Skip to content

Commit 9edc8cf

Browse files
author
Bob Furu
authored
Merge pull request #28071 from bobfuru/OSDOCS-1630
2 parents 8320005 + 91a9ec6 commit 9edc8cf

8 files changed

+179
-245
lines changed

‎installing/installing_bare_metal/installing-bare-metal-network-customizations.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -98,6 +98,8 @@ include::modules/installation-user-infra-machines-advanced.adoc[leveloffset=+2]
9898

9999
include::modules/installation-user-infra-machines-static-network.adoc[leveloffset=+3]
100100

101+
include::modules/architecture-rhcos-updating-bootloader.adoc[leveloffset=+2]
102+
101103
include::modules/installation-installing-bare-metal.adoc[leveloffset=+1]
102104

103105
include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1]

‎installing/installing_bare_metal/installing-bare-metal.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,8 @@ include::modules/installation-user-infra-machines-advanced.adoc[leveloffset=+2]
109109

110110
include::modules/installation-user-infra-machines-static-network.adoc[leveloffset=+3]
111111

112+
include::modules/architecture-rhcos-updating-bootloader.adoc[leveloffset=+2]
113+
112114
include::modules/installation-installing-bare-metal.adoc[leveloffset=+1]
113115

114116
include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1]

‎installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -115,6 +115,8 @@ include::modules/installation-user-infra-machines-advanced.adoc[leveloffset=+2]
115115

116116
include::modules/installation-user-infra-machines-static-network.adoc[leveloffset=+3]
117117

118+
include::modules/architecture-rhcos-updating-bootloader.adoc[leveloffset=+2]
119+
118120
include::modules/installation-installing-bare-metal.adoc[leveloffset=+1]
119121

120122
include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1]

‎installing/installing_vsphere/installing-restricted-networks-vsphere.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,8 @@ include::modules/machine-vsphere-machines.adoc[leveloffset=+1]
7070

7171
include::modules/installation-disk-partitioning.adoc[leveloffset=+1]
7272

73+
include::modules/architecture-rhcos-updating-bootloader.adoc[leveloffset=+1]
74+
7375
include::modules/installation-installing-bare-metal.adoc[leveloffset=+1]
7476

7577
include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1]

‎installing/installing_vsphere/installing-vsphere-network-customizations.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,8 @@ include::modules/machine-vsphere-machines.adoc[leveloffset=+1]
6161

6262
include::modules/installation-disk-partitioning.adoc[leveloffset=+1]
6363

64+
include::modules/architecture-rhcos-updating-bootloader.adoc[leveloffset=+1]
65+
6466
include::modules/installation-installing-bare-metal.adoc[leveloffset=+1]
6567

6668
include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1]

‎installing/installing_vsphere/installing-vsphere.adoc‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,8 @@ include::modules/machine-vsphere-machines.adoc[leveloffset=+1]
5959

6060
include::modules/installation-disk-partitioning.adoc[leveloffset=+1]
6161

62+
include::modules/architecture-rhcos-updating-bootloader.adoc[leveloffset=+1]
63+
6264
include::modules/cli-installing-cli.adoc[leveloffset=+1]
6365

6466
include::modules/installation-installing-bare-metal.adoc[leveloffset=+1]

‎modules/architecture-rhcos-updating-bootloader.adoc‎

Lines changed: 93 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,93 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * installing-restricted-networks-vsphere.adoc
4+
// * installing-vsphere-network-customizations.adoc
5+
// * installing-vsphere.adoc
6+
// * installing-bare-metal-network-customizations.adoc
7+
// * installing-bare-metal.adoc
8+
// * installing-restricted-networks-bare-metal.adoc
9+
10+
[id="architecture-rhcos-updating-bootloader.adoc_{context}"]
11+
= Updating the bootloader using bootupd
12+
13+
To update the bootloader by using `bootupd`, you must either install `bootupd` on {op-system} machines manually or provide a machine config with the enabled `systemd` unit. Unlike `grubby` or other bootloader tools, `bootupd` does not manage kernel space configuration such as passing kernel arguments.
14+
15+
After you have installed `bootupd`, you can manage it remotely from the {product-title} cluster.
16+
17+
[NOTE]
18+
====
19+
It is recommended that you use `bootupd` only on bare metal or virtualized hypervisor installations, such as for protection against the BootHole vulnerability.
20+
====
21+
22+
.Manual install method
23+
You can manually install `bootupd` by using the `bootctl` command-line tool.
24+
25+
. Inspect the system status:
26+
+
27+
[source,terminal]
28+
----
29+
# bootupctl status
30+
----
31+
+
32+
.Example output
33+
[source,terminal]
34+
----
35+
Component EFI
36+
Installed: grub2-efi-x64-1:2.04-31.fc33.x86_64,shim-x64-15-8.x86_64
37+
Update: At latest version
38+
----
39+
40+
[start=2]
41+
. {op-system} images created without `bootupd` installed on them require an explicit adoption phase.
42+
+
43+
If the system status is `Adoptable`, perform the adoption:
44+
+
45+
[source,terminal]
46+
----
47+
# bootupctl adopt-and-update
48+
----
49+
+
50+
.Example output
51+
[source,terminal]
52+
----
53+
Updated: grub2-efi-x64-1:2.04-31.fc33.x86_64,shim-x64-15-8.x86_64
54+
----
55+
56+
. If an update is available, apply the update so that the changes take effect on the next reboot:
57+
+
58+
[source,terminal]
59+
----
60+
# bootupctl update
61+
----
62+
+
63+
.Example output
64+
[source,terminal]
65+
----
66+
Updated: grub2-efi-x64-1:2.04-31.fc33.x86_64,shim-x64-15-8.x86_64
67+
----
68+
69+
.Machine config method
70+
Another way to enable `bootupd` is by providing a machine config.
71+
72+
* Provide a machine config file with the enabled `systemd` unit, as shown in the following example:
73+
+
74+
.Example output
75+
[source,yaml]
76+
----
77+
variant: rhcos
78+
version: 1.1.0
79+
systemd:
80+
units:
81+
- name: custom-bootupd-auto.service
82+
enabled: true
83+
contents: |
84+
[Unit]
85+
Description=Bootupd automatic update
86+
87+
[Service]
88+
ExecStart=/usr/bin/bootupctl update
89+
RemainAfterExit=yes
90+
91+
[Install]
92+
WantedBy=multi-user.target
93+
----

0 commit comments

Comments
 (0)