Bug 1663954

Summary:	Enable CDN access from kickstart files
Product:	Red Hat Enterprise Linux 8	Reporter:	Lars Karlitski <lueberni>
Component:	anaconda	Assignee:	Anaconda Maintenance Team <anaconda-maint-list>
Status:	CLOSED ERRATA	QA Contact:	Release Test Team <release-test-team>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.0	CC:	jkonecny, jstodola, kewhite, lueberni, mbanas, pkotvan, rvykydal, sbueno, smoroney, stefw, tbowling, toneata, wchadwic
Target Milestone:	rc	Keywords:	ZStream
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	anaconda-29.19.1.1-1	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:
Clones:	1691971 1693976 (view as bug list)		Environment:
Last Closed:	2019-11-05 21:07:54 UTC	Type:	Feature Request
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1663950, 1691969, 1691971, 1693801, 1693976, 1700898, 1701002, 1711869, 1712054

Description Lars Karlitski 2019-01-07 11:33:09 UTC

Composer is unusable from RHEL (see bug #1663950), because it cannot pass subscription information to anaconda.

I've proposed a patch upstream to pykickstart (see bug #1663952) and anaconda to do that:

    https://github.com/rhinstaller/anaconda/pull/1745

I realize that this is a very late change, but it's fairly low impact on anaconda and would make composer usable at all on these systems.

Comment 3 Peter Kotvan 2019-02-19 07:50:29 UTC

Hi Lars,

can you describe the use case in detail? From the description I don't know how the process of passing subscription information to anaconda should work. Will this feature introduce any change in Anaconda installation?

We need more detailed information to provide the qe_ack since for any change in 8.0.1 there should be implemented a new gating test.

Thanks.

Comment 5 Lars Karlitski 2019-02-19 09:03:52 UTC

(In reply to Peter Kotvan from comment #3)
> Hi Lars,
> 
> can you describe the use case in detail? From the description I don't know
> how the process of passing subscription information to anaconda should work.
> Will this feature introduce any change in Anaconda installation?
> 
> We need more detailed information to provide the qe_ack since for any change
> in 8.0.1 there should be implemented a new gating test.

Sure! Composer uses the host's repositories as a source for the images it creates. Currently, the image installation fails if the host is a RHEL host with repositories that require a valid subscription. It makes Composer unusable without a nasty workaround.

This is because there's no way for Composer to pass the repository's configured client certificate to Anaconda. To fix this, I've added options to the kickstart commands `repo` and `url` which allow specifying paths to the needed cert (see the linked pykickstart bug). This is a natural extension to those commands: they already accept other options related to a repository.

This Anaconda patch only makes it use those options, by passing them further down to its invocation of dnf.

Comment 16 Radek Vykydal 2019-06-05 10:12:17 UTC

https://github.com/rhinstaller/anaconda/pull/1993

Comment 24 Jan Stodola 2019-08-26 08:45:55 UTC

Moving to VERIFIED based on https://bugzilla.redhat.com/show_bug.cgi?id=1663950#c7

Comment 26 errata-xmlrpc 2019-11-05 21:07:54 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3417