WIP: Inhibit upgrades with non-SCA registration

[matejmatuska]

In RHEL 10, only systems registered with an SCA organization are supported. This patch adds a check and subsequent inhibitor if that's not the case.

NOTE: when leapp is invoked with --no-rhsm, the check nor inhibitor are currently performed.

Jira: RHEL-68309

[github-actions]

Thank you for contributing to the Leapp project!

Please note that every PR needs to comply with the Leapp Guidelines and must pass all tests in order to be mergeable.
If you want to request a review or rebuild a package in copr, you can use following commands as a comment:

• review please @oamg/developers to notify leapp developers of the review request
• /packit copr-build to submit a public copr build using packit

Packit will automatically schedule regression tests for this PR's build and latest upstream leapp build.
However, here are additional useful commands for packit:

• /packit test to re-run manually the default tests
• /packit retest-failed to re-run failed tests manually
• /packit test oamg/leapp#42 to run tests with leapp builds for the leapp PR#42 (default is latest upstream - main - build)

Note that first time contributors cannot run tests automatically - they need to be started by a reviewer.

It is possible to schedule specific on-demand tests as well. Currently 2 test sets are supported, beaker-minimal and kernel-rt, both can be used to be run on all upgrade paths or just a couple of specific ones.
To launch on-demand tests with packit:

• /packit test --labels kernel-rt to schedule kernel-rt tests set for all upgrade paths
• /packit test --labels beaker-minimal-8.10to9.4,kernel-rt-8.10to9.4 to schedule kernel-rt and beaker-minimal test sets for 8.10->9.4 upgrade path

See other labels for particular jobs defined in the .packit.yaml file.

Please open ticket in case you experience technical problem with the CI. (RH internal only)

Note: In case there are problems with tests not being triggered automatically on new PR/commit or pending for a long time, please contact leapp-infra.

[ptoscano]

thanks!

[ptoscano]

Hmm maybe something like:

Leapp detected that the system is registered to an account based on entitlements, and not on Simple Content Access (SCA). Starting from RHEL 10, Red Hat Subscription Manager supports only SCA accounts, and not function with entitlement-based accounts.

[ptoscano]

url = https://access.redhat.com/articles/transition_of_subscription_services_to_the_hybrid_cloud_console
title = Transition of Red Hat's subscription services to the Red Hat Hybrid Cloud Console (console.redhat.com)
(shamelessly stolen from the URL)

[ptoscano]

how about:

The account on which this system is registered to must be set in SCA mode. Please note that switching the account mode applies to all the systems already registered to it, and to the systems that will be registered in the future. Please consult the linked documentation for more detailed explanations.

[matejmatuska]

Tested, on non-SCA RHEL 9 system:

============================================================
                      REPORT OVERVIEW
============================================================

Upgrade has been inhibited due to the following problems:
    1. The system is not registered to an SCA organization

HIGH and MEDIUM severity reports:
    1. Leapp detected loaded kernel drivers which are no longer maintained in RHEL 10.
    2. GRUB2 core will be automatically updated during the upgrade
    3. Upgrade is unsupported

Reports summary:
    Errors:                      0
    Inhibitors:                  1
    HIGH severity reports:       3
    MEDIUM severity reports:     0
    LOW severity reports:        2
    INFO severity reports:       3

Before continuing, review the full report below for details about discovered problems and possible remediation instructions:
    A report has been generated at /var/log/leapp/leapp-report.txt
    A report has been generated at /var/log/leapp/leapp-report.json

============================================================
                   END OF REPORT OVERVIEW
============================================================

Answerfile has been generated at /var/log/leapp/answerfile
[root@leapp-20250206211123 ~]# subscription-manager status
+-------------------------------------------+
   System Status Details
+-------------------------------------------+
Overall Status: Current

System Purpose Status: Not Specified

leapp-inspector output:

leapp-inspector actors --actor check_rhsm
[root@leapp-20250206211123 ~]# leapp-inspector --context 2ec3aab9-0f05-46b8-9b97-1b6f90def0d9  actors --actor check_rhsmsca
Actor: check_rhsmsca
Executed: True
Phase: Checks
Started: 2025-02-06T21:52:21.716437Z
Produced messages:
    - Report
Executed shell commands:
    ----
Logs:
--- {"level": "WARNING", "message": "2025-02-06 21:52:21.769 WARNING  PID: 112784 leapp.reporting: Stable Key report entry not provided, dynamically generating one - d95ef9748e1e7fb95e3ed3be7623750df212374f"}