-
Language:
English
-
Language:
English
Working with systems in the Insights Inventory application
Abstract
Preface
After you create your OSTree images, install the RHEL for Edge images on your devices, and register these systems with the Red Hat Insights application, you can organize systems into groups. With that, you can manage multiple systems simultaneously, and perform various tasks, such as vulnerability assessment. You can also check for vulnerabilities. If Common Vulnerabilities and Exposures (CVEs) are identified, you can use the Insights Inventory application to update the image and simultaneously deploy the update to multiple systems.
If you are using Edge management:
-
To be able to edit, delete, or to display host’s details, you must have the
Inventory Hosts Administrator
role assigned to your account. -
If you just want to be able to display host’s details, but no access to actions you must have at least the
Inventory Hosts Viewer
role assigned to your account.
-
To be able to edit, delete, or to display host’s details, you must have the
If you are using Inventory under Red Hat Insights:
-
If you want to use
Inventory groups
access, see the User access to inventory groups documentation to learn more on how to manage groups access. -
If you do not want to use granular
Inventory groups
access, you must have at least theInventory Hosts Administrator
and theInventory Groups Administrator
roles assigned to your account.
-
If you want to use
If you want your non-org administrator users to be able to see or manage their Inventory groups, you must add one of the Inventory Groups roles to the Default Access RBAC group. Otherwise, non-org administrator users will not be able to see or manage the Inventory Groups.
Inventory groups support role-based access (RBAC). By using RBAC, you can set custom permissions on inventory groups according to the user role. See User access to inventory groups for more details.
Chapter 1. Creating a system group to manage multiple systems
In the Insights inventory groups application, you can consolidate multiple systems into groups, simplifying their management. For example, you can easily mitigate vulnerabilities and update systems that are alike.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have registered the systems you plan to group with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory.
- In the dashboard menu, click Inventory > Groups.
- On the Groups page, click Create group.
-
In the Create Group dialog, add a group name that describes your group, for example
retail-north-america
. Click Create. -
On the Inventory > Groups page, use the search box to find the group you just created and click the group name, for example
retail-north-america
, from the group list.
Verification
- If the group creation was successful, you can see the group name on the page for your group.
Chapter 2. Adding a single system to a group
In the Insights inventory groups application, you can add a single system to a group to manage it more easily. For example, you can easily mitigate vulnerabilities and update systems that are alike. With the Insights inventory group application, you can add a system to only one group.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have registered the systems you plan to group with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory > Systems.
On the System page, add a single system to a group: Click the options icon (⋮) near the image and click Add to group. The Add to group window open:
Select one of the options:
- Add to an existing group: Select an existing group and click Add.
- Create a new group: Click the Create group button. Click Add.
Verification
- If adding systems to the group was successful, you can see the systems added to the group on the page for your group.
Chapter 3. Adding multiple systems to a group
In the Insights Inventory application, you can add several systems to a group to manage them more easily. For example, you can easily mitigate vulnerabilities and update systems that are alike.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have registered the systems you plan to group with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory > Systems.
On the System page:
- Search for the systems you want to add from the Inventory and select the ones you want to add to your group.
Click the options icon (⋮) and click Add to group. The Add to group window open:
- Add to an existing group: Select an existing group and click Add.
- Create a new group: Click the Create group button. Click Add.
Verification
- If adding the multiple systems to the group was successful, you can see the systems added to the group on the page for your group.
Chapter 4. Adding systems to a group from the Group details view
In the Insights Inventory application, you can add several systems to a group from the Group details view. This allows you to manage the systems simultaneously, along with the other members in the group. For example, you can easily update systems that have an update available.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have registered the systems you plan to group with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory > Groups.
In the Groups page:
- Click the group to which you want to add systems from the Inventory. The group page opens, showing the current systems.
- Click Add systems. The Add systems window opens.
- From the Immutable (OSTree) tab, select the systems that you want to add.
- Click Add systems. A popup alert informs you that the action was successful.
Verification
- If adding the multiple systems to the group was successful, you can see the systems that were added to the group.
Chapter 5. Removing a system from a group
If you no longer want a system in a group in the Insights Inventory application, you can remove it. For example, if a system no longer needs to be managed with other systems of a group, you can remove it.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have already grouped systems registered with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory > Groups.
- On the Groups page, use the Filter by name search box to find the group you want to modify, and then click the name of the group.
- Select the systems you want to remove.
- In the Group toolbar, click the Actions for group details menu, which is three vertical dots.
- Click Remove from group. Then, confirm and click Remove.
Chapter 6. Removing systems in a group from the Group details view
If you no longer want a system in a group in the Insights Inventory application, you can remove it by using the Group details view. For example, if a system no longer needs to be managed with the other systems in a group, you can remove it.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have registered the systems you plan to group with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory > Groups.
In the Groups page:
- Click the group from which you want to remove systems from the Inventory. The Group page opens, showing the current systems.
- From the Immutable (OSTree) tab, select the systems that you want to remove.
Click the More options (⋮) icon and choose Remove from group.
A window alert asks that you confirm that you want to remove the system from the group.
- Click Remove. A popup alert informs you that the action was successful.
Verification
- Check that the system is no longer part of the group.
Chapter 7. Vulnerabilities
You can use the Insights Inventory application to check for vulnerabilities and update systems if necessary to address those vulnerabilities identified by the system.
7.1. Checking a system for vulnerabilities
You can use the Insights Inventory application to check for CVEs or other vulnerabilities in systems you have registered with the Insights Inventory application.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account
- You have a system registered with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the dashboard, navigate to Red Hat Insights > RHEL > Inventory > Security > Systems.
- Check for vulnerabilities for one of your systems. Click the name of the system, then navigate to the system details page and click the Vulnerability tab.
If there are Common Vulnerabilities and Exposures (CVEs) present in your system, you can address them immediately in the Vulnerability tab. See Addressing vulnerabilities in a system.
7.2. Addressing vulnerabilities in a system
After you check for vulnerabilities, if a CVE is found, you can remediate it by updating the image from the Vulnerabilities tab.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have a system registered with the Insights Inventory application.
Procedure
- Access Red Hat Hybrid Cloud Console platform and log in.
- From the console dashboard, navigate to Red Hat Insights > RHEL > Inventory > Security > Systems.
- In the edge management menu, click Inventory > Security > Systems.
- Click the name of the system, then click the Vulnerability tab.
Click Update Image and follow the prompts.
- Review the details about the update and click Update Image to build an updated image. The build might take a few minutes.
After the update completes, the status column shows that an update is available. You can now send the update to the system.
- In the edge management menu, click Inventory > Systems.
- Click the name of the system you want to update.
- On the system details page, click Vulnerabilities > Update system.
- Review the information about the update and then click Update system.
Verification
If the update was successful, after your system reboots, it automatically sends confirmation to the Insights Inventory application. Check the system status on the system details page. While the system is updating, the system status is Updating
. If the update was successful, the status column for the system is Up to date
. If there is an Error
status, click Error to check the reason. You can click Retry to attempt to update your system again.
Chapter 8. Updating systems in a group
If you have several systems using the same image in the edge management application, you can update several systems in a group simultaneously after you update the image. Use the More options icon (⋮), select the images that you plan to update. You will to be able to choose the package version to update your images.
Using RHEL for Edge customized images that were created using the on-site version of RHEL image builder is not supported by the edge management application.
There is no support for updating an Edge system by using the CLI. You can only update your Edge systems by using the Red Hat Hybrid Cloud Console.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have the systems registered with Remote Host Configuration and Management.
- You have an updated image that contains the changes you want to push to your systems. For more information, see Updating an image.
Procedure
- Go to the edge management application in the Red Hat Hybrid Cloud Console platform and log in.
- In the edge management menu, click Inventory > Groups.
- Select the group from the list that contains several systems you want to update.
-
Select the systems in the group that have the
Update available
status and that use the same image. You can check the image each system uses in the Image column. - In the Group toolbar, click the Actions for group details menu, which is three vertical dots.
- Click Update selected.
- Review the information about the update. Click Update system.
Verification
Check Inventory > Groups and click the group from which the updates were triggered. If the update was sent to the system, the system status is Up to date
.
Chapter 9. Managing custom repositories
Custom repositories extend the images you build in the edge management application to packages beyond those that Red Hat provides. You can customize the images with custom repositories and custom packages that fit your specific business case. For example, you can add packages from the Extra Packages for Enterprise Linux (EPEL), or any compatible package list. You can update your existing images by adding or removing packages from these custom repositories. You can also remove repositories, and also add repositories from the popular repositories.
9.1. Adding a custom repository
To add packages from the third-party repository to your customized images, you must first define your repository with third-party information.
Prerequisites
- You have a RHEL subscription.
- You have administrator access to the Red Hat Hybrid Cloud Console web user interface or repository administrator role.
- You have the URL for your custom repository.
Procedure
- Access Hybrid Cloud Console.
Click Red Hat Insights > RHEL > Content > Repositories.
The Custom repositories dashboard appears.
- Click Add repositories. The Add custom repositories wizard opens.
Enter the following information:
- NAME - mandatory.
- URL - mandatory.
- In the Restrict architecture drop-down menu, select an architecture. You can allow all the architectures or restrict one to your system architecture to prevent incorrect repositories availability.
- In the Restrict OS version drop-down menu select an operating system (OS). You can allow all the RHEL versions or select one for your system version to prevent incorrect repositories being available.
-
GPG key - upload the
.txt
file with a GPG key or paste the URL or value of an existing GPG key. The GPG key verifies the signed packages of a repository. If you do not provide the GPG key for a repository, your system cannot perform the verification.
- If you want to add another repository, click the Add another repository button and repeat step 3.
-
Click Save. The Red Hat Hybrid Cloud Console validates the project status. If your repository is marked as
Invalid
, check the repository URL that you added.
Verification
- Open the list of custom repositories and verify that the repository you added is listed.
Troubleshooting
-
If your repository is marked as
Invalid
, check the repository URL that you added.
9.2. Adding a custom repository to an image
You can add a custom repository and the associated packages to an image after it has been created.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have built an image in the Red Hat Hybrid Cloud Console and registered it with rhc client that contains custom repositories.
- You have added one or more custom repositories. See Adding a custom repository for more information.
Procedure
- Access Hybrid Cloud Console.
Click Red Hat Insights > RHEL > Inventory > Images.
The Insights Image Builder dashboard appears.
- Click the Immutable (OSTree) tab.
- Click the name of the image you want to update.
- On the image details page, click Actions > Create new version. The Update image wizard opens.
- Click Next on both the Details and Options page to view the custom repositories that have been added to the image.
On the Content page, perform the following actions:
- On the Custom repositories page, select the linked custom repositories you want to add.
- Click Next.
-
On the Additional custom packages page, search and choose the packages you want to add from the repository. If you are using the Fedora example repository
https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/29/Everything/x86_64/os/
, enterwaf-python3
to add the package. - Click Next.
- On the Review page, review your changes and click Update image.
Next step
After the image update completes, you can update systems that are using that image. See Updating a system for more information.
9.3. Removing a custom repository from an image
You can remove custom repositories and the associated packages from an image after it has been created. When you remove a custom repository, the packages associated with that custom repository will also be removed from the image.
Prerequisites
- You have a Red Hat Hybrid Cloud Console account.
- You have built an image in the Red Hat Hybrid Cloud Console and registered it with Remote Host Configuration and Management that contains custom repositories.
- You have added one or more custom repositories. See Adding a custom repository to the edge management application for more information.
Procedure
- Access Hybrid Cloud Console.
- Click the Settings icon (⚙) in the top right and, from the menu, select Settings.
- On the Settings menu, select Repositories.
- From the Your repositories tab, select the Custom.
From the available repositories, select the repository to delete.
- Click the More options (⋮) icon and choose Delete.
- From the Remove repository window, confirm that you want to delete the repository by clicking Remove.