Видео

* awful

You mean through cockpit? Or with Ansible?

@@100thingstodowithredhatpro8 both

@@salexkorsan8790 Well, Cockpit offers a built-in terminal, so you can execute shell commands through that and Ansible can do just about everything as long as you write an appropriate playbook :)

Sorry for the late reply. For some reason, I only get notified of a subset of comments... As for your question: no, I don't think so. At that point that individual job has failed, but subsequent jobs will run on functioning Tower servers.

Sorry for the late reply. I have a little trouble remembering, but I think the way I wrote it was to use this through remote execution or Ansible and run it on multiple machines that way. Reason for that is that the client machine needs to request new certificates (iirc) and that can be done only locally.

Hi nanu, I'm not sure what you mean. The creation of masters and workers, as well as the assignment of ignition files is done automatically when using IPI (installer provisioned infrastructure). I recommend using that unless you really have a good reason not to. I can cover UPI (user-provided infrastructure) in a future video, which is more flexible, but I think it's more interesting to do future videos about the possibilities of OpenShift as an application platform, and not so much the underlying infrastructure. What do you think?

Hi Volodymyr, can you check whether the console pods are running and the route is created correctly? If oc / kubectl works, DNS should be up, since routes to the api and to the oauth endpoint are working.

RUclips doesn't seem to give me notifications for new comments anymore, so.sorry for the late reply. Interesting idea. Will look into it.

I've put deploying Ansible Tower on OpenShift on my list for now, does that fit your request?

Sorry for the late reply. I do not have access to a VMware environment, so that's going to be difficult.

Glad you liked it

Glad it was helpful!

Sorry for the late reply: I didn't get notifications of these up until now :/ Gosh. I didn't know EPEL removed old releases of packages after they're superseded. Wow. That's really good to know! Indeed, in that case you want to make it "immediate" and probably sync regularly indeed! If you're still reading this, I'm not sure what exactly goes wrong with your filters for EPEL. Can you ellaborate?

Sorry for the late reply. RUclips doesn't seem to give me notifications. I'll look into making a video about this. The procedure had changed a bit!

@@100thingstodowithredhatpro8 thank you! heard 6.9 is out. Hope Puppet was ripped out and replaced by Ansible :)

@@mous3y490 Well, Puppet is still there in 6.9, but the capabilities of Ansible in Satellite 6 have grown pretty rapidly. This is on my todo list for a video :)

Sorry for the late reply: I didn't get notifications of these up until now :/ I'm not sure. I've never tried. I do think most deployments are like I described. If you deploy Tower on OpenShift, you get another, even more scalable Tower design. I'll spend some time on that in the future.

Remake is up here: ruclips.net/video/W26rWtEqToc/видео.html

@@100thingstodowithredhatpro8 Much appreciate you following up and pointing me towards your new video. Thank you! I will follow your instructions as soon as I get to it.

@@Sunnyside--Up Let me know how that goes!

systemctl stop cockpit && systemctl stop cockpit.socket && mv /etc/cockpit/ws-certs.d/0-self-signed* /backup/ && ipa-getcert request ...

@@vampirzhul8115 On RHEL8, the certificate seems to need to be called .crt and not .pem as the key and certificate files on RHEL8 are separate, and no longer concatenated. I'll update the video in the not too distant future.

Remake is up here: ruclips.net/video/W26rWtEqToc/видео.html

I have the same problem. And yet, everyone gave a thumbs -up, which is misleading because you think there is a working solution.

Hi Johan, I see that for RHEL8 at least, my solution does seem to be imperfect. I just replayed my stuff on a fresh RHEL8 VM + IDM domain, and what I call .pem in the video should actually be .crt, it seems. On RHEL8, the certificate and it's key can be two separate files, so the sed bit isn't needed anymore. I've put this on my list to make an updated video about.

@@Sunnyside--Up see above

Remake is up here: ruclips.net/video/W26rWtEqToc/видео.html

That's actually a tricky one. I've never done database HA. I'll put it on my backlog, but can't give you a timeline.

Just answered another question about this. (Sorry this took so long, I never got notifications for these replies! Fixed that now!) If you are still reading this: I've never looked into putting an LB in front of a Tower cluster. At first glance, it does seem to be possible though, so I'll take a look. Might want to check out deploying Tower on OpenShift as well for even more scaling options!

Sorry this took so long, I never got notifications for these replies! Fixed that now! Ehm, if you do not have VDCs, you don't have to use virt-who, or am I missing something? What are you trying to achieve?

Jobs do not get load balanced through a load balancer. What you could do is set up a load balancer in front of the Tower UI, but that's a different use case, I guess. Newer version of Tower (3.4+) support job slicing, which is like load balancing of jobs, and that feature does not need a load balancer at all. Check the Tower docs. If you can't find it, let me know and I'll send you some links :)

This sounds odd. Do you have a high number of vmotions, maybe? Have you been in touch with support?

100 things to do with Red Hat Management products .. yes apparently virtual machines are experiencing vmotions. Sure, got in touch with support but could not follow up. This week will try to work on it and if resolved, will as well update this thread.

It really did. Thank You.

Graag gedaan!

Sorry this took so long, I never got notifications for these replies! Fixed that now! I think this is an RFE at the moment

Sorry this took so long, I never got notifications for these replies! Fixed that now! If you are still reading this: You mean selecting an activation key based on the VDC? I don't think so :(

Sorry this took so long, I never got notifications for these replies! Fixed that now! I realize this is a really old comment, but what life cycle did you mean? And are you still interested?

Hey Murray, I don't think it's needed to exclude those packages anymore. It used to be a thing a year or so back, but I'm not actively excluding them anymore.

@@100thingstodowithredhatpro8 Uhm ... it seem to be still necessary as far as I experience ... I sent a comment on your website :-)

+Hradayesh Shukla more to follow, stay tuned! And also, any specific topics you want to see?

+Colin McCarthy thanks! Glad you found it useful.

I already tore down this cluster again. I'm not sure what you are looking for. Next time I build one, what do you think I should check for in that output?

You mean the colors? It's just gnome-terminal with the solarized-dark color scheme. If you mean the prompt, it's something I hacked together myself a long time ago. Which one is it? :)

I mean this "Command Group"-thingy on the left that connects the Command and the working dir and so on ^^

Sorry, a bit late with replying. In the video I'm using a two line PS1 prompt. I literally have a newline in my $PS1 variable, like below (which is a simplified version of what I used in the video): PS1="╭─(\!) \u@\h \w ╰─ # "

no problem! thanks alot :)

+palani samy you probably could, but it would be a little different. You'd have to do all configuration management through Ansible, and you'd have to connect your systems to RHUI or the customer portal. Little different, mostly the same result, but without having complete control over your patch cycle.

Thank you. Let me try to setup WordPress cluster. Is this playbook publicly available which you are using for demonstrations.

Good point. I would need to sanitize them a bit though. Let me look into that.

Can I get github link suppose if you are uploaded this playbook in public repository server?

Hello, Is this playbook available in github.com now?

+Open Site Solutions OSS Thanks! Will deliver but might be a week or so because of Summit coming up.

If u want to go to school for something like this what should i sign up for

There's an iptables firewall task that fails on machines that run firewalld, iirc. Doesn't need fixing: there are dedicated tasks for firewalld, and they complete fine. The one failed task is cosmetic. Probably should have mentioned that :) You have a keen eye, sir ;)

+Open Site Solutions OSS Great to read the video helped you!

Hi Kevin, you will have to reinstall applications, as swapping out RHEL5 for any other version of RHEL requires a complete reinstall. However, if you would write Puppet modules (or Ansible roles, in an upcoming version of Satellite) to install and configure your application, reinstallation and redeployment does become less impactful. Hope this helps. M

Hi Kevin, Thanks for the question! If I understand you correctly, you want to add RHEL6 RPMs to a RHEL5 content view in order to update from RHEL5 to RHEL6? If that's the case, the answer is 'no'. In place upgrades from one major RHEL version to another is not supported, except in some cases from RHEL6 to RHEL7. If you instead mean to create a content view for your application, add the application RPMs to it, and then re-use that application content view in a CCV with a RHEL5 content view, and in another CCV with a RHEL6 or RHEL7 content view, that should work and is actually a really good use case for CCVs.

Thanks for your questions. So if you want to make sure your system never installs any RPM that was released in the 7.3 timeframe, you select 7.2 and stick that into your CV. This basically locks your system to a minor release. If you really need to stay on 7.2 though, I suggest you take a look at the EUS channels you get with premium support: they actually allow you to stay on 7.2 for a prolonged period of time, without having to move to 7.3 If you plan to move from 7.1 to 7.2 to 7.3, you probably want to select 7Server, which will get all RPMs that are updated in RHEL7 over the complete life cycle of the RHEL7 product. Hope this helps, if not, let me know!

Hi, Thanks for your video. your reply for above que is "This basically locks your system to a minor release." Question : Meaning if we run "yum update -y" with CV selected for 7.2 will it still get update and stay as RHEL 7.2? meaning it still receives latest erratum?

It will receive whatever is in your CV, of course, but if you only add the 7.2 repository to your CV, your system can never get packages for 7.3. Those are simply not available then. Does that answer your question?

100 things to do with Red Hat Management products thanks. meaning latest available erratum not applicable to those machines, if I am not wrong!

Thanks for the question, again :) If you do not add a kickstart repo to a content view, the kickstart repo will never get synced to a Capsule: only content in a content view is ever synced to Capsules. Puppet is a different beast and has no direct relation with kickstarting. Basically the flow is like this: you kickstart (install) a new system, during which Anaconda, based on the kickstart file installs various RPMs and runs scripts afterwards. Installing the Puppet agent can be part of that installation process. After that's done, the system reboots, Puppet starts up and executes Puppet modules you might have added to a hostgroup. (It's slightly more complicated than this, obviously, but this covers a lot.) So if you are not going to use Puppet, which can be a valid choice, you still need to add the kickstart repo to your CVs, because the installer itself (Anaconda) is included in those kickstart repos. Hope this helps!

Greg M Thanks! That's a great motivation to create more!