openstack
/
tripleo-image-elements
Code Issues Proposed changes
tripleo-image-elements/elements/overcloud-partition
History
David Hill 66d1d0beba Move partition handling to overcloud-partition / overcloud-partition-uefi 
Move partition handling to overcloud-partition / overcloud-partition-uefi
as whole-disk images with kernel-rt would be impossible to create due to
dependencies between kernel-rt and kdump/kexec-tools.   We need to be able
to create whole-disk image while some package should not be uninstalled.

Change-Id: I181cf4dc0c0976833e39e4df78a7cff184f0f0b2
 		2020-07-21 14:54:50 +00:00
..
README.rst Move partition handling to overcloud-partition / overcloud-partition-uefi 2020-07-21 14:54:50 +00:00
block-device-default.yaml Move partition handling to overcloud-partition / overcloud-partition-uefi 2020-07-21 14:54:50 +00:00
element-deps Move partition handling to overcloud-partition / overcloud-partition-uefi 2020-07-21 14:54:50 +00:00

README.rst

overcloud-partition

overcloud-partition is an element to add extra security hardening features to the tripleo images: partition creation.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.