Automation Suite on Linux installation guide

Last updated Mar 26, 2026

How to install RKE2 SELinux on air-gapped environments

Use this guide to install the rke2-selinux package on air-gapped environments. This package is not included Automation Suite installation packages. In most cases, it is not required. However, if you experience SELinux-related issues on an air-gapped instance, follow the steps in this guide.

Before you begin, make sure you have:

A machine with internet access to download required packages.
An air-gapped machine where RKE2 is installed.
Access to the kubectl CLI.

Note:

If you do not have an air-gapped machine, you can request the required file from UiPath Support. Run the following command and share the output with Support: assignment

kubectl get nodes -o wide
kubectl get nodes -o wide

Take the following steps:

Check if rke2-selinuxis installed, as follows:
1. Log in to the Automation Suite machine.
2. Run the following command:
  rpm -qa | grep rke2-selinuxrpm -qa | grep rke2-selinux
- If the command returns no result, the package is not installed. Continue with this guide.
- If the package is installed but issues persist, contact UiPath Support with a support bundle.
Identify the version details, as follows:
1. Get the RKE2 version:
  kubectl get nodes -o widekubectl get nodes -o wide
  Extract the minor version from the output. For example, for version v1.30.5+rke2r1, the minor version is 30.
2. Get the Red Hat Enterprise Linux version:
  cat /etc/os-releasecat /etc/os-release
  Extract the major version from the VERSION_ID field. For example, VERSION_ID="8.5" means the major version is 8.

Configure the YUM repository (on a connected machine), as follows:

Note:

Update the following script with the correct RKE2_MINOR and LINUX_MAJOR values.

export RKE2_MINOR=33
export LINUX_MAJOR=8 # or 9

cat << EOF > /etc/yum.repos.d/rancher-rke2-1-${RKE2_MINOR}-latest.repo
[rancher-rke2-common-latest]
name=Rancher RKE2 Common Latest
baseurl=https://rpm.rancher.io/rke2/latest/common/centos/${LINUX_MAJOR}/noarch
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key

[rancher-rke2-1-${RKE2_MINOR}-latest]
name=Rancher RKE2 1.${RKE2_MINOR} Latest
baseurl=https://rpm.rancher.io/rke2/latest/1.${RKE2_MINOR}/centos/${LINUX_MAJOR}/x86_64
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key
EOF
export RKE2_MINOR=33
export LINUX_MAJOR=8 # or 9

cat << EOF > /etc/yum.repos.d/rancher-rke2-1-${RKE2_MINOR}-latest.repo
[rancher-rke2-common-latest]
name=Rancher RKE2 Common Latest
baseurl=https://rpm.rancher.io/rke2/latest/common/centos/${LINUX_MAJOR}/noarch
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key

[rancher-rke2-1-${RKE2_MINOR}-latest]
name=Rancher RKE2 1.${RKE2_MINOR} Latest
baseurl=https://rpm.rancher.io/rke2/latest/1.${RKE2_MINOR}/centos/${LINUX_MAJOR}/x86_64
enabled=1
gpgcheck=1
gpgkey=https://rpm.rancher.io/public.key
EOF

Download the RPM file. On the connected machine, run:
```
sudo yum download --downloadonly --downloaddir=./rke2-selinux-packages rke2-selinux
sudo yum download --downloadonly --downloaddir=./rke2-selinux-packages rke2-selinux
```
- Confirm that the download directory contains one .rpm file.
- Transfer this file to each air-gapped node using secure copy, USB, or other approved methods.

Install the package on each air-gapped node, as follows:

Note:

Perform the following steps one node at a time.

Stop the node:

Add the RKE2 binary path:

export PATH="$PATH:/usr/local/bin:/var/lib/rancher/rke2/bin"
export PATH="$PATH:/usr/local/bin:/var/lib/rancher/rke2/bin"

Drain and stop the node:

systemctl stop node-drain
rke2-killall.sh
systemctl stop node-drain
rke2-killall.sh

Install the package:

sudo rpm -ivh <rke2-selinux-package>.rpm
sudo rpm -ivh <rke2-selinux-package>.rpm

Restart the RKE2 services:

Start the RKE2 agent or server:

systemctl start rke2-server || systemctl start rke2-agent
systemctl start rke2-server || systemctl start rke2-agent

Uncordon the node and restart the drain service:

systemctl restart node-uncordon
systemctl start node-drain.service
systemctl restart node-uncordon
systemctl start node-drain.service

Repeat Step 5 for each remaining node in your cluster.

Was this page helpful?

PREVIOUSHow to collect DU usage data with in-cluster objectstore (Ceph)

NEXTHow to clean up old differential backups on an NFS server