docs: restructur/expand offline key chapter

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2022-09-08 12:09:15 +02:00
parent fc9b351a4d
commit dba885fbba
2 changed files with 43 additions and 8 deletions

View File

@ -5,6 +5,14 @@ When using ``proxmox-offline-mirror`` with a corresponding Proxmox Offline Mirro
it is possible to update subscription information for air-gapped systems, or those without access
to the public internet.
The offline mirror tool will take care of registering the subscription keys in the Proxmox shop,
which then responds with a signed data blob, if the key is valid. The signed response can then get
exported to a offline medium and used to set the subscription key in a Proxmox project, without any
need for an internet connection on the host itself.
Setup Offline Mirror Key
------------------------
First, add the `pom-<keyid>` mirror key using ``proxmox-offline-mirror key add-mirror-key <key>``.
This command will activate the subscription of the mirroring system.
@ -13,16 +21,41 @@ This command will activate the subscription of the mirroring system.
Proxmox Mail Gateway hosts got standard or premium subscriptions you may be elligible for free
offline mirroring subscription, in that case also write a mail to <sales@proxmox.com> for details.
Next, gather the server IDs of the systems that shall be set up for offline keys, and add them
together with the system's subscription key using ``proxmox-offline-mirror key add``. By default,
this command will fetch updated subscription information from Proxmox licensing servers.
Gather Server IDs
-----------------
You can refresh the subscription information for a single (``--key XX``) or all configured keys
using ``proxmox-offline-mirror key refresh``. The subscription information is transferred to a
medium (see below) and can then be activated on the offline system with either
``proxmox-apt-repo offline-key`` or ``proxmox-apt-repo setup``. This process must be repeated at least
once a year or before the nextduedate of the subscription key is reached, whichever comes first.
Next, gather the server IDs of the systems that shall be set up for offline keys. That information
is visible in the subscription panel of each host, or using the CLI like:
- ``pvesubscription get`` for Proxmox VE
- ``proxmox-backup-manager subscription get`` for Proxmox Backup server
- ``pmgsubscription get`` for Proxmox Mail Gateway
Register & Refresh Keys
-----------------------
.. note:: Configuring an active product subscription key (*as well as* a Proxmox Offline Mirror
subscription) is required for ``proxmox-offline-mirror`` to be able to access and mirror a
product's enterprise repository.
Register the hosts with the systems's server IDs and subscription keys using
``proxmox-offline-mirror key add``, for example:
.. code-block:: console
proxmox-offline-mirror key add pve2p-12345... ABCDEF0123...
By default, this command will fetch updated subscription information from Proxmox licensing servers.
You can refresh the subscription information for a single (``--key XX``) or all configured keys
using ``proxmox-offline-mirror key refresh``.
Deploy Keys
-----------
The subscription information is transferred to a medium (see :ref:`sync_medium`) and can then be
activated on the offline system with either ``proxmox-apt-repo offline-key`` or ``proxmox-apt-repo
setup``. This process must be repeated at least once a year or before the nextduedate of the
subscription key is reached, whichever comes first.

View File

@ -19,6 +19,8 @@ following command:
--verify true \
--mountpoint /path/where/medium/is/mounted
.. _sync_medium:
Syncing a Medium
----------------