Skip to content

Automated installer using PXE or iPXE #51

@travier-anssi

Description

@travier-anssi

In order to install and provision a lot of CLIP OS systems at the same time, we need an automated installer, started over PXE or iPXE.

Required functionality

Server

  • PXE or iPXE server to serve the installer image
  • HTTPS server to serve profiles and system images
  • Server to serve secrets (certificates for IPsec, etc.) and receive escrow keys (backup LUKS passphrase).

Installer

  • Installer image build from a standard Linux distribution (Debian preferred) with tools pre-installed
  • Automatic hardware profile discovery
  • Automatic partitioning
  • LUKS escrow key generation or derivation using entropy potentially provided by the server
  • State partition configuration pulled from server
  • Secrets installation

The current "work-in-progress" installation script is available in those two Gerrit change sets: 1 2.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions