AWS RHEL AMI to update with RHEL7.4DVD

Latest response

Very excuse me but let me ask license subscription matter.

I'm running several RHEL7.4 AMI instances in AWS (on-demand priced) for developments only in closed VPC subnets where they can be accessed thru VPN, and can't access RHUI, ie. no yum update repository there.
I need to bring some RPMs like kernel updates and gcc etc.
I have the RHEL development suite subscription and have downloaded RHEL7.4 updated installation image. May I bring and apply some RPMs to AWS RHEL AMI from the downloaded RHEL7.4 image? (Is it allowed from the above licensed standpoint?)
Again they are purely development purpose. Production systems subscriptions will be purchased for separately installed private cloud infrastructures. Thanks,

Responses

Having trouble parsing your post, so, need to ask: are the AMIs you're using ones that would have RHUI access but for your VPC setup? That is, if one does an:

aws ec2 describe-images --owner 309956199498 --filter "Name=name,Values=RHEL-7.4*" \
   --query 'Images[].{AMI:ImageId,Description:Description,Name:Name}'

Is the AMI you're using one of the ones in the returned output? I so, then you can (assuming you have sufficient privileges and aren't forbidden by your organization from doing so) add a managed NAT to your VPC so that you can access RHUI and pull the patches your on-demand purchase includes. Probably some other methods you can use, as well.

Hi , thank you for trying to understand my description and responding so kindly. I'm sorry but those RHEL AMIs can't access RHUI from the completely closed VPC subnets. We can access them only thru VPN from our closed development sites. So I'm asking if I can bring some required RPMs to AMIs from RHEL7.4 DVD. If it's not allowed from the license subscription, I would have to request our company's security policy using AWS to change and to place your pointed NAT gw or a restricted proxy access to RHUI. Thanks for further clarification and confirmation.

Reason I was asking whether you were using the official Red Hat AMIs or not is, if you are, you're being charged for access to RHUI reardless of whether you're actually making use of RHUI. From a "fiscally sensible" standpoint, it would only make sense to pay for RHUI access if you're actually using RHUI.

Were I in your shoes, I'd probably be looking at the feasibility of using a "Bring Your Own License" AMI ...and then making arrangements to manage your AWS-hosted instances over your VPN (does your company have Satellite that you could configure your EC2 instances to leverage over the VPN).

Overall, the question of whether you're allowed to furnish your isolated AMIs with updates from elsewhere ...that's not my area of expertise. Don't really know how "transferable" entitlements are from one hosting-context to another. You'd probably need to open a support case with Red Hat to get a definitive answer.

Hi, Thank you very much again for your kind response.

Our RHEL AMIs are surely AWS official and on-demand priced ones. (sorry, my company doesn't have Satellite entitlement. I didn't know about that, but I've realized I should consider that. Thx.) Anyway I understand I need to ask my question via a support case. Thanks a lot.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.