secure boot enabled on RHEL image fails to boot local on 2nd reboot after deploy
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| MAAS |
Fix Released
|
High
|
Igor Brovtsin | ||
| 3.2 |
Fix Released
|
High
|
Unassigned | ||
| 3.4 |
Fix Released
|
High
|
Igor Brovtsin | ||
Bug Description
ubuntu 22.04.4
tried on MAAS versions:
3.1.1-10918-
3.2.7-12037-
3.3.3-13184-
Using packer-maas to generate a RHEL MAAS image from a vanilla RHEL 8.6 x86_64 ISO using the following packer config:
```
{
"variables": {
},
"builders": [
{
"type": "qemu",
"iso_url": "{{user `rhel8_
],
}
],
"post-
{
"type": "shell-local",
]
}
]
}
```
Which is very generic basically the example that comes with packer-maas.
The image creates fine and is uploaded into MAAS. however when deploying to a VM or physical machine with secure boot enabled, the machine fails to properly boot local when being directed to do so via PXE.
A screenshot of the error is attached to this bug report.
If the machine is explicitly directed to boot local instead of PXE'ing, it boots fine. So that tells me that the image is being deployed fine, but there is an issue with how MAAS is pushing the local boot option over PXE.
Steps to recreate:
1) install and configure MAAS as per usual
2) create RHEL image with 8.6 DVD iso using the default packer-maas config and instruction to upload the image to MAAS
3) create a vM in virt-managed and customize the installation so that the Firmware is changed from BIOS to UEFI X86_64: /usr/share/
4) enlist the machine into MAAS
5) attempt to deploy the RHEL image previously created.
It will do the initial boot of laying down the image, and it will boot on it's own for 1 time to apply SELinux rules, but the 2nd boot is when the PXE fails.
Related branches
- Anton Troyanov: Approve
- MAAS Lander: Approve
-
Diff: 52 lines (+23/-8)1 file modifiedsrc/provisioningserver/templates/uefi/config.local.amd64.template (+23/-8)
- MAAS Lander: Needs Fixing
- Jack Lloyd-Walters: Approve
-
Diff: 52 lines (+23/-8)1 file modifiedsrc/provisioningserver/templates/uefi/config.local.amd64.template (+23/-8)
- Jack Lloyd-Walters: Approve
- MAAS Lander: Approve
-
Diff: 52 lines (+23/-8)1 file modifiedsrc/provisioningserver/templates/uefi/config.local.amd64.template (+23/-8)
- MAAS Lander: Approve
- MAAS Maintainers: Pending requested
-
Diff: 54 lines (+23/-10)1 file modifiedsrc/provisioningserver/templates/uefi/config.local.amd64.template (+23/-10)
- MAAS Lander: Approve
- Ghadi Rahme (community): Approve
- Adam Collard (community): Approve
-
Diff: 54 lines (+23/-10)1 file modifiedsrc/provisioningserver/templates/uefi/config.local.amd64.template (+23/-10)
| Jeff Hillman (jhillman) wrote | #1 |
| Jeff Hillman (jhillman) wrote | #2 |
| tags: | added: bug |
| tags: |
added: bug-council removed: bug |
| Jerzy Husakowski (jhusakowski) wrote | #3 |
| Changed in maas: | |
| importance: | Undecided → High |
| status: | New → Incomplete |
| Jeff Hillman (jhillman) wrote | #4 |
| Jerzy Husakowski (jhusakowski) wrote | #5 |
| Changed in maas: | |
| assignee: | nobody → Adam Collard (adam-collard) |
| Jeff Hillman (jhillman) wrote | #6 |
| Jeff Hillman (jhillman) wrote | #7 |
| Adam Collard (adam-collard) wrote | #8 |
| Changed in maas: | |
| assignee: | Adam Collard (adam-collard) → nobody |
| Changed in maas: | |
| status: | Incomplete → New |
| status: | New → Incomplete |
| Jeff Hillman (jhillman) wrote | #9 |
| Changed in maas: | |
| assignee: | nobody → Igor Brovtsin (igor-brovtsin) |
| Jerzy Husakowski (jhusakowski) wrote | #10 |
| Changed in maas: | |
| assignee: | Igor Brovtsin (igor-brovtsin) → nobody |
| status: | Incomplete → Triaged |
| assignee: | nobody → Igor Brovtsin (igor-brovtsin) |
| Changed in maas: | |
| assignee: | Igor Brovtsin (igor-brovtsin) → Alberto Donato (ack) |
| Alberto Donato (ack) wrote | #11 |
| Jeff Hillman (jhillman) wrote | #12 |
| Changed in maas: | |
| assignee: | Alberto Donato (ack) → nobody |
| Jerzy Husakowski (jhusakowski) wrote | #13 |
| Jerzy Husakowski (jhusakowski) wrote | #14 |
| Changed in maas: | |
| assignee: | nobody → Jacopo Rota (r00ta) |
| milestone: | none → 3.5.0 |
| Dimitri John Ledkov (xnox) wrote | #15 |
| Dimitri John Ledkov (xnox) wrote | #16 |
| Changed in maas: | |
| status: | Triaged → Fix Committed |
| Changed in maas: | |
| assignee: | Jacopo Rota (r00ta) → Igor Brovtsin (igor-brovtsin) |
| tags: | removed: bug-council |
| Alan Baghumian (alanbach) wrote | #17 |
| Jerzy Husakowski (jhusakowski) wrote | #18 |
| Andy Wu (qch2012) wrote | #19 |
| Andy Wu (qch2012) wrote | #20 |
| Igor Brovtsin (igor-brovtsin) wrote | #21 |
| Jerzy Husakowski (jhusakowski) wrote | #22 |
| Changed in maas: | |
| milestone: | 3.5.0 → 3.5.0-beta1 |
| status: | Fix Committed → Fix Released |
subscribed field medium