While testing Satellite support in the Anaconda installer as part of INSTALLER-3882 I have noticed that the katello-rhsm-consumer script Anaconda uses fails to run in the RHEL 10 based environment. I've tracked the failure down to the update-ca-trust enable call in the script, that fail with:

Error: Unknown command: enable

When I tried running the command on an installed RHEL 10 system, this is what I got:

root@ibm-p8-kvm-03-guest-02:/home/user# update-ca-trust enable
Error: Unknown command: enable
Usage: /usr/bin/update-ca-trust [extract] [-o DIR|--output=DIR]
Update the system trust store in /etc/pki/ca-trust/extracted.
COMMANDS
(absent/empty command): Same as the extract command described below.
extract: Instruct update-ca-trust to scan the source configuration in
/usr/share/pki/ca-trust-source and /etc/pki/ca-trust/source and produce
updated versions of the consolidated configuration files stored below
the /etc/pki/ca-trust/extracted directory hierarchy.
EXTRACT OPTIONS
-o DIR, --output=DIR: Write the extracted trust store into the given
directory instead of updating /etc/pki/ca-trust/extracted.

As the same command runs without an error on a RHEL 9 system, something must have changed in how the update-ca-trust command works and the provisioning script might need to be adjusted accordingly.

The Satellite instance we are using is 6.12.2, but according to rhn-engineering-jlenz even in latest Satellite code, the template will still generate the katello-rhsm-consumer script with update-ca-trust enable command call.

See:

https://github.com/theforeman/foreman/blob/c16a47caf4995a13d821e7aaba4028e1d6766abe/app/views/unattended/provisioning_templates/registration/global_registration.erb

https://github.com/theforeman/foreman/blob/f98fe9e5c6ae3d6cdd3298bf0f8e88a5546577f0/app/views/unattended/provisioning_templates/snippet/subscription_manager_setup.erb#L149