Hi

I have to build a few servers (RHEL 5.3 ) that will sit on a secure network without any internet access.

How can i register the RHEL and receive updates/patches without internet access directly attached?

I could set up a provisioning server but again, no internet access directly to this network. I could however, download from an alternative network and cut a DVD/CD and transfer to the provisioning server; is this possible?


Thanks
Dan

you don't need to register the systems, just have the subscriptions added to your RHN account. Then you can download whatever you want however you want and treat appropriately.

1 members found this post helpful.

Hi
Thanks for the reply.
This may sound a basic question, but where do you download them from?
I've not seen/found an ftp site for rhel updates.
I was under the impression you had to use yum.
sorry if this a basic question but my background is solaris, not redhat.

Thanks
Dan.

It would be helpful for you to register in this link.


https://www.redhat.com/wapps/ugc/reg...3-51D2BFD644CA


And access the RHN network to download the RPMs.

https://www.redhat.com/wapps/sso/rhn...n%2FYourRhn.do

Redhat Satellite server http://www.redhat.com/docs/manuals/R...intro-sat.html

Right, could you set up a satellite server on a 'net-connected network, and then point the network in question to that satellite server for registration / updates?

chrism01, do you know how expensive satellite is?? Very, especially when the OP doesn't want a way to do this.

I'm in exactly the same situation (as I read it) and have NO internet access from my machines due to security. What I'd do is use a tool like mrepo to create a mirror of the RHN repo, transferring data via USB stick on a weekly basis, and just setup a very basic repo within the environment on a web server and update accordingly.

@acid_kewpie: (I know you weren't asking me.) We actually have a sitewide license at my organization, so I didn't know about the cost. If I had, I may not have recommended it, or at least given that ($$) caveat.

I remember being told we'd been quoted about 10k for my last job, which was far too hard to justify, especially if it really is just the updates part, as opposed to the overall management.

Depends on the org; some insist on having pure RH SW and are willing to pay for it. Others will mix & match, so you could use Spacewalk, the free (unsupported) equiv....

Thanks for all the info,

mrepo and spacewalk look good, although i would have to use a usb drive to transfer the updates.


I'm having trouble getting updates from RedHats's site, every time i click the download button i get "page not found error" !
logged a call with RH.

Is there any way to grab all updates so that i can update a kickstart's RPMs so at least i'm building with all the latest versions?

Thanks
Dan

yes, that's where mrepo would come into the equation outside of the environment. Some docs will explain how to fake register that external machine to RHN, and once you have you can (totally legitimately) maintain a copy of the full updates in your own machine.

Spacewalk is, relatively speaking, hard... it's not really a proper standalone product, but is heading that way. It's basically RedHat's internal system crudely packaged as a about 100 RPM's well, sort of... so it's hard to really get running, and requires an oracle database (which you can get XE for free)