Installing cloud native Netcool Operations Insight components in an air-gapped environment (offline) with cloudctl and a portable storage device

• To install Docker (for example, on Red Hat Enterprise Linux®), run the following commands:

  yum check-update
  yum install docker

  Note: Docker is not shipped or supported by Red Hat for Red Hat Enterprise Linux (RHEL) 8. The podman container engine replaced docker as the preferred, maintained, and supported container runtime of choice for Red Hat Enterprise Linux 8 systems. For more information, see Running containers without Docker in the Red Hat documentation.
• To install Podman, see Podman Installation Instructions in the Podman documentation.

yum install httpd-tools

IBM/cloud-pak-cli

1. Extract the binary file by entering the following command:

   tar -xf cloudctl-linux-amd64.tar.gz

2. Run the following command to modify the file:

   chmod 755 cloudctl-linux-amd64

3. Run the following command to move the file to the /usr/local/bin directory:

   mv cloudctl-linux-amd64 /usr/local/bin/cloudctl

   Note: You can confirm that cloudctl is installed by entering the cloudctl --help command.

mkdir $HOME/offline

export CASE_NAME=ibm-netcool-prod
export CASE_VERSION=1.7.0
export CASE_ARCHIVE=$CASE_NAME-$CASE_VERSION.tgz
export CASE_INVENTORY_SETUP=noiOperatorSetup
export OFFLINEDIR=$HOME/offline
export OFFLINEDIR_ARCHIVE=offline.tgz
export CASE_REPO_PATH=https://github.com/IBM/cloud-pak/raw/master/repo/case
export CASE_LOCAL_PATH=$OFFLINEDIR/$CASE_ARCHIVE
export PORTABLE_DOCKER_REGISTRY_HOST=localhost
export PORTABLE_DOCKER_REGISTRY_PORT=443
export PORTABLE_DOCKER_REGISTRY=$PORTABLE_DOCKER_REGISTRY_HOST:$PORTABLE_DOCKER_REGISTRY_PORT
export PORTABLE_DOCKER_REGISTRY_USER=localuser
export PORTABLE_DOCKER_REGISTRY_PASSWORD=l0calPassword!
export PORTABLE_DOCKER_REGISTRY_PATH=$OFFLINEDIR/imageregistry
export IBM_ENTITLEMENT_KEY=

cloudctl case save \
  --case $CASE_NAME \
  --version $CASE_VERSION \
  --outputdir $OFFLINEDIR \
  --repo https://github.com/IBM/cloud-pak/raw/master/repo/case

find $OFFLINEDIR -type f

cloudctl case launch \
  --case $CASE_LOCAL_PATH \
  --inventory $CASE_INVENTORY_SETUP \
  --action init-registry \
  --args "--registry $PORTABLE_DOCKER_REGISTRY_HOST --port $PORTABLE_DOCKER_REGISTRY_PORT --user $PORTABLE_DOCKER_REGISTRY_USER --pass $PORTABLE_DOCKER_REGISTRY_PASSWORD --dir $PORTABLE_DOCKER_REGISTRY_PATH"

cloudctl case launch \
  --case $CASE_LOCAL_PATH \
  --inventory $CASE_INVENTORY_SETUP \
  --action start-registry \
  --args "--registry $PORTABLE_DOCKER_REGISTRY_HOST --port $PORTABLE_DOCKER_REGISTRY_PORT --user $PORTABLE_DOCKER_REGISTRY_USER --pass $PORTABLE_DOCKER_REGISTRY_PASSWORD --dir $PORTABLE_DOCKER_REGISTRY_PATH"

cloudctl case launch \
    --case $CASE_LOCAL_PATH \
    --inventory noiOperatorSetup \
    --action configure-creds-airgap \
    --args "--registry cp.icr.io --user cp --pass $IBM_ENTITLEMENT_KEY"

cloudctl case launch \
    --case $CASE_LOCAL_PATH \
    --inventory noiOperatorSetup \
    --action configure-creds-airgap \
    --args "--registry $PORTABLE_DOCKER_REGISTRY --user $PORTABLE_DOCKER_REGISTRY_USER --pass $PORTABLE_DOCKER_REGISTRY_PASSWORD"

export CLOUDCTL_CASE_USE_CATALOG_DIGEST=1

cloudctl case launch \
    --case $CASE_LOCAL_PATH \
    --inventory noiOperatorSetup \
    --action mirror-images \
    --args "--registry $PORTABLE_DOCKER_REGISTRY --inputDir $OFFLINEDIR --chunks 14"

• For a Podman registry, run the following command to save the image:

  podman save -o $PORTABLE_DOCKER_REGISTRY_PATH/registry-image.tar docker.io/library/registry:<tag>

  Where <tag> is the registry tag, such as 2.8.1. To display the tag for a Podman registry, run the podman images command, as in the following example:

  podman images
  REPOSITORY                  TAG         IMAGE ID      CREATED      SIZE
  docker.io/library/registry >>> 2.8.1  <<<<     773dbf02e42e  3 weeks ago  24.6 MB

• For a Docker registry, run the following command to save the image:

  docker save -o $PORTABLE_DOCKER_REGISTRY_PATH/registry-image.tar docker.io/library/registry:<tag>

  Where <tag> is the registry tag, such as 2.8.1. To display the tag for a Docker registry, run the docker images command, as in the following example:

  docker images
  Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
  REPOSITORY                  TAG         IMAGE ID      CREATED      SIZE
  docker.io/library/registry >>> 2.8.1  <<<<       773dbf02e42e  3 weeks ago  24.6 MB

tar -cvzf $OFFLINEDIR_ARCHIVE -C $OFFLINEDIR .

export CASE_NAME=ibm-netcool-prod
export CASE_VERSION=1.7.0
export CASE_ARCHIVE=$CASE_NAME-$CASE_VERSION.tgz
export CASE_INVENTORY_SETUP=noiOperatorSetup
export OFFLINEDIR=$HOME/offline
export OFFLINEDIR_ARCHIVE=offline.tgz
export CASE_REPO_PATH=https://github.com/IBM/cloud-pak/raw/master/repo/case
export CASE_LOCAL_PATH=$OFFLINEDIR/$CASE_ARCHIVE
export PORTABLE_DOCKER_REGISTRY_HOST=localhost
export PORTABLE_DOCKER_REGISTRY_PORT=443
export PORTABLE_DOCKER_REGISTRY=$PORTABLE_DOCKER_REGISTRY_HOST:$PORTABLE_DOCKER_REGISTRY_PORT
export PORTABLE_DOCKER_REGISTRY_USER=localuser
export PORTABLE_DOCKER_REGISTRY_PASSWORD=l0calPassword!
export PORTABLE_DOCKER_REGISTRY_PATH=$OFFLINEDIR/imageregistry
export LOCAL_DOCKER_REGISTRY_HOST=<IP_or_FQDN_of_local_docker_registry>
export LOCAL_DOCKER_REGISTRY_PORT=<port_number_of_local_docker_registry>
export LOCAL_DOCKER_REGISTRY=$LOCAL_DOCKER_REGISTRY_HOST:$LOCAL_DOCKER_REGISTRY_PORT
export LOCAL_DOCKER_REGISTRY_USER=<username>
export LOCAL_DOCKER_REGISTRY_PASSWORD=<password>
export TARGET_NAMESPACE=<namespace-for-noi>

mkdir -p $OFFLINEDIR 
tar -xvf $OFFLINEDIR_ARCHIVE -C $OFFLINEDIR

cloudctl case launch \
  --case $CASE_LOCAL_PATH \
  --inventory $CASE_INVENTORY_SETUP \
  --action start-registry \
  --args "--registry $PORTABLE_DOCKER_REGISTRY_HOST --port $PORTABLE_DOCKER_REGISTRY_PORT --user $PORTABLE_DOCKER_REGISTRY_USER --pass $PORTABLE_DOCKER_REGISTRY_PASSWORD --dir $PORTABLE_DOCKER_REGISTRY_PATH"

cloudctl case launch \
  --case $CASE_LOCAL_PATH \
  --inventory $CASE_INVENTORY_SETUP \
  --action configure-creds-airgap \
  --args "--registry $PORTABLE_DOCKER_REGISTRY --user $PORTABLE_DOCKER_REGISTRY_USER --pass $PORTABLE_DOCKER_REGISTRY_PASSWORD"

cloudctl case launch \
  --case $CASE_LOCAL_PATH \
  --inventory $CASE_INVENTORY_SETUP \
  --action configure-creds-airgap \
  --args "--registry $LOCAL_DOCKER_REGISTRY --user $LOCAL_DOCKER_REGISTRY_USER --pass $LOCAL_DOCKER_REGISTRY_PASSWORD"

export CLOUDCTL_CASE_USE_CATALOG_DIGEST=1

cloudctl case launch \
  --case $CASE_LOCAL_PATH \
  --inventory $CASE_INVENTORY_SETUP \
  --action mirror-images \
  --args "--fromRegistry $PORTABLE_DOCKER_REGISTRY --registry $LOCAL_DOCKER_REGISTRY --inputDir $OFFLINEDIR --chunks 14"

cloudctl case launch \
    --case $CASE_LOCAL_PATH \
    --namespace $TARGET_NAMESPACE \
    --inventory $CASE_INVENTORY_SETUP \
    --action install-operator \
    --args "--secret target-registry-secret"

• $TARGET_NAMESPACE is the custom namespace to be used for your deployment.
• target-registry-secret is the secret for accessing the target registry that you created previously.