Skip to content
Snippets Groups Projects

Add RHEL access granting procedure

Merged Ghost User requested to merge enable_rhel_access into master
1 file
+ 47
0
Compare changes
  • Side-by-side
  • Inline
+ 47
0
@@ -2,4 +2,51 @@
## Licenses
We have a limited amount of RHEL, RHEV and RHEUS licenses. Thus, access is manually controlled by us.
In order to grant access to a user (e.g. to try to reproduce in RHEL a bug seen on CentOS), one needs to add the machine name to the appropriate LanDB set
## LanDB Sets
Installation/updates repositories for licensed Red Hat Enterprise Linux / Virtualization / Extended Lifetime Support are available only on internal CERN networks. Access is controlled by CERN LanDB Sets.
Each system requiring access must be inserted into corresponding network set at: [https://landb.cern.ch/landb/portal/sets/displaySets](https://landb.cern.ch/landb/portal/sets/displaySets)
* For Red Hat Enterprise Linux sets are named: `LINUXSOFT RHEL LICENSED XXX`
* For Red Hat Enterprise Virtualization sets are named: `LINUXSOFT RHEV LICENSED XXX`
* For Red Hat Enterprise Extended Lifetime Support sets are named: `LINUXSOFT RHEUS LICENSED XXX`
where XXX corresponds to network domain (GPN/TN/LCG/ALICE, etc.)
Please note that RHEV/RHEUS cases are special - a very limited number of licensed is available: for these please contact Linux service managers before inserting new systems.
For `RHEL` systems: please add new system to `LINUXSOFT RHEL LICENSED XXX` (for most cases XXX will be `GPN` / `TN` - if not sure on which network the system is - please try inserting it in `GPN` first, then try `TN`)
Please note that for some network, the aforementioned sets might have not been created yet. Thus, if you need to add a system belonging to a different network domain: please contact Linux service managers for set creation.
After a system is inserted into a LanDB Set, Access Control Lists are updated automnatically on Linuxsoft distribution servers within 10 minutes.
!!! note ""
The most common LanDB set is the [LINUXSOFT RHEL LICENSED GPN](https://landb.cern.ch/landb/portal/sets/showSetInfo?setId=3926)
## Sharing the RHEL image within OpenStack
Once the machine name has been added to the LanDB set, we need to share one of the images:
Follow the [clouddocs](https://clouddocs.web.cern.ch/clouddocs/details/sharing_your_own_images.html) for an up-to-date version:
~~~
eval $(ai-rc 'IT Linux Support - Images')
openstack image list | grep RHEL ## To see all available images
openstack image add project 'RHEL7 - x86_64 [2018-09-26]' 'The End-User Project'
~~~
Then ask the user to accept the image within the desired project:
~~~
eval $(ai-rc 'The End-User Project')
openstack image set --accept 'RHEL7 - x86_64 [2018-09-26]'
~~~
SNow example: [INC2034207](https://cern.service-now.com/service-portal/view-incident.do?n=INC2034207)
## Support cases
Loading