docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example #3806

travier · 2024-05-16T10:09:05Z

Fixes: #3804

jbtrystram

small typo otherwise LGTM
I did not replicate though

docs/cosa/run.md

jlebon

Nice! Thanks for looking at this.

jlebon · 2024-05-16T13:52:03Z

docs/cosa/run.md

+
+1. Download a kernel, initramfs, rootfs and shim binary
+2. Combine initramfs + roots into a single file: `cat kernel.img initramfs.img > combined.img`
+3. Create an empty disk image (bug in kola): `touch disk.img`


What did you hit?

kola asks for a disk image:

$ cosa run -c --netboot pxe/shimx64.efi -m 4096 --qemu-firmware uefi-secure COREOS_ASSEMBLER_ADD_CERTS=y +cosa:16> podman run --rm -ti --security-opt 'label=disable' --privileged '--uidmap=1000:0:1' '--uidmap=0:1:1000' --uidmap 1001:1001:64536 -v /var/home/tim/projects/rhcos.images:/srv/ --device /dev/kvm --device /dev/fuse --tmpfs /tmp -v /var/tmp:/var/tmp '--volume=/etc/pki/ca-trust:/etc/pki/ca-trust:ro' quay.io/coreos-assembler/coreos-assembler:latest run -c --netboot pxe/shimx64.efi -m 4096 --qemu-firmware uefi-secure Error: No disk image provided 2024-05-16T15:41:40Z cli: No disk image provided

Not sure why, have not dig into this yet

#3807 thanks to @jbtrystram

docs/cosa/run.md

jlebon · 2024-05-16T16:04:27Z

docs/cosa/run.md

+1. Download a kernel, initramfs, rootfs, shim and GRUB binary
+3. Create an empty disk image (bug in kola): `touch disk.img`
+4. Setup `grub.cfg`
+5. Netboot the result. Be patient as TFTP is slow.


Suggested change

5. Netboot the result. Be patient as TFTP is slow.

5. Netboot the result. Be patient as TFTP is slow. Alternatively, use `coreos.live.rootfs_url` to fetch the rootfs over HTTP (see previous example) and remove it from the `initrd` line below.

I guess I should've mentioned that kola http-server is a thing in these instructions.

Ah, I didn't know that existed :). Will take a look.

Thanks @jlebon for the pointer,

run cosa shell, then run kola http-server to start http server.

run podman exec -it cosa bash, then run command using coreos.live.rootfs_url=http://10.0.2.2:8000/live-rootfs.x86_64.img works.

Fixes: coreos#3804

travier · 2024-05-22T09:02:21Z

OK, this is now updated with the latest suggestions from #3806 (comment) and this boots quickly!

HuijingHei

LGTM

jbtrystram · 2024-05-22T11:51:09Z

docs/cosa/run.md

+# multiple instances of cosa (see https://coreos.github.io/coreos-assembler/building-fcos/#running-multiple-instances)
+$ podman ps | grep quay.io/coreos-assembler/coreos-assembler
+7fedc84484a6  quay.io/coreos-assembler/coreos-assembler:latest  kola http-server      5 minutes ago  Up 5 minutes              hopeful_haibt
+$ podman exec -ti 7fedc84484a6 bash


FYI there is podman exec -l to target the last created container :)

That sounds like a good idea but I'm not fully aware of the semantics thus not confident in replacing those "manual" instructions.

Will have to give it a try.

yeah 100%. Your instructions are safer here. I learned about it recently so I thought I'd share the tip

travier · 2024-05-22T15:48:46Z

/override rhcos
As this is a docs only PR.

openshift-ci · 2024-05-22T15:48:50Z

@travier: /override requires failed status contexts, check run or a prowjob name to operate on.
The following unknown contexts/checkruns were given:

rhcos

Only the following failed contexts/checkruns were expected:

ShellCheck
ci/prow/rhcos
continuous-integration/jenkins/pr-merge
golangci-lint

If you are trying to override a checkrun that has a space in it, you must put a double quote on the context.

In response to this:

/override rhcos
As this is a docs only PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

travier · 2024-05-22T15:49:05Z

/override ci/prow/rhcos

openshift-ci · 2024-05-22T15:49:10Z

@travier: Overrode contexts on behalf of travier: ci/prow/rhcos

In response to this:

/override ci/prow/rhcos

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

jlebon · 2024-05-22T15:59:44Z

docs/cosa/run.md

+        echo "Loading kernel"
+        linux /rhcos-4.14.0-x86_64-live-kernel-x86_64 ignition.firstboot ignition.platform.id=metal console=ttyS0 coreos.live.rootfs_url=http://10.0.2.2:8000/pxe/rhcos-4.14.0-x86_64-live-rootfs.x86_64.img ignition.config.url=http://10.0.2.2:8000/pxe/config.ign
+        echo "Loading initrd"
+        initrd rhcos-4.14.0-x86_64-live-initramfs.x86_64.img rhcos-4.14.0-x86_64-live-rootfs.x86_64.img


We should only list the initramfs here now that we're serving the rootfs over HTTP.

Ah good point. I'll make a followup

See: coreos#3806 (comment) Fixes: 0b53c4e docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example

See: #3806 (comment) Fixes: 0b53c4e docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example

travier force-pushed the docs-pxe-eufi-secure-boot branch 2 times, most recently from 2bf428c to 5de93ac Compare May 16, 2024 10:10

jbtrystram mentioned this pull request May 16, 2024

cosa run should't expect an image when --netboot is present #3807

Open

jbtrystram previously approved these changes May 16, 2024

View reviewed changes

docs/cosa/run.md Outdated Show resolved Hide resolved

jlebon reviewed May 16, 2024

View reviewed changes

travier dismissed jbtrystram’s stale review via 230c562 May 16, 2024 15:40

travier force-pushed the docs-pxe-eufi-secure-boot branch 2 times, most recently from f2afb02 to c242445 Compare May 16, 2024 16:03

jlebon previously approved these changes May 16, 2024

View reviewed changes

travier dismissed jlebon’s stale review via 38b025e May 22, 2024 09:01

travier force-pushed the docs-pxe-eufi-secure-boot branch from c242445 to 38b025e Compare May 22, 2024 09:01

docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example

0b53c4e

Fixes: coreos#3804

travier force-pushed the docs-pxe-eufi-secure-boot branch from 38b025e to 0b53c4e Compare May 22, 2024 09:01

HuijingHei approved these changes May 22, 2024

View reviewed changes

jbtrystram reviewed May 22, 2024

View reviewed changes

travier merged commit cfb6d37 into coreos:main May 22, 2024
4 checks passed

travier deleted the docs-pxe-eufi-secure-boot branch May 22, 2024 15:49

jlebon reviewed May 22, 2024

View reviewed changes

travier added a commit to travier/coreos-assembler that referenced this pull request May 23, 2024

docs/cosa/run: Remove unneeded rootfs in UEFI SB GRUB config

eb7a50b

See: coreos#3806 (comment) Fixes: 0b53c4e docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example

travier added a commit to travier/coreos-assembler that referenced this pull request May 23, 2024

docs/cosa/run: Remove unneeded rootfs in UEFI SB GRUB config

0012fa6

See: coreos#3806 (comment) Fixes: 0b53c4e docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example

travier mentioned this pull request May 23, 2024

docs/cosa/run: Remove unneeded rootfs in UEFI SB GRUB config #3810

Merged

jlebon pushed a commit that referenced this pull request May 23, 2024

docs/cosa/run: Remove unneeded rootfs in UEFI SB GRUB config

2b7db04

See: #3806 (comment) Fixes: 0b53c4e docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example #3806

docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example #3806

travier commented May 16, 2024

jbtrystram left a comment

jlebon left a comment

jlebon May 16, 2024

travier May 16, 2024

travier May 16, 2024

travier May 23, 2024

jlebon May 16, 2024

travier May 17, 2024

HuijingHei May 17, 2024

travier commented May 22, 2024

HuijingHei left a comment

jbtrystram May 22, 2024

travier May 22, 2024

travier May 22, 2024

jbtrystram May 22, 2024

travier commented May 22, 2024

openshift-ci bot commented May 22, 2024

travier commented May 22, 2024

openshift-ci bot commented May 22, 2024

jlebon May 22, 2024

travier May 23, 2024

travier May 23, 2024

	5. Netboot the result. Be patient as TFTP is slow.
	5. Netboot the result. Be patient as TFTP is slow. Alternatively, use `coreos.live.rootfs_url` to fetch the rootfs over HTTP (see previous example) and remove it from the `initrd` line below.

docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example #3806

docs/cosa/run: Add PXE with Shim and UEFI Secure Boot example #3806

Conversation

travier commented May 16, 2024

jbtrystram left a comment

Choose a reason for hiding this comment

jlebon left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

travier commented May 22, 2024

HuijingHei left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

travier commented May 22, 2024

openshift-ci bot commented May 22, 2024

travier commented May 22, 2024

openshift-ci bot commented May 22, 2024

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment