From 21a0c1fbe0ac35d62436ee1820944c7c40aa5fbf Mon Sep 17 00:00:00 2001 From: Karl Eichwalder Date: Wed, 13 Nov 2024 15:13:25 +0100 Subject: [PATCH] Cobbler option to enable boot ISOs with Secure Boot https://github.com/SUSE/spacewalk/issues/25768 --- CHANGELOG.md | 2 ++ .../pages/autoinst-cdrom.adoc | 29 ++++++++++++------- 2 files changed, 21 insertions(+), 10 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f8781319e57..cb94ef5f918 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,5 @@ +- Documented Cobbler option to enable boot ISOs with Secure Boot in + Client Configuration Guide - Added admonition about disabling data synchronization with SCC in Administration Guide - Added note about SLE Micro entitlement being included in SUSE diff --git a/modules/client-configuration/pages/autoinst-cdrom.adoc b/modules/client-configuration/pages/autoinst-cdrom.adoc index 95df3345403..d768027cd21 100644 --- a/modules/client-configuration/pages/autoinst-cdrom.adoc +++ b/modules/client-configuration/pages/autoinst-cdrom.adoc @@ -28,32 +28,41 @@ For information about creating a profile, see xref:client-configuration:autoinst The {cobbler} [command]``buildiso`` command takes parameters to define the name and output location of the boot ISO. Specifying the distribution with [option]``--distro`` is mandatory when running [command]``buildiso`` command. +[option]``--iso`` is the output location: ---- cobbler buildiso --iso=/path/to/boot.iso --distro= ---- -[IMPORTANT] -==== -You must use distro and profile labels as listed by {cobbler}, and not simply as shown in the UI. -==== - +You must use distribution and profile labels as listed by {cobbler}, and not simply as shown in the UI. To list the names of distributions and profiles stored by {cobbler}, run the commands: ---- -# cobbler distro list -# cobbler profile list +cobbler distro list +cobbler profile list ---- The boot ISO includes all profiles and systems by default. -You can limit which profiles and systems are used with the [option]``--profiles`` and [option]``--systems`` options. -For example: +You can limit which profiles and systems are used with the [option]``--profiles`` and [option]``--systems`` options: ---- cobbler buildiso --systems="system1 system2 system3" \ - --profiles=" --distro= + --profiles=" " \ + --distro= ---- + +With [option]``--esp`` you can enable the build boot ISOs with Secure Boot. +You explicitly specify the EFI System Partition (ESP). +By default, {cobbler} searches for the ESP, and generates one if not found. + +---- +cobbler buildiso \ + --esp="/usr/share/tftpboot-installation/SLE-15-SP6-x86_64/boot/x86_64/efi" \ + --iso=--iso=/path/to/boot.iso --distro= +---- + + [NOTE] ==== If you cannot write an ISO image to a public [path]``tmp`` directory, check your systemd settings in [path]``/usr/lib/systemd/system/cobblerd.service``.