Comments (2)
Hey @ygao-armada , mind sharing your full Tinkerbell workflow? A few things to note:
/dev/
is not what the OS will see but what in the in memory HookOS sees. Anything like/dev/mapper
will not be persistent after a reboot.- A reboot from HookOS not asking for a passphrase is expected, in my view, as the encrypted disk was never booted into.
- All your actions need to be sure they are working against the disk device and you are using chroot otherwise you'll lose any setup/configuration you've done.
from eks-anywhere.
@jacobweinstock thanks for your explanation.
Do you plan to make the change so we can get consistent experience with HookOS and later the OS installed on the disk w.r.t /dev especially /dev/mapper, and also reboot asking for passphrase, and the config in /etc ?
My full Tinkerbell workflow is in the EKS anywhere machine template, the main ones are the last 2, "partition_cmds" and "reboot":
tasks:
- actions:
- environment:
COMPRESSED: "true"
DEST_DISK: /dev/sda
IMG_URL: <urlprefix>/ubuntu-2004-efi-eksa-sp-kube-v1.26.7.gz
image: public.ecr.aws/eks-anywhere/tinkerbell/hub/image2disk:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-15
name: stream-image
timeout: 2400
- environment:
CONTENTS: |
datasource:
Ec2:
metadata_urls: <urls>
strict_id: false
manage_etc_hosts: localhost
warnings:
dsid_missing_source: off
DEST_DISK: /dev/sda2
DEST_PATH: /etc/cloud/cloud.cfg.d/10_tinkerbell.cfg
DIRMODE: "0700"
FS_TYPE: ext4
GID: "0"
MODE: "0600"
UID: "0"
image: public.ecr.aws/eks-anywhere/tinkerbell/hub/writefile:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-15
name: add-tink-cloud-init-config
timeout: 90
- environment:
CONTENTS: |
network:
config: disabled
DEST_DISK: /dev/sda2
DEST_PATH: /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg
DIRMODE: "0700"
FS_TYPE: ext4
GID: "0"
MODE: "0600"
UID: "0"
image: public.ecr.aws/eks-anywhere/tinkerbell/hub/writefile:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-15
name: disable-cloud-init-network-capabilities
timeout: 90
- environment:
CONTENTS: |
datasource: Ec2
DEST_DISK: /dev/sda2
DEST_PATH: /etc/cloud/ds-identify.cfg
DIRMODE: "0700"
FS_TYPE: ext4
GID: "0"
MODE: "0600"
UID: "0"
image: public.ecr.aws/eks-anywhere/tinkerbell/hub/writefile:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-15
name: add-tink-cloud-init-ds-config
timeout: 90
- environment:
BLOCK_DEVICE: /dev/sda2
CHROOT: "y"
CMD_LINE: apt -y update && apt -y install openssl
DEFAULT_INTERPRETER: /bin/sh -c
FS_TYPE: ext4
image: public.ecr.aws/eks-anywhere/tinkerbell/hub/cexec:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-41
name: install-openssl
timeout: 90
- environment:
BLOCK_DEVICE: /dev/sda2
image: armadaeksatest.azurecr.io/disk_action:v0.1
name: partition-cmds
timeout: 120
- environment:
BLOCK_DEVICE: /dev/sda2
FS_TYPE: ext4
CHROOT: "y"
DEFAULT_INTERPRETER: "/bin/sh -c"
CMD_LINE: "useradd --password $(openssl passwd -1 tinkerbell) --shell /bin/bash --create-home --groups sudo tinkerbell"
image: public.ecr.aws/l0g8r8j6/tinkerbell/hub/cexec:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-v0.0.0-dev-build.2301
name: "create-user"
timeout: 90
- environment:
BLOCK_DEVICE: /dev/sda2
image: <prefix>disk_action:v0.1
name: partition-cmds
timeout: 120
- name: "reboot"
image: public.ecr.aws/eks-anywhere/tinkerbell/hub/reboot:6c0f0d437bde2c836d90b000312c8b25fa1b65e1-eks-a-15
timeout: 90
volumes:
- /worker:/worker
name: mgmt02
volumes:
- /dev:/dev
- /dev/console:/dev/console
- /lib/firmware:/lib/firmware:ro
worker: '{{.device_1}}'
version: "0.1"
from eks-anywhere.
Related Issues (20)
- Deprecate Prepare DHCP IP addresses pool documentation
- image-builder build for ubuntu 22.04 baremetal failing with "qemu: Timeout waiting for SSH" HOT 3
- NVIDIA GPU Operator with vSphere
- eksctl anywhere upgrade cluster fails to feed with the extra machines in hardware.csv
- [Bare Metal] Workload cluster scale out CLI validations fails with generated ssh keys
- [Bare Metal] Auto generated SSH key doesn't work
- [Bare Metal] Scale out of workload cluster worker node group cause control plane to roll HOT 3
- Add preflight validation to check that cluster name length is not more than 36 characters
- Update doc site to replace legacy ECR registry for accessing curated packages
- Support using different vsphere credentials between management and its workload clusters
- Document steps to upgrade management and workload clusters with new thumbprint
- Properly handle vSphere thumbprint updates
- Image-builder and ansible incompatibility HOT 5
- EKS v0.19.5 Creating cluster in Docker fails at some point HOT 3
- Add preflight check on custom CNI during upgrade
- CoreDNS timeout on vSphere cluster when resolve a service HOT 2
- EKSA Packages Release Runbook
- Failed to install the optional EKS-A Curated Package Controller with env kubeconfig is set
- EKSA bare metal cluster scale-in doesn't honor new hardware.csv file HOT 4
- Image Builder fails to create Ubuntu Image on Bare Metal HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from eks-anywhere.