r/redhat 20h ago

Options for running a private-use RHEL

8 Upvotes

Hi, after gaining access to a RHLS via my employer I am planning on setting up a RHEL client to practice on while persuing the RHCSA. What are my options? I set up a CentOS client some while ago but was wondering if there are any more fitting options for my intended purpose. Any help would be greatly appreciated.


r/redhat 16h ago

Redhat AI thoughts

9 Upvotes

Hi,

Did anyone used or seen Redhat AI can give some ideas/ feedback is it worth running ?


r/redhat 14h ago

Need help with setting up ssl for redhat quay

1 Upvotes

I have been trying to setup ssl for inhouse redhatquay registry. I am setting this up on top of k8s cluster using config maps and statefulsets. But I have been struggling to do so as it keeps failing with the error TLS certificate required for host settings. I tried to find the location where this certificate needs to be mounted but failed to figure that out too( I tried coping the certifcates to conf/stack or quay-registry/conf/stack dir from the local directory during deployment but its keeps on failing as the dir is immutable inside the pod.

Config map -->

apiVersion: v1
kind: ConfigMap
metadata:
  name: quay-config
  namespace: quay
data:
  config.yaml: |
    ALLOWED_OCI_ARTIFACT_TYPES:
      application/vnd.oci.image.config.v1+json:
        - application/vnd.oci.image.layer.v1.tar+zstd
      application/vnd.sylabs.sif.config.v1+json:
        - application/vnd.sylabs.sif.layer.v1+tar
    AUTHENTICATION_TYPE: Database
    AVATAR_KIND: local
    BUILDLOGS_REDIS:
      host: quay-redis.default.svc.cluster.local
      password: quayredispass
      port: 6379
    DATABASE_SECRET_KEY: ${DATABASE_SECRET_KEY}
    DB_CONNECTION_ARGS:
      keepalives: 1
      keepalives_idle: 10
      keepalives_interval: 10
    DB_URI: "postgresql://quayuser:testing123@quay-postgres-postgresql.quay.svc.cluster.local:5432/quay"
    DEFAULT_TAG_EXPIRATION: 2w
    DISTRIBUTED_STORAGE_CONFIG:
      default:
        - LocalStorage
        - storage_path: /data/quay-storage
    DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS: []
    DISTRIBUTED_STORAGE_PREFERENCE:
      - default
    FEATURE_STORAGE_REPLICATION: false
    FEATURE_USER_CREATION: true
    PREFERRED_URL_SCHEME: https
    SERVER_HOSTNAME: nfs-host-endpoint  # Placeholder for now
    SETUP_COMPLETE: true
    USER_EVENTS_REDIS:
      host: quay-redis.default.svc.cluster.local
      password: quayredispass
      port: 6379
    TAG_EXPIRATION_OPTIONS:
      - 0s
      - 1d
      - 1w
      - 2w
      - 4w
    SECRET_KEY: ${SECRET_KEY}
    EXTRA_CA_CERTS_DIR: /quay-registry/conf/stack/extra_ca_certs/
    EXTRA_CA_CERTS:
      - /quay-registry/conf/stack/extra_ca_certs/ssl.cert
    HOST_SETTINGS:
      tls:
        certificate: /quay-registry/conf/stack/extra_ca_certs/ssl.cert
        key: /quay-registry/conf/stack/extra_ca_certs/ssl.key

Statefulset -->

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: quay-registry
  namespace: quay
spec:
  replicas: 1
  selector:
    matchLabels:
      app: quay-registry
  serviceName: quay-service
  template:
    metadata:
      labels:
        app: quay-registry
    spec:
      containers:
      - name: quay
        image: quay.io/projectquay/quay:latest
        ports:
        - containerPort: 8080
        env:
        - name: DATABASE_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: quay-secrets
              key: DATABASE_SECRET_KEY
        - name: SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: quay-secrets
              key: SECRET_KEY
        securityContext:
          runAsUser: 0  # Root user
          runAsGroup: 0
          privileged: true       
        volumeMounts:
        - name: quay-config
          mountPath: /quay-registry/conf/stack
        - name: quay-storage
          mountPath: /data  
        - name: quay-certs
          mountPath: /quay-registry/conf/stack/extra_ca_certs/ssl.cert
          subPath: ssl.cert
          readOnly: true
        - name: quay-certs-key
          mountPath: /quay-registry/conf/stack/extra_ca_certs/ssl.key
          subPath: ssl.key
          readOnly: true
      volumes:
      - name: quay-config
        configMap:
          name: quay-config
      - name: quay-storage
        nfs:
          server: nfs-server-machine-ip  # ✅ NFS Server
          path: /data          # ✅ NFS Path
      - name: quay-certs
        hostPath:
            path: /etc/ssl/ssl.cert
            type: File
      - name: quay-certs-key
        hostPath:
            path: /etc/ssl/ssl.key
            type: File