katello-disconnected does not work behind a proxy

Latest response

I've already opened a ticket, but have not received a response. I'm posting this here hoping to get some additional visibility on this issue.

So. The Satellite 6 that I am building will reside in a disconnected network. I will require the services of the katello-disconnected utility on an external sync host as described by the Sat 6 Installation Guide (Chapter 4.2). Unfortunately, katello-disconnected does not seem to have complete support for operation behind a proxy. The 'import' command has the needed options, which worked fine and the manifest was properly imported. However, the 'sync' command has no such proxy options and I am unable to sync the repos. I attempted to manually add the pulp config plugins to define the proxy info; however, the sync command is ignoring them. (I checked with tcpdump that it's not even attempting to use the proxy)

Even if the answer is, "that will be fixed in version 6.1," I expect a response to the ticket. This is a key feature for those of us operating Satellites in disconnected networks.

Thanks.

Adam

Responses

Hi Adam, thanks for for posting this. Hopefully you've received a response to your ticket, but I'll see if I can track down an answer to your question here.

Thanks, David. I got a response, but it only indicated I should add the pulp proxy configs, which I had already tried. Still waiting, might have to escalate the ticket if we don't get something solid soon.

Adam

Hi Adam,

Can you paste the exact command you ran, along with the pulp configs you added? (substituting fake proxy hostnames).

Also make sure that you restart all the pulp services after configuring (pulp_workers pulp_celerybeat pulp_resource_manager and httpd) after adding those configs.

-Justin

Look I don't know if this matter has been rectified for you yet; however, I raised a support ticket to get katello-disconnected fixed during the Satellite 6.1.0 Beta trial. Now that I have upgraded to 6.1.1; I managed to get katello-disconnected to work on my home lab and I also managed to get out through a web proxy. The bugzilla that gave the answer was https://bugzilla.redhat.com/show_bug.cgi?id=1136601 which was release a year ago today; funny that.

So to get out through my web proxy I had to do the following:
katello-disconnected import -v --proxy-host proxy.example.com --proxy-port 8080 -m ./example.zip.
It takes a very long time for the manifest to be verified against the cdn, maybe that is because of our third world internet speeds here and the verification may also be a normally lengthy process.
The Katello-disconnected man page provides some informative general information, but the proxy bits have been omitted. I intend to raise a service ticket to get katello-disconnected documented. For some reason it was omitted from the 6.1.1 Install Guide. Maybe I missed where they put it, or there is a good reason why they took it out.

Good Luck all the same.

Hi Che,
I currently have a ticket open with support since I have run into errors running katello-disconnected sync since I updated to the most recent packages. I am concerned since the support folks are urging me to just use the content ISO downloads. Unfortunately Red Hat doesn't appear to be updating those content ISOs often enough for us to meet our security requirements. We would need them to be updated on a weekly basis or a biweekly basis at a minimum.
Do you have any insight as to Red Hat's plans for continuing support for the synchost? thanks Diane Calleson

Hi Diane I have raised three support cases for the Satellite 6.1 series of katello-disconnected as I continue to encounter issues with it, but I did get it to work through a Proxy until the 6.1.3 release.

Katello-disconnected was omitted initially from the 6.1.1 documentation for some reason and the Content ISOs was promoted as the way forward. The instructions for katello-disconnected have now become available in the online documentation which is encouraging.

I heard or read that Content ISOs were going to be released as Incremental Updates yet it have not seen this yet and I also heard that Content ISOs were going to be released every 6 Weeks. This is certainly not the case as you have stated above. I too would also like more frequent updates and would prefer Incremental Updates. I would also like the Satellite 6.1.4 ISO to become available.

I understand that katello-disconnected will be replaced with an Inter Satellite Sync in a future release but I do not know when that will be.

I contacted one of the Satellite 6 Team on the day that 6.1.3 was released and told them that there was an issue with katello-disconnected on RHEL 7 and asked if katello-disconnected was going to be supported in the future and their response was yes.

Have you learnt more?

It has been discovered that there are three undocumented files that affect your ability to use a Proxy with Katello-disconnected, these being: /etc/pulp/server/plugins.conf.d/iso_importer.json /etc/pulp/server/plugins.conf.d/puppet_importer.json /etc/pulp/server/plugins.conf.d/yum_importer.json

By filling in the information of your Proxy server here should allow you to synchronize content.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.