Comments (7)
OK I did #60 which may help here - sanity checked it with a virt-install --boot uefi,loader.secure=false
.
There's lot going on here but basically...the way we've been doing bootloader bits has actually split into three separate paths between:
- anaconda
- Edge (image builder, coreos-installer)
- Fedora CoreOS (bootupd, coreos-isntaller)
This effort is motivating these things to align. In particular, the reason we're not trying to follow the FCOS path is listed in coreos/fedora-coreos-tracker#1151 - basically we don't want to need to make a raw disk image from a container to do an installation (plus tricky overlap with Ignition).
from centos-bootc.
Merged #60 - if you (or anyone else) have a few minutes to try sanity checking it in the scenario you were going through, let me know if it helps!
I know again this is all really painful, if we really had to we could cave and not do bootupd integration but honestly the way anaconda+ostree handles bootloader stuff is just a tremendous pile of hacks that is barely touched from when I worked on it for Atomic Host days; and it's what the "Atomic Desktops" rely on today, but they lack "day 2 bootloader updates" because of it.
from centos-bootc.
OK, it looks like secure boot is a big part of the problem. I'm on F38 silverblue and trying "--boot uefi,loader.secure=false" gives: ERROR loader attribute 'secure' cannot be specified when firmware autoselection is enabled
My google foo is failing me today on getting past that.
I'm using this in my script and I have the updated kickstart example from #60 working with the centos-stream9 base image using: --boot loader=/usr/share/edk2/ovmf/OVMF_CODE.fd,loader.readonly=yes,loader.secure=no,loader.type=pflash,nvram=/var/lib/libvirt/qemu/nvram/bootc.fd
Thanks for getting me past this!
from centos-bootc.
ERROR loader attribute 'secure' cannot be specified when firmware autoselection is enabled
Hmm, what other arguments are you giving to virt-install
? For reference here's an example incantation I'm using:
virt-install --boot uefi,loader.secure=false --connect qemu:///system --name centos-boot-demo --memory 2048 --vcpus 4 --disk size=40 \
--os-variant rhel9.0 --location https://dl.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/os/ \
--noautoconsole --initrd-inject $(pwd)/inst.ks --extra-args="inst.ks=file:/inst.ks console=ttyS0"
I'm using this in my script and I have the updated kickstart example from #60 working
Cool! OK I think we can close this as "fixed", even though there's definitely more cleanup here to land.
from centos-bootc.
Yeah I can't run that command on my laptop for some reason. I get: ERROR loader attribute 'secure' cannot be specified when firmware autoselection is enabled
Domain installation does not appear to have been successful.
These are the relevant packages I'm layering: libvirt qemu-kvm swtpm swtpm-tools virt-install virt-manager
I would think that has everything necessary, but maybe not.
Also the second attempt to use the kickstart error'ed out with the bootupctl command:
error: Found argument '--auto' which wasn't expected, or isn't valid in this context
If you tried to supply --auto
as a value rather than a flag, use -- --auto
which is strange because all I did was switch the container and provide an ssh key.
from centos-bootc.
For --auto
you currently need the -dev
image which has a much newer bootupd.
from centos-bootc.
OK thanks, that explains it. I have everything rebuilt w/ the latest CS9 image & booting. Thanks again for the help!
from centos-bootc.
Related Issues (20)
- Tracker for support for nested containers HOT 11
- Tracker for auto rollback feature HOT 1
- Create more directories in `/var` in base image HOT 11
- Add "how to create a Containerfile" doc HOT 2
- eln image's altfiles are broken HOT 1
- issue again likely with hardlinks HOT 9
- Newuidmap and newgidmap do not have file capabiltiies set in centos-bootc image. HOT 2
- Fix /opt to be a directory HOT 3
- investigate a growfs by default HOT 7
- Fix anaconda /etc/fstab HOT 1
- builds not flowing HOT 2
- Consider switching to CMD /sbin/init HOT 3
- fedora-bootc:eln install to-disk with LUKS + TPM broken HOT 2
- Shadow-utils filecaps not set correctly.
- Consider disabling `dnf-makecache.timer` HOT 3
- Add workaround for Python pyc until we fully move to composefs
- Bump Podman version to v5.0.0 HOT 3
- Installing a custom kernel does not keep the boot partition
- Issues when rebasing from Fedora Atomic Desktop.
- Dependency Dashboard
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from centos-bootc.