Skip to content

Commit 8e38f28

Browse files
committed
Add missing wipeVolume to MachineConfig luks sections
We're reusing the existing root partition, so Ignition will fail without this. The RCCs in installation-special-config-mirrored-disk.adoc don't need this because boot_device.luks automatically adds wipeVolume when desugared.
1 parent e7788ef commit 8e38f28

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

modules/installation-special-config-encrypt-disk-tang.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,7 @@ spec:
9999
- url: https://tang.example.com
100100
thumbprint: PLjNyRdGw03zlRoGjQYMahSZGu9
101101
options: [--cipher, aes-cbc-essiv:sha256]
102+
wipeVolume: true
102103
filesystems:
103104
- device: /dev/mapper/root
104105
format: xfs
@@ -131,6 +132,7 @@ spec:
131132
- url: https://tang.example.com
132133
thumbprint: PLjNyRdGw03zlRoGjQYMahSZGu9
133134
options: [--cipher, aes-cbc-essiv:sha256]
135+
wipeVolume: true
134136
filesystems:
135137
- device: /dev/mapper/root
136138
format: xfs

modules/installation-special-config-encrypt-disk-tpm2.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -52,6 +52,7 @@ spec:
5252
clevis:
5353
tpm2: true
5454
options: [--cipher, aes-cbc-essiv:sha256]
55+
wipeVolume: true
5556
filesystems:
5657
- device: /dev/mapper/root
5758
format: xfs
@@ -81,6 +82,7 @@ spec:
8182
clevis:
8283
tpm2: true
8384
options: [--cipher, aes-cbc-essiv:sha256]
85+
wipeVolume: true
8486
filesystems:
8587
- device: /dev/mapper/root
8688
format: xfs

0 commit comments

Comments
 (0)