RHEL 7 offline, extended license, update help please

Posted on

I am a maintainer (very loosely called a sysadmin, so too technical questions and I might not be able to answer you) of an RHEL 7.9 system that is offline - not connected to the internet - system.

Before asked, cannot move to a newer version of RHEL at the moment - when we set it up, RHEL8 had problems running diskless and meeting FIPS requirements and no budget to upgrade at the moment.

I am required to updates, especially security updates, monthly.

As we know, RHEL 7 lost support in June - which is the last month I was able to get updates.

I was able to convince the powers that be to purchase extended license support.

The problem I have is, when I run my update command, I still only get updates from June.

When I log into my Red Hat account I can see my active subscriptions:

Developer for Individuals

Red Hat Beta Access

Extended Support for Red Hat Enterprise Linux

This is how things worked (before adding the extended license):

subscription-manager unregister

subscription-manager clean

yum clean all

subscription-manager register

subscription-manager subscribe --pool=longIDnumber

Then add:

subscription-manager repos --enable rhel-7-server-extras-rpms

subscription-manager repos --enable rhel-7-server-devtools-rpms

subscription-manager repos --enable rhel-7-server-optional-rpms

subscription-manager repos --enable rhel-ha-for-rhel-7-server-rpms

subscription-manager repos --enable rhel-7-server-rpms

I'd then run the following command:

yum install $(cat /installers/release/lab-rpms.txt|xargs) --installroot=/installers/release/lab-rpms --nogpgcheck --releasever=/ --downloadonly --downloaddir=/installers/release/lab-rpms

but now get his error:

Error: Multilib version problems found. This often means that the root

   cause is something else and multilib version checking is just

   pointing out that there is a problem. Eg.:



     1. You have an upgrade for shim-x64 which is missing some

        dependency that another package requires. Yum is trying to

        solve this by installing an older version of shim-x64 of the

        different architecture. If you exclude the bad architecture

        yum will tell you what the root cause is (which package

        requires what). You can try redoing the upgrade with

        --exclude shim-x64.otherarch ... this should give you an error

        message showing the root cause of the problem.



     2. You have multiple architectures of shim-x64 installed, but

        yum can only see an upgrade for one of those architectures.

        If you don't want/need both architectures anymore then you

        can remove the one with the missing update and everything

        will work.



     3. You have duplicate versions of shim-x64 installed already.

        You can use "yum check" to get yum show these errors.



   ...you can also use --setopt=protected_multilib=false to remove

   this checking, however this is almost never the correct thing to

   do as something else is very likely to go wrong (often causing

   much more problems).



   Protected multilib versions: shim-x64-15-11.el7.x86_64 != shim-x64-15.8-1.el7.x86_64

Error: Protected multilib versions: mokutil-15-11.el7.x86_64 != mokutil-15.8-1.el7.x86_64

so, I run it with:

--setopt=protected_multilib=false

for it to run

I got a new pool ID to use with the extended license, but when I try to subscrib to it, it comes back not found.

if/when I add any of these it errors out, saying to remove them:

subscription-manager repos --enable rhel-7-server-eus-rpms

subscription-manager repos --enable rhel-7-server-eus-optional-rpms

I'm not sure what else to add here.

Anyone have any idea what I can do to get the latest updates?

Thank you.

Responses