247 lines
7.4 KiB
Bash
247 lines
7.4 KiB
Bash
#!/bin/bash
|
|
|
|
# dib-lint: disable=setu sete setpipefail dibdebugtrace
|
|
|
|
set -eu
|
|
set -o pipefail
|
|
|
|
OK=/mnt/state/var/lib/rhsm/rhsm.ok
|
|
|
|
if [ -e $OK ] ; then
|
|
exit 0
|
|
fi
|
|
|
|
retryCount=0
|
|
opts=
|
|
config_opts=
|
|
attach_opts=
|
|
sat5_opts=
|
|
repos="repos --enable rhel-7-server-rpms"
|
|
satellite_repo=${REG_SAT_REPO}
|
|
proxy_host=
|
|
proxy_port=
|
|
proxy_url=
|
|
proxy_username=
|
|
proxy_password=
|
|
|
|
# process variables..
|
|
if [ -n "${REG_AUTO_ATTACH:-}" ]; then
|
|
opts="$opts --auto-attach"
|
|
|
|
if [ -n "${REG_SERVICE_LEVEL:-}" ]; then
|
|
opts="$opts --servicelevel $REG_SERVICE_LEVEL"
|
|
fi
|
|
|
|
if [ -n "${REG_RELEASE:-}" ]; then
|
|
opts="$opts --release=$REG_RELEASE"
|
|
fi
|
|
else
|
|
if [ -n "${REG_SERVICE_LEVEL:-}" ]; then
|
|
echo "WARNING: REG_SERVICE_LEVEL set without REG_AUTO_ATTACH."
|
|
fi
|
|
|
|
if [ -n "${REG_RELEASE:-}" ]; then
|
|
echo "WARNING: REG_RELEASE set without REG_AUTO_ATTACH."
|
|
fi
|
|
|
|
if [ -n "${REG_POOL_ID:-}" ]; then
|
|
attach_opts="$attach_opts --pool=$REG_POOL_ID"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${REG_BASE_URL:-}" ]; then
|
|
opts="$opts --baseurl=$REG_BASE_URL"
|
|
fi
|
|
|
|
if [ -n "${REG_ENVIRONMENT:-}" ]; then
|
|
opts="$opts --env=$REG_ENVIRONMENT"
|
|
fi
|
|
|
|
if [ -n "${REG_FORCE:-}" ]; then
|
|
opts="$opts --force"
|
|
sat5_opts="$sat5_opts --force"
|
|
fi
|
|
|
|
if [ -n "${REG_SERVER_URL:-}" ]; then
|
|
opts="$opts --serverurl=$REG_SERVER_URL"
|
|
fi
|
|
|
|
if [ -n "${REG_ACTIVATION_KEY:-}" ]; then
|
|
opts="$opts --activationkey=$REG_ACTIVATION_KEY"
|
|
sat5_opts="$sat5_opts --activationkey=$REG_ACTIVATION_KEY"
|
|
|
|
if [ -z "${REG_ORG:-}" ]; then
|
|
echo "WARNING: REG_ACTIVATION_KEY set without REG_ORG."
|
|
fi
|
|
else
|
|
echo "WARNING: Support for registering with a username and password is deprecated."
|
|
echo "Please use activation keys instead. See the README for more information."
|
|
if [ -n "${REG_PASSWORD:-}" ]; then
|
|
opts="$opts --password $REG_PASSWORD"
|
|
fi
|
|
|
|
if [ -n "${REG_USER:-}" ]; then
|
|
opts="$opts --username $REG_USER"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${REG_MACHINE_NAME:-}" ]; then
|
|
opts="$opts --name $REG_MACHINE_NAME"
|
|
sat5_opts="$sat5_opts --profilename=$REG_MACHINE_NAME"
|
|
fi
|
|
|
|
if [ -n "${REG_ORG:-}" ]; then
|
|
opts="$opts --org=$REG_ORG"
|
|
sat5_opts="$sat5_opts --systemorgid=$REG_ORG"
|
|
fi
|
|
|
|
if [ -n "${REG_REPOS:-}" ]; then
|
|
for repo in $(echo $REG_REPOS | tr ',' '\n'); do
|
|
repos="$repos --enable $repo"
|
|
done
|
|
fi
|
|
|
|
if [ -n "${REG_TYPE:-}" ]; then
|
|
opts="$opts --type=$REG_TYPE"
|
|
fi
|
|
|
|
# Proxy settings (host and port)
|
|
if [ -n "${REG_HTTP_PROXY_HOST:-}" ]; then
|
|
proxy_host="${REG_HTTP_PROXY_HOST}"
|
|
fi
|
|
|
|
if [ -n "${REG_HTTP_PROXY_PORT:-}" ]; then
|
|
proxy_port="${REG_HTTP_PROXY_PORT}"
|
|
fi
|
|
|
|
# Proxy settings (user and password)
|
|
if [ -n "${REG_HTTP_PROXY_USERNAME:-}" ]; then
|
|
proxy_username="${REG_HTTP_PROXY_USERNAME}"
|
|
fi
|
|
|
|
if [ -n "${REG_HTTP_PROXY_PASSWORD:-}" ]; then
|
|
proxy_password="${REG_HTTP_PROXY_PASSWORD}"
|
|
fi
|
|
|
|
# Sanity Checks for proxy host/port/user/password
|
|
if [ -n "${REG_HTTP_PROXY_HOST:-}" ]; then
|
|
if [ -n "${REG_HTTP_PROXY_PORT:-}" ]; then
|
|
# Good both values are not empty
|
|
proxy_url="http://${proxy_host}:${proxy_port}"
|
|
config_opts="--server.proxy_hostname=${proxy_host} --server.proxy_port=${proxy_port}"
|
|
sat5_opts="${sat5_opts} --proxy_hostname=${proxy_url}"
|
|
echo "RHSM Proxy set to: ${proxy_url}"
|
|
if [ -n "${REG_HTTP_PROXY_USERNAME:-}" ]; then
|
|
if [ -n "${REG_HTTP_PROXY_PASSWORD:-}" ]; then
|
|
config_opts="${config_opts} --server.proxy_user=${proxy_username} --server.proxy_password=${proxy_password}"
|
|
sat5_opts="${sat5_opts} --proxyUser=${proxy_username} --proxyPassword=${proxy_password}"
|
|
else
|
|
echo "Warning: REG_HTTP_PROXY_PASSWORD cannot be null with non-empty REG_HTTP_PROXY_USERNAME! Skipping..."
|
|
proxy_username= ; proxy_password=
|
|
fi
|
|
else
|
|
if [ -n "${REG_HTTP_PROXY_PASSWORD:-}" ]; then
|
|
echo "Warning: REG_HTTP_PROXY_USERNAME cannot be null with non-empty REG_HTTP_PROXY_PASSWORD! Skipping..."
|
|
proxy_username= ; proxy_password=
|
|
fi
|
|
fi
|
|
else
|
|
echo "Warning: REG_HTTP_PROXY_PORT cannot be null with non-empty REG_HTTP_PROXY_HOST! Skipping..."
|
|
proxy_host= ; proxy_port= ; proxy_url= ; proxy_username= ; proxy_password=
|
|
fi
|
|
else
|
|
if [ -n "${REG_HTTP_PROXY_PORT:-}" ]; then
|
|
echo "Warning: REG_HTTP_PROXY_HOST cannot be null with non-empty REG_HTTP_PROXY_PORT! Skipping..."
|
|
proxy_host= ; proxy_port= ; proxy_url= ; proxy_username= ; proxy_password=
|
|
fi
|
|
fi
|
|
|
|
function retry() {
|
|
if [[ $retryCount < 3 ]]; then
|
|
$@
|
|
if ! [[ $? == 0 ]]; then
|
|
retryCount=$(echo $retryCount + 1 | bc)
|
|
echo "WARN: Failed to connect when running '$@', retrying..."
|
|
retry $@
|
|
else
|
|
retryCount=0
|
|
fi
|
|
else
|
|
echo "ERROR: Failed to connect after 3 attempts when running '$@'"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
function detect_satellite_version {
|
|
ping_api=$REG_SAT_URL/katello/api/ping
|
|
if curl --retry 3 --retry-delay 10 --max-time 30 -L -k -s -D - -o /dev/null $ping_api | grep "200 OK"; then
|
|
echo Satellite 6 detected at $REG_SAT_URL
|
|
satellite_version=6
|
|
elif curl --retry 3 --retry-delay 10 --max-time 30 -L -k -s -D - -o /dev/null $REG_SAT_URL/rhn/Login.do | grep "200 OK"; then
|
|
echo Satellite 5 detected at $REG_SAT_URL
|
|
satellite_version=5
|
|
else
|
|
echo No Satellite detected at $REG_SAT_URL
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
if [ "x${proxy_url}" != "x" ];then
|
|
# Config subscription-manager for proxy
|
|
subscription-manager config ${config_opts}
|
|
|
|
# Config yum for proxy..
|
|
sed -i -e '/^proxy=/d' /etc/yum.conf
|
|
echo "proxy=${proxy_url}" >> /etc/yum.conf
|
|
|
|
# Handle optional username/password
|
|
if [ -n "${proxy_username}" ]; then
|
|
sed -i -e '/^proxy_username=/d' /etc/yum.conf
|
|
echo "proxy_username=${proxy_username}" >> /etc/yum.conf
|
|
fi
|
|
|
|
if [ -n "${proxy_password}" ]; then
|
|
sed -i -e '/^proxy_password=/d' /etc/yum.conf
|
|
echo "proxy_password=${proxy_password}" >> /etc/yum.conf
|
|
fi
|
|
|
|
fi
|
|
|
|
case "${REG_METHOD:-}" in
|
|
portal)
|
|
retry subscription-manager register $opts
|
|
if [ -z "${REG_AUTO_ATTACH:-}" -a -z "${REG_ACTIVATION_KEY:-}" ]; then
|
|
retry subscription-manager attach $attach_opts
|
|
fi
|
|
retry subscription-manager repos --disable '*'
|
|
retry subscription-manager $repos
|
|
;;
|
|
satellite)
|
|
detect_satellite_version
|
|
if [ "$satellite_version" = "6" ]; then
|
|
repos="$repos --enable ${satellite_repo}"
|
|
curl --retry 3 --retry-delay 10 --max-time 30 -L -k -O "$REG_SAT_URL/pub/katello-ca-consumer-latest.noarch.rpm"
|
|
rpm -Uvh katello-ca-consumer-latest.noarch.rpm || true
|
|
retry subscription-manager register $opts
|
|
retry subscription-manager $repos
|
|
retry yum install -y katello-agent || true # needed for errata reporting to satellite6
|
|
katello-package-upload
|
|
retry subscription-manager repos --disable ${satellite_repo}
|
|
else
|
|
pushd /usr/share/rhn/
|
|
curl --retry 3 --retry-delay 10 --max-time 30 -k -O $REG_SAT_URL/pub/RHN-ORG-TRUSTED-SSL-CERT
|
|
popd
|
|
retry rhnreg_ks --serverUrl=$REG_SAT_URL/XMLRPC $sat5_opts
|
|
fi
|
|
;;
|
|
disable)
|
|
echo "Disabling RHEL registration"
|
|
;;
|
|
*)
|
|
echo "WARNING: only 'portal', 'satellite', and 'disable' are valid values for REG_METHOD."
|
|
exit 0
|
|
esac
|
|
|
|
mkdir -p $(dirname $OK)
|
|
touch $OK
|