Bug 2103746 - Unable to disable debian plugin in Satellite 6
Summary: Unable to disable debian plugin in Satellite 6
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Foreman Maintain
Version: 6.9.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-07-04 17:14 UTC by Jessica Richards
Modified: 2023-07-28 13:31 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-07-28 13:31:44 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Jessica Richards 2022-07-04 17:14:52 UTC
Description of problem:

The customer is able to use a custom answers file to forcefully enable the debian plugin setting for Satellite 6.  The plugin doesn't actually enable, because the packages aren't available, but the _setting_ can be forced this way.

However, whenever the satellite-installer or foreman-maintain tools run afterwards, they invariably fail (exit code 6).  This includes attempts to _disable_ the debian plugin using this command:

# satellite-installer --foreman-proxy-content-enable-deb false


Version-Release number of selected component (if applicable):

Satellite 6.9


How reproducible:

unclear; we have one example so far


Steps to Reproduce:
1.  create a custom answer file in /etc/foreman-installer/scenarios.d/ with this option in the "katello:" section:

:enable_deb: true

2.  run "foreman-maintain packages update" to patch the server; it will fail

3.  run "satellite-installer --foreman-proxy-content-enable-deb false"; it will fail

Actual results:

- disabling the debian plugin is not possible after forcibly enabling it through a custom answer file


Expected results:

- since red hat satellite doesn't support the debian plugin, we should always be able to turn it off


Additional info:


The logs suggest that the satellite-installer command tries to install the debian-related pulp packages even when we're just trying to disable the setting.  This prevents the Satellite server from being patched, eventually leaving it in an insecure state.

Comment 1 Eric Helms 2022-07-21 02:53:17 UTC
Satellite does not support creating custom answer files and this practice can lead the Satellite to end up in an inconsistent state. 

As for the failure seen when attempting to configure " --foreman-proxy-content-enable-deb false", please include the output of the failure so that we may assess if this is something we will address on future versions of Satellite.

Comment 4 Jessica Richards 2022-07-26 00:59:03 UTC
I was able to help my Satellite 6.9 customer work around this issue by following these steps:

# cp /usr/share/foreman-installer/modules/pulp/manifests/install.pp /usr/share/foreman-installer/modules/pulp/manifests/install.pp.bak

# vi /usr/share/foreman-installer/modules/pulp/manifests/install.pp

Then we commented out these lines:

  if $pulp::enable_deb {
    package { ['pulp-deb-plugins']: ensure => $pulp::version, }
  }

So that they looked like these lines:

#  if $pulp::enable_deb {
#    package { ['pulp-deb-plugins']: ensure => $pulp::version, }
#  }

Then this command succeeded:

# satellite-installer --foreman-proxy-content-enable-deb false

Comment 5 Eric Helms 2023-07-28 13:31:44 UTC
Since this was done via a method that we do not support, and the customer issue has been resolved I am opting to close it.


Note You need to log in before you can comment on or make changes to this bug.