Comment 13 for bug 1433812

Reviewed: https://review.openstack.org/167449
Committed: https://git.openstack.org/cgit/openstack/ironic/commit/?id=be5e85ffd9437cb25b771323eac5b513eb8592ee
Submitter: Jenkins
Branch: master

commit be5e85ffd9437cb25b771323eac5b513eb8592ee
Author: Jay Faulkner <email address hidden>
Date: Tue Mar 24 16:35:38 2015 -0700

    Ensure configdrive isn't mounted for ipxe/elilo

    This extends 87abb934e0d97cce0562a028e68c0a70a35c19ce to work with elilo
    and ipxe.

    Temporary workaround for bug #1433812. CoreOS processes the
    cloud-config.yml too late the boot process to prevent mounting and
    processing the configdrive. Pass coreos.configdrive=0 on the kernel
    command line to ensure this doesn't occur, as it can be a security
    risk (previous tenants may have written a malicious configdrive,
    and it would be read before being cleaned).

    Long-term, we should remove this workaround and either completely remove
    the mount units from the ramdisk during the build process or get a
    better fix from upstream (https://github.com/coreos/bugs/issues/314).

    Change-Id: I03fd230a9d03dd4daeaa53148ec9975d741c14a0
    Partial-bug: 1433812