Patching underlying OS of my foreman server

The OS of my foreman server needs occasional patching.

I found a couple of web pages that address this topic but are from 2019 and 2021.

Are the instructions valid?

The sites also refer to satellite instructions on how to do this, but these instructions do not appear to be in the foreman docs. do the Satellite instructions apply?

Expected outcome:
Able to patch the underlying OS without clobbering the actual forman/katello installation.

Blocking an update because of incompatibility with foreman/katello is acceptable.

Foreman and Proxy versions:

Foreman and Proxy plugin versions:
katello 4.11.1

Distribution and version:
redhat 8.9

Other relevant data:

You find this topic frequently in this forum, e.g. Self manage foreman/katello with itself? (smart proxy also)

  1. You update the OS just the same way you always do.

  2. If you are using the foreman server to supply patches to itself, you can install the updates, but you have to make sure that you have a working set of repositories when running foreman-installer afterwards, because foreman-installer may also check for some updates. This means, you would have to disable the subscription manager plugin and enable the base os and foreman/katello repos for that time.

  3. You have to run foreman-installer after many os updates to be on the safe side. For instance, after an update of httpd it’s mandatory to run foreman-installer.

1 Like