Skip to content

docs/install: Doc direct bootc raw and systemd creds#205

Merged
cgwalters merged 2 commits intoCentOS:mainfrom
cgwalters:doc-bootc-and-systemd-creds
Jan 26, 2024
Merged

docs/install: Doc direct bootc raw and systemd creds#205
cgwalters merged 2 commits intoCentOS:mainfrom
cgwalters:doc-bootc-and-systemd-creds

Conversation

@cgwalters
Copy link
Member

@cgwalters cgwalters commented Jan 25, 2024

Let's link to the existing docs for using bootc install to-disk which fixes some bugs, though we aim to make bib a primary entrypoint for disks.

Second: Let's document using systemd credentials to inject a root SSH key, because this works across every image we ship where one can inject SMBIOS bits. (But notably this doesn't work in most production IaaS virt systems like KubeVirt, AWS etc. which gets into cloud agents).

First, we're still in a situation where bib doesn't work with c9s.
Let's link to the existing docs for using `bootc install to-disk`
which *does* work (and fixes multiple other bugs at the same time too).

Second: Let's document using systemd credentials to inject a root
SSH key, because this works across every image we ship where
one can inject SMBIOS bits.  (But notably this doesn't work in
most production IaaS virt systems like KubeVirt, AWS etc. which
gets into cloud agents).

```bash
-smbios type=11,value=io.systemd.credential.binary:tmpfiles.extra=$(echo "f~ /root/.ssh/authorized_keys 600 root root - $(ssh-add -L | base64 -w 0)" | base64 -w 0)
```
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cool! I've been meaning to try this since lennart's talk on how smbios should be the universal machine config tool

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reference?

Copy link
Collaborator

@sallyom sallyom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@cgwalters cgwalters merged commit 8c72e66 into CentOS:main Jan 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants