AWS RHEL 7 AMI - Repos are disabling themselves - amazon-ec2

We are using the official RHEL 7 AMI.
Red Hat Enterprise Linux 7.9 (HVM), SSD Volume Type - ami-e9d5ec88
We are enabling all of the repo's, and disabling all the subscription management
sudo yum-config-manager --enable rhel-7-server-rhui-extras-rpms
sudo yum-config-manager --enable rhel-7-server-rhui-optional-rpms
sudo yum-config-manager --enable rhel-7-server-rhui-rh-common-rpms
sudo yum-config-manager --enable rhel-7-server-rhui-rpms
sudo yum-config-manager --enable rhel-7-server-rhui-supplementary-rpms
sudo yum-config-manager --enable rhel-server-rhui-rhscl-7-rpms
sudo yum-config-manager --enable rhui-client-config-server-7
subscription-manager config --rhsm.manage_repos=0
subscription-manager config --rhsm.auto_enable_yum_plugins=0
everything looks good..
yum repolist enabled
"Loaded plugins: amazon-id, product-id, search-disabled-repos",
"repo id repo name status",
"epel/x86_64 Extra Packages for E 13,756",
"rhel-7-server-rhui-extras-rpms/x86_64 Red Hat Enterprise L 1,430",
"rhel-7-server-rhui-optional-rpms/7Server/x86_64 Red Hat Enterprise L 23,399",
"rhel-7-server-rhui-rh-common-rpms/7Server/x86_64 Red Hat Enterprise L 243",
"rhel-7-server-rhui-rpms/7Server/x86_64 Red Hat Enterprise L 32,927",
"rhel-7-server-rhui-supplementary-rpms/7Server/x86_64 Red Hat Enterprise L 443",
"rhel-server-rhui-rhscl-7-rpms/7Server/x86_64 Red Hat Software Col 13,928",
"rhui-client-config-server-7/x86_64 Custom Repositories 4",
"repolist: 86,130"
Then sudo yum update -y or any other yum command is ran, and the repo's are reset.
yum repolist enabled
"Loaded plugins: amazon-id, product-id, search-disabled-repos",
"repo id repo name status",
"epel/x86_64 Extra Packages for Enter 13,756",
"rhel-7-server-rhui-rh-common-rpms/7Server/x86_64 Red Hat Enterprise Linux 243",
"rhel-7-server-rhui-rpms/7Server/x86_64 Red Hat Enterprise Linux 32,927",
"rhui-client-config-server-7/x86_64 RHUI Client Configuratio 4",
"repolist: 46,930"

Figured it out.
An update which is applied to the 'rh-amazon-rhui-client' Red Hat-managed package on the AMI to update it from version 3.0.32 to 4.0.4 causes a one-time reset of the repository configuration.

Related

Connect to CentOS desktop (GUI) installed on Google cloud

I've installed Centos7 on the Google Cloud Platform, as you know there is just ssh option to connect to the machine.
Now I need to have access to its desktop(GUI) from my laptop (it's win10).
it's appreciated if anyone can help me.
Thanks in advance
you need to ssh login into your CentOS machine either from ssh button in Gcloud, or using the cloud shell:
gcloud compute ssh test-vws
then setup a password for your account:
sudo passwd `whoami`
After that, you will need to install a client that will allow you to navigate the GUI for your server.
again, on your server command line execute:
sudo yum -y update
sudo yum -y groupinstall 'Server with GUI'
once finished, follow this guige to install and setup Teradici Cloud Access Software (Remote Desktop Agent for CentOS).
Installing Teradici Cloud Access Software
On your virtual workstation, install the Teradici repositories:
sudo yum -y install https://downloads.teradici.com/rhel/teradici-repo-latest.noarch.rpm
Install Teradici Standard Agent for Linux:
sudo yum -y update
sudo yum -y install pcoip-agent-standard
Then you will have to register the Agent and create a firewall rule to allow the connection, just follow the guide, and your desktop connection will look like this:

How to fix docker vulnerabilities (USN-4048-1) in ubuntu 18.08 LTS

I have AWS EC2 ubuntu 18.04 LTS machine. I want to fix the docker vulnerabilities (USN-4048-1).
Installed package : docker.io_17.03.2-0ubuntu7~ppa1
Fixed package : docker.io_18.09.7-0ubuntu1~18.04.3
How can i do that ? What's the steps to fix it ?
The simple way is to follow below step:
If the update-notifier-common package is installed, Ubuntu will alert you about pending updates via the message of the day (motd) upon console or remote login.
After logging in, you can check for and apply new updates with:
When performing an update, first review what apt is going to do, then confirm that you want to apply the updates (this is particularly true when running the development release).
If you would prefer to have updates applied automatically, make sure the unattended-upgrades package is installed, then run 'sudo dpkg-reconfigure unattended-upgrades'. Please note that updates may restart services on your server, so this may not be appropriate for all environments.
$ sudo apt-get update
$ sudo apt-get dist-upgrade
source : https://wiki.ubuntu.com/Security/Upgrades?_ga=2.36307296.1783287754.1567592268-1506938917.1567592268

Openshift online v3 - build Red Hat image (is Docker EE needed?)

I want to build a custom image to use on openshift online v3. Based on rhel 7. On the install page on docker.com it becomes clear that you will need Docker Enterprise Edition to install docker on rhel 7. Is it possible through a tool or workaround to build a docker image based on rhel7, without buying Docker Enterprise Edition?
No Docker EE required, just install the regular docker package from RHEL repos, and you're fine. See also access.redhat.com/solutions/3092401
I enabled the repos:
subscription-manager repos --enable=rhel-7-server-rpms
subscription-manager repos --enable=rhel-7-server-extras-rpms
subscription-manager repos --enable=rhel-7-server-optional-rpms
Then I installed docker with yum install docker and i could use the red hat images. Thank you #GrahamDumpleton!

Amazon Linux AMI - Upgrade OPenssh version

I am using a Amazon Linux AMI base ec2 instance. The current openssh version on the instance is
OpenSSH_6.2p2
Question is how to upgrade it to openssh 6.4.
I was searching it and could not find the answer
An updated openssh package is available in the Amazon Linux AMI repositories. This update adds fixes for CVE-2014-2653 and CVE-2014-2532. To install the update run:
sudo yum install openssh

Repositories links not working yum.conf in CentOS 6

I am running a linux server using RedHat and Centos 6.4
I need to install gcc onto the server, so I have been trying to use yum to install gcc for me, however I seem to have a bit of an issue with installing and updating packages using yum due to the yum.conf file.
If I open my current yum.conf file, I see the following code:
[main]
cachedir=/var/cache/yum
debuglevel=2
logfile=/var/log/yum.log
pkgpolicy=newest
distroverpkg=redhat-release
tolerant=1
exactarch=1
[base]
name=Red Hat Linux $releasever - $basearch - Base
baseurl=http://mirror.dulug.duke.edu/pub/yum-repository/redhat/$releasever/$basearch/
[updates]
name=Red Hat Linux $releasever - Updates
baseurl=http://mirror.dulug.duke.edu/pub/yum-repository/redhat/updates/$releasever/
and whenever I try to run a yum command - for example, "yum update" I get the following errors in my terminal:
[root#SERVER etc]# yum update
Gathering header information file(s) from server(s)
Server: Red Hat Linux 6 - x86_64 - Base
retrygrab() failed for:
http://mirror.dulug.duke.edu/pub/yum-repository/redhat/6/x86_64/headers/header.info
Executing failover method
failover: out of servers to try
Error getting file http://mirror.dulug.duke.edu/pub/yum-repository/redhat/6/x86_64/headers/header.info
[Errno 4] IOError: <urlopen error >
[root#SERVER etc]#
I believe this is due to some old yum mirrors being down, however I cannot find any reference to a proper set of repositories to use in my yum.conf file which would work on CentOS 6.4
The question is: does anybody know where I can find a set of repositories that will work in this scenario? I know that the Yum website is now found at http://yum.baseurl.org/ however I cannot see anything clear with regard to what repositories I should be putting in my yum.conf file..
I am obviously a linux newbie, so if I am missing something important, flame me gently...
Looks like you have a mix of CentOS and RedHat bits. Delete whatever you added. CentOS is easy (examples below). For RedHat if you aren't a registered machine you'll want to use the DVD ISO as source (baseurl=file:///media) or maybe attach to a public EPEL.
Here's a CentOS /etc/yum.conf.
[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=0
debuglevel=2
logfile=/var/log/yum.log
exactarch=1
obsoletes=1
gpgcheck=1
plugins=1
installonly_limit=5
bugtracker_url=http://bugs.centos.org/set_project.php?project_id=16&ref=http://bugs.centos.org/bug_report_page.php?category=yum distroverpkg=centos-release
And then you should have a few repos that already exist in /etc/yum.repos.d (base/debuginfo/media/vault). Hers's /etc/yum.repos.d/CentOS-Base.repo
[base]
name=CentOS-$releasever - Base
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
#baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#released updates
[updates]
name=CentOS-$releasever - Updates
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
#baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
#baseurl=http://mirror.centos.org/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
#baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

Resources