BigFix Patch: Content Modification: BigFix Patch now supports Red Hat Enterprise Linux 8 on x86_64

BigFix Patch is pleased to announce support for Red Hat Enterprise Linux 8 on x86_64.

The new site called ‘Patches for RHEL 8’ uses dnf, which is RHEL 8’s default package manager, and contains content from the following channels for RHEL 8 systems:
Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
Red Hat Enterprise Linux 8 for x86_64 - Supplementary (RPMs)

Actions to Take
RHEL 8 requires BigFix Client version 9.5 Patch 14 (9.5.14.73).

Subscribe to the Patches for RHEL 8 site from the License Overview Dashboard. If the site is not showing in the License Overview dashboard, update your license from the dashboard by clicking ‘Check for license update’, then run the BigFix Administration Tool.

You will also need to upgrade the RHSM download plug-in to version 1.0.3.0. Upgrade the RHSM download plug-in from the Manage Download Plug-ins dashboard, available from the ‘Patching Support’ site.

Users of the RHSM download cacher will need to update to version 1.0.3.0:
Windows - http://software.bigfix.com/download/bes/util/RHSMDownloadCacher.exe
Linux - http://software.bigfix.com/download/bes/util/RHSMDownloadCacher-linux.tar.gz

Published Sites
Patches for RHEL 8, site version 2
Patching Support, site version 882

Documentation Resources
For more information about BigFix Patch for RHEL, see: https://help.hcltechsw.com/bigfix/9.5/patch/Patch/Patch_RH/c_introduction.html

Application Engineering Team
BigFix

4 Likes

Forgive me if this is a stupid question.

I am trying to install a RHEL 8 patch from the newly enabled “Patches for RHEL 8” site. Whenever I try, I get the following messages in my EDR_DeploymentResults.txt output file. The line in bold below is showing up. What am I doing wrong?

2487 : 2019-11-18 15:00:11 : INFO : Start Task ID: 1202793
2487 : 2019-11-18 15:00:11 : INFO : RHEL-Patch-Client at version 3.0.0.0
2487 : 2019-11-18 15:00:11 : INFO : 01 setup and request repomd.xml
2487 : 2019-11-18 15:00:11 : INFO : dnf cache lock is not expired yet. Skip repomd.xml file requests.
2487 : 2019-11-18 15:00:11 : INFO : dnf cache lock is not expired yet. Skip repomd.xml file requests.
2487 : 2019-11-18 15:00:11 : INFO : dnf cache lock is not expired yet. Skip repomd.xml file requests.
2489 : 2019-11-18 15:00:11 : INFO : 03 lock repo data
2491 : 2019-11-18 15:00:11 : INFO : 04 dependency resolution and request packages
2491 : 2019-11-18 15:00:11 : INFO : Download Plugin mode.
2491 : 2019-11-18 15:00:11 : INFO : Run cmd: env: {} cmd: dnf --verbose --cacheonly -c /var/opt/BESClient/EDRDeployData//EDR_Dnfconfig_1202793 bf_dependency_resolution --assumeyes crypto-policies-20190807-1.git9b1477b.el8.noarch
2491 : 2019-11-18 15:00:11 : INFO : Set timout: 1485 seconds
2491 : 2019-11-18 15:00:12 : ERROR : Dependency resolution failed.
2491 : 2019-11-18 15:00:12 : ERROR : Exit Code: 1
Loaded plugins: bf_dependency_resolution
DNF version: 4.0.9
cachedir: /var/opt/BESClient/rhsmdnf/cache

Error: Cache-only enabled but no cache for ‘RedHatEnterpriseLinux8forx8664AppStreamRPMs’

2495 : 2019-11-18 15:00:12 : ERROR : dnf command not continue, last command exit code is not 0

I still can’t see “Patches for RHEL 8”, I did ‘Check for license update’ and run the BigFix Administration Tool already.

My server is version 9.5.7, not supported?

May I know is there DISA/CIS checklist for RHEL 8?

Thanks!

This can happen if you did not update the RHSM download plugin to the latest version (1.0.3.0) prior to trying to patch RHEL 8. Assuming this is your situation, try these are the steps to remediate:

  1. Stop the RHEL 8 action (optional but will less likely introduce new errors later).
  2. Update the RHSM download plugin to 1.0.3.0.
  3. In the BES Server, navigate to the [BES Server Folder]\DownloadPlugins\RHSMProtocol folder and delete both temp and cache folders if they exist.
  4. In the Patches for RHEL 8 site, run Fixlet 300 TROUBLESHOOTING: RHEL 8 Patching Deployment Logs - Cleanup against the RHEL 8 endpoint.
  5. Try deploying the Patches for RHEL 8 Fixlet again.
1 Like

If you have patch entitlement, then the Patches for RHEL 8 site should appear. DISA/CIS is a different site which has different entitlements than patch.

Thanks for your response.

It took your step #3 to fix the problem. I had already upgraded the plugin… but didn’t wipe out the caches.

This topic was automatically closed after 30 days. New replies are no longer allowed.