Comments (5)
Could your blog about SSL certificates be used here?
Probably, but this is all covered in the official manual: https://theforeman.org/manuals/2.1/index.html#3.2.3InstallationScenarios
I am just looking for a way to start with this. My knowledge of Debian installations is zero.
Just know that anything that uses --scenario katello
or --scenario foreman-proxy-content
doesn't work on Debian. Only --scenario foreman
exists there. The installer will automatically select a scenario if there is only one. That's why you never see --scenario
in the vanilla Foreman documentation.
Looking at http://docs.theforeman.org/guides/build/doc-Installing_Proxy_on_Debian/index-foreman-deb.html#enabling-connections-to-capsule_smart-proxy there's more issues
- Port 5000 is Crane and part of Pulp 2. That also means it's not needed on vanilla Foreman (all distros), EL8 (doesn't support Pulp 2) and starting Katello 4.0 (drops Pulp 2).
- Port 5647 is qpid. Also part of Pulp 2 so the same story as above
- Port 9090 is the Katello port for Smart Proxy - not needed on vanilla Foreman (all distros)
We dropped support for Debian 9, only Debian 10 is covered. Ubuntu 16.04 is also gone.
I'd also say the system requirements are incorrect. A Smart Proxy without Puppetserver probably runs fine on 2GB RAM.
Another thing is that every example in http://docs.theforeman.org/guides/build/doc-Installing_Proxy_on_Debian/index-foreman-deb.html#performing-additional-configuration-on-capsule-server does list --no-enable-foreman
but omits --no-enable-foreman-cli
. If there is already an existing installation (and the lack of parameters to configure the connection to Foreman suggests this), you can also leave of --no-enable-foreman
.
IMHO configuring chrony is also something you could leave out and only list in the requirements.
My recommendation would be to drop document this entirely and refer to the official manual. There's too many things that need to be modified.
from foreman-documentation.
Hi @ekohl thanks so much for this.
with regards to the first point:
http://docs.theforeman.org/guides/build/doc-Installing_Proxy_on_Debian/index-foreman-deb.html#configuring-capsule-default-certificate_smart-proxy Section 2.5. Configuring Smart Proxy server with a Default SSL Certificate in the Installing an External Smart Proxy Server on Debian guide does not work because the foreman-proxy-certs-generate command does not exist on Debian. All other sections that describe how to configure Foreman and Proxy with certificates do not work as well and require reworking.
Could your blog about SSL certificates be used here? I might be completely off. I am just looking for a way to start with this. My knowledge of Debian installations is zero.
from foreman-documentation.
foreman-proxy-certs-generate
is part of Katello and therefore irrelevant for foreman-deb.
from foreman-documentation.
Rather than editing the service, you should really use --foreman-proxy-dhcp-interface and --foreman-proxy-dhcp-additional-interfaces. So pass --foreman-proxy-dhcp-additional-interfaces eth1 --foreman-proxy-dhcp-additional-interfaces eth2 in the procedure, drop 'Adding Multihomed DHCP details' entirely
Addressed in #2488
My recommendation would be to drop document this entirely and refer to the official manual. There's too many things that need to be modified.
We've started to do this.
from foreman-documentation.
related discussion: What is the easiest way to generate and transfer the Foreman host certs to a fresh remote smart proxy during install in Foreman Community Forum
from foreman-documentation.
Related Issues (20)
- Move "use tmux because the upgrade takes a very long time" to snippet
- Relocate and rewrite deleted note about CVs
- Update link to "Configuring LDAP as an ext auth" in Satellite web UI
- Improve introduction in guides/common/modules/con_performing-additional-configuration-on-smart-proxy-server.adoc
- Further improvements to the Discovery chapter in provisioning HOT 1
- Clean up docs around required plug-ins HOT 1
- Realm procedure has redundant steps HOT 3
- Reword "run this command" to something meaningful
- Change "Ansible playbook" to "Ansible Playbook"
- Planning for deprecated documentation (was "Remove deprecated") HOT 13
- Capitalize "remote execution" or not? HOT 7
- Usage of "X using Y" versus "do X by using Y" HOT 5
- Use "product" instead of "Product" HOT 3
- Improve review labels for PRs HOT 8
- Create docs around Use custom pre/post snippets for errata templates HOT 3
- Linkchecker very slow, often times out HOT 3
- Move content overrides to Managing hosts
- Reword snippet to run custom code before/after host provisioning
- Consolidate and update "Contributing" docs (in progress)
- Review contribution guidelines for cherry-picking
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from foreman-documentation.