Project

General

Profile

Actions
Copy link

Feature #26127

closed

Add "nokaslr" option into kexec templates

Added by Lukas Zapletal almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Zapletal
Category:
Discovery plugin
Target version:
Discovery Plugin 15.0
Difficulty:
Triaged:
Yes
Bugzilla link:
1685831
Pull request:
https://github.com/theforeman/foreman_discovery/pull/474
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

RHEL 7.5+ added Kernel Address Randomization which improves security but also is causing issues when kexecing systems. Let's add this option to kexec when booting Anaconda and also into discovery image (global default templates) to prevent kexec issues. This will not carry over to Grub2 into the installed system.

Actions
Copy link
 #1

Updated by The Foreman Bot over 5 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Lukas Zapletal
  • Pull request https://github.com/theforeman/foreman_discovery/pull/474 added
Actions
Copy link
 #2

Updated by Lukas Zapletal over 5 years ago

  • Triaged changed from No to Yes
  • Bugzilla link set to 1685831

I have at least two reports from downstream that this helped.

Upstream also confirms this option helped in one case: https://community.theforeman.org/t/pxe-less-discovery-host-reboots-when-provisioning/13117/2

Actions
Copy link
 #3

Updated by Anonymous over 5 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link

Also available in: Atom PDF