Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cobbler option to enable boot ISOs with Secure Boot #3442

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Cobbler option to enable boot ISOs with Secure Boot #3442

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,5 @@
- Documented Cobbler option to enable boot ISOs with Secure Boot in
Client Configuration Guide
- Added admonition about disabling data synchronization with SCC in
Administration Guide
- Added note about SLE Micro entitlement being included in SUSE
Expand Down
29 changes: 19 additions & 10 deletions modules/client-configuration/pages/autoinst-cdrom.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,32 +28,41 @@ For information about creating a profile, see xref:client-configuration:autoinst

The {cobbler} [command]``buildiso`` command takes parameters to define the name and output location of the boot ISO.
Specifying the distribution with [option]``--distro`` is mandatory when running [command]``buildiso`` command.
[option]``--iso`` is the output location:

----
cobbler buildiso --iso=/path/to/boot.iso --distro=<your-distro-label>
----

[IMPORTANT]
====
You must use distro and profile labels as listed by {cobbler}, and not simply as shown in the UI.
====

You must use distribution and profile labels as listed by {cobbler}, and not simply as shown in the UI.
To list the names of distributions and profiles stored by {cobbler}, run the commands:

----
# cobbler distro list
# cobbler profile list
cobbler distro list
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I actually wonder, do we want to wrap these with mgrctl exec?

On 4.3, cobbler ... is correct.
On 5.x, it should be mgrctl exec -- cobbler distro list (or profile list)

Note that this applies to all cobbler commands.

cobbler profile list
----

The boot ISO includes all profiles and systems by default.
You can limit which profiles and systems are used with the [option]``--profiles`` and [option]``--systems`` options.
For example:
You can limit which profiles and systems are used with the [option]``--profiles`` and [option]``--systems`` options:

----
cobbler buildiso --systems="system1 system2 system3" \
--profiles="<your-profile1-label> <your-profile2-label> <your-profile3-label> --distro=<your-distro-label>
--profiles="<your-profile1-label> <your-profile2-label> <your-profile3-label>" \
--distro=<your-distro-label>
----


With [option]``--esp`` you can enable the build boot ISOs with Secure Boot.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this be in past participle? We build ISOs, but the ISO is built.

Suggested change
With [option]``--esp`` you can enable the build boot ISOs with Secure Boot.
With [option]``--esp`` you can enable the built boot ISOs with Secure Boot.

You explicitly specify the EFI System Partition (ESP).
By default, {cobbler} searches for the ESP, and generates one if not found.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well, the default Cobbler search doesn't work for SUMA, which is why we add this feature :)

Suggested change
By default, {cobbler} searches for the ESP, and generates one if not found.
By default, {cobbler} generates the ESP partition, which disables Secure Boot.


----
cobbler buildiso \
--esp="/usr/share/tftpboot-installation/SLE-15-SP6-x86_64/boot/x86_64/efi" \
--iso=--iso=/path/to/boot.iso --distro=<your-distro-label>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
--iso=--iso=/path/to/boot.iso --distro=<your-distro-label>
--iso=/path/to/boot.iso --distro=<your-distro-label>

----


[NOTE]
====
If you cannot write an ISO image to a public [path]``tmp`` directory, check your systemd settings in [path]``/usr/lib/systemd/system/cobblerd.service``.
Expand Down
Loading