-
Bug
-
Resolution: Done
-
Major
-
6.13.0
-
None
-
None
-
None
-
Manual
There are several updates required to this section.
1) After disabling the options through the satellite-installer command the tftp (and possibly dns) service needs to be stopped and masked to ensure it is no longer running.
On RHEL 8:
systemctl mask --now tftp.service tftp.socket
On RHEL7 the customer may want to disable xinetd as well if no other services are required through xinetd:
systemctl mask --now xinetd
And optionally remove the xinetd package altogether:
- yum remove xinetd
In the following steps where the capsule settings are updated please update this to say that this should be applied to all subnets using this capsule.
Optionally add that if another capsule still provides this service it can be selected instead.
E.g.
- Navigate to Infrastructure > Subnets
- Select all subnets where the Capsule is set as a TFTP proxy
- Clear the field or set another TFTP proxy
Note that this applies to all Satellite versions. Please update at least the currently supported versions 6.11, 6.12 and 6.13.
FYI, the goal is to archive the KCS https://access.redhat.com/solutions/4884421 which duplicates this information but neither the KCS or the docs have the correct instructions.
Thanks in advance
Bram
Reported by: rhn-support-bmertens