openstack
/
tripleo-image-elements
Code Issues Proposed changes
tripleo-image-elements/elements/overcloud-partition-uefi
History
Steve Baker 998936c734 Add small /srv volume for optional swift data 
Most tripleo node roles store their state in /var with the exception
of the ObjectStorage role which stores its state in /srv.

This change adds a very small /srv volume which will generally remain
empty.  A documentation change will be proposed which shows how to set
custom growvols values to grow /srv in the rare case that the
ObjectStorage role is used.

Change-Id: Ide8776ffdb62bff46c3df4773fc7b01e9710373f
Blueprint: whole-disk-default
 		2021-08-18 16:18:23 +12:00
..
environment.d Don't depend on block-device elements 2021-06-17 13:52:12 +12:00
post-install.d Unmask and enable tmp.mount for overcloud-partition 2021-06-17 13:52:12 +12:00
README.rst Move partition handling to overcloud-partition / overcloud-partition-uefi 2020-07-21 14:54:50 +00:00
block-device-default.yaml Add small /srv volume for optional swift data 2021-08-18 16:18:23 +12:00
element-deps Depend on growvols element 2021-06-17 13:52:31 +12:00
element-provides Don't depend on block-device elements 2021-06-17 13:52:12 +12:00

README.rst

overcloud-partition-uefi

overcloud-partition-uefi is an element to add extra security hardening features to the tripleo images: partition creation. This element is the equivalent of overcloud-partition one, but is used when needed to build images that are capable of booting from uefi.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.