Project

General

Profile

Actions

Feature #36885

closed

Add Clevis/Tang disk encryption template

Added by Jan Loeser 8 months ago. Updated 15 days ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Unattended installations
Target version:
-
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

For disk encryption Clevis/Tang is often used. This commit introduces a Kickstart partition template taking care of disk encryption and a snippet responsible for binding the LUKS device via Clevis to a given Tang server.

The default partition template encrypts the disk with a passphrase which can be provided via `disk_enc_passphrase` host parameter. If no host parameter is provided, the default passphrase is 'linux'.

If, in addition, `disk_enc_tang_servers` host parameter is provided (can be one address as string or multiple addresses as array), the LUKS device will be bind to these Tang servers using Clevis. In this case, the passphrase will be removed.

This commit targets mainly all operating systems of the Red Hat family, however the snippet can also be used for Ubuntu operating system.


Related issues 1 (1 open0 closed)

Related to Foreman - Bug #37505: Template can not be rendered (clevis and tang). Ready For TestingActions
Actions #1

Updated by The Foreman Bot 8 months ago

  • Status changed from New to Ready For Testing
Actions #2

Updated by The Foreman Bot 3 months ago

  • Fixed in Releases 3.11.0 added
Actions #3

Updated by Jan Loeser 3 months ago

  • Status changed from Ready For Testing to Closed
Actions #4

Updated by Richard Stempfl about 2 months ago

  • Related to Bug #37505: Template can not be rendered (clevis and tang). added
Actions #5

Updated by Ewoud Kohl van Wijngaarden 15 days ago

  • Category set to Unattended installations
  • Triaged changed from No to Yes
Actions

Also available in: Atom PDF