-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-9.6, rhel-10.0
-
No
-
Important
-
rhel-sst-image-builder
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
Recently, in RHEL-10.0 and RHEL-9.6, the kickstart got a new section %certificate that can install custom CA certificate and make it available already during system installation. This is crucial feature for encrypted DNS in order to enable it already during installation.
%certificate --dir /etc/pki/dns/extracted/pem/ --filename tls-ca-bundle.pem -----BEGIN CERTIFICATE----- <Base64-encoded_certificate_content> -----END CERTIFICATE----- %end
This needs to be supported by ImageBuilder so it can be used to created encrypted DNS installation media.