Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-82711

Encrypted DNS doesn't work when using kickstart file on media with OEMDRV label (when inst.ks is not specified on the kernel cmdline)

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-9.6
    • anaconda
    • None
    • No
    • Low
    • rhel-anaconda
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • None
    • None
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      I was trying to provide a kickstart file via a device with the OEMDRV label so that I don't have to specify inst.ks= on the kernel command line and the kickstart file is loaded automatically. The kickstart file contains a %certificate section with CA certificates for my encrypted DNS server specified on the kernel command line. The installer is booted by using kernel+initrd on a disk or provided via PXE (or any other way, but not having an installation ISO image attached to the system so that stage2 is not loaded automatically from there).

      Please provide the package NVR for which the bug is seen:

      anaconda-34.25.5.17-1.el9_6

      How reproducible is this bug?:

      Always

      Steps to reproduce

      1. Create a kickstart file (ks.cfg) with a %certificate section for the eDNS server, define an http URL to the installation source in the kickstart file.
      2. Create an OEMDRV ISO with the kickstart file:
        mkisofs -V OEMDRV -o oemdrv.iso ks.cfg
        
      1. Download vmlinuz + initrd.img from the installation repository.
      2. Boot a VM specifying the encrypted DNS server on the kernel command line and using the oemdrv.iso image:
        virt-install --name OEMDRV_TEST --install kernel=vmlinuz,initrd=initrd.img,kernel_args="rd.debug console=ttyS0 ip=192.168.122.10::192.168.122.1:24:client::none rd.net.dns=dns+tls://10.0.196.143#edns-idmops.psi.redhat.com rd.net.dns-backend=dnsconfd rd.net.dns-resolve-mode=exclusive" --osinfo detect=on,require=off --memory 4096 --disk size=20 --network network=default,model=virtio --connect qemu:///system --disk path=oemdrv.iso,device=cdrom
        

      Expected results

      The installer fetches the kickstart file from the OEMDRV device and configures necessary services for encrypted DNS resolution in the installer. Stage2 is successfully downloaded from the location defined in the kickstart file.

      Actual results

      The installer fetches the kickstart file, but it's unable to resolve the host name provided as the installation source.

              anaconda-maint-list anaconda-maint-list
              jstodola@redhat.com Jan Stodola
              anaconda-maint-list anaconda-maint-list
              Release Test Team Release Test Team
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: