tripleo-image-elements/elements/overcloud-partition-uefi
Steve Baker 0203c0aa63 Shrink whole disk image from 40G to 6G
Now that images are converted to raw on the undercloud we need to
consider the implications of creating a 40G whole-disk image which is
mostly empty.

The raw image file on the undercloud is sparse, so storage space is
not consumed. However transferring from the undercloud to deploying
nodes will transfer all 40G of mostly zeros, and ironic-python-agent
will also write all those zeros to disk during deployment. This makes
deployment unnecessarily slow and will cause network scalabilty issues
for large overcloud deployments.

This change reduces the size of the physical root partition to 6GB,
and makes the logical volumes big enough for space to not run out
during image building. The growvols utility will be used post-deploy
to grow all of the volumes (not just /var).

The growvols playbook now has the following default to ensure all
partitions are grown to an appropriate size:
/=8GB /tmp=1GB /var/log=10GB /var/log/audit=2GB /home=1GB /var=100%

Change-Id: I34b57958ba84714c54ed8148600e7fd0860e3ba8
Blueprint: whole-disk-default
2021-07-09 09:18:54 +12:00
..
environment.d Don't depend on block-device elements 2021-06-17 13:52:12 +12:00
post-install.d Unmask and enable tmp.mount for overcloud-partition 2021-06-17 13:52:12 +12:00
README.rst Move partition handling to overcloud-partition / overcloud-partition-uefi 2020-07-21 14:54:50 +00:00
block-device-default.yaml Shrink whole disk image from 40G to 6G 2021-07-09 09:18:54 +12:00
element-deps Depend on growvols element 2021-06-17 13:52:31 +12:00
element-provides Don't depend on block-device elements 2021-06-17 13:52:12 +12:00

README.rst

overcloud-partition-uefi

overcloud-partition-uefi is an element to add extra security hardening features to the tripleo images: partition creation. This element is the equivalent of overcloud-partition one, but is used when needed to build images that are capable of booting from uefi.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.