starlingx
/
metal
Code Issues Proposed changes

Merge "Support no_check_certificate=True subcloud install option"

This commit is contained in:
Zuul 2022-09-07 18:03:42 +00:00 committed by Gerrit Code Review
parent 62d5805199 e72f234b74
commit c26aacc831
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
kickstart/files/miniboot.cfg
View File

@ -1523,6 +1523,13 @@ if [ "${controller}" = true ] ; then
ilog "Using ostree remote: ${instbr} ${insturl}"
ostree --repo=${repo} remote add ${instbr} ${insturl}
fi
# Check for noverifyssl in boot arguments.
# Note: even if noverifyssl is not set, we still don't have proper support
# for SSL certificates (which would require configuring cert paths here).
if grep -q noverifyssl /proc/cmdline 2>/dev/null; then
ilog "Configuring ostree for unverified SSL"
ostree config --repo=${repo} set "remote \"${instbr}\"".tls-permissive true
fi
ilog "ostree --repo=${repo} pull --depth=-1 --mirror ${instbr}:${instbr}"
ostree --repo=${repo} pull --depth=-1 --mirror ${instbr}:${instbr}