-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-9.6
-
None
-
No
-
Low
-
rhel-anaconda
-
3
-
False
-
False
-
-
No
-
None
-
None
-
None
-
Unspecified Release Note Type - Unknown
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
I was trying to provide a kickstart file via a device with the OEMDRV label so that I don't have to specify inst.ks= on the kernel command line and the kickstart file is loaded automatically. The kickstart file contains a %certificate section with CA certificates for my encrypted DNS server specified on the kernel command line. The installer is booted by using kernel+initrd on a disk or provided via PXE (or any other way, but not having an installation ISO image attached to the system so that stage2 is not loaded automatically from there).
Please provide the package NVR for which the bug is seen:
anaconda-34.25.5.17-1.el9_6
How reproducible is this bug?:
Always
Steps to reproduce
- Create a kickstart file (ks.cfg) with a %certificate section for the eDNS server, define an http URL to the installation source in the kickstart file.
- Create an OEMDRV ISO with the kickstart file:
mkisofs -V OEMDRV -o oemdrv.iso ks.cfg
- Download vmlinuz + initrd.img from the installation repository.
- Boot a VM specifying the encrypted DNS server on the kernel command line and using the oemdrv.iso image:
virt-install --name OEMDRV_TEST --install kernel=vmlinuz,initrd=initrd.img,kernel_args="rd.debug console=ttyS0 ip=192.168.122.10::192.168.122.1:24:client::none rd.net.dns=dns+tls://10.0.196.143#edns-idmops.psi.redhat.com rd.net.dns-backend=dnsconfd rd.net.dns-resolve-mode=exclusive" --osinfo detect=on,require=off --memory 4096 --disk size=20 --network network=default,model=virtio --connect qemu:///system --disk path=oemdrv.iso,device=cdrom
Expected results
The installer fetches the kickstart file from the OEMDRV device and configures necessary services for encrypted DNS resolution in the installer. Stage2 is successfully downloaded from the location defined in the kickstart file.
Actual results
The installer fetches the kickstart file, but it's unable to resolve the host name provided as the installation source.
- relates to
-
RHEL-82694 [RHEL-9] Cannot download kickstart file from remote server when using encrypted DNS signed by trusted CA
-
- Release Pending
-