Skip to content

Commit e747256

Browse files
authored
Merge pull request #66519 from jldohmann/bgilbert-pr
explicitly document including kargs
2 parents ba70964 + 23d35d1 commit e747256

4 files changed

+33
-23
lines changed

modules/installation-user-infra-machines-advanced-customizing-live-ca-certs.adoc

Lines changed: 12 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,17 @@
44
// * installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc
55
// * installing_bare_metal/installing-bare-metal-network-customizations.adoc
66

7+
:_content-type: PROCEDURE
78
[id="installation-user-infra-machines-advanced-customizing-live-{boot}-ca-certs_{context}"]
89
= Modifying a live install {boot-media} to use a custom certificate authority
910

1011
You can provide certificate authority (CA) certificates to Ignition with the `--ignition-ca` flag of the `customize` subcommand. You can use the CA certificates during both the installation boot and when provisioning the installed system.
1112

13+
[NOTE]
14+
====
15+
Custom CA certificates affect how Ignition fetches remote resources but they do not affect the certificates installed onto the system.
16+
====
17+
1218
.Procedure
1319

1420
. Download the `coreos-installer` binary from the link:https://mirror.openshift.com/pub/openshift-v4/clients/coreos-installer/latest/[`coreos-installer` image mirror] page.
@@ -21,6 +27,7 @@ ifeval::["{boot-media}" == "ISO image"]
2127
$ coreos-installer iso customize rhcos-<version>-live.x86_64.iso --ignition-ca cert.pem
2228
----
2329
endif::[]
30+
2431
ifeval::["{boot-media}" == "PXE environment"]
2532
. Retrieve the {op-system} `kernel`, `initramfs` and `rootfs` files from the link:https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/latest/[{op-system} image mirror] page and run the following command to create a new customized `initramfs` file for use with a custom CA:
2633
+
@@ -30,17 +37,14 @@ $ coreos-installer pxe customize rhcos-<version>-live-initramfs.x86_64.img \
3037
--ignition-ca cert.pem \
3138
-o rhcos-<version>-custom-initramfs.x86_64.img
3239
----
40+
41+
. Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
3342
endif::[]
34-
+
43+
3544
[IMPORTANT]
3645
====
3746
The `coreos.inst.ignition_url` kernel parameter does not work with the `--ignition-ca` flag.
3847
You must use the `--dest-ignition` flag to create a customized image for each cluster.
3948
====
40-
+
41-
[NOTE]
42-
====
43-
Custom CA certificates affect how Ignition fetches remote resources but they do not affect the certificates installed onto the system.
44-
====
45-
+
46-
Your CA certificate is applied and affects every subsequent boot of the {boot-media}.
49+
50+
Applying your custom CA certificate affects every subsequent boot of {op-system}.

modules/installation-user-infra-machines-advanced-customizing-live-network-config.adoc

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@
44
// * installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc
55
// * installing_bare_metal/installing-bare-metal-network-customizations.adoc
66

7+
:_content-type: PROCEDURE
78
[id="installation-user-infra-machines-advanced-customizing-live-{boot}_network_keyfile_{context}"]
89
= Modifying a live install {boot-media} with customized network settings
910
You can embed a NetworkManager keyfile into the live {boot-media} and pass it through to the installed system with the `--network-keyfile` flag of the `customize` subcommand.
@@ -101,6 +102,8 @@ $ coreos-installer pxe customize rhcos-<version>-live-initramfs.x86_64.img \
101102
--network-keyfile bond0-proxy-em2.nmconnection \
102103
-o rhcos-<version>-custom-initramfs.x86_64.img
103104
----
105+
106+
. Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
104107
endif::[]
105108
+
106109
Network settings are applied to the live system and are carried over to the destination system.

modules/installation-user-infra-machines-advanced-customizing-live-serial-console.adoc

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,13 +59,14 @@ $ coreos-installer pxe customize rhcos-<version>-live-initramfs.x86_64.img \
5959
--dest-console tty0 \//<2>
6060
--dest-console ttyS0,<options> \//<3>
6161
--dest-device /dev/disk/by-id/scsi-<serial_number> \//<4>
62-
-o rhcos-<version>-custom-initramfs.x86_64.img
62+
-o rhcos-<version>-custom-initramfs.x86_64.img <5>
6363
----
6464
+
6565
<1> The location of the Ignition config to install.
6666
<2> The desired secondary console. In this case, the graphical console. Omitting this option will disable the graphical console.
6767
<3> The desired primary console. In this case, the serial console. The `options` field defines the baud rate and other settings. A common value for this field is `115200n8`. If no options are provided, the default kernel value of `9600n8` is used. For more information on the format of this option, see the link:https://www.kernel.org/doc/html/latest/admin-guide/serial-console.html[Linux kernel serial console] documentation.
6868
<4> The specified disk to install to. If you omit this option, the {boot-media} automatically runs the installer which will fail unless you also specify the `coreos.inst.install_dev` kernel argument.
69+
<5> Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
6970
+
7071
Your customizations are applied and affect every subsequent boot of the {boot-media}.
7172
endif::[]

modules/installation-user-infra-machines-advanced-customizing-live.adoc

Lines changed: 16 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@
44
// * installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc
55
// * installing_bare_metal/installing-bare-metal-network-customizations.adoc
66

7+
:_content-type: PROCEDURE
78
[id="installation-user-infra-machines-advanced-customizing-live-{boot}_{context}"]
89
= Customizing a live {op-system} {boot-media}
910
You can customize a live {op-system} {boot-media} directly with the
@@ -30,6 +31,17 @@ $ coreos-installer iso customize rhcos-<version>-live.x86_64.iso \
3031
--dest-ignition bootstrap.ign \ <1>
3132
--dest-device /dev/disk/by-id/scsi-<serial_number> <2>
3233
----
34+
<1> The Ignition config file that is generated from the `openshift-installer` installation program.
35+
<2> When you specify this option, the {boot-media} automatically runs an installation. Otherwise, the image remains configured for installation, but does not install automatically unless you specify the `coreos.inst.install_dev` kernel argument.
36+
37+
. Optional: To remove the {boot-media} customizations and return the image to its pristine state, run:
38+
+
39+
[source,terminal]
40+
----
41+
$ coreos-installer iso reset rhcos-<version>-live.x86_64.iso
42+
----
43+
+
44+
You can now re-customize the live {boot-media} or use it in its pristine state.
3345
endif::[]
3446
3547
ifeval::["{boot-media}" == "PXE environment"]
@@ -40,21 +52,11 @@ ifeval::["{boot-media}" == "PXE environment"]
4052
$ coreos-installer pxe customize rhcos-<version>-live-initramfs.x86_64.img \
4153
--dest-ignition bootstrap.ign \ <1>
4254
--dest-device /dev/disk/by-id/scsi-<serial_number> \ <2>
43-
-o rhcos-<version>-custom-initramfs.x86_64.img
55+
-o rhcos-<version>-custom-initramfs.x86_64.img <3>
4456
----
45-
endif::[]
4657
<1> The Ignition config file that is generated from `openshift-installer`.
4758
<2> When you specify this option, the {boot-media} automatically runs an install. Otherwise, the image remains configured for installing, but does not do so automatically unless you specify the `coreos.inst.install_dev` kernel argument.
48-
+
49-
Your customizations are applied and affect every subsequent boot of the {boot-media}.
50-
51-
ifeval::["{boot-media}" == "ISO image"]
52-
. To remove the ISO image customizations and return the image to its pristine state, run:
53-
+
54-
[source,terminal]
55-
----
56-
$ coreos-installer iso reset rhcos-<version>-live.x86_64.iso
57-
----
58-
+
59-
You can now re-customize the live ISO image or use it in its pristine state.
59+
<3> Use the customized `initramfs` file in your PXE configuration. Add the `ignition.firstboot` and `ignition.platform.id=metal` kernel arguments if they are not already present.
6060
endif::[]
61+
62+
Applying your customizations affects every subsequent boot of {op-system}.

0 commit comments

Comments
 (0)