History

Steve Baker 27a326dafb Support secure-boot bootloader where possible

As of grub2 >= 2.02-95 on redhat family distros, calling grub2-install
on an EFI partition will fail with: "this utility cannot be used for
EFI platforms because it does not support UEFI Secure Boot."

This version of grub is now in centos8-stream and non-eus repos of
RHEL-8. It is not currently possible to build whole-disk UEFI images
on these distros, and when this package is promoted this will also
affect centos8 and RHEL-8 eus. The grub maintainers made this change
because the grub2-install generated /boot/efi/EFI/BOOT/BOOTX64.EFI
will never be capable of booting with Secure Boot.

This change defines a $EFI_BOOT_DIR for every distro element. When
directory /boot/efi/$EFI_BOOT_DIR exists a grub.cfg file in will be
generated there. This change also installs the shim package on redhat
family distros, which installs a copy of the shim bootloader to
/boot/efi/EFI/BOOT/BOOTX64.EFI. Using centos as an example, this
allows UEFI to boot the shim /boot/efi/EFI/BOOT/BOOTX64.EFI which
then chains to /boot/efi/EFI/centos/grubx64.efi.

If /boot/efi/$EFI_BOOT_DIR doesn't exist (such as for Ubuntu,
/boot/efi/EFI/ubuntu) the current behaviour of running grub-install to
generate /boot/efi/EFI/BOOT/BOOTX64.EFI will continue. For distros
such as Ubutnu where packaging does not populate /boot/efi/EFI/ubuntu
with .efi files, secure boot can be added in the future by copying
.efi files to /boot/efi/EFI/ubuntu and copying the shim file to
/boot/efi/EFI/BOOT/BOOTX64.EFI.

Change-Id: I90925218ff2aa4c4daffcf86e686b6d98d6b0f21

2021-03-11 10:27:59 +13:00

environment.d

Support secure-boot bootloader where possible

2021-03-11 10:27:59 +13:00

test-elements

Add support for CentOS 8 Stream

2020-06-22 10:36:30 +02:00

yum.repos.d

Add support for CentOS 8 Stream

2020-06-22 10:36:30 +02:00

element-deps

Move elements & lib relative to diskimage_builder package

2016-11-01 17:27:41 -07:00

element-provides

Move elements & lib relative to diskimage_builder package

2016-11-01 17:27:41 -07:00

README.rst

Add support for CentOS 8 Stream

2020-06-22 10:36:30 +02:00

README.rst

centos-minimal

Create a minimal image based on CentOS

Use of this element will require 'yum' and 'yum-utils' to be installed on Ubuntu and Debian. Nothing additional is needed on Fedora or CentOS.

By default this builds CentOS 7 images. Set DIB_RELEASE to 7, 8 or 8-stream to explicitly select the release.

For CentOS 7, by default, DIB_YUM_MINIMAL_CREATE_INTERFACES is set to enable the creation of /etc/sysconfig/network-scripts/ifcfg-eth[0|1] scripts to enable DHCP on the eth0 & eth1 interfaces. If you do not have these interfaces, or if you are using something else to setup the network such as cloud-init, glean or network-manager, you would want to set this to 0. For CentOS 8 and CentOS 8 Stream, this is set to 0 by default as the system uses NetworkManager by default.