If you select › › , an overview of all Systems appears. From this page you can select systems to perform actions on and may create system profiles.
The › › page displays a list of all your registered systems. Several columns provide information about each system:
Systems without a system type cannot be selected. To select systems, mark the appropriate check boxes. Selected systems are added to the System Set Manager, where actions can be carried out simultaneously on all systems in the set. For more information, see: Section 7.5, “System Set Manager”.
The name of the system specified during registration. The default name is the host name of the system. Clicking the name of a system displays its System Details page. For more information, see: Section 7.3, “System Details”
— Virtual Host.
— Virtual Guest.
— Non-Virtual System.
— Unprovisioned System.
Shows which type of update action is applicable to the system or confirms that the system is up-to-date. Some icons are linked to related tasks. For example, the standard Updates icon is linked to the subtab of the packages list, while the Critical Updates icon links directly to the page.
— System is up-to-date.
— Critical patch (errata) available, update strongly recommended.
— Updates available and recommended.
— System not checking in properly (for 24 hours or more).
— System is locked; actions prohibited.
— System is being deployed using AutoYaST or Kickstart.
— Updates have been scheduled.
— System not entitled to any update service.
Total number of patch alerts applicable to the system.
Total number of package updates for the system, including packages related to patch alerts and newer versions of packages not related to patch alerts. For example, if a client system that has an earlier version of a package installed gets subscribed to the appropriate base channel (such as SUSE Linux Enterprise 12 SP2), that channel may have an updated version of the package. If so, the package appears in the list of available package updates.
If SUSE Manager identifies package updates for the system, but the package updater (such as Red Hat Update Agent or YaST) responds with a message such as "Your system is fully updated", a conflict likely exists in the system’s package profile or in the up2date configuration file.
To resolve the conflict, either schedule a package list update or remove the packages from the package exceptions list.
For more information, see:
Section 7.3, “System Details”
Total number of configuration files applicable to the system.
The primary channel for the system based on its operating system. For more information, see: Section 12.1, “Channels”
Shows whether the system is managed and at what service level.
Links in the navigation bar below enable you to select and view predefined sets of your systems. All of the options described above can be applied within these pages.
The › › page provides a summary of your systems, including their status, number of associated patches (errata) and packages, and their so-called system type. Clicking the name of a system takes you to its › page. For more information, see: Section 7.3, “System Details”
Clicking the button at the top of the page takes you to a summary of your system groups. It identifies group status and displays the number of systems contained. Clicking the number of systems in a group takes you to the › › › tab. Selecting a group name takes you to the › › › tab for that system group. For more information, see: Section 7.4.3, “System Group Details”
You can also click from the › › page to go directly to the › . For more information, see: Section 7.5, “System Set Manager”
The › page contains the default set of your systems. It displays every system you have permission to manage. You have permission if you are the only user in your organization, if you are a SUSE Manager Administrator, or if the system belongs to a group for which you have admin rights.
To reach this page, select › › from the left bar. This page lists each physical system of which SUSE Manager is aware.
To reach this page, select › › from the left bar. This page lists each virtual host of which SUSE Manager is aware and the guest systems on those hosts.
This column displays the name of each guest system.
This column shows whether there are patches (errata updates) available for the guest systems that have not yet been applied.
This column indicates whether a guest is running, paused, or stopped.
This column displays the base channel to which the guest is currently subscribed.
Only guests registered with SUSE Manager are displayed with blue text. Clicking the host name of such a guest system displays its System Details page.
Here, all unprovisioned (bare-metal) systems with hardware details are listed. For more information, see: Section 18.4.6, “ › ”.
The › › page displays all systems where applicable patch alerts have not been applied.
The › › page displays all systems that need to be rebooted. Click a system name to go to the systems details page to schedule a reboot.
Non-compliant systems have packages installed which are not available from SUSE Manager. The Packages column shows how many installed packages are not available in the channels assigned to the system. A non-compliant system cannot be reinstalled.
The › › page displays systems without a System Type. System types are:
Salt
Management
Foreign Host
The › › page displays systems that have not yet been assigned to a system group.
The › › page displays systems that have not checked in with SUSE Manager for 24 hours or more.
Checking in means that Zypper on SUSE Linux Enterprise or Red Hat Update Agent on Red Hat Enterprise Linux client systems connects to SUSE Manager to see if there are any updates available or if any actions have been scheduled. If you see a message telling you that check-ins are not taking place, the client system is not successfully connecting to SUSE Manager.
The reason may be one of the following:
The system is not entitled to any SUSE Manager service. System profiles that remain unentitled for 180 days (6 months) are removed.
The system is entitled, but the SUSE Manager daemon (rhnsd ) has been disabled on the system.
Refer to Section 8.2, “Default (the SUSE Manager Daemon rhnsd)” for instructions on restarting and troubleshooting.
The system is behind a firewall that does not allow connections over https (port 443).
The system is behind an HTTP proxy server that has not been properly configured.
The system is connected to a SUSE Manager Proxy Server or SUSE Manager that has not been properly configured.
The system itself has not been properly configured, perhaps pointing at the wrong SUSE Manager Server.
The system is not in the network.
Some other barrier exists between the system and the SUSE Manager Server.
The › › page displays any systems that have been registered in a given period. Use the drop-down box to specify the period in days, weeks, 30- and 180-day increments, and years.
The › › page displays the SUSE Manager Proxy Server systems registered with your SUSE Manager server.
The › › page lists current systems and any active and inactive entitlements associated with them.
Active entitlements are in gray, while inactive entitlements are highlighted in yellow and their check boxes checked by default for you to delete them as needed by clicking the button. Entitlements are inactive if the system has not checked in with SUSE Manager in a time specified via the drop-down box .
You can filter duplicate entitlements by clicking the respective tab.:
›
›
›
›
You may filter further by inactive time or typing the system’s host name, IP address, IPv6 address, or MAC address in the corresponding › text box.
To compare up to three duplicate entitlements at one time, click the link in the › column. Inactive components of the systems are highlighted in yellow.
You can determine which systems are inactive or duplicate and delete them by clicking the button.
Click the button to confirm your choice.
The System Currency Report displays an overview of severity scores of patches relevant to the system. The weighting is defined any systems, System Details page. The default weight awards critical security patches with the heaviest weight and enhancements with the lowest. The report can be used to prioritize maintenance actions on the systems registered to SUSE Manager.
System Types define the set of functionalities available for each system in SUSE Manager such as the ability of installing software or creating guest virtual machines.
A list of profiled systems follows, with their base and add-on system types shown in the appropriate columns. To change system types, select the systems you want to modify, and click either the or button.
When systems are registered to SUSE Manager, they are displayed on the › page. Here and on any other page, clicking the name of a system takes you to the System Details page of the client, where various types of administrative tasks can be performed.
The link in the upper right of this screen refers to the system profile only. Deleting a host system profile will not destroy or remove the registration of guest systems. Deleting a guest system profile does not remove it from the list of guests for its host, nor does it stop or pause the guest. It does, however, remove your ability to manage it via SUSE Manager.
If you mistakenly deleted a system profile from SUSE Manager, you may re-register the system using the bootstrap script or rhnreg_ks manually.
The Details page has numerous subtabs that provide specific system information and other identifiers unique to the system. The following sections discuss these tabs and their subtabs in detail.
This page is not accessible from the left bar. However, clicking the name of a system anywhere in the Web interface displays such a System Details page. By default, the › › subtab is displayed. Other tabs are available, depending on the system type and add-on system type.
For example Traditional systems and Salt systems details display different tabs.
This system summary page displays the system status message and the following key information about the system:
This message indicates the current state of your system in relation to SUSE Manager.
If updates are available for any entitled system, the message › appears, displaying the number of critical and non-critical updates and the sum of affected packages. To apply these updates, click › then select some or all packages to update, then click .
The host name as defined by the client system. A machine can have one and only one hostname.
The FQDN(Names) listed here represents the host.domain that the machine answers to. A machine can have any number of FQDNs. Keep in mind that FQDN is not equal to hostname.
The IP address of the client.
The IPv6 address of the client.
If the client is a virtual machine, the type of virtualization is listed.
Displays the universally unique identifier.
The kernel installed and operating on the client system.
A unique identifier generated each time a system registers with SUSE Manager.
The system ID can be used to eliminate duplicate profiles from SUSE Manager.
Compare the system ID listed on this page with the information stored on the client system in the /etc/sysconfig/rhn/systemid file.
In that file, the system’s current ID is listed under system_id.
The value starts after the characters ID-.
If the value stored in the file does not match the value listed in the profile, the profile is not the most recent one and may be removed.
Displays the activation key used to register the system.
Lists the products installed on the system.
Indicates whether a system has been locked.
Actions cannot be scheduled for locked systems on the Web interface until the lock is removed manually. This does not include preventing automated patch updates scheduled via the Web interface. To prevent the application of automated patch updates, deselect › › . For more information, refer to Section 7.3.1.2, “System Details > Details > Properties”.
Locking a system can prevent you from accidentally changing a system. For example, the system may be a production system that should not receive updates or new packages until you decide to unlock it.
Locking a system in the Web interface will not prevent any actions that originate from the client system.
For example, if a user logs in to the client directly and runs YaST Online Update (on SLE) or pup (on RHEL), the update tool will install available patches even if the system is locked in the Web interface.
Locking a system does not restrict the number of users who can access the system via the Web interface. If you want to restrict access to the system, associate that system with a System Group and assign a System Group Administrator to it. Refer to Section 7.4, “System Groups” for more information about System Groups.
It is also possible to lock multiple systems via the System Set Manager. Refer to Section 7.5.10.4, “System Set Manager > Misc > Lock/Unlock” for instructions.
List of subscribed channels. Clicking a channel name takes you to the page. To change subscriptions, click the menu:(Alter Channel Subscriptions)[] link right beside the title to assign available base and child channels to this system. When finished making selections, click the button to change subscriptions and the base software channel. For more information, see: Section 7.3.2.3, “System Details > Software > Software Channels”.
The first line indicates the base channel to which this system is subscribed. The base channel should match the operating system of the client.
The subsequent lines of text, which depend on the base channel, list child channels. An example is the channel.
The date and time at which the system last checked in with SUSE Manager.
The date and time at which the system registered with SUSE Manager and created this profile.
The date and time at which the system was last started or restarted.
Systems with Salt or Management system type can be rebooted from this screen.
Select .
Provide the earliest date and time at which the reboot may take place.
Click the button in the lower right.
When the client checks in after the scheduled start time, SUSE Manager will instruct the system to restart itself.
Lists system types and add-on types currently applied to the system.
Indicates the notification options for this system. You can activate whether you want to receive e-mail notifying you of available updates for this system. In addition, you may activate to include systems in the daily summary e-mail.
Available methods: Default (Pull), Push via SSH, and Push via SSH tunnel.
The so-called OSA status is also displayed for client systems registered with SUSE Manager that have the OSA dispatcher (osad) configured.
Push enables SUSE Manager customers to immediately initiate tasks rather than wait for those systems to check in with SUSE Manager. Scheduling actions through push is identical to the process of scheduling any other action, except that the task can immediately be carried out instead of waiting the set interval for the system to check in.
In addition to the configuration of SUSE Manager, to receive pushed actions each client system must have the osad package installed and its service started.
Indicates whether this system is configured to accept updates automatically.
By default, the host name of the client is displayed, but a different system name can be assigned.
This information is automatically generated at registration. You can edit the description to include any information you want.
This field displays the physical address of the system if specified.
Clicking the link beside the › › title opens the › subtab. From this page you can edit any text fields you choose, then click the button to confirm.
This subtab allows you to alter basic properties of the selected system.
By default, this is the host name of the system. You can however alter the profile name to anything that allows you to distinguish this system from others.
For information only.
Select one of the available system types such as › .
Select whether notifications about this system should be sent and whether to include this system in the daily summary. This setting keeps you aware of all advisories pertaining to the system. Anytime an update is released for the system, you receive an e-mail notification.
The daily summary reports system events that affect packages, such as scheduled patch updates, system reboots, or failures to check in. In addition to including the system here, you must activate to receive e-mail notification in the page of the category.
Select one of the following contact methods:
› (Default, may be Osad, )
›
›
If this box is checked, available patches are automatically applied to the system when it checks in (Pull) or immediately if you select either Push option.
This action takes place without user intervention.
The SUSE Manager Daemon (rhnsd) must be enabled on the system for this feature to work.
Enabling auto-update might lead to failures because of conflicts between system updates and third party packages. To avoid failures caused by those issues, it is better to leave this box unchecked.
By default, this text box records the operating system, release, and architecture of the system when it first registers. Edit this information to include anything you like.
The remaining fields record the physical address at which the system is stored. To confirm any changes to these fields, click the button.
Many of these properties can be set for multiple systems in one go via the System Set Manager interface. For details, see Section 7.5, “System Set Manager”.
This subtab allows you to run remote commands on the selected system. Before doing so, you must first configure the system to accept such commands.
On SLE clients, subscribe the system to the SUSE Manager Tools child channel.
Then use Zypper to install the rhncfg, rhncfg-client, and rhncfg-actions packages, if not already installed:
zypper in rhncfg rhncfg-client rhncfg-actions
On RHEL clients, subscribe the system to the Tools child channel.
Then use up2date or yum to install the rhncfg, rhncfg-client, and rhncfg-actions packages, if not already installed:
yum install rhncfg rhncfg-client rhncfg-actions
Log in to the system as root and add the following file to the local SUSE Manager configuration directory: allowed-actions/scripts/run .
Create the necessary directory on the target system:
mkdir -p /etc/sysconfig/rhn/allowed-actions/script
Create an empty run file in that directory to act as a flag to SUSE Manager , signaling permission to allow remote commands:
touch /etc/sysconfig/rhn/allowed-actions/script/run
When the setup is complete, refresh the page to view the text boxes for remote commands. Identify a specific user, group, and timeout period, and the script to run. Select a date and time to execute the command, then click or add the remote command to an action chain. For further information on action chains, see: Section 16.5, “Action Chains”.
Reactivation keys include this system’s ID, history, groups, and channels.
This key can then be used only once with the rhnreg_ks command line utility to re-register this system and regain all SUSE Manager settings.
Unlike typical activation keys, which are not associated with a specific system ID, keys created here do not show up within the › › page.
Reactivation keys can be combined with activation keys to aggregate the settings of multiple keys for a single system profile. For example:
rhnreg_ks --server=`server-url`\ --activationkey=`reactivation-key`,`activationkey`--force
When autoinstalling a system with its existing SUSE Manager profile, the profile uses the system-specific activation key created here to re-register the system and return its other SUSE Manager settings.
For this reason, you should not regenerate, delete, or use this key (with rhnreg_ks) while a profile-based autoinstallation is in progress.
If you do, the autoinstallation will fail.
This subtab provides information about the system, such as networking, BIOS, memory, and other devices.
This only works if you included the hardware profile during registration.
If the hardware profile looks incomplete or outdated, click the button.
The next time the SUSE Manager Daemon (rhnsd) connects to SUSE Manager, it will update your system profile with the latest hardware information.
This subtab provides the option to migrate systems between organizations. Select an organization form the dropdown › and click to initiate the migration.
Defined system details such as channel assignments, system group membership, custom data value, configuration channels, reactivation keys, and snapshots will be dropped from the system configuration after the migration.
This subtab provides a place to create notes about the system.
To add a new note, click the link, type a subject and write your note, then click the button.
To modify a note, click its subject in the list of notes, make your changes, and click the button.
To remove a note, click its subject in the list of notes then click the link.
This subtab provides completely customizable information about the system. Unlike › , › is structured, formalized, and can be searched. Before adding custom information about a system, you must have › . To create such keys, click in the left bar. For more information, see: Section 7.11, “Custom System Info”.
Once you have created one or more keys, you may assign values for this system by selecting the link. Click the name of the key in the resulting list and enter a value for it in the › field, then click the button.
This tab is only available for SUSE Manager Proxy systems. The tab lists all clients registered with the selected SUSE Manager Proxy server.
This tab and its subtabs allow you to manage the software on the system: patches (errata), packages and package profiles, software channel memberships, and migrations.
This subtab contains a list of patch (errata) alerts applicable to the system. Refer to Section 6.2, “Patch Alert Icons” for meanings of the icons on this tab.
To apply updates, select them and click the button. Double-check the updates to be applied on the confirmation page, then click the button.
The action is added to the › › list. Patches that have been scheduled cannot be selected for update. Instead of a check box there is a clock icon. Click the clock to see the › page.
A › › › column in the patches table shows whether an update has been scheduled. Possible values are:
None
Pending
Picked Up
Completed
Failed
This column displays only the latest action related to a patch.
For example, if an action fails and you reschedule it, this column shows the status of the patch as Pending with no mention of the previous failure.
Clicking a status other than None takes you to the › page.
Manage the software packages on the system. Most of the following actions can also be performed via action chains. For further information on action chains, see: Section 16.5, “Action Chains”.
When new packages or updates are installed on the client via SUSE Manager, any licenses (EULAs) requiring agreement before installation are automatically accepted.
The default display of the › tab describes the options available and provides the means to update your package list.
To update or complete a potentially outdated list, possibly because of the manual installation of packages, click the button in the bottom right-hand corner of this page.
The next time the SUSE Manager daemon (rhnsd) connects to SUSE Manager, it updates your system profile with the latest list of installed packages.
Lists installed packages and enables you to remove them. View and sort packages by name or the date they were installed on the system. Search for the desired packages by typing a name in the › search field. You may also select the letter or number corresponding to the first character of the package name from the drop down selection menu. Click a package name to view its › page. To delete packages from the system, select their check boxes and click the button on the bottom right-hand corner of the page. A confirmation page appears with the packages listed. Click the button to remove the packages.
Displays a list of packages with newer versions available in the subscribed channels. click the latest package name to view its › page. To upgrade packages immediately, select them and click the button. Any EULAs will be accepted automatically.
Install new packages on the system from the available channels. Click the package name to view its › page. To install packages, select them and click the button. EULAs are automatically accepted.
Validates the packages installed on the system against its RPM database.
This is the equivalent of running rpm -V.
The metadata of the system’s packages are compared with information from the database, such as file checksum, file size, permissions, owner, group and type.
To verify a package or packages, select them, click the button, and confirm.
When the check is finished, select this action in the subtab under to see the results.
Locking a package prevents modifications like removal or update of the package. Since locking and unlocking happens via scheduling requests, locking might take effect with some delay. If an update happens before then, the lock will have no effect. Select the packages you want to lock. If locking should happen later, select the date and time above the button, then click it. A small lock icon marks locked packages. To unlock, select the package and click , optionally specifying the date and time for unlocking to take effect.
This feature only works if Zypper is used as the package manager.
On the target machine the zypp-plugin-spacewalk package must be installed (version 0.9.x or higher).
Compare installed packages with the package lists in stored profiles and other systems.
Select a stored profile from the drop-down box and click the button. To compare with packages installed on a different system, select the system from the associated drop-down box and click the button.
To create a stored profile based on the existing system, click the button, enter any additional information, and click the button. These profiles are kept within the › › page.
When installed packages have been compared with a profile, customers have the option to synchronize the selected system with the profile. All changes apply to the system not the profile. Packages might get deleted and additional packages installed on the system. To install only specific packages, click the respective check boxes in the profile. To remove specific packages installed on the system, select the check boxes of these packages showing a difference of This System Only.
To completely synchronize the system’s packages with the compared profile, select the master check box at the top of the column. Then click the button. On the confirmation screen, review the changes, select a time frame for the action, and click the button.
You can use a stored profile as a template for the files to be installed on an autoinstalled system.
Lists packages that are installed on this system and are not present in any of its channels.
Software channels provide a well-defined method to determine which packages should be available to a system for installation or upgrade based on its operating systems, installed packages, and functionality.
Click the chain icon right to a channel name to view its › page. To change the base software channel the system is subscribed to select a different base channel in the left selection box.
To modify the child channels associated with this system, in the right selection box use the check boxes left to the channel names. If you enable , recommended child channels are automatically selected for subscription. Starting with SUSE Linux Enterprise 15, child channels can depend on other channels—they are required. In the channel subscription you can see the dependencies by hovering with a mouse on a child channel name. Selecting a channel that depends on another channel will select this channel, too. Unselecting a channel on which some other channels depend will also unselect those channels.
When done click to schedule the Software Channel Change action. Then click .
Since the 3.1 maintenance update (2018) changing the channels is an action that can be scheduled like any other action. Earlier channel changes were applied immediately.
For more information about channel management, see: Section 12.1, “Channels”.
Service Pack Migration (SP Migration) allows you to upgrade a system from one service pack to another.
During migration SUSE Manager automatically accepts any required licenses (EULAs) before installation.
Beginning with SLE 12 SUSE supports service pack skipping, it is now possible to migrate from for example, SLE 12 to SLE 12 SP2. Note that SLE 11 may only be migrated step by step and individual service packs should not be skipped. Supported migrations include any of the following:
SLE 11 > SLE 11 SP1 > SLE 11 SP2 > SLE 11 SP3 > SLE 11 SP4
SLE 12 > SLE 12 SP1 > SLE 12 SP2
SLE 12 > SLE 12 SP2 (skipping SLE 12 SP1)
It is not possible to migrate, for example, from SLE 11 to SLE 12 using this tool. You must use autoYaST to perform a migration on this level.
The migration feature does not cover any rollback functionality. When the migration procedure is started, rolling back is not possible. Therefore it is recommended to have a working system backup available for an emergency.
From the › › page, select a client.
Select the › › tabs.
Select the target migration path and click .
From the › › › view select the correct base channel, including Mandatory Child Channels and any additional Optional Child Channels. Select when your channels have been configured properly.
This tab and its subtabs assist in managing the configuration files associated with the system. These configuration files may be managed solely for the current system or distributed widely via a Configuration Channel. The following sections describe these and other available options on the › subtabs.
To manage the configuration of a system, it must have the latest rhncfg* packages installed. Refer to Section 15.2, “Preparing Systems for Configuration Management [Management]” for instructions on enabling and disabling scheduled actions for a system.
This section is available to normal users with access to systems that have configuration management enabled. Like software channels, configuration channels store files to be installed on systems. While software updates are provided by SCC, configuration files are managed solely by you. Also unlike with software packages, various versions of configuration files may prove useful to a system at any time. Only the latest version can be deployed.
This subtab provides access to the configuration files of your system and to the most common tasks used to manage configuration files.
From the › › , click the links to add files, directories, or symbolic links. Here you also find shortcuts to perform any of the common configuration management tasks listed on the right of the screen by clicking one of the links under › › › .
This subtab lists all configuration files currently associated with the system. These are sorted via subtabs in centrally and locally managed files and a local sandbox for files under development.
Using the appropriate buttons on a subtab, you can copy from one to the other subtabs.
Centrally-managed configuration files are provided by global configuration channels. Determine which channel provides which file by examining the › › › column below. Some of these centrally-managed files may be overridden by locally-managed files. Check the › › › column to find out if any files are overridden, or click to provide such an overriding file.
Locally-managed configuration files are useful for overriding centrally-managed configuration profiles that cause problems on particular systems. Also, locally-managed configuration files are a method by which system group administrators who do not have configuration administration privileges can manage configuration files on the machines they can manage.
In the sandbox you can store configuration files under development. You can promote files from the sandbox to a centrally-managed configuration channel using › › . After files in this sandbox have been promoted to a centrally-managed configuration channel, you can deploy them to other systems.
Use › to install a configuration on the local system only. When done, the file will end up on the › subtab.
To upload, import, or create new configuration files, click .
To upload a configuration file from your local machine, browse for the upload file, specify whether it is a text or binary file, enter and user and group ownership. Specific file permissions can be set. When done, click .
Via the tab, you can add files from the system you have selected before and add it to the sandbox of this system.
Files will be imported the next time rhn_check runs on the system.
To deploy these files or override configuration files in global channels, copy this file into your local override channel after the import has occurred.
In the text box under enter the full path of any files you want import into SUSE Manager or select deployable configuration files from the list. When done, click .
Under , you can directly create the configuration file from scratch. Select the file type, specify the path and file name, where to store the file, plus the symbolic link target file name and path. Ownership and permissions and macro delimiters need to be set. For more information on using macros, see Section 15.5.3, “Including Macros in your Configuration Files”. In the text box, type the configuration file. Select the type of file you are creating from the drop-down box. Possible choices are Shell, Perl, Python, Ruby and XML. When done, click .
Under you find all files that can be deployed on the selected system.
Files from configuration channels with a higher priority take precedence over files from configuration channels with a lower priority.
This subtab compares a configuration file stored on the SUSE Manager with the file stored on the client. It does not compare versions of the same file stored in different channels.
Select the files to be compared, click the button, select a time to perform the diff, and click the button to confirm.
To watch progress, see Section 7.3.10, “System Details > Events”. After the diff has been performed, go to in Section 7.3.3.1, “System Details > Configuration > Overview” to see the results.
This subtab allows you to subscribe to and rank configuration channels associated with the system, lowest first.
The subtab contains a list of the system’s configuration channel subscriptions. Click the check box next to the Channel and click to remove the subscription to the channel.
The subtab lists all available configuration channels. To subscribe to a channel, select the check box next to it and click . To subscribe to all configuration channels, click and click . The page automatically loads.
The subtab allows users to set the priority with which files from a particular configuration channel are ranked.
The higher the channel is on the list, the more its files take precedence over files on lower-ranked channels.
For example, the higher-ranked channel may have an httpd.conf file that will take precedence over the same file in a lower-ranked channel.
The tab and its subtabs allow you to schedule and monitor AutoYaST or Kickstart installations and to restore a system to its previous state.
The note tab will be available when adding a client using the “traditional” method (system type management). Using Salt the tab will not be available (system type salt).
AutoYaST is a SUSE Linux Enterprise and Kickstart is a Red Hat utility - both allow you to automate the reinstallation of a system. Snapshot rollbacks provide the ability to revert certain changes on the system. You can roll back a set of RPM packages, but rolling back across multiple update levels is not supported. Both features are described in the sections that follow.
The subtab allows you to configure and schedule an autoinstallation for this system. For background information about autoinstallation, see Chapter 8, Autoinstallation.
In the subtab, schedule the selected system for autoinstallation. Choose from the list of available profiles.
You must first create a profile before it appears on this subtab. If you have not created any profiles, refer to Section 8.3.1, “Create a Kickstart Profile” before scheduling an autoinstallation for a system.
To alter autoinstallation settings, click the button. Configure the network connection and post-installation networking information. You can aggregate multiple network interfaces into a single logical "bonded" interface. In specify kernel options to be used during autoinstallation. are used after the installation is complete and the system is booting for the first time. Configure package profile synchronization.
Select a time for the autoinstallation to begin and click for all changes to take effect and to schedule the autoinstallation.
Alternatively, click to create a Cobbler system record. The selected autoinstallation profile will be used to automatically install the configured distribution next time that particular system boots from PXE. In this case SUSE Manager and its network must be properly configured to allow boot using PXE.
Any settings changed on the page will be ignored when creating a PXE installation configuration for Cobbler.
The subtab can be used to create Kickstart variables, which substitute values in Kickstart files. To define a variable, create a name-value pair (name/value) in the text box.
For example, to Kickstart a system that joins the network of a specific organization (for example the Engineering department) you can create a profile variable to set the IP address and the gateway server address to a variable that any system using that profile will use. Add the following line to the text box:
IPADDR=192.168.0.28 GATEWAY=192.168.0.1
To use the system variable, use the name of the variable in the profile instead of the value.
For example, the network portion of a Kickstart file could look like the following:
network --bootproto=static --device=eth0 --onboot=on --ip=$IPADDR \ --gateway=$GATEWAY
The $IPADDR will be 192.168.0.28, and the $GATEWAY will be 192.168.0.1.
There is a hierarchy when creating and using variables in Kickstart files. System Kickstart variables take precedence over profile variables, which in turn take precedence over distribution variables. Understanding this hierarchy can alleviate confusion when using variables in Kickstart.
Using variables are one part of the larger Cobbler infrastructure for creating templates that can be shared between multiple profiles and systems. For more information about Cobbler and Kickstart templates, refer to Chapter 10, Cobbler.
SUSE Manager allows you to power on, off, and reboot systems via the IPMI protocol if the systems are IPMI-enabled.
You need a fully patched SUSE Manager installation. To use any power management functionality, IPMI configuration details must be added to SUSE Manager. First select the target system on the systems list, then select › . On the displayed configuration page, edit all required fields (marked with a red asterisk) and click .
Systems can be powered on, off, or rebooted from the configuration page via corresponding buttons. Note that any configuration change is also saved in the process. The button can also be used to query for the system’s power state. If configuration details are correct, a row is displayed with the current power status ("on" or "off"). If a power management operation succeeds on a system, it will also be noted in its › subtab.
Power management functionalities can also be used from the system set manager to operate on multiple systems at the same time. Specifically, you can change power management configuration parameters or apply operations (power on, off, reboot) to multiple systems at once:
Add the respective systems to the system set manager as described in Section 7.5, “System Set Manager”.
Click (in the upper right corner), then menu: Provisioning[Power Management Configuration] to change one or more configuration parameters for all systems in the set. Note that any field left blank will not alter the configuration parameter in selected systems.
When all configuration parameters are set correctly, click , then › to power on, off or reboot systems from the set.
To check that a power operation was executed correctly, click › on the left-hand menu, then click the proper line in the list. This will display a new list with systems to which the operation was applied. If errors prevent correct execution, a brief message with an explanation will be displayed in the column.
This feature uses Cobbler power management, thus a Cobbler system record is automatically created at first use if it does not exist already.
In that case, the automatically created system record will not be bootable from the network and will reference a dummy image.
This is needed because Cobbler does not currently support system records without profiles or images.
The current implementation of Cobbler power management uses the fence-agent tools to support multiple protocols besides IPMI.
Those are not supported by SUSE Manager
but can be used by adding the fence agent names as a comma-separated list to the java.power_management.types configuration parameter.
Snapshots enable you to roll back the system’s package profile, configuration files, and SUSE Manager settings.
Snapshots are always captured automatically after an action takes place. The subtab lists all snapshots for the system, including the reason the snapshot was taken, the time it was taken, and the number of tags applied to each snapshot.
A snapshot is always taken after a successful operation and not before, as you might expect. One consequence of taking snapshots after the action is that, to undo action number X, then you must roll back to the snapshot number X-1.
It is possible to disable snapshotting globally (in rhn.conf set enable_snapshots = 0), but it is enabled by default. No further fine tuning is possible.
To revert to a previous configuration, click the for the snapshot and review the potential changes on the provided subtabs, starting with .
Snapshot roll backs support the ability to revert certain changes to the system, but not in every scenario. For example, you can roll back a set of RPM packages, but rolling back across multiple update levels is not supported.
Rolling back an SP migration is also not supported.
Each subtab provides the specific changes that will be made to the system during the rollback:
group memberships,
channel subscriptions,
installed packages,
configuration channel subscriptions,
configuration files,
snapshot tags.
When satisfied with the reversion, return to the subtab and click the button. To see the list again, click .
There is no maximum number of snapshots that SUSE Manager will keep, thus related database tables will grow with system count, package count, channel count, and the number of configuration changes over time. Installations with more than a thousand systems should consider setting up a recurring cleanup script via the API or disabling this feature altogether.
There is currently no integrated support for “rotated snapshots”.
Snapshot rollback gets scheduled like any other action, this means the rollback usually does not happen immediately.
Snapshot tags provide a means to add meaningful descriptions to your most recent system snapshot. This can be used to indicate milestones, such as a known working configuration or a successful upgrade.
To tag the most recent snapshot, click , enter a descriptive term in the field, and click the button. You may then revert using this tag directly by clicking its name in the Snapshot Tags list. To delete tags, select their check boxes, click , and confirm the action.
The tab and its subtabs allow you to manage the system’s group memberships.
This subtab lists groups to which the system belongs and enables you to cancel membership.
Only System Group Administrators and SUSE Manager Administrators can remove systems from groups. Non-admins see a page. To remove the system from one or more groups, select the respective check boxes of these groups and click the button. To see the page, click the group’s name. Refer to Section 7.4.3, “System Group Details” for more information.
Lists groups that the system can be subscribed to.
Only System Group Administrators and SUSE Manager Administrators can add a system to groups. Non-admins see a page. To add the system to groups, select the groups' check boxes and click the button.
This tab allows you to create new virtual guests, apply images on a traditionally managed host system, or change the status of virtual guests.
The tab has three subtabs, , , and . These tabs appear the same for both virtual hosts and guests, but the functionality only makes sense for virtual hosts. It is not possible to create a guest system that runs on another guest system.
is the default tab. For host systems, it presents a table of the host system’s virtual guests. For each guest system, the following information is provided:
This field indicates whether the virtual system is running, paused, stopped, or has crashed.
This field indicates whether patches (errata) applicable to the guest have yet to be applied.
This field indicates the Base Channel to which the guest is subscribed.
If a guest system has not registered with SUSE Manager , this information appears as plain text in the table.
If you have System Group Administrator responsibilities assigned for your guest systems, a user might see the message in the table. This is because it is possible to assign virtual guests on a single host to multiple System Group Administrators. Only users that have System Group Administrator privileges on the host system may create new virtual guests.
In the › tab of a traditionally registered bare-metal machine, there is a › › subtab. This form expects a URL to a qcow2 type of image and some other parameters allowing the user to schedule the deployment of that image.
When the deploment scheduled it is listed as an action on the › › .
Via the tab, view OpenSCAP scan results or schedule scans. For more information on auditing and OpenSCAP, refer to Chapter 13, Audit.
Overview of subtabs.
The following subtabs are only available for Salt minions.
packages then assign them with a pre-defined state for a selected machine.
Here you can search for a specific package, for example vim . Then with the drop-down box activate , , or . Select or from the drop-down box. applies the latest package version available while applies the package version required to fulfil dependencies. Click the button to save changes to the database, then click to apply the new package state.
States which have been created on the page located under on the left bar may be assigned to a system on the › page.
Search for the custom state you want to apply to the system then select the check box. Click to save the change to the database finally select to apply the changes. States applied at the system level will only be applied to the selected system.
From the page you can view and apply the high state for a selected system.
Select a date and time to apply the high state. Then click .
This is a feature preview. On the page you can select Salt formulas for this system. This allows you to automatically install and configure software.
Installed formulas are listed. Select from the listing by clicking the check box to the left. Then confirm with the button on the right. When done, additional subtabs appear where you can configure the formulas.
For usage information, see Section 4.9, “Using Salt Formulas with SUSE Manager”.
The page displays past, current, and scheduled actions on the system. You may cancel pending events here. The following sections describe the subtabs and the features they offer.
Lists events that are scheduled but have not started.
A prerequisite action must complete successfully before the given action is attempted. If an action has a prerequisite, no check box is available to cancel that action. Instead, a check box appears next to the prerequisite action; canceling the prerequisite action causes the action in question to fail.
Actions can be chained so that action 'a' requires action 'b' which requires action 'c'. Action 'c' is performed first and has a check box next to it until it is completed successfully. If any action in the chain fails, the remaining actions also fail. To unschedule a pending event, select the event and click the button. The following icons indicate the type of events:
— Package Event,
— Patch Event,
— Preferences Event,
— System Event.
The default display of the tab lists the type and status of events that have failed, occurred or are occurring.
To view details of an event, click its summary in the list. To go back to the table again, click at the bottom of the page.
The page allows SUSE Manager users to view the list.
Only System Group Administrators and SUSE Manager Administrators may perform the following additional tasks:
Create system groups. (Refer to Section 7.4.1, “Creating Groups”.)
Add systems to system groups. (Refer to Section 7.4.2, “Adding and Removing Systems in Groups”.)
Remove systems from system groups. (Refer to Section 7.3, “System Details”.)
Assign system group permissions to users. (Refer to Chapter 17, Users.)
The list displays all system groups. The list contains several columns for each group:
— Via the check boxes add all systems in the selected groups to the by clicking the button. All systems in the selected groups are added to the . You can then use the to perform actions on them simultaneously. It is possible to select only those systems that are members of all of the selected groups, excluding those systems that belong only to one or some of the selected groups. To do so, select the relevant groups and click the button. To add all systems of all selected groups, click the button. Each system will show up once, regardless of the number of groups to which it belongs. Refer to Section 7.5, “System Set Manager” for details.
— Shows which type of patch alerts are applicable to the group or confirms that all systems are up-to-date. Clicking a group’s status icon takes you to the tab of its page. Refer to Section 7.4.3, “System Group Details” for more information.
The status icons call for differing degrees of attention:
— All systems in the group are up-to-date.
— Critical patches available, update strongly recommended.
**
— Updates available and recommended.
Status of the systems in the group, reported by probes.
— The name of the group as configured during its creation. The name should be explicit enough to distinguish from other groups. Clicking the name of a group takes you to the tab of its page. Refer to Section 7.4.3, “System Group Details” for more information.
— Total number of systems in the group. Clicking the number takes you to the tab of the page for the group. Refer to Section 7.4.3, “System Group Details” for more information.
— Clicking the link in this column loads all and only the systems in the selected group and launches the immediately. Refer to Section 7.5, “System Set Manager” for more information.
To add a new system group, click the link at the top-right corner of the page.
Type a name and description and click the button. Make sure you use a name that clearly sets this group apart from others. The new group will appear in the list.
Systems can be added and removed from system groups. Clicking the group name takes you to the page. The tab shows all systems in the group and allows you to select some or all systems for deletion. Click to remove the selected systems from the group. The page shows you all systems that can be added to the group. Select the systems and click the button.
At the top of each page are two links: and . Clicking deletes the System Group and should be used with caution. Clicking loads the group’s systems and launches the immediately like the button from the list. Refer to Section 7.5, “System Set Manager” for more information.
The page is split into the following tabs:
Provides the group name and group description. To change this information, click , make your changes in the appropriate fields, and click the button.
Lists all members of the system group. Clicking links within the table takes you to corresponding tabs within the page for the associated system. To remove systems from the group, select the appropriate check boxes and click the button on the bottom of the page. Clicking it does not delete systems from SUSE Manager entirely. This is done through the or pages. Refer to Section 7.5, “System Set Manager” or Section 7.3, “System Details”, respectively.
— Lists all systems in your organization. To add systems to the specified system group, click the check boxes to their left and click the button on the bottom right-hand corner of the page.
List of relevant patches for systems in the system group. Clicking the advisory takes you to the tab of the page. (Refer to Section 11.2.2, “Patch Details” for more information.) Clicking the Affected Systems number lists all of the systems affected by the patch. To apply the patch updates in this list, select the systems and click the button.
List of all organization users that have permission to manage the system group. SUSE Manager Administrators are clearly identified. System Group Administrators are marked with an asterisk (*). To change the system group’s users, select and deselect the appropriate check boxes and click the button.
The tab displays states which have been created and added using the > . From this page you can select which states should be applied across a group of systems. A state applied from this page will be applied to all minions within a group.
States are applied according to the following order of hierarchy within SUSE Manager :
Organization > Group > Single System
Create a state using the › or via the command line.
Browse to › . Select the group that a new state should be applied to. From a specific group page select the tab.
Use the search feature to located a state by name or click the button to list all available states.
Select the check box for the state to be applied and click the button. The button will save the change to the database but will not apply the state.
Apply the state by clicking the button. The state will be scheduled and applied to any systems included within a group.
The following actions executed on individual systems from the System Details page may be performed for multiple systems via the System Set Manager. The System Set Manager can be used to schedule actions on both Salt and Traditional systems. The following table provides information on what actions may be performed across both Salt and Traditional systems. These two methods have different actions which may be accessed with the System Set Manager:
System Set Manager: Overview | Traditional SSM | Salt SSM |
|---|---|---|
Systems: * List Systems | Supported * Supported | Supported * Supported |
Install Patches: * Schedule Patch Updates | Supported * Supported | Supported * Supported |
Install Packages: * Upgrade * Install * Remove * Verify | Supported * Supported * Supported * Supported * Supported | Limited * Supported * Supported * Supported * Not Available |
Groups: * Create * Manage | Supported * Supported * Supported | Supported * Supported * Supported |
Channels: * Channel Memberships * Channel Subscriptions * Deploy / Diff Channels | Supported * Supported * Supported * Supported | Limited * Supported * Not Available * Not Available |
Provisioning: * Autoinstall Systems * Tag for Snapshot * Remote Commands * Power Management * Power Management Operations | Supported * Supported * Supported * Supported * Supported * Supported | Not Available |
Misc: * Update Hardware Profiles * Update Package Profiles * Update System Preferences * Set/Remove Custom Values * Add/Remove Add-on Types * Delete Systems * Reboot Systems * Migrate Systems to another Organization * Lock/Unlock Systems * Audit Systems (OpenSCAP) | Supported * Supported * Supported * Supported * Supported * Supported * Supported * Supported * Supported * Supported * Supported | Limited * Supported * Supported * Not Available * Supported * Not Available * Supported * Supported * Supported * Not Available * Not Available |
Before performing actions on multiple systems, select the systems to work with. To select systems, click in the left bar, check the boxes to the left of the systems you want to work with, and click the button in the top bar.
Additionally, you can access the System Set Manager in three different ways:
Click the link in the left bar.
Click the link in the list.
Click the link on the page.
This page contains links to most SSM option tabs with short explanations.
List of patch updates applicable to the current system set.
Click the number in the Systems column to see to which systems in the System Set Manager a patch applies. To apply updates, select the patches and click the button.
Click the number in the Systems column to see the systems in the System Set Manager to which a package applies. Modify packages on the system via the following subtabs.
This list includes all channels to which systems in the set are subscribed. A package is only installed on a system if the system is subscribed to the channel providing the package.
Click the channel name and select the packages from the list. Then click the button.
A list of all the packages installed on the selected systems that might be removed.
Multiple versions appear if systems in the System Set Manager have more than one version installed. Select the packages to be deleted, then click the button.
A list of all the packages installed on the selected systems that might be upgraded.
Systems must be subscribed to a channel providing the packages to be upgraded. If multiple versions of a package are available, note that your system will be upgraded to the latest version. Select the packages to be upgraded, then click the button.
A list of all installed packages whose contents, file checksum, and other details may be verified.
At the next check in, the verify event issues the command rpm
--verify for the specified package.
If there are any discrepancies, they are displayed in the System Details page for each system.
Select the check box next to all packages to be verified, then click the button. On the next page, select a date and time for the verification, then click the button.
Tools to create groups and manage system memberships.
These functions are limited to SUSE Manager Administrators and System Group Administrators. To add a new group, click on the top-right corner. In the next page, type the group name and description in the respective fields and click the button. To add or remove selected systems in any of the system groups, toggle the appropriate radio buttons and click the button.
As a Channel Administrator, you may change the base channels your systems are subscribed to.
Since the 3.1 maintenance update (2018) changing the channels is an action that can be scheduled like any other action. Earlier channel changes were applied immediately.
Manage channel associations through the following wizard procedure:
Base Channel Alteration (Page 1)Valid channels are either channels created by your organization, or the vendor’s default base channel for your operating system version and processor type. Systems will be unsubscribed from all channels, and subscribed to their new base channels.
This operation can have a dramatic effect on the packages and patches available to the systems. Use with caution.
To change the base channel, select the new one from the Desired base Channel
and confirm the action.
On the this wizard page you see the Current base Channel and how many Systems
are subscribed to it.
Click the number link in the Systems column to see which systems are actually selected.
To change the base channel subscription select the Desired base Channel from the selection box.
Then click in the lower left corner.
Child Channels (Page 2)The Child Channels page allows you to subscribe and unsubscribe individual child channels related to its parent or base channel.
Systems must subscribe to a base channel before subscribing to a child channel.
If you enable , recommended child channels are automatically selected for subscription.
The handling of required channels is currently not implemented for system set manager.
Change the child channel subscription on this page. Then click in the lower left corner.
Channel Changes Overview (Page 3)Schedule when the channel changes should take place the earliest. Then click in the lower left corner.
Channel Changes Actions (Page 4)See the scheduled change actions.
Like in the › › tab, the subtabs here can be used to subscribe the selected systems to configuration channels and deploy and compare the configuration files on the systems. The channels are created in the interface within the category. Refer to Section 15.3, “Overview” for channel creation instructions.
To manage the configuration of a system, install the latest rhncfg*
packages.
Refer to Section 15.2, “Preparing Systems for Configuration Management [Management]” for instructions on enabling and disabling scheduled actions for a system.
Use this subtab to distribute configuration files from your central repository on SUSE Manager to each of the selected systems.
The table lists the configuration files associated with any of the selected systems. Clicking its system count displays the systems already subscribed to the file.
To subscribe the selected systems to the available configuration files, select the check box for each wanted file. When done, click and schedule the action. Note that the latest versions of the files, at the time of scheduling, are deployed. Newer versions created after scheduling are disregarded.
Use this subtab to validate configuration files on the selected systems against copies in your central repository on SUSE Manager .
The table lists the configuration files associated with any of the selected systems. Clicking a file’s system count displays the systems already subscribed to the file.
To compare the configuration files deployed on the systems with those in SUSE Manager , select the check box for each file to be validated. Then click › . The comparisons for each system will not complete until each system checks in to SUSE Manager . When each comparison is complete, any differences between the files will be accessible from each system’s events page.
Note that the latest versions of the files, at the time of scheduling, are compared. Newer versions created after scheduling are disregarded. Find the results in the main category or within the › tab.
Subscribe systems to configuration channels, and in a second step rank these channels according to the order of preference. This tab is available only to SUSE Manager Administrators and Configuration Administrators.
Select channels for subscription by activating the check box. When done, confirm with .
In the second step, rank the channels with the arrow-up or arrow-down symbols.
Then decide how the channels are applied to the selected systems. The three buttons below the channels reflect your options. Clicking places all the ranked channels before any other channels to which the selected systems are currently subscribed. Clicking places the ranked channels after those channels to which the selected systems are currently subscribed. Clicking removes any existing association and creates new ones with the ranked channels, leaving every system with the same configuration channels in the same order.
In the first two cases, if any of the newly ranked configuration channels are already in a system’s existing configuration channel list, the duplicate channel is removed and replaced according to the new rank, effectively reordering the system’s existing channels. When such conflicts exist, you are presented with a confirmation page to ensure the intended action is correct. When the change has taken place, a message appears at the top of the page indicating the update was successful.
Then, click .
Channels are accessed in the order of their rank. Your local configuration channel always overrides all other channels.
Administrators may unsubscribe systems from configuration channels by clicking the check box next to the channel name and clicking the button.
Registered systems without configuration management preparation will appear here in a list.
Administrators may enable configuration management by clicking the button. You can also schedule the action by adjusting the date and time setting using the drop-down box, then clicking .
Then the systems will get subscribed to the required SUSE Manager tools channel and required rhncfg* packages will get installed.
Set the options for provisioning systems via the following subtabs.
Use this subtab to reinstall clients.
To schedule autoinstallations for these systems, select a distribution. The autoinstallation profile used for each system in the set is determined via the radio buttons.
Choose to apply the same profile to all systems in the set. This is the default option. You will see a list of available profiles to select from when you click .
Choose to apply different autoinstallation profiles to different systems in the set, by IP address. To do so, at least two autoinstallation profiles must be configured with associated IP ranges.
If you use , SUSE Manager will automatically pick a profile for each system so that the system’s IP address will be in one of the IP ranges specified in the profile itself. If such a profile cannot be found, SUSE Manager will look for an organization default profile and apply that instead. If no matching IP ranges nor organization default profiles can be found, no autoinstallation will be performed on the system. You will be notified on the next page if that happens.
To use Cobbler system records for autoinstallation, select . With PXE boot, you cannot only reinstall clients, but automatically install machines that do not have an operating system installed yet. SUSE Manager and its network must be properly configured to enable boot using PXE. For more information on Cobbler and Kickstart templates, refer to Chapter 10, Cobbler.
If a system set contains bare-metal systems and installed clients, only features working for systems without an operating system installed will be available. Full features will be enabled again when all bare-metal systems are removed from the set.
If any of the systems connect to SUSE Manager via a proxy server, choose either the radio button or the radio button. If you choose to autoinstall through a proxy server, select from the available proxies listed in the drop-down box beside the radio button. All of the selected systems will autoinstall via the selected proxy. Click the button to confirm your selections. When the autoinstallations for the selected systems are successfully scheduled, you will return to the page.
Use this subtab to add meaningful descriptions to the most recent snapshots of your selected systems.
To tag the most recent system snapshots, enter a descriptive term in the field and click the button.
Use this subtab to rollback selected systems to previous snapshots marked with a tag.
Click the tag name, verify the systems to be reverted, and click the button.
Use this subtab to issue remote commands.
First create a run
file on the client systems to allow this function to operate.
Refer to Section 7.3.1.3, “System Details > Details > Remote Command” for instructions.
Then identify a specific user, group, timeout period, and the script to run.
Select a date and time to execute the command and click
.
System sets can be scheduled for XCCDF scans; XCCDF stands for “The Extensible Configuration Checklist Description Format” .
Enter the command and command line arguments, and the path to the XCCDF document. Then schedule the scan. All target systems are listed below with a flag whether they support OpenSCAP scans. For more details on OpenSCAP and audits, refer to Chapter 13, Audit.
On the page, you can modify . Click , then the name of a key. Enter values for all selected systems, then click the button. To remove values for all selected systems, click , then the name of the key. Click the button to delete.
Set via the respective radio buttons.
Click the subtab to schedule a hardware profile refresh. Click .
Click the subtab, then the button to schedule a package profile update of the selected systems.
Click the subtab to move selected systems to a selected organization.
Select the subtab to select systems to be excluded from package updates.
Enter a in the text box and click the button. Already locked systems can be unlocked on this page. Select them and click .
Click the subtab, to remove systems by deleting their system profiles. Click the button to remove the selected profiles permanently.
Select the appropriate systems, then click the link to select these systems for reboot.
To cancel a reboot action, see Section 16.1, “Pending Actions”.
The page allows you to bootstrap Salt minions from the Web UI .
Place the FQDN of the minion to be bootstrapped within this field.
Place the SSH port that will be used to connect and bootstrap a machine.
The default is 22.
Input the minions user login.
The default is root
.
Input the minions login password.
Select the activation key (associated with a software source channel) that the minion should use to bootstrap with.
This check box is selected by default. This allows the script to auto-accept host keys without requiring a user to manually authenticate.
This feature is a Technology preview.
If selected a system will automatically be configured to use SSH. No other connection method will be configured.
Once your minion’s connection details have been filled in click the button. When the minion has completed the bootstrap process, find your new minion listed on the › page.
You can visualize your virtualized, proxy, and systems group topologies. Listed under › you will find the , , and subpages. This features allows you to search, filter, and partition systems by name, base channel, check-in date, group, etc.
To visualize your systems select › from the left navigation menu.
Click the button in the upper right corner to open the filters panel. On the tab, systems are filterable by name, base channel, installed products, or with special properties such as security, bug fix, and product enhancement advisories. etc.
On the tab, systems may also be partitioned by check-in time. Select the check-in date and time and click the button. The button will revert current partition configuration.
All elements of the network tree are selectable. Clicking any element in the tree opens a box containing information about the selected systems and will be displayed in the top-right of the visualization area.
Systems shown in the visualization view may be added to System Set Manager (SSM) for futher management. This can be performed in two ways:
Select single systems and click the button in the top-right detail box.
Add all visible child elements of any parent node in the view (visible means when filters have been applied) by clicking the button at the bottom of the selection details panel.
The following is an example graphical representation tree of the virtual network hierarchy of virtual systems registered with SUSE Manager .
The following is an example graphical representation tree of the proxy network hierarchy of proxy systems and their clients registered with SUSE Manager .
The following is a graphical representation tree of the all systems registered with SUSE Manager .
Systems are grouped according to preconfigured systems groups, and they may also be grouped into various group compositions by using the multi-select box.
Carry out an on your systems according to the following criteria: network info, hardware devices, location, activity, packages, details, DMI info, and hardware.
Refine searches using the drop-down box, which is set to by default.
The Activity selections ( , for example) are useful in finding and removing outdated system profiles.
Type the keyword, select the criterion to search by, use the radio buttons to specify whether you want to query all systems or only those in the , and click the button. To list all systems that do not match the criteria, select the check box.
The results appear at the bottom of the page. For details on how to use the resulting system list, refer to Section 7.1, “Overview Conventions”.
Users with the Activation Key Administrator role (including SUSE Manager
Administrators) can generate activation keys in the SUSE Manager
Web interface.
With such an activation key, register a SUSE Linux Enterprise
or Red Hat Enterprise Linux system, entitle the system to a SUSE Manager
service level and subscribe the system to specific channels and system groups through the rhnreg_ks command line utility.
System-specific activation keys created through the subtab of the page are not part of this list because they are not reusable across systems.
For more information about Activation Keys, see Chapter 7, Activation Key Management.
From the page organize activation keys for channel management.
To create an activation key:
Select › from the left bar.
Click the link at the upper right corner.
— Enter a to identify the generated activation key.
— Either choose automatic generation by leaving this field blank or enter the key you want to generate in the field. This string of characters can then be used with rhnreg_ks to register client systems with SUSE Manager . Refer to Section 7.9.2, “Using Multiple Activation Keys at Once” for details.
Allowed Characters. WARNING:
Do not insert commas or double quotes in the key.
All other characters are allowed, but <> (){} (this includes the space) will get removed automatically.
If the string is empty, a random one is generated.
Commas are problematic because they are used as separator when two or more activation keys are used at once.
+
— The maximum number systems that can be registered with the activation key concurrently. Leave blank for unlimited use. Deleting a system profile reduces the usage count by one and registering a system profile with the key increases the usage count by one.
— The primary channel for the key. This can be either the SUSE Manager Default channel, a SUSE provided channel, or a custom base channel.
Selecting SUSE Manager
Default allows client systems to register with the SUSE
-provided default channel that corresponds with their installed version of SUSE Linux Enterprise
.
You can also associate the key with a custom base channel.
If a system using this key is not compatible with the selected channel, it will fall back to the SUSE Manager
default channel.
— The supplemental system types for the key, e. g. Virtualization Host. All systems will receive these system types with the key.
- Select how clients communicate with SUSE Manager . (Pull) waits for the client to check in. With and the server contacts the client via SSH (with or without tunnel) and pushes updates and actions, etc.
For more information about contact methods, see Chapter 8, Contact Methods.
— Select whether this key should be considered the primary activation key for your organization.
Only one universal default activation key can be defined per organization. If a universal key already exists for this organization, you will unset the currently used universal key by activating the check box.
Click .
To create more activation keys, repeat the steps above.
After creating the unique key, it appears in the list of activation keys along with the number of times it has been used. Only Activation Key Administrators can see this list. At this point, you can configure the key further, for example, associate the key with child channels (for example, the Tools child channel), packages (for example, the rhncfg-actions package) and groups. Systems registered with the key get automatically subscribed to them.
To change the settings of a key, click the key’s description in the list to display its page. Via additional tabs you can select child channels, packages, configuration channels, group membership and view activated systems. Modify the appropriate tab then click the button. To disassociate channels and groups from a key, deselect them in the respective menus by Ctrl -clicking their highlighted names. To remove a key entirely, click the link in the upper right corner of the page. In the upper right corner find also the link.
Any (client tools) package installation requires that the Client Tools channel is available and the check box is selected. The Client Tools channel should be selected in the tab.
After creating the activation key, you can see in the tab a check box named . If you select it, all needed packages are automatically added to the list. By default, the following packages are added: rhncfg , rhncfg-client , and rhncfg-actions .
If you select you automatically get the following package: rhn-virtualization-host .
Adding the osad package makes sense to execute scheduled actions immediately after the schedule time. When the activation key is created, you can add packages with selecting the key ( › ), then on the activation key details tab, go for the subtab and add osad .
To disable system activations with a key, uncheck the corresponding box in the column in the key list. The key can be re-enabled by selecting the check box. Click the button on the bottom right-hand corner of the page to apply your changes.
Multiple activation keys can be specified at the command line or in a single autoinstallation profile.
This allows you to aggregate the aspects of various keys without re-creating a specific key for every system that you want to register, simplifying the registration and autoinstallation processes while slowing the growth of your key list.
Separate keys with a comma at the command line with rhnreg_ks or in a Kickstart
profile in the
tab of the
page.
Registering with multiple activation keys requires some caution. Conflicts between some values cause registration to fail. Conflicts in the following values do not cause registration to fail, a combination of values is applied: software packages, software child channels, and configuration channels. Conflicts in the remaining properties are resolved in the following manner:
Base software channels: registration fails.
System types: registration fails.
Enable configuration flag: configuration management is set.
Do not use system-specific activation keys along with other activation keys; registration fails in this event.
You are now ready to use multiple activation keys at once.
SUSE Manager Provisioning customers can create package profiles via the page.
Under › › , click . Enter a and , then click . These profiles are displayed on the page (left navigation bar), where they can be edited or deleted.
To edit a profile, click its name in the list, alter its name or description, and click the button. To view software associated with the profile, click the subtab. To remove the profile entirely, click at the upper-right corner of the page.
SUSE Manager customers may include completely customizable information about their systems.
Unlike with notes, the information here is more formal and can be searched.
for example, you may decide to specify an asset tag for each system.
To do so, select
from the left navigation bar and create an asset key.
Click
in the upper-right corner of the page.
Enter a suitable label and description, such as Asset and Precise location of each system, then click
.
The key will show up in the custom info keys list.
When the key exists, you may assign a value to it through the tab of the page. Refer to Section 7.3.1.8, “System Details > Details > Custom Info” for instructions.