Importing content

In the orcharhino management UI, navigate to Content > Content Credentials. In the Content Credentials window, click Create Content Credential.

In the Name field, enter a name for your SSL certificate.

From the Type list, select SSL Certificate.

In the Content Credentials Content field, paste your SSL certificate, or click Browse to upload your SSL certificate.

Click Save.

Copy the SSL certificate to your orcharhino Server:

$ scp My_SSL_Certificate root@orcharhino.example.com:~/.

$ wget -P ~ http://upstream-orcharhino.example.com/pub/katello-server-ca.crt

Upload the SSL Certificate to orcharhino:

$ hammer content-credential create \
--content-type cert \
--name "My_SSL_Certificate" \
--organization "My_Organization" \
--path ~/My_SSL_Certificate

In the orcharhino management UI, navigate to Content > Products, click Create Product.

In the Name field, enter a name for the product. orcharhino automatically completes the Label field based on what you have entered for Name.

Optional: From the GPG Key list, select the GPG key for the product.

Optional: From the SSL CA Cert list, select the SSL CA certificate for the product.

Optional: From the SSL Client Cert list, select the SSL client certificate for the product.

Optional: From the SSL Client Key list, select the SSL client key for the product.

Optional: From the Sync Plan list, select an existing sync plan or click Create Sync Plan and create a sync plan for your product requirements.

In the Description field, enter a description of the product.

Click Save.

Download the Release and Release.gpg files:

$ wget https://deb.debian.org/debian/dists/bullseye/Release
$ wget https://deb.debian.org/debian/dists/bullseye/Release.gpg

Verify the signature:

$ gpg --verify Release.gpg Release

If you cannot verify the signature, import the missing GPG public keys based on their fingerprint:

$ gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys A7236886F3CCCAAD148A27F80E98404D386FA1D9
$ gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 4CB50190207B4758A3F73A796ED0E7B82643E131
$ gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys A4285295FC7B1A81600062A9605C66F00D6C9793

Optional: Verify the signature again:

$ gpg --verify Release.gpg Release

Export the ASCII-armored GPG public keys to a file:

$ gpg --armor --export A7236886F3CCCAAD148A27F80E98404D386FA1D9 4CB50190207B4758A3F73A796ED0E7B82643E131 A4285295FC7B1A81600062A9605C66F00D6C9793 > debian_11.txt

Backup your orcharhino Server.

Ensure that there are no running tasks:

$ orcharhino-maintain health check --label foreman-tasks-not-running

In the orcharhino management UI, navigate to Administer > Settings.

On the Content tab, set the Enable structured APT for deb content setting to Yes.

On your orcharhino Server, start orcharhino maintenance mode:

$ orcharhino-maintain maintenance-mode start

Migrate your Deb content:

$ foreman-rake katello:migrate_structure_content_for_deb

Stop orcharhino maintenance mode:

$ orcharhino-maintain maintenance-mode stop

Perform a complete sync of your orcharhino Proxy Servers that provide Deb content to hosts.

In the orcharhino management UI, navigate to Content > Products and select the product that you want to use, and then click New Repository.

In the Name field, enter a name for the repository. orcharhino automatically completes the Label field based on what you have entered for Name.

Optional: In the Description field, enter a description for the repository.

From the Type list, select deb as type of repository.

Optional: In the Upstream URL field, enter the URL of the external repository to use as a source. You can find the upstream URLs on Debian-based systems in /etc/apt/sources.list.

In the Releases/Distributions field, set one or multiple releases separated by whitespace. The distributions specify the path from the repository root to the Release file. Repositories that omit the dists directory are using the deprecated flat repository structure. To synchronize a flat repository, you must specify exactly one distribution that ends with a /.

Optional: In the Components field, enter a component. This indicates the licensing terms of the software packages.

Optional: In the Architectures field, enter one or multiple architectures. If you want to make the repository available to all hosts regardless of the architecture, ensure to select No restriction.

Optional: In the Errata URL field, enter the URL of an errata service.

Optional: Select the Verify SSL checkbox if you want to verify that the upstream repository’s SSL certificates are signed by a trusted CA.

Optional: In the Upstream Username field, enter the user name for the upstream repository if required for authentication. Clear this field if the repository does not require authentication.

Optional: In the Upstream Password field, enter the corresponding password for the upstream repository. Clear this field if the repository does not require authentication.

Optional: In the Upstream Authentication Token field, provide the token of the upstream repository user for authentication. Leave this field empty if the repository does not require authentication.

From the Download Policy list, select the type of synchronization orcharhino Server performs. For more information, see Download Policies Overview.

From the Mirroring Policy list, select the type of content synchronization orcharhino Server performs. For more information, see Mirroring Policies Overview.

Optional: In the HTTP Proxy Policy field, select an HTTP proxy.

Optional: You can clear the Unprotected checkbox to require a subscription entitlement certificate for accessing this repository. By default, the repository is published through HTTP.

Optional: From the GPG Key list, select the GPG key if you want to verify the signatures of the Release files associated with the Debian repository.

Optional: In the SSL CA Cert field, select the SSL CA Certificate for the repository.

Optional: In the SSL Client cert field, select the SSL Client Certificate for the repository.

Optional: In the SSL Client Key field, select the SSL Client Key for the repository.

Click Save to create the repository.

Enter the following command to create the repository:

$ hammer repository create \
--content-type "deb" \
--deb-architectures "My_Deb_Architectures" \
--deb-components "_My_Deb_Components" \
--deb-releases "My_Deb_Releases" \
--gpg-key-id "My_GPG_Key_ID" \
--name "_My_Repository" \
--organization "My_Organization" \
--product "My_Product" \
--publish-via-http true \
--url My_Upstream_URL

In the orcharhino management UI, navigate to Content > Products.

Click Create Product to create a product named Ubuntu 24.04.

On the Repositories tab, click New Repository to create three deb repositories with the following parameter values:

Click Create Product to create a product named Ubuntu 24.04 client.

On the Repositories tab, click New Repository to create a deb repository with the following parameter values:

In the orcharhino management UI, navigate to Content > Products.

Click Create Product to create a product named Ubuntu 22.04.

On the Repositories tab, click New Repository to create three deb repositories with the following parameter values:

Click Create Product to create a product named Ubuntu 22.04 client.

On the Repositories tab, click New Repository to create a deb repository with the following parameter values:

Create a product named orcharhino Clients for Ubuntu. For more information, see Creating a Custom Product.

Create a repository for Ubuntu 24.04. You can find the upstream URL of all orcharhino Clients in the ATIX Service Portal. For more information, see Adding Custom deb Repositories.

Synchronize the orcharhino Clients for Ubuntu to your orcharhino. For more information, see Synchronizing Repositories.

Create a content view to make the .deb packages consumable by content hosts. For more information, see Creating an Activation Key.

Create an activation key to register content hosts to orcharhino. For more information, see Creating an Activation Key.

Optional: Create a host group to simplify the process of creating hosts. For more information, see Creating a Host Group.

In the orcharhino management UI, navigate to Hosts > All Hosts and select a host.

Select the Content tab, then select the Repository sets subtab. On the tab, there is a set of repositories available to each host with a status of Enabled or Disabled.

You can override the default status by using the action menus on each table row by changing the status to Override to disabled, Override to enabled, or Reset to default.

You can also bulk select the checkboxes on each table row, and use the vertical ellipsis icon at the top.

In the orcharhino management UI, navigate to Content > Products and select the product that contains the repositories that you want to synchronize.

Select the repositories that you want to synchronize and click Sync Now.

Optional: To view the progress of the synchronization in the orcharhino management UI, navigate to Content > Sync Status and expand the corresponding product or repository tree.

Log in to your orcharhino Server using SSH.

Run the following Bash script:

ORG="My_Organization"

for i in $(hammer --no-headers --csv repository list --organization $ORG --fields Id)
do
  hammer repository synchronize --id ${i} --organization $ORG --async
done

In the orcharhino management UI, navigate to Administer > Settings.

Click the Content tab.

Change the default download policy depending on your requirements:

In the orcharhino management UI, navigate to Content > Products.

Select the required product name.

On the Repositories tab, click the required repository name, locate the Download Policy field, and click the edit icon.

From the list, select the required download policy and then click Save.

List the repositories for an organization:

$ hammer repository list \
--organization-label My_Organization_Label

Change the download policy for a repository to immediate or on_demand:

$ hammer repository update \
--download-policy immediate \
--name "My_Repository" \
--organization-label My_Organization_Label \
--product "My_Product"

In the orcharhino management UI, navigate to Content > Products.

Select the product name.

On the Repositories tab, click the repository name, locate the Mirroring Policy field, and click the edit icon.

From the list, select a mirroring policy and click Save.

List the repositories for an organization:

$ hammer repository list \
--organization-label My_Organization_Label

Change the mirroring policy for a repository to additive, mirror_complete, or mirror_content_only:

$ hammer repository update \
--id 1 \
--mirroring-policy mirror_complete

In the orcharhino management UI, navigate to Infrastructure > orcharhino Proxies, and select the orcharhino Proxy where you want to see the synchronized content.

Select the Overview tab.

Under Content Sync, toggle the Synchronize button to do an Optimized Sync or a Complete Sync to synchronize the orcharhino Proxy which refreshes the content counts.

Select the Content tab.

Choose an Environment to view content views available to those orcharhino Proxies by clicking >.

Expand the content view by clicking > to view repositories available to the content view and the specific version for the environment.

View the number of content counts under Packages specific to Deb repositories.

View the number of errata, package groups, files, container tags, container manifests, and Ansible collections under Additional content.

Click the vertical ellipsis in the column to the right next to the environment and click Refresh counts to refresh the content counts synchronized on the orcharhino Proxy under Packages.

On orcharhino, to verify the ports that are permitted by SELinux for content synchronization, enter a command as follows:

$ semanage port -l | grep ^http_port_t
http_port_t     tcp      80, 81, 443, 488, 8008, 8009, 8443, 9000

To configure SELinux to permit a port for content synchronization, for example 10011, enter a command as follows:

$ semanage port -a -t http_port_t -p tcp 10011

In the orcharhino management UI, navigate to Content > Products.

Select the product containing the corrupted repository.

Select the name of a repository you want to synchronize.

To perform optimized sync or complete sync, select Advanced Sync from the Select Action menu.

Select the required option and click Sync.

Optional: To verify the checksum, click Verify Content Checksum from the Select Action menu.

Obtain a list of repository IDs:

$ hammer repository list \
--organization "My_Organization"

Synchronize a corrupted repository using the necessary option:

In the orcharhino management UI, navigate to Content > Products.

Select the product that includes the repository for which you want to republish metadata.

On the Repositories tab, select a repository.

To republish metadata for the repository, click Republish Repository Metadata from the Select Action menu.

In the orcharhino management UI, navigate to Content > Lifecycle > Content Views.

Select a content view.

On the Versions tab, select a content view version.

To republish metadata for the content view version, click Republish repository metadata from the vertical ellipsis icon.

In the orcharhino management UI, navigate to Infrastructure > HTTP Proxies.

Select New HTTP Proxy.

In the Name field, enter a name for the HTTP proxy.

In the URL field, enter the URL for the HTTP proxy, including the port number.

If your HTTP proxy requires authentication, enter a Username and Password.

Optional: In the Test URL field, enter the HTTP proxy URL, then click Test Connection to ensure that you can connect to the HTTP proxy from orcharhino.

Click the Locations tab and add a location.

Click the Organization tab and add an organization.

Click Submit.

In the orcharhino management UI, navigate to Content > Products and select the products that you want to change.

From the Select Action list, select Manage HTTP Proxy.

Select an HTTP Proxy Policy from the list:

Click Update.

In the orcharhino management UI, navigate to Content > Products and click the name of the product that contains the repository.

In the Repositories tab, click the name of the repository.

Locate the HTTP Proxy field and click the edit icon.

Select an HTTP Proxy Policy from the list:

Click Save.

In the orcharhino management UI, navigate to Content > Sync Plans and click New Sync Plan.

In the Name field, enter a name for the plan.

Optional: In the Description field, enter a description of the plan.

From the Interval list, select the interval at which you want the plan to run.

From the Start Date and Start Time lists, select when to start running the synchronization plan.

Click Save.

To create the synchronization plan, enter the following command:

$ hammer sync-plan create \
--description "My_Description" \
--enabled true \
--interval daily \
--name "My_Products" \
--organization "My_Organization" \
--sync-date "2023-01-01 01:00:00"

View the available sync plans for an organization to verify that the sync plan has been created:

$ hammer sync-plan list --organization "My_Organization"

In the orcharhino management UI, navigate to Content > Products.

Select a product.

On the Details tab, select a Sync Plan from the drop down menu.

Assign a sync plan to a product:

$ hammer product set-sync-plan \
--name "My_Product_Name" \
--organization "My_Organization" \
--sync-plan "My_Sync_Plan_Name"

Run the following Bash script:

ORG="My_Organization"
SYNC_PLAN="daily_sync_at_3_a.m"

hammer sync-plan create --name $SYNC_PLAN --interval daily --sync-date "2023-04-5 03:00:00" --enabled true --organization $ORG
for i in $(hammer --no-headers --csv --csv-separator="|" product list --organization $ORG --per-page 999 | grep -vi not_synced | awk -F'|' '$5 != "0" { print $1}')
do
  hammer product set-sync-plan --sync-plan $SYNC_PLAN --organization $ORG --id $i
done

After executing the script, view the products assigned to the sync plan:

$ hammer product list --organization $ORG --sync-plan $SYNC_PLAN

Install ubuntu-advantage-tools on a host running Ubuntu 14.04 or 16.04:

$ apt-get install -y ubuntu-advantage-tools

Register your host with Canonical:

$ ua attach ABCDEF0123456789

Extract the Upstream URL, Releases, Components, and Architectures from the ESM repository:

$ cat /etc/apt/sources.list.d/ubuntu-esm-infra.list

Extract user name and password:

$ cat /etc/apt/auth.conf.d/90ubuntu-advantage

Add GPG public key to orcharhino:

Create a product:

Synchronize your product.

Distribute and manage your content as you manage other .deb content.