You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
= Modifying a live install {boot-media} to use a custom certificate authority
9
10
10
11
You can provide certificate authority (CA) certificates to Ignition with the `--ignition-ca` flag of the `customize` subcommand. You can use the CA certificates during both the installation boot and when provisioning the installed system.
11
12
13
+
[NOTE]
14
+
====
15
+
Custom CA certificates affect how Ignition fetches remote resources but they do not affect the certificates installed onto the system.
16
+
====
17
+
12
18
.Procedure
13
19
14
20
. Download the `coreos-installer` binary from the link:https://mirror.openshift.com/pub/openshift-v4/clients/coreos-installer/latest/[`coreos-installer` image mirror] page.
$ coreos-installer iso customize rhcos-<version>-live.x86_64.iso --ignition-ca cert.pem
22
28
----
23
29
endif::[]
30
+
24
31
ifeval::["{boot-media}" == "PXE environment"]
25
32
. Retrieve the {op-system}`kernel`, `initramfs` and `rootfs` files from the link:https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/latest/[{op-system} image mirror] page and run the following command to create a new customized `initramfs` file for use with a custom CA:
. Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
33
42
endif::[]
34
-
+
43
+
35
44
[IMPORTANT]
36
45
====
37
46
The `coreos.inst.ignition_url` kernel parameter does not work with the `--ignition-ca` flag.
38
47
You must use the `--dest-ignition` flag to create a customized image for each cluster.
39
48
====
40
-
+
41
-
[NOTE]
42
-
====
43
-
Custom CA certificates affect how Ignition fetches remote resources but they do not affect the certificates installed onto the system.
44
-
====
45
-
+
46
-
Your CA certificate is applied and affects every subsequent boot of the {boot-media}.
49
+
50
+
Applying your custom CA certificate affects every subsequent boot of {op-system}.
= Modifying a live install {boot-media} with customized network settings
9
10
You can embed a NetworkManager keyfile into the live {boot-media} and pass it through to the installed system with the `--network-keyfile` flag of the `customize` subcommand.
. Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
104
107
endif::[]
105
108
+
106
109
Network settings are applied to the live system and are carried over to the destination system.
<1> The location of the Ignition config to install.
66
66
<2> The desired secondary console. In this case, the graphical console. Omitting this option will disable the graphical console.
67
67
<3> The desired primary console. In this case, the serial console. The `options` field defines the baud rate and other settings. A common value for this field is `115200n8`. If no options are provided, the default kernel value of `9600n8` is used. For more information on the format of this option, see the link:https://www.kernel.org/doc/html/latest/admin-guide/serial-console.html[Linux kernel serial console] documentation.
68
68
<4> The specified disk to install to. If you omit this option, the {boot-media} automatically runs the installer which will fail unless you also specify the `coreos.inst.install_dev` kernel argument.
69
+
<5> Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
69
70
+
70
71
Your customizations are applied and affect every subsequent boot of the {boot-media}.
<1> The Ignition config file that is generated from the `openshift-installer` installation program.
35
+
<2> When you specify this option, the {boot-media} automatically runs an installation. Otherwise, the image remains configured for installation, but does not install automatically unless you specify the `coreos.inst.install_dev` kernel argument.
36
+
37
+
. Optional: To remove the {boot-media} customizations and return the image to its pristine state, run:
38
+
+
39
+
[source,terminal]
40
+
----
41
+
$ coreos-installer iso reset rhcos-<version>-live.x86_64.iso
42
+
----
43
+
+
44
+
You can now re-customize the live {boot-media} or use it in its pristine state.
<1> The Ignition config file that is generated from `openshift-installer`.
47
58
<2> When you specify this option, the {boot-media} automatically runs an install. Otherwise, the image remains configured for installing, but does not do so automatically unless you specify the `coreos.inst.install_dev` kernel argument.
48
-
+
49
-
Your customizations are applied and affect every subsequent boot of the {boot-media}.
50
-
51
-
ifeval::["{boot-media}" == "ISO image"]
52
-
. To remove the ISO image customizations and return the image to its pristine state, run:
53
-
+
54
-
[source,terminal]
55
-
----
56
-
$ coreos-installer iso reset rhcos-<version>-live.x86_64.iso
57
-
----
58
-
+
59
-
You can now re-customize the live ISO image or use it in its pristine state.
59
+
<3> Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
60
60
endif::[]
61
+
62
+
Applying your customizations affects every subsequent boot of {op-system}.
0 commit comments