Files
tripleo-image-elements/elements/overcloud-secure-uefi
Bob Fournier 37b74a670a Remove note in README regarding security hardened images
Support for security hardened images was delivered in Queens, not as
TechPreview.  Removing the section of README that indicates it is
TechPreview.

Change-Id: I579b1fdedcd23f8d004bb9ca6c8fedd29c33ac7c
2019-05-22 15:58:25 -04:00
..
2018-06-19 13:50:52 +02:00

overcloud-secure-uefi

overcloud-secure-uefi is an element to add extra security hardening features to the tripleo images: partition creation and unsafe package uninstall. This element is the equivalent of overcloud-secure one, but is used when needed to build images that are capable of booting from uefi.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.