Feature #26127
Add "nokaslr" option into kexec templates
Status:
Closed
Priority:
Normal
Assignee:
Category:
Discovery plugin
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Team Backlog:
Fixed in Releases:
Found in Releases:
Description
RHEL 7.5+ added Kernel Address Randomization which improves security but also is causing issues when kexecing systems. Let's add this option to kexec when booting Anaconda and also into discovery image (global default templates) to prevent kexec issues. This will not carry over to Grub2 into the installed system.
Associated revisions
History
#1
Updated by The Foreman Bot 6 months ago
Updated by - Assignee set to Lukas Zapletal
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman_discovery/pull/474 added
#2
Updated by Lukas Zapletal 6 months ago
Updated by - Bugzilla link set to 1685831
- Triaged changed from No to Yes
I have at least two reports from downstream that this helped.
Upstream also confirms this option helped in one case: https://community.theforeman.org/t/pxe-less-discovery-host-reboots-when-provisioning/13117/2
#3
Updated by Anonymous 5 months ago
- Status changed from Ready For Testing to Closed
Applied in changeset foreman_discovery|38b86d555ab9cbe39ecb524e1ef47a13de45c852.
Fixes #26127 - adds nokaslr kernel cmd option