How well does RHEL Satellite Server 6.X integrate with SIMP?

[Vincent Alvarez]

We have an air-gapped environment that needs a patch management solution to simplify patching and stigging our systems. As of right now, the SIMP/puppet is configured to update to a local repo. 

If a Satellite Server is not recommended or supported, please advise what is the best solution for patch management. 

[Trevor Vaughan]

Hi Vincent,

SIMP integrates quite well with Satellite server!

You can simply disable the SIMP repo management by setting the following in Hiera (I would probably drop it in default.yaml):

simp::yum::repo::local_os_updates::enable_repo: false

simp::yum::repo::local_simp::enable_repo: false

I would make sure to create a SIMP repo in Satellite and copy in the provided RPMs. We use several GPG keys so you'll either need to split the packages by signer or host the GPG keys in the static server part of Satellite (or another web server) for key downloads.

This is due to a bug in Satellite that has yet to be fixed that does not allow them to host multiple GPG keys per repo.

If you wish, you can also copy the Puppet modules into Satellite and use r10k for distribution but I've found that most people either stick with the RPMs or move to a full Git server for all modules.

Thanks,

Trevor

On Tue, Jul 24, 2018 at 12:50 PM Vincent Alvarez <vincent...@gmail.com> wrote:

We have an air-gapped environment that needs a patch management solution to simplify patching and stigging our systems. As of right now, the SIMP/puppet is configured to update to a local repo. 

If a Satellite Server is not recommended or supported, please advise what is the best solution for patch management. 

--
You received this message because you are subscribed to the Google Groups "SIMP Q&A Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to simp+uns...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/simp/cb117d94-3471-48eb-af38-c19cb4e34b3d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Trevor Vaughan
Vice President, Onyx Point, Inc

(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --