RHEL 8 systems with OSPP applied cannot install katello-ca-consumer package from Satellite

Environment

• Red Hat Satellite 6.5 through 6.10 , and Red Hat Satellite 6.11 deployed on RHEL 7.x
• Red Hat Enterprise Linux 8.x host, with OSPP security policy applied, and the host is being registered to Red Hat Satellite

Issue

When the OSPP security policy is applied to a RHEL 8 system during installation, that system will be unable to install the katello-ca-consumer package from a Satellite 6.x deployed on RHEL 7.x. This prevents the system from registering as a content host to Satellite 6.x.

Installation fails with the following error:

Retrieving http://satellite.domain.com/pub/katello-ca-consumer-latest.noarch.rpm
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
	package katello-ca-consumer-satellite.domain.com-1.0-1.noarch does not verify: no digest

Resolution

• This issue has been resolved in Red Hat Satellite 6.11 based on This content is not included.Bug 1713401 - RHEL 8 systems with OSPP applied cannot install katello-ca-consumer package from Satellite 6.5

• As a workaround (if the Red Hat Enterprise Linux 8 host is being registered to Red Hat Satellite 6.11 or below which is still deployed on Red Hat Enterprise Linux 7), you can install the consumer rpm using the following command:

  # rpm -Uvh --nodigest --nofiledigest http://satellite.domain.com/pub/katello-ca-consumer-latest.noarch.rpm
  

For more KB articles/solutions related to Red Hat Satellite 6.x Client Subscription Issues, please refer to the Red Hat Satellite Consolidated Troubleshooting Article for Red Hat Satellite 6.x Client Subscription Issues

Root Cause

• Red Hat Satellite 6.5 through 6.10 can only be installed on Red Hat Enterprise Linux 7 and so the consumer bootstrap rpm is built on that operating system. Red Hat Enterprise Linux 7 does not have the ability to build rpms using sha256 header checksums required by the OSPP security policy on Red Hat Enterprise Linux 8.

• Red Hat Satellite 6.11 can be installed on either Red Hat Enterprise Linux 7 or Red Hat Enterprise Linux 8. The issue does not occur when registering the host to Red Hat Satellite 6.11 deployed on Red Hat Enterprise Linux 8.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.