Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Admin Fix / Repo metadata #3035

Closed
wants to merge 27 commits into from
Closed
Changes from 2 commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
2fb0141
Changes for repo metadata.
0rnela May 21, 2024
cf5bdce
Cont.
0rnela May 21, 2024
dd86c6e
Update modules/administration/pages/repo-metadata.adoc
keichwa May 27, 2024
3d7133b
normalize Server Deployment (#3029)
keichwa May 22, 2024
8b67017
Automatic commit: update translation files
galaxy-ci May 22, 2024
1557920
Translated using Weblate (Portuguese (Brazil))
SottomaiorMacedoTec May 23, 2024
4c9b2a7
Improve Clients Update Using Recurring Actions
nodeg May 24, 2024
3f14e60
Automatic commit: update translation files
galaxy-ci May 24, 2024
8dbd51b
Fix: webui macro in Recurring Actions page
nodeg May 24, 2024
8b7056b
Automatic commit: update translation files
galaxy-ci May 24, 2024
6e30c69
Fix the upgrade command to correct one (#3039)
admd May 27, 2024
b709b1f
Automatic commit: update translation files
galaxy-ci May 27, 2024
9b88040
Admin Fix / ssl-certs-imported.html (#3037)
0rnela May 27, 2024
53a31be
Admin Guide Fix / master-fingerprint.html (#3032)
0rnela May 27, 2024
4523cca
Automatic commit: update translation files
galaxy-ci May 27, 2024
3bed9f7
Translated using Weblate (Spanish)
weblate May 27, 2024
23097fd
containerized commands centos (beta 2 review) (#3025)
keichwa May 27, 2024
5751a38
Automatic commit: update translation files
galaxy-ci May 27, 2024
1eeee25
Update proxy-container-installation-uyuni.adoc (#3023)
wtmpx May 27, 2024
ab1628f
Automatic commit: update translation files
galaxy-ci May 27, 2024
04996f0
fix xrefs (#3042)
keichwa May 27, 2024
16fcaef
Automatic commit: update translation files
galaxy-ci May 27, 2024
23fc070
Add a Note about base os management and old bootstrap scripts (#3044)
admd May 28, 2024
2762cde
Added comment about running commands in the container. (#3036)
0rnela May 28, 2024
0b1ee82
Automatic commit: update translation files
galaxy-ci May 28, 2024
43385e0
set RC
keichwa May 29, 2024
33e0f06
Cont.
0rnela Jun 3, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions modules/administration/pages/repo-metadata.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ You require a custom GPG key to be able to sign repository metadata.
. As the root user, use the [command]``gpg`` command to generate a new key:
+
----
gpg --gen-key
mgrctl exec --gpg --gen-key
keichwa marked this conversation as resolved.
Show resolved Hide resolved
----
+
. At the prompts, select [systemitem]``RSA`` as the key type, with a size of 2048 bits, and select an appropriate expiry date for your key.
Expand All @@ -21,13 +21,13 @@ gpg --gen-key
You can check by listing the keys in your keyring:
+
----
gpg --list-keys
mgrctl exec -- gpg --list-keys
----
+
. Add the password for your keyring to the [filename]``/etc/rhn/signing.conf`` configuration file, by opening the file in your text editor and adding this line:
+
----
GPGPASS="password"
mgrctl exec -- GPGPASS="password"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not a command. Maybe, we'd better recommend here and for the whole procedure to start a terminal with mgrterm and the run all the commands there.

----

For renewing a GPG key, see xref:administration:troubleshooting/tshoot-sync.adoc[].
Expand All @@ -41,7 +41,7 @@ You can manage metadata signing on the command line using the [command]``mgr-sig
You can list your available public keys in short format:
+
----
gpg --keyid-format short --list-keys
mgrctl exec -- gpg --keyid-format short --list-keys
...
pub rsa2048/3E7BFE0A 2019-04-02 [SC] [expires: 2021-04-01]
A43F9EC645ED838ED3014B035CFA51BF3E7BFE0A
Expand All @@ -52,24 +52,24 @@ sub rsa2048/118DE7FF 2019-04-02 [E] [expires: 2021-04-01]
. Enable metadata signing with the [command]``mgr-sign-metadata-ctl`` command:
+
----
mgr-sign-metadata-ctl enable 3E7BFE0A
mgrctl exec -- mgr-sign-metadata-ctl enable 3E7BFE0A
OK. Found key 3E7BFE0A in keyring.
DONE. Set key 3E7BFE0A in /etc/rhn/signing.conf.
DONE. Enabled metadata signing in /etc/rhn/rhn.conf.
DONE. Exported key 4E2C3DD8 to /srv/susemanager/salt/gpg/mgr-keyring.gpg.
DONE. Exported key 4E2C3DD8 to /srv/www/htdocs/pub/mgr-gpg-pub.key.
DONE. Exported key 4E2C3DD8 to /var/spacewalk/gpg/<KEY_NAME>.key.
NOTE. For the changes to become effective run:
mgr-sign-metadata-ctl regen-metadata
----
. You can check that your configuration is correct with this command:
+
----
mgr-sign-metadata-ctl check-config
mgrctl exec -- mgr-sign-metadata-ctl check-config
----
. Restart the services and schedule metadata regeneration to pick up the changes:
+
----
mgr-sign-metadata-ctl regen-metadata
mgrctl exec -- mgr-sign-metadata-ctl regen-metadata
----

You can also use the [command]``mgr-sign-metadata-ctl`` command to perform other tasks.
Expand Down
Loading