Skip to content

Commit

Permalink
Small refinements
Browse files Browse the repository at this point in the history
  • Loading branch information
mudler committed Jan 26, 2024
1 parent 22f8d13 commit 64a4fe8
Showing 1 changed file with 28 additions and 4 deletions.
32 changes: 28 additions & 4 deletions content/en/docs/Installation/trustedboot.md
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ To generate the Secure boot certificates and keys run the following commands:

```bash
# Generate the keys
docker run -v $PWD/keys:/work/keys -ti --rm enki genkey "Kairos" -o /work/keys
docker run -v $PWD/keys:/work/keys -ti --rm enki genkey "My Kairos" -o /work/keys
```

{{% alert title="Warning" %}}
Expand All @@ -72,8 +72,28 @@ A video of the process in QEMU is available [here](https://github.com/kairos-io/

To build the installable medium you need to run the following command:

{{% alert title="Warning" %}}

This method is still a work in progress.
For now build the testing Kairos iso with:

```
# clone the repo
git clone https://github.com/kairos-io/kairos
# cd into the repo
cd kairos
# build the iso with Earthly
earthly +uki-iso --FLAVOR=fedora --FLAVOR_RELEASE=38 --FAMILY=rhel --MODEL=generic --VARIANT=core --BASE_IMAGE=quay.io/kairos/fedora:38-core-amd64-generic-v3.0.0-alpha1
# resulting ISO is in: build/kairos-fedora-38-core-amd64-generic-v3.0.0-alpha1.uki.iso
```

{{% /alert %}}

```bash
CONTAINER_IMAGE=quay.io/kairos/fedora:38-core-amd64-generic-v3.0.0-alpha
CONTAINER_IMAGE=quay.io/kairos/fedora:38-core-amd64-generic-v3.0.0-alpha1
docker run --rm -v $PWD/build:/result -v $PWD/keys/:/keys enki build-uki $CONTAINER_IMAGE -o /result/trustedboot.iso -k /keys
```

Expand All @@ -87,6 +107,10 @@ In order to upgrade a node to a new version of the OS, you need to generate agai

To generate the upgrade image you need to create a naked container image containing containing the EFI files, for example:

{{% alert title="Warning" %}}
Flow not entirely tested/validated yet
{{% /alert %}}

```bash
VERSION=2.5.0-1-g21e04f76.uki
UKI=kairos-fedora-38-core-amd64-generic-v${VERSION}.efi
Expand Down Expand Up @@ -152,11 +176,11 @@ DOCKER

```bash
# console only
docker run --privileged -v $PWD:/work -v /dev/kvm:/dev/kvm --rm -ti fedora-qemu -cdrom /work/kairos-fedora-38-core-amd64-generic-v2.5.0-1-g21e04f76.uki.iso -nographic
docker run --privileged -v $PWD:/work -v /dev/kvm:/dev/kvm --rm -ti fedora-qemu -cdrom /work/kairos-fedora-38-core-amd64-generic-v3.0.0-alpha1.uki.iso -nographic

# GTK (insecure)
# xhost si:localuser:root # give access to root account to connect to the X server socket
# docker run -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix --privileged -v $PWD:/work -v /dev/kvm:/dev/kvm --rm -ti fedora-qemu -cdrom /work/kairos-fedora-38-core-amd64-generic-v2.5.0-1-g21e04f76.uki.iso
# docker run -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix --privileged -v $PWD:/work -v /dev/kvm:/dev/kvm --rm -ti fedora-qemu -cdrom /work/kairos-fedora-38-core-amd64-generic-v3.0.0-alpha1.uki.iso
```

Note: To stop the QEMU container you can use `Ctrl-a x` or `Ctrl-a c` to enter the QEMU console and then `quit` to exit.
Expand Down

0 comments on commit 64a4fe8

Please sign in to comment.