Installing orcharhino Proxy Server

If you need to prevent the DHCP orcharhino Proxy from pinging hosts to check for available IP addresses, disable DHCP IP address pinging:

# orcharhino-installer --foreman-proxy-dhcp-ping-free-ip false

Open the ports for clients on orcharhino Proxy Server:

# firewall-cmd \
--add-port="8000/tcp" \
--add-port="9090/tcp"

Allow access to services on orcharhino Proxy Server:

# firewall-cmd \
--add-service=dns \
--add-service=dhcp \
--add-service=tftp \
--add-service=http \
--add-service=https \
--add-service=puppetmaster

Make the changes persistent:

# firewall-cmd --runtime-to-permanent

Upgrade all packages:

# dnf upgrade

Install the packages:

# dnf install foreman-installer

Log into the orcharhino management UI.

From the Organization list in the upper-left of the screen, select Any Organization.

From the Location list in the upper-left of the screen, select Any Location.

In the orcharhino management UI, navigate to Hosts > All Hosts and select orcharhino Proxy Server.

From the Select Actions list, select Assign Organization.

From the Organization list, select the organization where you want to assign this orcharhino Proxy.

Click Fix Organization on Mismatch.

Click Submit.

Select orcharhino Proxy Server. From the Select Actions list, select Assign Location.

From the Location list, select the location where you want to assign this orcharhino Proxy.

Click Fix Location on Mismatch.

Click Submit.

In the orcharhino management UI, navigate to Administer > Organizations and click the organization to which you have assigned orcharhino Proxy.

Click orcharhino Proxies tab and ensure that orcharhino Proxy Server is listed under the Selected items list, then click Submit.

In the orcharhino management UI, navigate to Administer > Locations and click the location to which you have assigned orcharhino Proxy.

Click orcharhino Proxies tab and ensure that orcharhino Proxy Server is listed under the Selected items list, then click Submit.

Select the organization from the Organization list.

Select the location from the Location list.

In the orcharhino management UI, navigate to Hosts > All Hosts.

In the orcharhino management UI, navigate to Infrastructure > orcharhino Proxies.

List the current trusted proxies using the full help of orcharhino installer:

# orcharhino-installer --full-help | grep -A 2 "trusted-proxies"

The current listing contains all trusted proxies you require.

Enable the pull-based transport on your orcharhino Proxy Server:

# orcharhino-installer --foreman-proxy-plugin-remote-execution-script-mode pull-mqtt

Configure the firewall to allow the MQTT service on port 1883:

# firewall-cmd --add-service=mqtt

Make the changes persistent:

# firewall-cmd --runtime-to-permanent

In pull-mqtt mode, hosts subscribe for job notifications to either your orcharhino Server or any orcharhino Proxy Server through which they are registered. Ensure that orcharhino Server sends remote execution jobs to that same orcharhino Server or orcharhino Proxy Server:

$ hammer settings set \
--name remote_execution_prefer_registered_through_proxy \
--value true

In the orcharhino management UI, navigate to Infrastructure > orcharhino Proxies, and select the orcharhino Proxy that you want to add a lifecycle to.

Click Edit and click the Lifecycle Environments tab.

From the left menu, select the lifecycle environments that you want to add to orcharhino Proxy and click Submit.

To synchronize the content on the orcharhino Proxy, click the Overview tab and click Synchronize.

Select either Optimized Sync or Complete Sync.

To display a list of all orcharhino Proxy Servers, on orcharhino Server, enter the following command:

$ hammer proxy list

Using the ID, verify the details of your orcharhino Proxy:

$ hammer proxy info \
--id My_orcharhino_Proxy_ID

To view the lifecycle environments available for your orcharhino Proxy Server, enter the following command and note the ID and the organization name:

$ hammer proxy content available-lifecycle-environments \
--id My_orcharhino_Proxy_ID

Add the lifecycle environment to your orcharhino Proxy Server:

$ hammer proxy content add-lifecycle-environment \
--id My_orcharhino_Proxy_ID \
--lifecycle-environment-id My_Lifecycle_Environment_ID \
--organization "My_Organization"

Synchronize the content from orcharhino to orcharhino Proxy.

Enable the BMC module and select the default provider:

# orcharhino-installer \
--foreman-proxy-bmc "true" \
--foreman-proxy-bmc-default-provider "freeipmi"

In the orcharhino management UI, navigate to Infrastructure > Subnets.

Select the subnet of your host.

On the Proxies tab, select your orcharhino Proxy Server as BMC Proxy.

Click Submit.