-
Notifications
You must be signed in to change notification settings - Fork 54
OCPBUGS-37943: FIPS based ISO Boot support for s390x arch #472
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
… boot image same as ignition content
@phani2898: An error was encountered searching for bug OCPBUGS-37943 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details. Full error message.
You do not have the permission to see the specified issue.: request failed. Please analyze the request body for more details. Status code: 403:
Please contact an administrator to resolve this issue, then request a bug refresh with In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
@phani2898: An error was encountered searching for bug OCPBUGS-37943 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details. Full error message.
You do not have the permission to see the specified issue.: request failed. Please analyze the request body for more details. Status code: 403:
Please contact an administrator to resolve this issue, then request a bug refresh with In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
@phani2898: An error was encountered searching for bug OCPBUGS-37943 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details. Full error message.
You do not have the permission to see the specified issue.: request failed. Please analyze the request body for more details. Status code: 403:
Please contact an administrator to resolve this issue, then request a bug refresh with In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
@phani2898: An error was encountered searching for bug OCPBUGS-37943 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details. Full error message.
You do not have the permission to see the specified issue.: request failed. Please analyze the request body for more details. Status code: 403:
Please contact an administrator to resolve this issue, then request a bug refresh with In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
/cc @zaneb @andfasano |
Based on previous discussions, the issues preventing the existing
I was under the impression that we had agreed that the solution to this was to have an API that combined the functionality of both |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agree with @zaneb. Let's make the existing implementation work for changing s390x kargs using the json file as input.
Also this approach wouldn't work for SaaS and I think we want this to work the same for ABI and for clusters created in console.redhat.com.
okay sure, will change accordingly. I introduced this new API because we may have to change few input parameters in the existing NewKargsReader to persist both kargs and ignition together in the same cdboot.img file |
@phani2898: An error was encountered searching for bug OCPBUGS-37943 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details. Full error message.
You do not have the permission to see the specified issue.: request failed. Please analyze the request body for more details. Status code: 403:
Please contact an administrator to resolve this issue, then request a bug refresh with In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
@phani2898: An error was encountered searching for bug OCPBUGS-37943 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details. Full error message.
You do not have the permission to see the specified issue.: request failed. Please analyze the request body for more details. Status code: 403:
Please contact an administrator to resolve this issue, then request a bug refresh with In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: phani2898 The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
yes @zaneb, these are the potential issues why it will not work for s390x but even if this logic fetching kargs from kargs.json is fixed still this will not work because both ignition content and kargs are present in the same image As the current logic reads the To fix this issue, we would need the So I had to chose this approach of having new API function After your's and @carbonin suggestion, I went back and tried to look at the code again to refactor my logic with NewKargsReader & overlays itself rather than my approach but having to read from the baseIso itself to appendKargs is where I am unable to proceed ahead and persist both ignition and kargs into cdboot.img I can see why we had to read from baseIso at here because we really don't have an ISO packed with already updated changes by that time we are appending kargs This works fine for x86 because ignition and kargs files are different for it unlike s390x where we have a single image |
@phani2898: The following tests failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Right, this was captured by the 3rd point:
which was why I suggested:
|
Description
Summary
This PR introduces enhancements to the
kargs.go
file, particularly focusing on appending kargs into the boot image itself where ignition is already embedded using the staging ISO boot image files. This is necessary for architecture like s390x where ignition and kargs lies in the same boot image (cdboot.img
) unlike x86 where we have different boot files for booth.It includes a newly added function for embedding kernel arguments into boot images
EmbedKargsIntoBootImage
, plus unit tests for the same to ensure reliability and correctness.Key Enhancements
EmbedKargsIntoBootImage Function
Purpose:
coreos/kargs.jso
instead of calculating it based on the markerCOREOS_KARGS_EMBED_AREA
which is not present in s390x ISO boot filesBenefit: Enhances flexibility and control over boot-time configurations—crucial for architectures needing to embed the kernel parameters into ignition boot images (e.g., s390x).
Rationale: This is created as a public function to make sure it can be accessed from the installer repo to have decision making in the
appendKargs
function to call this function instead NewKargsReader function, which relies on several factors which are not relevant for s390x and also archs having to embed kargs into same boot image as ignition content.How was this code tested?
Unit Tests for EmbedKargsIntoBootImage
The tests simulate real ISO staging scenarios by creating temporary base and staging directories, then exercising both failure cases and success cases.
Failure Scenarios Covered:
Success Scenario:
Functional tests
fips: true
having s390x archfips: false
as wellAssignees
/cc @zaneb
/cc @andfasano
Links
appendKargs
function in a decision making in theinstaller
codebase.Checklist
docs
, README, etc)