Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add missing steps for disabling TFTP and DNS #3509

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
+10 −4
Open

Add missing steps for disabling TFTP and DNS #3509

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cf5c517
Add missing steps for disabling TFTP and DNS
rh-max Dec 9, 2024
c024152
Implement feedback
rh-max Jan 20, 2025
49f1757
Remove sentence with duplicate info
rh-max Jan 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 18 additions & 2 deletions guides/common/modules/proc_disabling-dns-dhcp-tftp-for-unmanaged-networks.adoc
View file
Open in desktop
ekohl marked this conversation as resolved.
Show resolved Hide resolved
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,25 @@ However, {Project} does not remove the back-end services on the operating system
--foreman-proxy-tftp false
----

. In the {ProjectWebUI}, navigate to *Infrastructure* > *Subnets* and select a subnet.
. Stop and mask the TFTP and DNS services (FIXME Please confirm that DNS needs to be stopped and masked too):
+
[options="nowrap", subs="+quotes,attributes"]
----
# systemctl mask --now tftp.service tftp.socket systemd-resolved.service
rh-max marked this conversation as resolved.
Show resolved Hide resolved
----

. Optional: On RHEL7 hosts, disable the eXtended Internet Services Daemon (xinetd) and delete the `xinetd` package:
rh-max marked this conversation as resolved.
Show resolved Hide resolved
+
[options="nowrap", subs="+quotes,attributes"]
----
# systemctl mask --now xinetd && yum remove xinetd
----

. For every subnet where the Capsule is set as a TFTP proxy, disable the proxies:
rh-max marked this conversation as resolved.
Show resolved Hide resolved

.. In the {ProjectWebUI}, navigate to *Infrastructure* > *Subnets* and select a subnet.

. Click the *{SmartProxies}* tab and clear the *DHCP {SmartProxy}*, *TFTP {SmartProxy}*, and *Reverse DNS {SmartProxy}* fields.
.. Click the *{SmartProxies}* tab and clear the *DHCP {SmartProxy}*, *TFTP {SmartProxy}*, and *Reverse DNS {SmartProxy}* fields.

. In the {ProjectWebUI}, navigate to *Infrastructure* > *Domains* and select a domain.

Expand Down