Project

General

Profile

Feature #26127

Add "nokaslr" option into kexec templates

Added by Lukas Zapletal over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Zapletal
Category:
Discovery plugin
Target version:
Discovery Plugin 15.0
Difficulty:
Triaged:
Yes
Bugzilla link:
1685831
Pull request:
https://github.com/theforeman/foreman_discovery/pull/474
Fixed in Releases:
Found in Releases:

Description

RHEL 7.5+ added Kernel Address Randomization which improves security but also is causing issues when kexecing systems. Let's add this option to kexec when booting Anaconda and also into discovery image (global default templates) to prevent kexec issues. This will not carry over to Grub2 into the installed system.

Associated revisions

Revision 38b86d55 (diff)
Added by Lukas Zapletal over 1 year ago

Fixes #26127 - adds nokaslr kernel cmd option

History

#1 Updated by The Foreman Bot over 1 year ago

  • Assignee set to Lukas Zapletal
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman_discovery/pull/474 added

#2 Updated by Lukas Zapletal over 1 year ago

  • Bugzilla link set to 1685831
  • Triaged changed from No to Yes

I have at least two reports from downstream that this helped.

Upstream also confirms this option helped in one case: https://community.theforeman.org/t/pxe-less-discovery-host-reboots-when-provisioning/13117/2

#3 Updated by Anonymous over 1 year ago

  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF