automation-suite
2023.10
false
UiPath logo, featuring letters U and I in white

Automation Suite on Linux installation guide

Last updated Aug 11, 2025

How to install RKE2 SELinux on air-gapped environments

Use this guide to install the rke2-selinux package on air-gapped environments. This package is not included Automation Suite installation packages. In most cases, it is not required. However, if you experience SELinux-related issues on an air-gapped instance, follow the steps in this guide.
Before you begin, make sure you have:
  • A machine with internet access to download required packages.
  • An air-gapped machine where RKE2 is installed.
  • Access to the kubectl CLI.
Note: If you do not have an air-gapped machine, you can request the required file from UiPath Support. Run the following command and share the output with Support:
kubectl get nodes -o widekubectl get nodes -o wide
Take the following steps:
  1. Check if rke2-selinuxis installed, as follows:
    1. Log in to the Automation Suite machine.
    2. Run the following command:
      rpm -qa | grep rke2-selinuxrpm -qa | grep rke2-selinux
    • If the command returns no result, the package is not installed. Continue with this guide.
    • If the package is installed but issues persist, contact UiPath Support with a support bundle.
  2. Identify the version details, as follows:
    1. Get the RKE2 version:
      kubectl get nodes -o widekubectl get nodes -o wide
      Extract the minor version from the output. For example, for version v1.30.5+rke2r1, the minor version is 30.
    2. Get the Red Hat Enterprise Linux version:
      cat /etc/os-releasecat /etc/os-release
      Extract the major version from the VERSION_ID field. For example, VERSION_ID="8.5" means the major version is 8.
  3. Configure the YUM repository (on a connected machine), as follows:
    Note: Update the following script with the correct RKE2_MINOR and LINUX_MAJOR values. 
    export RKE2_MINOR=XX
export LINUX_MAJOR=XX

cat << EOF > /etc/yum.repos.d/rancher-rke2-1-\${RKE2_MINOR}-latest.repo
[rancher-rke2-common-latest]
name=Rancher RKE2 Common Latest
baseurl=https://rpm.rancher.io/rke2/latest/common/centos/\${LINUX_MAJOR}/noarch
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key

[rancher-rke2-1-\${RKE2_MINOR}-latest]
name=Rancher RKE2 1.\${RKE2_MINOR} Latest
baseurl=https://rpm.rancher.io/rke2/latest/1.\${RKE2_MINOR}/centos/\${LINUX_MAJOR}/x86_64
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key
EOFexport RKE2_MINOR=XX
export LINUX_MAJOR=XX

cat << EOF > /etc/yum.repos.d/rancher-rke2-1-\${RKE2_MINOR}-latest.repo
[rancher-rke2-common-latest]
name=Rancher RKE2 Common Latest
baseurl=https://rpm.rancher.io/rke2/latest/common/centos/\${LINUX_MAJOR}/noarch
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key

[rancher-rke2-1-\${RKE2_MINOR}-latest]
name=Rancher RKE2 1.\${RKE2_MINOR} Latest
baseurl=https://rpm.rancher.io/rke2/latest/1.\${RKE2_MINOR}/centos/\${LINUX_MAJOR}/x86_64
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key
EOF
  4. Download the RPM file. On the connected machine, run:
    sudo yum install --downloadonly --downloaddir=./rke2-selinux-packages rke2-selinuxsudo yum install --downloadonly --downloaddir=./rke2-selinux-packages rke2-selinux
    • Confirm that the download directory contains one .rpm file.
    • Transfer this file to each air-gapped node using secure copy, USB, or other approved methods.
  5. Install the package on each air-gapped node, as follows:
    Note: Perform the following steps one node at a time.
    1. Stop the node:
      1. Add the RKE2 binary path:
        export PATH="$PATH:/usr/local/bin:/var/lib/rancher/rke2/bin"export PATH="$PATH:/usr/local/bin:/var/lib/rancher/rke2/bin"
      2. Drain and stop the node:
        systemctl stop node-drain
rke2-killall.shsystemctl stop node-drain
rke2-killall.sh
    2. Install the package:
      sudo rpm -ivh <rke2-selinux-package>.rpmsudo rpm -ivh <rke2-selinux-package>.rpm
    3. Restart the RKE2 services:
      1. Start the RKE2 agent or server:
        systemctl start rke2-server || systemctl start rke2-agentsystemctl start rke2-server || systemctl start rke2-agent
      2. Uncordon the node and restart the drain service:
        systemctl restart node-uncordon
systemctl start node-drain.servicesystemctl restart node-uncordon
systemctl start node-drain.service
  6. Repeat Step 5 for each remaining node in your cluster.
  • How to install RKE2 SELinux on air-gapped environments

Was this page helpful?

Support and Services
Get The Help You Need
UiPath Academy
Learning RPA - Automation Courses
UiPath Forum
UiPath Community Forum
Uipath Logo
Trust and Security
Terms of Use
Privacy Policy
Cookies Policy
© 2005-2025 UiPath. All rights reserved.