYPE"
|
|
fi
|
|
|
|
sanitized_opts=$(echo "$opts" | sed 's/--password \([^ ]*\)/--password ***/g')
|
|
sanitized_opts=$(echo "$sanitized_opts" | sed 's/--activationkey=\([^ ]*\)/--activationkey=***/g')
|
|
|
|
case "${REG_METHOD:-}" in
|
|
portal)
|
|
echo "Registering with options: $sanitized_opts"
|
|
subscription-manager register $opts
|
|
if [ -z "${REG_AUTO_ATTACH:-}" -a -z "${REG_ACTIVATION_KEY:-}" ]; then
|
|
echo "Attaching with options: $attach_opts"
|
|
subscription-manager attach $attach_opts
|
|
fi
|
|
echo "Disabling all previous repos"
|
|
subscription-manager repos --disable=\*
|
|
echo "Enabling repos: $repos"
|
|
subscription-manager $repos
|
|
;;
|
|
satellite)
|
|
# Save an unmodified copy of the repo list for logging
|
|
user_repos=$repos
|
|
repos="$repos --enable ${satellite_repo}"
|
|
echo "Installing satellite dependencies"
|
|
rpm -Uvh "$REG_SAT_URL/pub/$REG_SAT_CERT" || true
|
|
echo "Registering with options: $sanitized_opts"
|
|
subscription-manager register $opts
|
|
echo "Disabling all previous repos"
|
|
subscription-manager repos --disable=\*
|
|
echo "Enabling repos: $user_repos"
|
|
subscription-manager $repos
|
|
;;
|
|
disable)
|
|
echo "Disabling RHEL registration"
|
|
;;
|
|
*)
|
|
echo "WARNING: only 'portal', 'satellite', and 'disable' are valid values for REG_METHOD."
|
|
exit 0
|
|
esac
|