1RHSM.CONF(5) RHSM.CONF(5)
2
6 rhsm.conf - Configuration file for the subscription-manager tooling
7
9 The rhsm.conf file is the configuration file for various subscription
10 manager tooling. This includes subscription-manager,
11 subscription-manager-gui, rhsmcertd, and virt-who.
12
14 hostname
15 The hostname of the subscription service being used. The default is
16 the Red Hat Customer Portal which is subscription.rhsm.redhat.com.
17 This default should not be retrofitted to previously installed
18 versions. It should be incorporated as the default going forward.
19 prefix
21 Server prefix where the subscription service is registered.
22 port
24 The port which the subscription service is listening on.
25 insecure
27 This flag enables or disables entitlement server certification
28 verification using the certificate authorities which are installed
29 in /etc/rhsm/ca.
30 ssl_verify_depth
32 Sets the number of certificates which should be used to verify the
33 servers identity. This is an advanced control which can be used to
34 secure on premise installations.
35 server_timeout
37 Set this to a non-blank value to override the HTTP timeout in
38 seconds. The default is 180 seconds (3 minutes).
39 proxy_hostname
41 Set this to a non-blank value if subscription-manager should use a
42 reverse proxy to access the subscription service. This sets the
43 host for the reverse proxy. Overrides hostname from HTTP_PROXY and
44 HTTPS_PROXY environment variables.
45 proxy_port
47 Set this to a non-blank value if subscription-manager should use a
48 reverse proxy to access the subscription service. This sets the
49 port for the reverse proxy. Overrides port from HTTP_PROXY and
50 HTTPS_PROXY environment variables.
51 proxy_username
53 Set this to a non-blank value if subscription-manager should use an
54 authenticated reverse proxy to access the subscription service.
55 This sets the username for the reverse proxy. Overrides username
56 from HTTP_PROXY and HTTPS_PROXY environment variables.
57 proxy_password
59 Set this to a non-blank value if subscription-manager should use an
60 authenticated reverse proxy to access the subscription service.
61 This sets the password for the reverse proxy. Overrides password
62 from HTTP_PROXY and HTTPS_PROXY environment variables.
63 no_proxy
65 Set this to a non-blank value if subscription-manager should not
66 use a proxy for specific hosts. Format is a comma-separated list of
67 hostname suffixes, optionally with port. '*' is a special value
68 that means do not use a proxy for any host. Overrides the NO_PROXY
69 environment variable.
70
72 baseurl
73 This setting is the prefix for all content which is managed by the
74 subscription service. This should be the hostname for the Red Hat
75 CDN, the local Satellite or Capsule depending on your deployment.
76 Prefix depends on the service type. For the Red Hat CDN, the full
77 baseurl is https://cdn.redhat.com . For Satellite 6, the baseurl
78 is https://HOSTNAME/pulp/repos , so for a hostname of
79 sat6.example.com the full baseurl would be for example:
80 https://sat6.example.com/pulp/repos .
81 repomd_gpg_url
83 The URL of the GPG key that was used to sign this repository's
84 metadata. The specified GPG key will be used in addition to any GPG
85 keys defined by the entitlement.
86 ca_cert_dir
88 The location for the certificates which are used to communicate
89 with the server and to pull down content.
90 repo_ca_cert
92 The certificate to use for server side authentication during
93 content downloads.
94 productCertDir
96 The directory where product certificates should be stored.
97 entitlementCertDir
99 The directory where entitlement certificates should be stored.
100 consumerCertDir
102 The directory where the consumers identity certificate is stored.
103 manage_repos
105 Set this to 1 if subscription manager should manage a yum repos
106 file. If set, it will manage the file /etc/yum.repos.d/redhat.repo.
107 If set to 0 then the subscription is only used for tracking
108 purposes, not content. The /etc/yum.repos.d/redhat.repo file will
109 either be purged or deleted.
110 full_refresh_on_yum
112 Set to 1 if the /etc/yum.repos.d/redhat.repo should be updated with
113 every server command. This will make yum less efficient, but can
114 ensure that the most recent data is brought down from the
115 subscription service.
116 report_package_profile
118 Set to 1 if rhsmcertd should report the system's current package
119 profile to the subscription service. This report helps the
120 subscription service provide better errata notifications. If
121 supported by the entitlement server, enabled repos, enabled
122 modules, and packages present will be reported.
123 pluginDir
125 The directory to search for subscription manager plug-ins
126 pluginConfDir
128 The directory to search for plug-in configuration files
129 auto_enable_yum_plugins
131 When this option is enabled, then yum/dnf plugins subscription-
132 manager and product-id are enabled every-time subscription-manager
133 or subscription-manager-gui is executed.
134 inotify
136 Inotify is used for monitoring changes in directories with
137 certificates. Currently only the /etc/pki/consumer directory is
138 monitored by the rhsm.service. When this directory is mounted using
139 a network file system without inotify notification support (e.g.
140 NFS), then disabling inotify is strongly recommended. When inotify
141 is disabled, periodical directory polling is used instead.
142
144 certCheckInterval
145 The number of minutes between runs of the rhsmcertd daemon
146 autoAttachInterval
148 The number of minutes between attempts to run auto-attach on this
149 consumer.
150 splay
152 1 to enable splay. 0 to disable splay. If enabled, this feature
153 delays the initial auto attach and cert check by an amount between
154 0 seconds and the interval given for the action being delayed. For
155 example if the certCheckInterval were set to 3 minutes, the initial
156 cert check would begin somewhere between 2 minutes after start up
157 (minimum delay) and 5 minutes after start up. This is useful to
158 reduce peak load on the Satellite or entitlement service used by a
159 large number of machines.
160
162 default_log_level
163 The default log level for all loggers in subscription-manager,
164 python-rhsm, rhsmd, and rhsmcertd. Note: Other keys in this
165 section will override this value for the specified logger.
166 MODULE_NAME[.SUBMODULE ...] = [log_level]
168 Logging can be configured on a module-level basis via entries of
169 the format above where:
170 module_name is subscription_manager, rhsm, or rhsm-app.
171 submodule can be optionally specified to further override the
173 logging level down to a specific file.
174 log_level is the log level to set the specified logger (one of:
176 DEBUG, INFO, WARNING, ERROR, or CRITICAL).
177
179 Bryan Kearney <bkearney@redhat.com>
180
182 subscription-manager(8), subscription-manager-gui(8), rhsmcertd(8)
183
185 Main web site: http://www.candlepinproject.org/
186
188 Copyright (c) 2010-2012 Red Hat, Inc. This is licensed under the GNU
189 General Public License, version 2 (GPLv2). A copy of this license is
190 available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
191rhsm.conf - RHSM.CONF(5)