foreman_maintain 0.5.6 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA256:
-  metadata.gz: d771ecfd4783e176608d1a0263299997e9dcf3f60c141b20be197d61a726085c
-  data.tar.gz: b90a67972a8b670b25ab8eab34aac663239244f170e2bd31a7a617e576cd41c0
+SHA1:
+  metadata.gz: 9cf2de71b1fd3ab00b7305e517b1529428af64ef
+  data.tar.gz: 5fe408d0a49b4e196c27d81cf9e732fd994358a2
 SHA512:
-  metadata.gz: 0b215ba50227dab2f5d95db8046d078212ccf7cb5fe6dc450a77488472c293bad4b70b3384b477b095cde78d4428e1033af8fd3f2f13d42588e5867834e58903
-  data.tar.gz: ffea4e522836f6e28a32f2c6ad33a1ca0c3449561eed1104d11c5308e79dd695706cdc2cf41ea34d80201bbf591fca65a73d5b83aa32abfe8366b932c90eaef3
+  metadata.gz: 2588c117972fcc18c28fd503b945a9f00313906df3ac225af45ccb0a973e406d31bddd191d84937e3778718fae7e9a45cb7c2b57c812815a65f8922d29b0519b
+  data.tar.gz: 8973ea5b1105d668c3e493cb49e68c95e01bccb298f6fa7c2fa702dd629b781d460aca39a72a8a20d5e6e68e8c92adb6dd3e2678e960f1d976d9d23fcfd6708c

data/definitions/checks/disk/performance.rb

@@ -8,7 +8,7 @@ module Checks
         preparation_steps { Procedures::Packages::Install.new(:packages => %w[fio]) }
 
         confine do
-          feature(:pulp)
+          feature(:instance).pulp
         end
       end
 

data/definitions/features/dynflow_sidekiq.rb

@@ -0,0 +1,39 @@
+class Features::DynflowSidekiq < ForemanMaintain::Feature
+  metadata do
+    label :dynflow_sidekiq
+
+    confine do
+      server? && find_package('foreman-dynflow-sidekiq')
+    end
+  end
+
+  def services
+    service_names.map { |service| system_service service, instance_priority(service) }
+  end
+
+  def config_files
+    # Workaround until foreman-installer can deploy scaled workers
+    service_symlinks = configured_services.map do |service|
+      "/etc/systemd/system/multi-user.target.wants/#{service}.service"
+    end
+    [
+      '/etc/foreman/dynflow',
+      service_symlinks
+    ].flatten
+  end
+
+  private
+
+  def instance_priority(instance)
+    # Orchestrator should be started before the workers are
+    instance.end_with?('@orchestrator') ? 30 : 31
+  end
+
+  def service_names
+    configured_instances.map { |instance| "dynflow-sidekiq@#{instance}" }
+  end
+
+  def configured_instances
+    Dir['/etc/foreman/dynflow/*'].map { |config| File.basename(config, '.yml') }
+  end
+end

data/definitions/features/foreman_proxy.rb

@@ -17,7 +17,7 @@ class Features::ForemanProxy < ForemanMaintain::Feature
   end
 
   def with_content?
-    !!feature(:pulp)
+    !!feature(:instance).pulp
   end
 
   def dhcpd_conf_exist?
@@ -79,17 +79,26 @@ class Features::ForemanProxy < ForemanMaintain::Feature
 
   def content_module
     return @content_module if @content_module_detected
+
     @content_module_detected = true
     answer = feature(:installer).answers.find do |_, config|
-      config.is_a?(Hash) && config.key?('certs_tar')
+      config.is_a?(Hash) && config.key?(certs_param_name[:param_key])
     end
-    @content_module = answer.nil? ? 'foreman_proxy_content' : answer.first
+    @content_module = answer.nil? ? certs_param_name[:param_section] : answer.first
     logger.debug("foreman proxy content module detected: #{@content_module}")
     @content_module
   end
 
+  def certs_param_name
+    if check_min_version('foreman', '1.21')
+      return { :param_section => 'certs', :param_key => 'tar_file' }
+    end
+
+    { :param_section => 'foreman_proxy_content', :param_key => 'certs_tar' }
+  end
+
   def certs_tar
-    feature(:installer).answers[content_module]['certs_tar'] if content_module
+    feature(:installer).answers[content_module][certs_param_name[:param_section]] if content_module
   end
 
   def settings_file
@@ -136,6 +145,7 @@ class Features::ForemanProxy < ForemanMaintain::Feature
       http_line = ''
       array_output.each do |str|
         next unless str.include?('HTTP')
+
         http_line = str
       end
       msg = http_line.split(curl_http_status.to_s).last
@@ -195,6 +205,7 @@ class Features::ForemanProxy < ForemanMaintain::Feature
   def lookup_dhcpd_config_file
     dhcpd_config_file = lookup_using_dhcp_yml
     raise "Couldn't find DHCP Configuration file" if dhcpd_config_file.nil?
+
     dhcpd_config_file
   end
 

data/definitions/features/foreman_tasks.rb

@@ -108,7 +108,7 @@ class Features::ForemanTasks < ForemanMaintain::Feature
   end
 
   def services
-    [system_service(service_name, 30)]
+    feature(:dynflow_sidekiq) ? [] : [system_service(service_name, 30)]
   end
 
   def service_name
@@ -162,13 +162,8 @@ class Features::ForemanTasks < ForemanMaintain::Feature
   def export_csv(sql, file_name, state)
     dir = prepare_for_backup(state)
     filepath = "#{dir}/#{file_name}"
-    csv_output = feature(:foreman_database).query_csv(sql)
-    File.open(filepath, 'w') do |f|
-      f.write(csv_output)
-      f.close
-    end
-    execute("bzip2 #{filepath} -c -9 > #{filepath}.bz2")
-    FileUtils.rm_rf(filepath)
+    execute("echo \"COPY (#{sql}) TO STDOUT WITH CSV;\" \
+      | su - postgres -c '/usr/bin/psql -d foreman' | bzip2 -9 > #{filepath}.bz2")
   end
 
   def old_tasks_condition(state = "'stopped', 'paused'")

data/definitions/features/instance.rb

@@ -64,6 +64,10 @@ class Features::Instance < ForemanMaintain::Feature
     net
   end
 
+  def pulp
+    feature(:pulp2) || feature(:pulp3)
+  end
+
   private
 
   # rubocop:disable Metrics/MethodLength, Metrics/AbcSize
@@ -137,8 +141,8 @@ class Features::Instance < ForemanMaintain::Feature
     {
       'candlepin_auth' => %w[candlepin candlepin_database],
       'candlepin' => %w[candlepin candlepin_database],
-      'pulp_auth' => %w[pulp mongo],
-      'pulp' => %w[pulp mongo],
+      'pulp_auth' => %w[pulp2 mongo],
+      'pulp' => %w[pulp2 mongo],
       'foreman_tasks' => %w[foreman_tasks]
     }
   end

data/definitions/features/katello.rb

@@ -52,13 +52,6 @@ class Features::Katello < ForemanMaintain::Feature
   end
   # rubocop:enable  Metrics/MethodLength
 
-  def config_files_exclude_for_online
-    [
-      '/var/lib/qpidd',
-      '/var/lib/candlepin/activemq-artemis'
-    ]
-  end
-
   private
 
   def installer_scenario_answers

data/definitions/features/mongo.rb

@@ -9,7 +9,7 @@ class Features::Mongo < ForemanMaintain::Feature
     label :mongo
 
     confine do
-      feature(:pulp)
+      feature(:pulp2)
     end
   end
 

data/definitions/features/{pulp.rb → pulp2.rb}

@@ -2,7 +2,7 @@ class Features::Pulp < ForemanMaintain::Feature
   include ForemanMaintain::Concerns::DirectoryMarker
 
   metadata do
-    label :pulp
+    label :pulp2
 
     confine do
       find_package('pulp-server')

data/definitions/features/pulp3.rb

@@ -0,0 +1,22 @@
+require 'foreman_maintain/utils/service/systemd'
+
+class Features::Pulp3 < ForemanMaintain::Feature
+  metadata do
+    label :pulp3
+
+    confine do
+      ForemanMaintain::Utils::Service::Systemd.new('pulpcore-api', 0).exist?
+    end
+  end
+
+  def services
+    [
+      system_service('pulpcore-api', 10),
+      system_service('pulpcore-content', 10),
+      system_service('pulpcore-resource-manager', 10),
+      system_service('pulpcore-worker@*', 20, :all => true, :skip_enablement => true),
+      system_service('rh-redis5-redis', 30),
+      system_service('httpd', 30)
+    ]
+  end
+end

data/definitions/features/puppet_server.rb

@@ -29,7 +29,7 @@ class Features::PuppetServer < ForemanMaintain::Feature
   end
 
   def puppet_version
-    version(execute!("#{puppet_path} --version"))
+    version(execute!('puppet --version'))
   end
 
   def find_empty_cacert_request_files
@@ -56,10 +56,6 @@ class Features::PuppetServer < ForemanMaintain::Feature
   end
 
   def puppet_ssldir_path
-    execute!("#{puppet_path} config print ssldir")
-  end
-
-  def puppet_path
-    '/opt/puppetlabs/bin/puppet'
+    execute!('puppet master --configprint ssldir')
   end
 end

data/definitions/features/redis.rb

@@ -0,0 +1,34 @@
+class Features::Redis < ForemanMaintain::Feature
+  metadata do
+    label :redis
+
+    confine do
+      # Luckily, the service name is the same as the package providing it
+      server? && find_package(service_name)
+    end
+  end
+
+  def services
+    [system_service(self.class.service_name, 10)]
+  end
+
+  def config_files
+    %w[redis redis.conf].map { |config| File.join(self.class.etc_prefix, config) }
+  end
+
+  class << self
+    SCL_NAME = 'rh-redis5'.freeze
+
+    def etc_prefix
+      "/etc/opt/rh/#{SCL_NAME}"
+    end
+
+    def scl_prefix
+      "#{SCL_NAME}-"
+    end
+
+    def service_name
+      "#{scl_prefix}redis"
+    end
+  end
+end

data/definitions/features/tar.rb

@@ -20,11 +20,24 @@ class Features::Tar < ForemanMaintain::Feature
   # @option options [Boolean] :gzip filter the archive through gzip
   # @option options [Boolean] :ignore_failed_read do not fail on missing files
   # @option options [Boolean] :allow_changing_files do not fail on changing files
+  def run(options = {})
+    logger.debug("Invoking tar from #{options[:directory] || FileUtils.pwd}")
+    statuses = options[:allow_changing_files] ? [0, 1] : [0]
+    execute!(tar_command(options), :valid_exit_statuses => statuses)
+  end
+
+  def validate_volume_size(size)
+    if size.nil? || size !~ /^\d+[bBcGKkMPTw]?$/
+      raise ForemanMaintain::Error::Validation,
+            "Please specify size according to 'tar --tape-length' format."
+    end
+    true
+  end
+
   # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
   # rubocop:disable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
-  def run(options = {})
+  def tar_command(options)
     volume_size = options.fetch(:volume_size, nil)
-    absolute_names = options.fetch(:absolute_names, nil)
     validate_volume_size(volume_size) unless volume_size.nil?
 
     tar_command = ['tar']
@@ -32,10 +45,6 @@ class Features::Tar < ForemanMaintain::Feature
     tar_command << "--#{options.fetch(:command, 'create')}"
     tar_command << "--file=#{options.fetch(:archive)}"
 
-    if absolute_names
-      tar_command << '--absolute-names'
-    end
-
     if volume_size
       split_tar_script = default_split_tar_script
       tar_command << "--tape-length=#{volume_size}"
@@ -66,29 +75,20 @@ class Features::Tar < ForemanMaintain::Feature
       tar_command << options.fetch(:files, '*')
     end
 
-    logger.debug("Invoking tar from #{options[:directory] || FileUtils.pwd}")
-    statuses = options[:allow_changing_files] ? [0, 1] : [0]
-    execute!(tar_command.join(' '), :valid_exit_statuses => statuses)
+    tar_command.join(' ')
   end
   # rubocop:enable Metrics/AbcSize, Metrics/MethodLength
   # rubocop:enable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
 
-  def validate_volume_size(size)
-    if size.nil? || size !~ /^\d+[bBcGKkMPTw]?$/
-      raise ForemanMaintain::Error::Validation,
-            "Please specify size according to 'tar --tape-length' format."
-    end
-    true
-  end
-
   private
 
   def default_split_tar_script
-    utils_path = File.expand_path('../../../bin', __FILE__)
+    utils_path = File.expand_path('../../bin', __dir__)
     split_tar_script = File.join(utils_path, 'foreman-maintain-rotate-tar')
     unless File.executable?(split_tar_script)
       raise ForemanMaintain::Error::Fail, "Script #{split_tar_script} is not executable"
     end
+
     split_tar_script
   end
 end

data/definitions/procedures/backup/config_files.rb

@@ -1,5 +1,8 @@
 module Procedures::Backup
   class ConfigFiles < ForemanMaintain::Procedure
+    MAX_RETRIES = 3
+    RETRY_DELAY = 10
+
     metadata do
       description 'Backup config files'
       tags :backup
@@ -8,28 +11,39 @@ module Procedures::Backup
           Checks::Backup::CertsTarExist.new
         end
       end
+
       param :backup_dir, 'Directory where to backup to', :required => true
       param :proxy_features, 'List of proxy features to backup (default: all)',
             :array => true, :default => ['all']
       param :ignore_changed_files, 'Should packing tar ignore changed files',
             :flag => true, :default => false
-      param :online_backup, 'The config files are being prepared for an online backup',
-            :flag => true, :default => false
     end
 
+    # rubocop:disable Metrics/MethodLength
     def run
-      tarball = File.join(@backup_dir, 'config_files.tar.gz')
-      increments = File.join(@backup_dir, '.config.snar')
-      with_spinner('Collecting config files to backup') do
-        configs, to_exclude = config_files
-        feature(:tar).run(
-          :command => 'create', :gzip => true, :archive => tarball,
-          :listed_incremental => increments, :ignore_failed_read => true,
-          :exclude => to_exclude, :allow_changing_files => @ignore_changed_files,
-          :files => configs.join(' ')
-        )
+      logger.debug("Invoking tar from #{FileUtils.pwd}")
+      tar_cmd = tar_command
+      attempt_no = 1
+      loop do
+        runner = nil
+        with_spinner('Collecting config files to backup') do
+          runner = execute_runner(tar_cmd, :valid_exit_statuses => [0, 1])
+        end
+        break if runner.exit_status == 0 || @ignore_changed_files
+
+        puts "WARNING: Attempt #{attempt_no}/#{MAX_RETRIES} to collect all config files failed!"
+        puts 'Some files were modified during creation of the archive.'
+        if attempt_no == MAX_RETRIES
+          raise runner.execution_error
+        else
+          attempt_no += 1
+          FileUtils.rm_rf(tarball_path)
+          puts "Waiting #{RETRY_DELAY} seconds before re-try"
+          sleep(RETRY_DELAY)
+        end
       end
     end
+    # rubocop:enable Metrics/MethodLength
 
     # rubocop:disable Metrics/AbcSize
     def config_files
@@ -41,7 +55,6 @@ module Procedures::Backup
 
         configs += feature.config_files
         exclude_configs += feature.config_files_to_exclude
-        exclude_configs += feature.config_files_exclude_for_online if @online_backup
       end
 
       if feature(:foreman_proxy)
@@ -54,5 +67,22 @@ module Procedures::Backup
       [configs, exclude_configs]
     end
     # rubocop:enable Metrics/AbcSize
+
+    private
+
+    def tar_command
+      increments_path = File.join(@backup_dir, '.config.snar')
+      configs, to_exclude = config_files
+
+      feature(:tar).tar_command(
+        :command => 'create', :gzip => true, :archive => tarball_path,
+        :listed_incremental => increments_path, :ignore_failed_read => true,
+        :exclude => to_exclude, :files => configs.join(' ')
+      )
+    end
+
+    def tarball_path
+      @tarball_path ||= File.join(@backup_dir, 'config_files.tar.gz')
+    end
   end
 end

data/definitions/procedures/backup/prepare_directory.rb

@@ -8,7 +8,6 @@ module Procedures::Backup
       param :incremental_dir, 'Changes since specified backup only'
     end
 
-    # rubocop:disable Metrics/MethodLength
     def run
       puts "Creating backup folder #{@backup_dir}"
 
@@ -23,14 +22,8 @@ module Procedures::Backup
 
       FileUtils.rm(Dir.glob(File.join(@backup_dir, '.*.snar'))) if @preserve_dir
       if @incremental_dir
-        if (snar_files = Dir.glob(File.join(@incremental_dir, '.*.snar'))).empty?
-          raise "#{@incremental_dir}/*.snar files unavailable. "\
-                'Provide a valid previous backup directory'
-        else
-          FileUtils.cp(snar_files, @backup_dir)
-        end
+        FileUtils.cp(Dir.glob(File.join(@incremental_dir, '.*.snar')), @backup_dir)
       end
     end
-    # rubocop:enable Metrics/MethodLength
   end
 end

data/definitions/procedures/backup/pulp.rb

@@ -3,7 +3,7 @@ module Procedures::Backup
     metadata do
       description 'Backup Pulp data'
       tags :backup
-      for_feature :pulp
+      for_feature :pulp2
       param :backup_dir, 'Directory where to backup to', :required => true
       param :tar_volume_size, 'Size of tar volume (indicates splitting)'
       param :ensure_unchanged, 'Ensure the data did not change during backup'
@@ -39,9 +39,9 @@ module Procedures::Backup
     end
 
     def pulp_dir
-      return feature(:pulp).data_dir if @mount_dir.nil?
+      return feature(:pulp2).data_dir if @mount_dir.nil?
       mount_point = File.join(@mount_dir, 'pulp')
-      dir = feature(:pulp).find_marked_directory(mount_point)
+      dir = feature(:pulp2).find_marked_directory(mount_point)
       unless dir
         raise ForemanMaintain::Error::Fail,
               "Pulp base directory not found in the mount point (#{mount_point})"

data/definitions/procedures/backup/snapshot/logical_volume_confirmation.rb

@@ -12,7 +12,7 @@ module Procedures::Backup
         backup_lv = get_lv_info(@backup_dir)
 
         dbs = {}
-        dbs[:pulp] = 'Pulp' if feature(:pulp) && !@skip_pulp
+        dbs[:pulp] = 'Pulp' if feature(:pulp2) && !@skip_pulp
         dbs[:mongo] = 'Mongo' if db_local?(:mongo)
         dbs[:candlepin_database] = 'Candlepin' if db_local?(:candlepin_database)
         dbs[:foreman_database] = 'Foreman' if db_local?(:foreman_database)

data/definitions/procedures/backup/snapshot/mount_pulp.rb

@@ -5,7 +5,7 @@ module Procedures::Backup
       metadata do
         description 'Create and mount snapshot of Pulp data'
         tags :backup
-        for_feature :pulp
+        for_feature :pulp2
         MountBase.common_params(self)
         param :skip, 'Skip Pulp content during backup'
       end
@@ -13,8 +13,8 @@ module Procedures::Backup
       def run
         skip if @skip
         with_spinner('Creating snapshot of Pulp') do |spinner|
-          feature(:pulp).with_marked_directory(feature(:pulp).data_dir) do
-            lv_info = get_lv_info(feature(:pulp).data_dir)
+          feature(:pulp2).with_marked_directory(feature(:pulp2).data_dir) do
+            lv_info = get_lv_info(feature(:pulp2).data_dir)
             create_lv_snapshot('pulp-snap', @block_size, lv_info[0])
             spinner.update("Mounting snapshot of Pulp on #{mount_location('pulp')}")
             mount_snapshot('pulp', lv_info[1])

data/definitions/procedures/content/prepare.rb

@@ -0,0 +1,12 @@
+module Procedures::Content
+  class Prepare < ForemanMaintain::Procedure
+    metadata do
+      description 'Prepare content for Pulp 3'
+      for_feature :pulp3
+    end
+
+    def run
+      execute!('foreman-rake katello:pulp3_migration')
+    end
+  end
+end

data/definitions/procedures/packages/installer_confirmation.rb

@@ -5,7 +5,7 @@ module Procedures::Packages
     end
 
     def run
-      question = "\nWARNING: This script runs #{feature(:installer).installer_command} " \
+      question = "WARNING: This script runs #{feature(:installer).installer_command} " \
         "after the yum execution \n" \
         "to ensure the #{feature(:instance).product_name} " \
         "is in a consistent state.\n" \

data/definitions/procedures/pulp/migrate.rb

@@ -4,7 +4,7 @@ module Procedures::Pulp
 
     metadata do
       description 'Migrate pulp db'
-      for_feature :pulp
+      for_feature :pulp2
     end
 
     def run

data/definitions/procedures/restore/configs.rb

@@ -14,6 +14,7 @@ module Procedures::Restore
         spinner.update('Restoring configs')
         clean_conflicting_data
         restore_configs(backup)
+        reset_qpid_jrnls
         reload_configs
       end
     end
@@ -45,5 +46,11 @@ module Procedures::Restore
       # tar is unable to --overwrite dir with symlink
       execute('rm -rf /usr/share/foreman-proxy/.ssh')
     end
+
+    def reset_qpid_jrnls
+      # on restore without pulp data qpid fails to start
+      # https://access.redhat.com/solutions/4645231
+      execute('rm -rf /var/lib/qpidd/.qpidd/qls/dat2/__db.00*')
+    end
   end
 end

data/definitions/procedures/restore/extract_files.rb

@@ -29,7 +29,6 @@ module Procedures::Restore
     def base_tar
       {
         :overwrite => true,
-        :absolute_names => true,
         :listed_incremental => '/dev/null',
         :command => 'extract',
         :directory => '/'

data/definitions/procedures/restore/mongo_dump.rb

@@ -2,7 +2,7 @@ module Procedures::Restore
   class MongoDump < ForemanMaintain::Procedure
     metadata do
       description 'Restore mongo dump'
-      for_feature :pulp
+      for_feature :pulp2
       param :backup_dir,
             'Path to backup directory',
             :required => true
@@ -10,7 +10,7 @@ module Procedures::Restore
         [Checks::Mongo::DBUp.new, Checks::Mongo::ToolsInstalled.new]
       end
       confine do
-        feature(:mongo) && feature(:pulp)
+        feature(:mongo) && feature(:pulp2)
       end
     end
 

data/definitions/procedures/service/base.rb

@@ -15,7 +15,7 @@ module Procedures
 
       def run_service_action(action, options)
         action_noun = feature(:service).action_noun(action).capitalize
-        puts "#{action_noun} the following service(s):\n"
+        puts "\n#{action_noun} the following service(s):"
         services = feature(:service).filtered_services(options)
         print_services(services)
 

data/definitions/scenarios/backup.rb

@@ -186,8 +186,7 @@ module ForemanMaintain::Scenarios
     # rubocop:enable  Metrics/MethodLength
 
     def add_online_backup_steps
-      add_step_with_context(Procedures::Backup::ConfigFiles, :ignore_changed_files => true,
-                                                             :online_backup => true)
+      add_step_with_context(Procedures::Backup::ConfigFiles, :ignore_changed_files => true)
       add_step_with_context(Procedures::Backup::Pulp, :ensure_unchanged => true)
       add_steps_with_context(
         Procedures::Backup::Online::Mongo,

data/definitions/scenarios/packages.rb

@@ -71,11 +71,8 @@ module ForemanMaintain::Scenarios
       end
 
       def compose
-        add_steps_with_context(
-          Procedures::Packages::UpdateAllConfirmation,
-          Procedures::Packages::InstallerConfirmation,
-          Procedures::Packages::UnlockVersions
-        )
+        add_step_with_context(Procedures::Packages::InstallerConfirmation)
+        add_step_with_context(Procedures::Packages::UnlockVersions)
         add_step_with_context(Procedures::Packages::Update, :force => true, :warn_on_errors => true)
         add_step_with_context(Procedures::Installer::Run,
                               :arguments => '--upgrade --disable-system-checks')
@@ -84,8 +81,7 @@ module ForemanMaintain::Scenarios
 
       def set_context_mapping
         context.map(:packages,
-                    Procedures::Packages::Update => :packages,
-                    Procedures::Packages::UpdateAllConfirmation => :packages)
+                    Procedures::Packages::Update => :packages)
         context.map(:assumeyes,
                     Procedures::Packages::Update => :assumeyes)
       end

data/extras/foreman_protector/foreman-protector.py

@@ -77,7 +77,7 @@ def exclude_hook(conduit):
         else:
             suffix = ''
         conduit.info(1, '\n'
-                        'WARNING: Excluding %d package%s due to foreman-protector. \n'
+                        'WARNING: Excluding %d update%s due to foreman-protector. \n'
                         'Use foreman-maintain packages install/update <package> \n'
                         'to safely install packages without restrictions.\n'
                         'Use foreman-maintain upgrade run for full upgrade.\n'