Pulp

The scaling guide needs improvement to describe in more detail how to configure Pulp into a cluster for the purposes of scaling both httpd and pulp workers.

Deliverables:

0. Setup and test a Pulp clustered operation to know what is needed with a clustered installation
1. Document the requirements for an NFS clustered Pulp installation.
2. Revert/rewrite https://github.com/pulp/pulp/pull/1097/files since we and QE will have tested it
3. Make sure the docs work with SELinux (see below)
4. Add a release note about this change.

SELinux and NFS issues:

This documentation needs to describe a fix for running with SELinux

For Pulp to correctly operate, it expects the that /var/lib/pulp/* will have httpd_sys_rw_content_t file context. If you want to make /var/lib/pulp/ or some subdirectory of it hosted via NFS those files will receive the nfs_t label. This causes Pulp to not work correctly if you want to scale the /var/lib/pulp filesystem with NFS and be secure with SELinux in Enforcing.

The recommended way to fix this is by making NFS aware of the SELinux context to use when mounting /var/lib/pulp/ or a subsection of it using the context option on mount.

# mount -o context="system_u:object_r:httpd_sys_rw_content_t:s0" REMOTEHOST:/var/lib/pulp /var/lib/pulp