Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-104075

[RHEL-10] Add a menu entry to the boot.iso to boot with fips=1

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • rhel-10.0
    • osbuild
    • No
    • Low
    • image-builder-1
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Enhancement
    • Hide
      .New boot menu entry for `image-installer`
      Before this update, you could not switch an installed system to FIPS mode. You needed to select FIPS at install time by setting `fips=1 ` on the kernel command line when booting the installer from the `image-installer ` ISO image.

      With this enhancement, a boot menu entry is available in the `image-installer` image type that sets `fips=1` on the kernel command line, making it easier for users to install in FIPS mode.
      Show
      .New boot menu entry for `image-installer` Before this update, you could not switch an installed system to FIPS mode. You needed to select FIPS at install time by setting `fips=1 ` on the kernel command line when booting the installer from the `image-installer ` ISO image. With this enhancement, a boot menu entry is available in the `image-installer` image type that sets `fips=1` on the kernel command line, making it easier for users to install in FIPS mode.
    • Done
    • Done
    • Done
    • Unspecified
    • None

      In RHEL10 it is no longer possible to switch an installed system to FIPS, it needs to be done during install with fips=1 set on the kernel cmdline when booting the installer from the boot.iso – this is documented, but to make it easier and more visible to users we should add a new boot menu entry to the boot.iso menu.

      This menu entry should also be added for osbuild-composer produced installer isos.

              brlane@redhat.com Brian Lane
              brlane@redhat.com Brian Lane
              Osbuilders Bot Account Osbuilders Bot Account
              Release Test Team Release Test Team
              Mugdha Soni Mugdha Soni
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: