Project

General

Profile

Feature #26127

Add "nokaslr" option into kexec templates

Added by Lukas Zapletal 3 months ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Zapletal
Category:
Discovery plugin
Target version:
Discovery Plugin NEXT
Difficulty:
Triaged:
Yes
Bugzilla link:
1685831
Pull request:
https://github.com/theforeman/foreman_discovery/pull/474
Team Backlog:
Fixed in Releases:
Found in Releases:

Description

RHEL 7.5+ added Kernel Address Randomization which improves security but also is causing issues when kexecing systems. Let's add this option to kexec when booting Anaconda and also into discovery image (global default templates) to prevent kexec issues. This will not carry over to Grub2 into the installed system.

Associated revisions

Revision 38b86d55 (diff)
Added by Lukas Zapletal about 2 months ago

Fixes #26127 - adds nokaslr kernel cmd option

History

#1 Updated by The Foreman Bot 3 months ago

  • Assignee set to Lukas Zapletal
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman_discovery/pull/474 added

#2 Updated by Lukas Zapletal 3 months ago

  • Bugzilla link set to 1685831
  • Triaged changed from No to Yes

I have at least two reports from downstream that this helped.

Upstream also confirms this option helped in one case: https://community.theforeman.org/t/pxe-less-discovery-host-reboots-when-provisioning/13117/2

#3 Updated by Anonymous about 2 months ago

  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF