1. You create a host. Satellite requests an unused IP address from the DHCP Capsule Server that is associated with the subnet. Satellite loads this IP address into the IP address field in the Create Host window. When you complete all the options for the new host, submit the new host request.
2. The DHCP Capsule Server that is associated with the subnet reserves an entry for the host.

3. Satellite configures the DNS records:

   • A forward DNS record is created on the Capsule Server that is associated with the domain.
   • A reverse DNS record is created on the DNS Capsule Server that is associated with the subnet.
4. A PXELinux menu is created for the host in the TFTP Capsule Server that is associated with the subnet.
5. The new host requests a DHCP lease from the DHCP server.
6. The DHCP server responds to the lease request and returns TFTP next-server and filename options.
7. The host requests the bootloader and menu from the TFTP server.
8. The PXELinux menu and OS installer for the host is returned over TFTP.
9. The installer requests the provisioning template or script from Satellite.
10. Satellite renders the template and returns the resulting kickstart file to the host.
11. The host enters a build process that installs the operating system, registers the host to Satellite, and installs management tools such as katello-agent and puppet.
12. The installer notifies Satellite of a successful build in the postinstall script.
13. The PXELinux menu reverts to a local boot template.
14. The host starts its operating system. If you configured the host to use any Puppet classes, the host configures itself using the modules stored on Satellite.

Procedure

1. In the Satellite web UI, navigate to Hosts > Operating systems and click New Operating system.
2. In the Name field, enter a name to represent the operating system entry.
3. In the Major field, enter the number that corresponds to the major version of the operating system.
4. In the Minor field, enter the number that corresponds to the minor version of the operating system.
5. In the Description field, enter a description of the operating system.
6. From the Family list, select the operating system’s family.
7. From the Root Password Hash list, select the encoding method for the root password.
8. From the Architectures list, select the architectures that the operating system uses.
9. Click the Partition table tab and select the possible partition tables that apply to this operating system.
10. Optional: if you use non-Red Hat content, click the Installation media tab and select the installation media that apply to this operating system. For more information, see Section 3.10, “Using Third Party Installation Media”.
11. Click the Templates tab and select a PXELinux template, a Provisioning template, and a Finish template for your operating system to use. You can select other templates, for example an iPXE template, if you plan to use iPXE for provisioning.
12. Click Submit to save your provisioning template.

1. Run the following Bash script:

   PARTID=$(hammer --csv partition-table list | grep "Kickstart default," | cut -d, -f1)
   PXEID=$(hammer --csv template list --per-page=1000 | grep "Kickstart default PXELinux" | cut -d, -f1)
   SATID=$(hammer --csv template list --per-page=1000 | grep "provision" | grep ",Kickstart default" | cut -d, -f1)
   
   for i in $(hammer --no-headers --csv os list | awk -F, {'print $1'})
   do
      hammer partition-table add-operatingsystem --id="${PARTID}" --operatingsystem-id="${i}"
      hammer template add-operatingsystem --id="${PXEID}" --operatingsystem-id="${i}"
      hammer os set-default-template --id="${i}" --config-template-id=${PXEID}
      hammer os add-config-template --id="${i}" --config-template-id=${SATID}
      hammer os set-default-template --id="${i}" --config-template-id=${SATID}
   done

2. Display information about the updated operating system to verify that the operating system is updated correctly:

   # hammer os info --id 1

1. In the Satellite web UI, navigate to Hosts > Architectures, and in the Architectures window, click Create Architecture.
2. In the Name field, enter a name for the architecture.
3. From the Operating Systems list, select an operating system. If none are available, you can create and assign them under Hosts > Operating Systems.
4. Click Submit.

1. In the Satellite web UI, navigate to Hosts > Hardware Models, and in the Hardware Models window, click Create Model.
2. In the Name field, enter a name for the hardware model.
3. Optionally, in the Hardware Model and Vendor Class fields, you can enter corresponding information for your system.
4. In the Info field, enter a description of the hardware model.
5. Click Submit to save your hardware model.

1. Add the synchronized kickstart repository that you want to use to the existing Content View or create a new Content View and add the kickstart repository.

   For Red Hat Enterprise Linux 8, ensure that you add both Red Hat Enterprise Linux 8 for x86_64 - AppStream Kickstart x86_64 8 and Red Hat Enterprise Linux 8 for x86_64 - BaseOS Kickstart x86_64 8 repositories.

   If you use a disconnected environment, you must import the Kickstart repositories from a Red Hat Enterprise Linux binary DVD. For more information, see Importing Kickstart Repositories in the Content Management Guide.

2. Publish a new version of the Content View where the kickstart repository is added and promote it to a required lifecycle environment. For more information, see Managing Content Views in the Content Management Guide.
3. When you create a host, in the Operating System tab, for Media Selection, select the Synced Content check box.

1. In the Satellite web UI, navigate to Hosts > Partition Tables and, in the Partition Tables window, click Create Partition Table.
2. In the Name field, enter a name to represent the partition table.
3. Select the Default check box if you want to set the template to automatically associate with new organizations or locations.
4. Select the Snippet check box if you want to identify the template as a reusable snippet for other partition tables.
5. From the Operating System Family list, select the distribution or family of the partitioning layout. For example, Red Hat Enterprise Linux, CentOS, and Fedora are in the Red Hat family.

6. In the Template editor field, enter the layout for the disk partition. For example:

   zerombr
   clearpart --all --initlabel
   autopart

   You can also use the Template file browser to upload a template file.

   The format of the layout must match that for the intended operating system. For example, Red Hat Enterprise Linux 7.2 requires a layout that matches a kickstart file.

7. In the Audit Comment field, add a summary of changes to the partition layout.
8. Click the Organizations and Locations tabs to add any other provisioning contexts that you want to associate with the partition table. Satellite adds the partition table to the current provisioning context.
9. Click Submit to save your partition table.

Procedure

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles, and in the Compute Profiles window, click Create Compute Profile.
2. In the Name field, enter a name for the profile and click Submit.

1. Generate an encrypted password. You can use the following command to generate a password:

   # python -c 'import crypt,getpass;pw=getpass.getpass(); print(crypt.crypt(pw)) if (pw==getpass.getpass("Confirm: ")) else exit()'

2. Copy the password for later use.
3. In the Satellite web UI, navigate to Administer > Settings.
4. On the Settings page, select the Provisioning tab.
5. In the Name column, navigate to Root password, and click Click to edit.
6. Paste the encrypted password that you generate, and click Save.

1. In the Satellite web UI, navigate to Hosts > Installation Media and click Create Medium.
2. In the Name field, enter a name to represent the installation media entry.

3. In the Path enter the URL or NFS share that contains the installation tree. You can use following variables in the path to represent multiple different system architectures and versions:

   • $arch - The system architecture.
   • $version - The operating system version.
   • $major - The operating system major version.

   • $minor - The operating system minor version.

     Example HTTP path:

     http://download.example.com/centos/$version/Server/$arch/os/

     Example NFS path:

     nfs://download.example.com:/centos/$version/Server/$arch/os/

     Synchronized content on Capsule Servers always uses an HTTP path. Capsule Server managed content does not support NFS paths.

4. From the Operating system family list, select the distribution or family of the installation medium. For example, CentOS, and Fedora are in the Red Hat family.
5. Click the Organizations and Locations tabs, to change the provisioning context. Satellite Server adds the installation medium to the set provisioning context.
6. Click Submit to save your installation medium.

Procedure

1. On the VM host system, configure the firewall to allow VNC service on ports 5900 to 5930:

   • On Red Hat Enterprise Linux 6:

     # iptables -A INPUT -p tcp --dport 5900:5930 -j ACCEPT
     # service iptables save

   • On Red Hat Enterprise Linux 7:

     # firewall-cmd --add-port=5900-5930/tcp
     # firewall-cmd --add-port=5900-5930/tcp --permanent

2. In the Satellite web UI, navigate to Infrastructure > Compute Resources and select the name of a compute resource.
3. In the Virtual Machines tab, select the name of a VM host. Ensure the machine is powered on and then select Console.

1. Enter the satellite-installer command to configure the required network services:

   # satellite-installer --foreman-proxy-dhcp true \
   --foreman-proxy-dhcp-managed true \
   --foreman-proxy-dhcp-gateway "192.168.140.1" \
   --foreman-proxy-dhcp-interface "eth1" \
   --foreman-proxy-dhcp-nameservers "192.168.140.2" \
   --foreman-proxy-dhcp-range "192.168.140.10 192.168.140.110" \
   --foreman-proxy-dhcp-server "192.168.140.2" \
   --foreman-proxy-dns true \
   --foreman-proxy-dns-managed true \
   --foreman-proxy-dns-forwarders "8.8.8.8; 8.8.4.4" \
   --foreman-proxy-dns-interface "eth1" \
   --foreman-proxy-dns-reverse "140.168.192.in-addr.arpa" \
   --foreman-proxy-dns-server "127.0.0.1" \
   --foreman-proxy-dns-zone "example.com" \
   --foreman-proxy-tftp true \
   --foreman-proxy-tftp-managed true

2. Find the Capsule Server that you configure:

   # hammer proxy list

3. Refresh features of the Capsule Server to view the changes:

   # hammer proxy refresh-features --name "satellite.example.com"

4. Verify the services configured on the Capsule Server:

   # hammer proxy info --name "satellite.example.com"

1. In the Satellite web UI, navigate to Infrastructure > Domains and click Create Domain.
2. In the DNS Domain field, enter the full DNS domain name.
3. In the Fullname field, enter the plain text name of the domain.
4. Click the Parameters tab and configure any domain level parameters to apply to hosts attached to this domain. For example, user defined Boolean or string parameters to use in templates.
5. Click Add Parameter and fill in the Name and Value fields.
6. Click the Locations tab, and add the location where the domain resides.
7. Click the Organizations tab, and add the organization that the domain belongs to.
8. Click Submit to save the changes.

1. In the Satellite web UI, navigate to Infrastructure > Subnets, and in the Subnets window, click Create Subnet.
2. In the Name field, enter a name for the subnet.
3. In the Description field, enter a description for the subnet.
4. In the Network address field, enter the network address for the subnet.
5. In the Network prefix field, enter the network prefix for the subnet.
6. In the Network mask field, enter the network mask for the subnet.
7. In the Gateway address field, enter the external gateway for the subnet.
8. In the Primary DNS server field, enter a primary DNS for the subnet.
9. In the Secondary DNS server, enter a secondary DNS for the subnet.

10. From the IPAM list, select the method that you want to use for IP address management (IPAM):

    • DHCP - The subnet contains a DHCP server.
    • Internal DB - The subnet does not contain a DHCP server but Satellite can manage the IP address assignment and record IP addresses in its internal database.
    • None - No IP address management.
11. Enter the information for the IPAM method that you select.
12. Click the Remote Execution tab and select the capsule that controls the remote execution.
13. Click the Domains tab and select the domains that apply to this subnet.
14. Click the Capsules tab and select the Capsule that you want to provide each service in the subnet.
15. Click the Parameters tab and configure any subnet level parameters to apply to hosts attached to this subnet. For example, user defined Boolean or string parameters to use in templates.
16. Click the Locations tab and select the locations that use this capsule.
17. Click the Organizations tab and select the organizations that use this capsule.
18. Click Submit to save the subnet information.

1. Chainbooting virtual machines using hypervisors that use iPXE as primary firmware
2. Using PXELinux through TFTP to chainload iPXE directly on bare metal hosts
3. Using PXELinux through UNDI, which uses HTTP to transfer the kernel and the initial RAM disk on bare metal hosts

1. On Capsule, enter the following command:

   # satellite-installer --enable-foreman-proxy-plugin-dhcp-infoblox \
   --foreman-proxy-dhcp true \
   --foreman-proxy-dhcp-managed false \
   --foreman-proxy-dhcp-provider infoblox \
   --foreman-proxy-plugin-dhcp-infoblox-record-type fixedaddress \
   --foreman-proxy-dhcp-server infoblox_hostname \
   --foreman-proxy-plugin-dhcp-infoblox-username admin \
   --foreman-proxy-plugin-dhcp-infoblox-password infoblox \
   --foreman-proxy-plugin-dhcp-infoblox-network-view default \
   --foreman-proxy-plugin-dhcp-infoblox-dns-view default

2. In the Satellite web UI, navigate to Infrastructure > Capsules and select the Capsule with the Infoblox DHCP module and click Refresh.
3. Ensure that the dhcp features are listed.
4. For all domains managed through Infoblox, ensure that the DNS Capsule is set for that domain. To verify, in the Satellite web UI, navigate to Infrastructure > Domains, and inspect the settings of each domain.
5. For all subnets managed through Infoblox, ensure that DHCP Capsule and Reverse DNS Capsule is set. To verify, in the Satellite web UI, navigate to Infrastructure > Subnets, and inspect the settings of each subnet.

1. On Capsule, enter the following command:

   # satellite-installer --enable-foreman-proxy-plugin-dns-infoblox \
   --foreman-proxy-dns true \
   --foreman-proxy-dns-managed false \
   --foreman-proxy-dns-provider infoblox \
   --foreman-proxy-plugin-dns-infoblox-dns-server infoblox_hostname \
   --foreman-proxy-plugin-dns-infoblox-username admin \
   --foreman-proxy-plugin-dns-infoblox-password infoblox \
   --foreman-proxy-plugin-dns-infoblox-dns-view default

   Optionally, you can change the value of the --foreman-proxy-plugin-dns-infoblox-dns-view option to specify a DNS Infoblox view other than the default view.

2. In the Satellite web UI, navigate to Infrastructure > Capsules and select the Capsule with the Infoblox DNS module and click Refresh.
3. Ensure that the dns features are listed.

1. In the Satellite web UI, navigate to Hosts > Create Host.
2. In the Name field, enter a name for the host.
3. Click the Organization and Location tabs and change the context to match your requirements.
4. From the Host Group list, select a host group that you want to use to populate the form.
5. Click the Interface tab, and on the host’s interface, click Edit.

6. Verify that the fields are populated with values. Note in particular:

   • The Name from the Host tab becomes the DNS name.
   • Satellite Server automatically assigns an IP address for the new host.
7. In the MAC address field, enter a MAC address for the host. This ensures the identification of the host during the PXE boot process.
8. Ensure that Satellite Server automatically selects the Managed, Primary, and Provision options for the first interface on the host. If not, select them.
9. Click the Operating System tab, and verify that all fields contain values. Confirm each aspect of the operating system.
10. Click Resolve in Provisioning template to check the new host can identify the right provisioning templates to use.

11. Optional: If you want to use VLAN tagging, you must add the VLAN ID to the PXELinux or PXEGrub2 template. To the APPEND line, add vlanid=example_vlanid.

    For more information about associating provisioning templates, see Section 3.7, “Creating Provisioning Templates”.

12. Click the Parameters tab, and ensure that a parameter exists that provides an activation key. If not, add an activation key.
13. Click Submit to save the host details.

1. In the Satellite web UI, navigate to Hosts > Discovered host. Select the host you want to use and click Provision to the right of the list.

2. Select from one of the two following options:

   • To provision a host from a host group, select a host group, organization, and location, and then click Create Host.
   • To provision a host with further customization, click Customize Host and enter the additional details you want to specify for the new host.

3. Verify that the fields are populated with values. Note in particular:

   • The Name from the Host tab becomes the DNS name.
   • Satellite Server automatically assigns an IP address for the new host.
   • Satellite Server automatically populates the MAC address from the Discovery results.
4. Ensure that Satellite Server automatically selects the Managed, Primary, and Provision options for the first interface on the host. If not, select them.
5. Click the Operating System tab, and verify that all fields contain values. Confirm each aspect of the operating system.

6. Click Resolve in Provisioning template to check the new host can identify the right provisioning templates to use.

   For more information about associating provisioning templates, see Section 3.7, “Creating Provisioning Templates”.

7. Click Submit to save the host details.

For CLI Users

1. Identify the discovered host to use for provisioning:

   # hammer discovery list

2. Select a host and provision it using a host group. Set a new host name with the --new-name option:

   # hammer discovery provision --name "host_name" \
   --new-name "new_host_name" --organization "My_Organization" \
   --location "My_Location" --hostgroup "My_Host_Group" --build true \
   --enabled true --managed true

   This removes the host from the discovered host listing and creates a host entry with the provisioning settings. The Discovery image automatically resets the host so that it can boot to PXE. The host detects the DHCP service on Satellite Server’s integrated Capsule and starts installing the operating system from its Kickstart tree. When the installation completes, the host also registers to Satellite Server using an activation key and installs the necessary configuration and management tools from the Red Hat Satellite Tools repository.

1. In the Satellite web UI, navigate to Configure > Discovery rules. Select Create Rule and enter the following details:
2. In the Name field, enter a name for the rule.
3. In the Search field, enter the rules to determine whether to provision a host. This field provides suggestions for values you enter and allows operators for multiple rules. For example: cpu_count > 8.
4. From the Host Group list, select the host group to use as a template for this host.

5. In the Hostname field, enter the pattern to determine host names for multiple hosts. This uses the same ERB syntax that provisioning templates use. The host name can use the @host attribute for host-specific values and the rand function for a random number.

   • myhost-<%= rand(99999) %>
   • abc-<%= @host.facts['bios_vendor'] + '-' + rand(99999).to_s %>
   • xyz-<%= @host.hostgroup.name %>
   • srv-<%= @host.discovery_rule.name %>

   • server-<%= @host.ip.gsub('.','-') + '-' + @host.hostgroup.subnet.name %>

     Because the rand() function returns an integer that cannot be concatenated with a string, use the to_s function to change the integer to a string. When creating host name patterns, ensure the resulting host names are unique, do not start with numbers, and do not contain underscores or dots. A good approach is to use unique information provided by Facter, such as the MAC address, BIOS, or serial ID.

6. In the Hosts limit field, enter the maximum hosts you can provision with the rule. Enter 0 for unlimited.
7. In the Priority field, enter a number to set the precedence the rule has over other rules. Rules with lower values have a higher priority.
8. From the Enabled list, select whether you want to enable the rule.
9. To set a different provisioning context for the rule, click the Organizations and Locations tabs and select the contexts you want to use.
10. Click Submit to save your rule.

11. Navigate to Hosts > Discovered Host and select one of the following two options:

    • From the Discovered hosts list on the right, select Auto-Provision to automatically provisions a single host.
    • On the upper right of the window, click Auto-Provision All to automatically provisions all hosts.

1. In the Satellite web UI, navigate to Hosts > Create Host.
2. In the Name field, enter a name that you want to become the provisioned system’s host name.
3. Click the Organization and Location tabs and change the context to match your requirements.
4. From the Host Group list, select a host group that you want to use to populate the form.
5. Click the Interface tab, and on the host’s interface, click Edit.

6. Verify that the fields are populated with values. Note in particular:

   • The Name from the Host tab becomes the DNS name.
   • Satellite Server automatically assigns an IP address for the new host.
7. In the MAC address field, enter a MAC address for the host.
8. Ensure that Satellite Server automatically selects the Managed, Primary, and Provision options for the first interface on the host. If not, select them.
9. Click the Operating System tab, and verify that all fields contain values. Confirm each aspect of the operating system.

10. Click Resolve in Provisioning template to check the new host can identify the right provisioning templates to use.

    For more information about associating provisioning templates, see Section 3.7, “Creating Provisioning Templates”.

11. Click the Parameters tab, and ensure that a parameter exists that provides an activation key. If not, add an activation key.
12. Click Submit to save the host details.

1. In the Satellite web UI, navigate to Hosts > Provisioning Templates.
2. Create a provisioning template, or clone and edit an existing template. For more information, see Section 3.7, “Creating Provisioning Templates”.
3. In the template, click the Template tab.

4. In the Template editor field, add the create_users snippet to the %post section:

   <%= snippet('create_users') %>

5. Select the Default check box.
6. Click the Association tab.
7. From the Application Operating Systems list, select an operating system.
8. Click Submit to save the provisioning template.

9. Create a host that is associated with the provisioning template or rebuild a host using the OS associated with the modified template. For more information, see Creating a Host in Red Hat Satellite in the Managing Hosts guide.

   The SSH keys of the Owned by user are added automatically when the create_users snippet is executed during the provisioning process. You can set Owned by to an individual user or a user group. If you set Owned by to a user group, the SSH keys of all users in the user group are added automatically.

1. In the Satellite web UI, navigate to Content > Products and in the Products window, click the Repositories tab.
2. Select a Kickstart repository and for the Publish via HTTP, option, click the Edit icon, select the check box, and click Save.
3. Repeat the previous steps for the Satellite repository.

1. Open the /usr/share/foreman-discovery-image/foreman-discovery-image.ks file for editing:

   # vim /usr/share/foreman-discovery-image/foreman-discovery-image.ks

2. Replace repo --name=rhel --baseurl=http://download/00000 with with your own repos for RHEL and Satellite with your repository URLs. To find the URLs, navigate to Content > Products and click the Repositories tab and copy the URL for both repositories into the file:

   repo --name=rhel --baseurl=http://download/released/RHEL-7/7.4/Server/x86_64/os/
   repo --name=sat --baseurl=http://download2/nightly/Satellite/6.6/candidate/latest-Satellite-6.6-RHEL-7/compose/Satellite/x86_64/os/

3. Run the livecd-creator tool:

   # livecd-creator --title="Discovery-Image" \
   --compression-type=xz \
   --cache=var/cache/build-fdi \
   --config /usr/share/foreman-discovery-image/foreman-discovery-image.ks \
   --fslabel fdi \
   --tmpdir /var/tmp

   If you change fdi in the --fslabel option, you must also change the root label on the kernel command line when loading the image. fdi or the alternative name is appended to the .iso file that is created as part of this procedure. The PXE Discovery tool uses this name when converting from .iso to PXE.

   Use /var/tmp because this process requires close to 3GB of space and /tmp might have problems if the system is low on swap space.

4. Verify that your fdi.iso file is created:

   # ls *.iso -h

To boot the iso file over a network:

1. To extract the initial ramdisk and kernel files from the .iso file over a network, enter the following command:

   # discovery-iso-to-pxe fdi.iso

2. Create a directory to store your boot files:

   # mkdir /var/lib/tftpboot/boot/myimage

3. Copy the initrd0.img and vmlinuz0 files to your new directory.
4. Edit the KERNEL and APPEND entries in the /var/lib/tftpboot/pxelinux.cfg file to add the information about your own initial ramdisk and kernel files.

1. To convert the .iso file to an .iso hybrid file for PXE provisioning, enter the following command:

   # isohybrid --partok fdi.iso

   If you have grub2 packages installed, you can also use the following command to install a grub2 bootloader:

   # isohybrid --partok --uefi fdi.iso

2. To add md5 checksum to the .iso file so it can pass installation media validation tests in Satellite, enter the following command:

   # implantisomd5 fdi.iso

1. On Satellite Server, switch to the foreman user:

   # su foreman -s /bin/bash

2. Generate the key pair:

   $ ssh-keygen

3. Copy the public key to the KVM server:

   $ ssh-copy-id root@kvm.example.com

4. Exit the bash shell for the foreman user:

   $ exit

5. Install the libvirt-client package:

   # satellite-maintain packages install libvirt-client

6. Use the following command to test the connection to the KVM server:

   # su foreman -s /bin/bash -c 'virsh -c qemu+ssh://root@kvm.example.com/system list'

   When you add the KVM connection in Satellite Server, use the qemu+ssh protocol and the address to the server. For example:

   qemu+ssh://root@kvm.example.com/system

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources, and in the Compute Resources window, click Create Compute Resource.
2. In the Name field, enter a name for the new compute resource.
3. From the Provider list, select Libvirt
4. In the Description field, enter a description for the compute resource.

5. In the URL field, enter the connection URL to the KVM server. For example:

    qemu+ssh://root@kvm.example.com/system

6. From the Display type list, select either VNC or Spice.

7. Optional: To secure console access for new hosts with a randomly generated password, select the Set a randomly generated password on the display connection check box. You can retrieve the password for the VNC console to access guest virtual machine console from the output of the following command executed on the KVM server:

   # virsh edit your_VM_name
   <graphics type='vnc' port='-1' autoport='yes' listen='0.0.0.0' passwd='your_randomly_generated_password'>

   The password is randomly generated every time the console for the virtual machine is opened, for example, with virt-manager.

8. Click Test Connection to ensure that Satellite Server connects to the KVM server without fault.
9. Verify that the Locations and Organizations tabs are automatically set to your current context. If you want, add additional contexts to these tabs.
10. Click Submit to save the KVM connection.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources, and in the Compute Resources window, click the name of your KVM connection.
2. Click the Image tab, and then click Create Image.
3. In the Name field, enter a name for the image.
4. From the Operatingsystem list, select the image’s base operating system.
5. From the Architecture list, select the operating system architecture.
6. In the Username field, enter the SSH user name for image access. This is normally the root user.
7. In the Password field, enter the SSH password for image access.
8. From the User data list, select if you want images to support user data input, such as cloud-init data.

9. In the Image path field, enter the full path that points to the image on the KVM server. For example:

    /var/lib/libvirt/images/TestImage.qcow2

10. Click Submit to save the image details.

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles.
2. In the Compute Profiles window, click the name of an existing compute resource or click Create Compute Profile and select a compute resource to use to create a compute profile.
3. In the CPUs field, enter the number of CPUs to allocate to the new host.
4. In the Memory field, enter the amount of memory to allocate to the new host.
5. From the Image list, select the image to use if performing image-based provisioning.
6. From the Network Interfaces list, select the network parameters for the host’s network interface. You can create multiple network interfaces. However, at least one interface must point to a Capsule-managed network.
7. In the Storage area, enter the storage parameters for the host. You can create multiple volumes for the host.
8. Click Submit to save the settings to the compute profile.

1. In the Satellite web UI, navigate to Hosts > Create Host.
2. In the Name field, enter the name that you want to become the provisioned system’s host name.
3. Click the Organization and Location tabs to ensure that the provisioning context is automatically set to the current context.
4. From the Host Group list, select the host group that you want to use to populate the form.
5. From the Deploy on list, select the KVM connection.
6. From the Compute Profile list, select a profile to use to automatically populate virtual machine-based settings.
7. Click the Interface tab and click Edit on the host’s interface.

8. Verify that the fields are automatically populated with values. Note in particular:

   • The Name from the Host tab becomes the DNS name.
   • Satellite Server automatically assigns an IP address for the new host.
9. Ensure that the MAC address field is blank. The KVM server assigns one to the host.
10. Verify that the Managed, Primary, and Provision options are automatically selected for the first interface on the host. If not, select them.
11. In the interface window, review the KVM-specific fields that are populated with settings from your compute profile. Modify these settings to suit your needs.
12. Click the Operating System tab, and confirm that all fields automatically contain values.
13. For network-based provisioning, ensure that the Provisioning Method is set to Network Based. For image-based provisioning, ensure that the Provisioning Method is set to Image Based
14. Click Resolve in Provisioning templates to check the new host can identify the right provisioning templates to use.
15. Click the Virtual Machine tab and confirm that these settings are populated with details from the host group and compute profile. Modify these settings to suit your needs.
16. Click the Parameters tab and ensure that a parameter exists that provides an activation key. If not, add an activation key.
17. Click Submit to save the host entry.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources, and in the Compute Resources window, click Create Compute Resource.
2. In the Name field, enter a name for the new compute resource.
3. From the Provider list, select RHV.
4. In the Description field, enter a description for the compute resource.

5. In the URL field, enter the connection URL for the Red Hat Virtualization Manager’s API.

   For example, in RHEV 3.6 and earlier, the URL is of the following form: https://rhvm.example.com/ovirt-engine/api. In RHV 4.0 and later, the URL is of the following form: https://rhvm.example.com/ovirt-engine/api/v3.

6. Optionally, select the Use APIv4 (experimental) check box to evaluate the new engine API.

   Warning

   The items listed in this step are provided as Technology Previews. For further information about the scope of Technology Preview status, and associated support implications, see Technology Preview Features Support Scope.

7. In the User field, enter the name of a user with permissions to access Red Hat Virtualization Manager’s resources.
8. In the Password field, enter the password of the user.
9. Click Load Datacenters to populate the Datacenter list with data centers from your Red Hat Virtualization environment.
10. From the Datacenter list, select a data center.
11. From the Quota ID list, select a quota to limit resources available to Satellite.
12. In the X509 Certification Authorities field, enter the certificate authority for SSL/TLS access. Alternatively, if you leave the field blank, a self-signed certificate is generated on the first API request by the server.
13. Click the Locations tab and select the location you want to use.
14. Click the Organizations tab and select the organization you want to use.
15. Click Submit to save the compute resource.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources, and in the Compute Resources window, click the name of your Red Hat Virtualization connection.
2. Click the Image tab, and then click New Image.
3. In the Name field, enter a name for the image.
4. From the Operatingsystem list, select the image’s base operating system.
5. From the Architecture list, select the operating system architecture.
6. In the Username field, enter the SSH user name for image access. This is normally the root user.
7. In the Password field, enter the SSH password for image access.
8. From the Image list, select the name of the image on Red Hat Virtualization.
9. Click Submit to save the image details.

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles and in the Compute Profiles window, click the name of the Red Hat Virtualization connection.
2. From the Cluster list, select the target host cluster in the Red Hat Virtualization environment.
3. From the Template list, select the RHV template to use for the Cores and Memory settings.
4. In the Cores field, enter the number of CPU cores to allocate to the new host.
5. In the Memory field, enter the amount of memory to allocate to the new host.
6. From the Image list, select image to use for image-based provisioning.

7. In the Network Interfaces area, enter the network parameters for the host’s network interface. You can create multiple network interfaces. However, at least one interface must point to a Capsule-managed network. For each network interface, enter the following details:

   1. In the Name field, enter the name of the network interface.
   2. From the Network list, select The logical network that you want to use.

8. In the Storage area, enter the storage parameters for the host. You can create multiple volumes for the host. For each volume, enter the following details:

   1. In the Size (GB) enter the size, in GB, for the new volume.
   2. From the Storage domain list, select the storage domain for the volume.
   3. From the Preallocate disk, select either thin provisioning or preallocation of the full disk.
   4. From the Bootable list, select whether you want a bootable or non bootable volume.
9. Click Submit to save the compute profile.

1. In the Satellite web UI, navigate to Hosts > New Host.
2. In the Name field, enter the name that you want to become the provisioned system’s host name.
3. Click the Organization and Location tabs to ensure that the provisioning context is automatically set to the current context.
4. From the Host Group list, select the host group that you want to use to populate the form.
5. From the Deploy on list, select the Red Hat Virtualization connection.
6. From the Compute Profile list, select a profile to use to automatically populate virtual machine-based settings.
7. Click the Interface tab and click Edit on the host’s interface.

8. Verify that the fields are automatically populated with values. Note in particular:

   • The Name from the Host tab becomes the DNS name.
   • Satellite Server automatically assigns an IP address for the new host.
9. Ensure that the MAC address field is blank. The Red Hat Virtualization server assigns one to the host.
10. Verify that the Managed, Primary, and Provision options are automatically selected for the first interface on the host. If not, select them.
11. In the interface window, ensure that the Red Hat Virtualization-specific fields are populated with settings from the compute profile. Modify these settings to suit your needs.
12. Click the Operating System tab, and confirm that all fields automatically contain values.
13. For network-based provisioning, ensure that the Provisioning Method is set to Network Based. For image-based provisioning, ensure that the Provisioning Method is set to Image Based.
14. Click Resolve in Provisioning templates to check the new host can identify the right provisioning templates to use.
15. Click the Virtual Machine tab and confirm that these settings are populated with details from the host group and compute profile. Modify these settings to suit your needs.
16. Click the Parameters tab and ensure that a parameter exists that provides an activation key. If not, add an activation key.
17. Click Submit to save the host entry.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources, and in the Compute Resources window, click Create Compute Resource.
2. In the Name field, enter a name for the resource.
3. From the Provider list, select VMware.
4. In the Description field, enter a description for the resource.
5. In the VCenter/Server field, enter the IP address or host name of the vCenter server.
6. In the User field, enter the user name with permission to access the vCenter’s resources.
7. In the Password field, enter the password for the user.
8. Click Load Datacenters to populate the list of data centers from your VMware vSphere environment.
9. From the Datacenter list, select a specific data center to manage from this list.
10. In the Fingerprint field, ensure that this field is populated with the fingerprint from the data center.
11. From the Display Type list, select a console type, for example, VNC or VMRC. Note that VNC consoles are unsupported on VMware ESXi 6.5 and later.

12. Optional: In the VNC Console Passwords field, select the Set a randomly generated password on the display connection check box to secure console access for new hosts with a randomly generated password. You can retrieve the password for the VNC console to access guest virtual machine console from the libvirtd host from the output of the following command:

    # virsh edit your_VM_name
    <graphics type='vnc' port='-1' autoport='yes' listen='0.0.0.0' passwd='your_randomly_generated_password'>

    The password randomly generates every time the console for the virtual machine opens, for example, with virt-manager.

13. From the Enable Caching list, you can select whether to enable caching of compute resources. For more information, see Section 9.8, “Caching of VMware Compute Resources”.
14. Click the Locations and Organizations tabs and verify that the values are automatically set to your current context. You can also add additional contexts.
15. Click Submit to save the connection.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources and in the Compute Resources window, click the VMware vSphere connection.
2. In the Name field, enter a name for the image.
3. From the Operatingsystem list, select the image’s base operating system.
4. From the Architecture list, select the operating system architecture.
5. In the User field, enter the SSH user name for image access. This is normally the root user.
6. In the Password field, enter the SSH password for image access.
7. From the User data list, select whether you want the images to support user data input, such as cloud-init data.
8. In the Image field, enter the relative path and name of the template on the vSphere environment. Do not include the data center in the relative path.
9. Click Submit to save the image details.

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles and, in the Compute Profiles window, click the name of the compute profile, and then click the vSphere connection.
2. In the CPUs field, enter the number of CPUs to allocate to the new host.
3. In the Cores per socket field, enter the number of cores to allocate to each CPU.
4. In the Memory field, enter the amount of memory to allocate to the new host.
5. In the Cluster field, enter the name of the target host cluster on the VMware environment.
6. From the Resource pool list, select an available resource allocations for the host.
7. In the Folder field, enter the folder to organize the host.
8. From the Guest OS list, select the operating system you want to use in VMware vSphere.
9. From the SCSI controller list, select the disk access method for the host.
10. From the Virtual H/W version list, select the underlying VMware hardware abstraction to use for virtual machines.
11. You can select the Memory hot add or CPU hot add check boxes if you want to add more resources while the virtual machine is powered.
12. From the Image list, select the image to use if performing image-based provisioning.
13. From the Network Interfaces list, select the network parameters for the host’s network interface. You can create multiple network interfaces. However, at least one interface must point to a Capsule-managed network.
14. Select the Eager zero check box if you want to use eager zero thick provisioning. If unchecked, the disk uses lazy zero thick provisioning.
15. Click Submit to save the compute profile.

1. In the Satellite web UI, navigate to Hosts > Create Host.
2. In the Name field, enter the name that you want to become the provisioned system’s host name.
3. Click the Organization and Location tabs to ensure that the provisioning context is automatically set to the current context.
4. From the Host Group list, select the host group that you want to use to populate the form.
5. From the Deploy on list, select the VMware vSphere connection.
6. From the Compute Profile list, select a profile to use to automatically populate virtual machine-based settings.
7. Click the Interface tab and click Edit on the host’s interface.

8. Verify that the fields are automatically populated with values. Note in particular:

   • The Name from the Host tab becomes the DNS name.
   • The Satellite Server automatically assigns an IP address for the new host.
9. Ensure that the MAC address field is blank. The VMware vSphere server assigns one to the host.
10. Verify that the Managed, Primary, and Provision options are automatically selected for the first interface on the host. If not, select them.
11. In the interface window, review the VMware vSphere-specific fields that are populated with settings from our compute profile. Modify these settings to suit your requirements.
12. Click the Operating System tab, and confirm that all fields automatically contain values.

13. Select the Provisioning Method that you want:

    • For network-based provisioning, click Network Based.
    • For image-based provisioning, click Image Based.
    • For boot-disk provisioning, click Boot disk based.
14. Click Resolve in Provisioning templates to check the new host can identify the right provisioning templates to use.
15. Click the Virtual Machine tab and confirm that these settings are populated with details from the host group and compute profile. Modify these settings to suit your requirements.
16. Click the Parameters tab and ensure that a parameter exists that provides an activation key. If not, add an activation key.
17. Click Submit to save the host entry.

Associating the userdata and Cloud-init Templates with the Operating System

1. In the Satellite web UI, navigate to Hosts > Operating Systems, and select the operating system that you want to use for provisioning.
2. Click the Template tab.
3. From the Cloud-init template list, select Cloudinit default.
4. From the User data template list, select UserData open-vm-tools.
5. Click Submit to save the changes.

1. On the virtual machine that you use to create the image, install cloud-init, open-vm-tools, and perl:

   # yum -y install cloud-init open-vm-tools perl

2. Create a configuration file for cloud-init:

   # vi /etc/cloud/cloud.cfg.d/example_cloud-init_config.cfg

3. Add the following information to the example_cloud_init_config.cfg file:

   datasource_list: [NoCloud]
   datasource:
     NoCloud:
       seedfrom: https://satellite.example.com/userdata/
   EOF

4. Enable the CA certificates for the image:

   # update-ca-trust enable

5. Download the katello-server-ca.crt file from Satellite:

   # wget http://satellite.example.com/pub/katello-server-ca.crt

6. Move the katello-server-ca.crt file to the /etc/pki/ca-trust/source/anchors/ directory:

   # mv katello-server-ca.crt /etc/pki/ca-trust/source/anchors/katello-server-ca.crt

7. To update the record of certificates, enter the following command:

   # update-ca-trust extract

8. Use the following commands to clean the image:

   # systemctl stop rsyslog
   # systemctl stop auditd
   # package-cleanup -oldkernels -count=1
   # yum clean all

9. Use the following commands to reduce logspace, remove old logs, and truncate logs:

   # logrotate -f /etc/logrotate.conf
   # rm -f /var/log/*-???????? /var/log/*.gz
   # rm -f /var/log/dmesg.old
   # rm -rf /var/log/anaconda
   # cat /dev/null > /var/log/audit/audit.log
   # cat /dev/null > /var/log/wtmp
   # cat /dev/null > /var/log/lastlog
   # cat /dev/null > /var/log/grubby

10. Remove udev hardware rules:

    # rm -f /etc/udev/rules.d/70*

11. Remove the uuid from ifcfg scripts:

    # cat > /etc/sysconfig/network-scripts/ifcfg-ens192 <<EOM
    DEVICE=ens192
    ONBOOT=yes
    EOM

12. Remove the SSH host keys:

    # rm -f /etc/ssh/SSH_keys

13. Remove root user’s shell history:

    # rm -f ~root/.bash_history
    # unset HISTFILE

14. Remove root user’s SSH history:

    # rm -rf ~root/.ssh/known_hosts

1. On your Container-native Virtualization server, to list the secrets that contain tokens, enter the following command:

   # kubectl get secrets

2. To list the token for your secret, enter the following command:

   # kubectl get secrets YOUR_SECRET -o jsonpath='{.data.token}' | base64 -d | xargs

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources, and click Create Compute Resource.
2. In the Name field, enter a name for the new compute resource.
3. From the Provider list, select Container-native Virtualization.
4. In the Description field, enter a description for the compute resource.
5. In the Hostname field, enter the address of the Container-native Virtualization server that you want to use.
6. In the API Port field, enter the port number that you want to use for provisioning requests from Satellite to Container-native Virtualization.
7. In the Namespace field, enter the user name of the Container-native Virtualization virtual cluster that you want to use.
8. In the Token field, enter a bearer token for HTTP and HTTPs authentication.
9. Optional: In the X509 Certification Authorities field, enter a certifcate to enable client certificate authentication for API server calls.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources and in the Compute Resources window, click Create Compute Resource.
2. In the Name field, enter a name to identify the compute resource for future use.
3. From the Provider list, select RHEL OpenStack Platform.
4. In the Description field, enter a description for the resource.
5. In the URL field, enter a URL to point to the OpenStack Authentication keystone service’s API at the tokens resource. Use the following format: http://openstack.example.com:5000/v3.0/tokens.
6. In the User and Password fields, enter the authentication user and password for Satellite to access the environment.
7. In the Domain field, enter the domain for V3 authentication.
8. From the Tenant list, select the tenant or project for Satellite Server to manage.
9. To use external networks as primary networks for hosts, select the Allow external network as main network check box.
10. Click the Locations and Organizations tabs and verify that the location and organization that you want to use are set to your current context. Add any additional contexts that you want to these tabs.
11. Click Submit to save the Red Hat OpenStack Platform connection.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources and in the Computer Resources window, click the name of a Red Hat OpenStack Platform connection.
2. In the Name field, enter a name that describes the image.
3. From the Operatingsystem list, select the image’s base operating system.
4. From the Architecture list, select the operating system architecture.
5. In the User field, enter the SSH user name for image access. This is normally the root user.
6. In the Password field, enter the SSH password for image access.
7. From the Image list, select the image in OpenStack Image Storage.
8. From the User data list, select whether you want to set if images support user data input, such as cloud-init data.
9. Click Submit to save the image details.

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles and in the Compute Profiles window, click the name of the profile you want to use.
2. From the Flavor list, select the hardware profile on OpenStack Platform to use for the host.
3. From the Availability zone list, selec the target cluster to use within the OpenStack Platform environment.
4. From the Image list, select the image to use for image-based provisioning.
5. From the Tenant list, select the tenant or project for the OpenStack Platform instance.
6. From the Security Group list, select the cloud-based access rules for ports and IP addresses.
7. From the Internal network, select the private networks for the host to join.
8. From the Floating IP network, select the external networks for the host to join and assign a floating IP address.
9. From the Boot from volume, select whether a volume is created from the image. If not selected, the instance boots the image directly.
10. In the New boot volume size (GB) field, enter the size, in GB, of the new boot volume.
11. Click Submit to save the compute profile.

1. In the Satellite web UI, navigate to Hosts > New Host.
2. In the Name field, enter the name that you want to assign to the provisioned system’s host.
3. From the Host Group list, you can select a host group to populate the host fields.
4. From the Deploy on lits, select the OpenStack Platform connection.
5. From the Compute profile list, select a profile to use to automatically populate cloud instance-based settings.
6. Click the Interface tab, and click Edit on the host’s interface. Verify that the Name from the Host tab becomes the DNS name, and that the Satellite Server automatically assigns an IP address for the new host.
7. Ensure that the MAC address field is blank. The Red Hat OpenStack Platform server assigns a MAC address to the host.
8. Verify that Satellite Server automatically selects the Managed, Primary, and Provision options for the first interface on the host. If not, select them.
9. Click the Operating System tab, and confirm that each aspect of the operating system is populated.
10. If you want to change the image that populates automatically from your compute profile, from the Images list, select a different image to base the new host’s root volume.
11. Click Resolve in Provisioning Templates to verify that the new host can identify the right provisioning templates to use.
12. Click the Virtual Machine tab, and verify that the settings are populated with details from the host groups and compute profile. Modify these settings to suit your needs.
13. Click the Parameters tab and ensure that a parameter exists that provides an activation key. If not, add an activation key.
14. Click Submit to save the changes.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources and in the Compute Resources window, click Create Compute Resource.
2. In the Name field, enter a name to identify the Amazon EC2 compute resource.
3. From the Provider list, select EC2.
4. In the Description field, enter information that helps distinguish the resource for future use.
5. Optional: From the HTTP proxy list, select an HTTP proxy to connect to external API services. You must add HTTP proxies to Satellite before you can select a proxy from this list. For more information, see Configuring Satellite Server with HTTP Proxy in Installing Satellite Server from a Connected Network.
6. In the Access Key and Secret Key fields, enter the access keys for your Amazon EC2 account. For more information, see Managing Access Keys for your AWS Account on the Amazon documentation website.
7. Optional: Click the Load Regions button to populate the Regions list.
8. From the Region list, select the Amazon EC2 region or data center to use.
9. Click the Locations tab and ensure that the location you want to use is selected, or add a different location.
10. Click the Organizations tab and ensure that the organization you want to use is selected, or add a different organization.
11. Click Submit to save the Amazon EC2 connection.
12. Select the new compute resource and then click the SSH keys tab, and click Download to save a copy of the SSH keys to use for SSH authentication. Until BZ1793138 is resolved, you can download a copy of the SSH keys only immediately after creating the Amazon EC2 compute resource. If you require SSH keys at a later stage, follow the procedure in Section 12.7, “Connecting to an Amazon EC2 instance using SSH”.

Procedure

1. In the Satellite web UI, navigate to Infrastructure > HTTP Proxies, and select New HTTP Proxy.
2. In the Name field, enter a name for the HTTP proxy.
3. In the URL field, enter the URL for the HTTP proxy, including the port number.
4. Optional: Enter a username and password to authenticate, if the HTTP proxy requires authentication.
5. Click Test Connection to ensure that you can connect to the HTTP proxy from Satellite.
6. Click the Locations tab and add a location.
7. Click the Organization tab and add an organization.
8. Click Submit.

Procedure

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources and select an Amazon EC2 connection.
2. Click the Images tab, and then click New Image.
3. In the Name field, enter a name to identify the image for future use.
4. From the Operating System list, select the operating system that corresponds with the image you want to add.
5. From the Architecture list, select the operating system’s architecture.
6. In the Username field, enter the SSH user name for image access. This is normally the root user.
7. In the Image ID field, enter the Amazon Machine Image (AMI) ID for the image. This is usually in the following format: ami-xxxxxxxx.
8. Optional: Select the User Data check box if the images support user data input, such as cloud-init data. If you enable user data, the Finish scripts are automatically disabled. This also applies in reverse: if you enable the Finish scripts, this disables user data.
9. Optional: In the IAM role field, enter the Amazon security role used for creating the image.
10. Click Submit to save the image details.

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles and click the name of your profile, then click an EC2 connection.
2. From the Flavor list, select the hardware profile on EC2 to use for the host.
3. From the Image list, select the image to use for image-based provisioning.
4. From the Availability zone list, select the target cluster to use within the chosen EC2 region.
5. From the Subnet list, add the subnet for the EC2 instance. If you have a VPC for provisioning new hosts, use its subnet.
6. From the Security Groups list, select the cloud-based access rules for ports and IP addresses to apply to the host.
7. From the Managed IP list, select either a Public IP or a Private IP.
8. Click Submit to save the compute profile.

Procedure

1. In the Satellite web UI, navigate to Hosts > Create Host.
2. In the Name field, enter a name for the host.
3. From the Host Group list, you can select a host group to populate most of the new host’s fields.
4. From the Deploy on list, select the EC2 connection.
5. Click the Interface tab, and then click Edit on the host’s interface, and verify that the fields are populated with values. Leave the Mac Address field blank. The Satellite Server automatically selects and IP address and the Managed, Primary, and Provision options for the first interface on the host.
6. Click the Operating System tab and confirm that all fields are populated with values.
7. Click the Virtual Machine tab and confirm that all fields are populated with values.
8. Click the Parameters tab, and ensure that a parameter exists that provides an activation key. If not, add an activation key.
9. Click Submit to save your changes.

1. To locate the compute resource list, on your Satellite Server base system, enter the following command, and note the ID of the compute resource that you want to use:

   # hammer compute-resource list

2. Switch user to the postgres user:

   # su - postgres

3. Initiate the postgres shell:

   $ psql

4. Connect to the Foreman database as the user postgres:

   # postgres=# \c foreman

5. Select the secret from key_pairs where compute_resource_id = 3:

   # select secret from key_pairs where compute_resource_id = 3; secret

6. Copy the key from after -----BEGIN RSA PRIVATE KEY----- until -----END RSA PRIVATE KEY-----.

7. Create a .pem file and paste your key into the file:

   # vim Keyname.pem

8. Ensure that you restrict access to the .pem file:

   # chmod 600 Keyname.pem

9. To connect to the Amazon EC2 instance, enter the following command:

   ssh -i Keyname.pem   ec2-user@example.aws.com

1. In the Red Hat Satellite 6 web UI, navigate to Hosts > Provisioning Templates.
2. In the Provisioning Templates page, enter Kickstart default finish into the search field and click Search.
3. On the Kickstart default finish template, select Clone.
4. In the Name field, enter a unique name for the template.

5. In the template, prefix each command that requires root privileges with sudo, except for subscription-manager register and yum commands, or add the following line to run the entire template as the sudo user:

   sudo -s << EOS
   _Template_ _Body_
   EOS

6. Click the Association tab, and associate the template with a Red Hat Enterprise Linux operating system that you want to use.
7. Click the Locations tab, and add the the location where the host resides.
8. Click the Organizations tab, and add the organization that the host belongs to.
9. Make any additional customizations or changes that you require, then click Submit to save your template.
10. Navigate to Hosts > Operating systems and select the operating system that you want for your host.
11. Click the Templates tab, and from the Finish Template list, select your finish template.
12. Navigate to Hosts > Create Host and enter the information about the host that you want to create.
13. Click the Parameters tab and navigate to Host parameters.

14. In Host parameters, click the Add Parameter button three times to add three new parameter fields. Add the following three parameters:

    1. In the Name field, enter remote_execution_ssh_keys. In the corresponding Value field, enter the output of cat /usr/share/foreman-proxy/.ssh/id_rsa_foreman_proxy.pub.
    2. In the Name field, enter remote_execution_ssh_user. In the corresponding Value field, enter ec2-user.
    3. In the Name field, enter activation_keys. In the corresponding Value field, enter your activation key.
15. Click Submit to save the changes.

1. In GCE, generate a service account key in JSON format and upload this file to the /usr/share/foreman/ directory on Satellite Server.

2. On Satellite Server, configure permissions for the service account key to ensure that the file is readable by the foreman user:

   # chown foreman /usr/share/foreman/gce_key.json
   # chmod 0600 /usr/share/foreman/gce_key.json
   # restorecon -vv /usr/share/foreman/gce_key.json

3. In the Satellite web UI, navigate to Infrastructure > Compute Resources and click Create Compute Resource.
4. In the Name field, enter a name for the resource.
5. From the Provider list, select Google.
6. Optional: In the Description field, enter a description for the resource.
7. In the Google Project ID field, enter the project ID.
8. In the Client Email field, enter the client email.
9. In the Certificate Path field, enter the path to the service account key. For example, /usr/share/foreman/gce_key.json.
10. Click Load Zones to populate the list of zones from your GCE environment.
11. From the Zone list, select the GCE zone to use.
12. Click Submit.

1. In the Satellite web UI, navigate to Infrastructure > Compute Resources and click the GCE connection.
2. Click the Images tab.
3. Click Create Image.
4. In the Name field, enter a name for the image.
5. From the Operating system list, select the base operating system for the image.
6. From the Architecture list, select the operating system architecture.
7. In the User field, enter the SSH user name for image access. Specify a user other than root, because the root user cannot connect to a GCE instance using SSH keys. The username must begin with a letter and consist of lowercase letters and numbers.
8. From the Image list, select the GCE image.
9. Optional: If the selected image supports cloud-init, select the User data check box to enable user data input.
10. Click Submit to save the image details.

1. In the Satellite web UI, navigate to Infrastructure > Compute Profiles and click the name of your profile.
2. Select a GCE connection.
3. From the Machine Type list, select the machine type to use for provisioning.
4. From the Image list, select the image to use for provisioning.
5. From the Network list, select the GCE network to use for provisioning.
6. Optional: Select the Associate Ephemeral External IP check box to assign a dynamic ephemeral IP address that Satellite uses to communicate with the host. This public IP address changes when you reboot the host. If you need a permanent IP address, reserve a static public IP address on GCE and attach it to the host.
7. In the Size (GB) field, enter the size of the storage to create on the host.
8. Click Submit to save the compute profile.

1. In the Satellite web UI, navigate to Hosts > Create host.
2. In the Name field, enter a name for the host.
3. Click the Organization and Location tabs to ensure that the provisioning context is automatically set to the current context.
4. Optional: From the Host Group list, you can select a host group to populate most of the new host’s fields.
5. From the Deploy on list, select the GCE connection.
6. From the Compute Profile list, select a profile to use to automatically populate virtual machine-based settings.
7. Click the Interface tab and click Edit on the host’s interface.

8. Verify that the fields are automatically populated with values, particularly the following items:

   • The Name from the Host tab becomes the DNS name.
   • The MAC address field is blank.
   • The Domain field is populated with the required domain.
   • The Managed, Primary, and Provision options are automatically selected for the first interface on the host. If not, select them.
9. Click the Operating System tab, and select the operating system to install.
10. Click Resolve in Provisioning templates to verify that the new host can identify the correct provisioning templates to use. You must select either a finish or user_data provisioning template.
11. Click the Parameters tab and ensure that a parameter exists that provides an activation key. If not, add an activation key.
12. Click Submit to save the host entry.

1. On Satellite Server, add and synchronize any repositories that you want to use for provisioning. For more information, see Enabling Red Hat Repositories in the Content Management Guide.
2. On Satellite Server, provision a host that can access any repositories that contain packages that you want to include in the image that you build.
3. On the server where you want to create images, install Red Hat Image Builder. For more information, see the Installing Image Builder chapter in the Composing a customized RHEL system image guide.
4. Create a blueprint for your custom image. For more information see the Creating an Image Builder blueprint with command-line interface procedure in the Composing a customized RHEL system image guide.
5. Add the packages that you require to the blueprint. For more information, see Image Builder blueprint format in the Composing a customized RHEL system image guide.
6. Create the image with a file extension that is compatible with Anaconda Kickstart provisioning templates, for example .tar. For a valid list of file extensions for Red Hat Image Builder, see Image Builder output formats in the Composing a customized RHEL system image guide. For more information about valid file extensions to use with Anaconda Kickstart, see the liveimg entry in the Kickstart Syntax Reference section of the Red Hat Enterprise Linux Installation Guide.
7. Use scp or rsync to copy the image using SSH to the base operating system of Satellite Server.
8. On Satellite Server, create a custom product, add a custom file repository to this product, and upload the image to the repository. For more information, see Importing Individual ISO Images and Files in the Content Management Guide.

1. In the Satellite web UI, navigate to Configure > Host Groups, and select the host group that you want to use.
2. Click the Parameters tab, and then click Add Parameter.
3. In the Name field, enter kickstart_liveimg.
4. From the Type list, select string.
5. In the Value field, enter the absolute path or a relative path in the following format custom/product/repository/image_name that points to the exact location where you store the image.
6. Click Submit to save your changes.