diff --git a/static/docs/main/_images/graphviz-45530e0b437388de246c86a5b4638e7b3654235b.png b/static/docs/main/_images/graphviz-45530e0b437388de246c86a5b4638e7b3654235b.png new file mode 100644 index 00000000..656dd5d7 Binary files /dev/null and b/static/docs/main/_images/graphviz-45530e0b437388de246c86a5b4638e7b3654235b.png differ diff --git a/static/docs/main/_images/graphviz-45530e0b437388de246c86a5b4638e7b3654235b.png.map b/static/docs/main/_images/graphviz-45530e0b437388de246c86a5b4638e7b3654235b.png.map new file mode 100644 index 00000000..8be6a309 --- /dev/null +++ b/static/docs/main/_images/graphviz-45530e0b437388de246c86a5b4638e7b3654235b.png.map @@ -0,0 +1,2 @@ + + diff --git a/static/docs/main/_images/graphviz-5cb5701ea7fd182b13828ac567d21b2e09945929.png b/static/docs/main/_images/graphviz-5cb5701ea7fd182b13828ac567d21b2e09945929.png new file mode 100644 index 00000000..7f88dc9e Binary files /dev/null and b/static/docs/main/_images/graphviz-5cb5701ea7fd182b13828ac567d21b2e09945929.png differ diff --git a/static/docs/main/_images/graphviz-5cb5701ea7fd182b13828ac567d21b2e09945929.png.map b/static/docs/main/_images/graphviz-5cb5701ea7fd182b13828ac567d21b2e09945929.png.map new file mode 100644 index 00000000..8be6a309 --- /dev/null +++ b/static/docs/main/_images/graphviz-5cb5701ea7fd182b13828ac567d21b2e09945929.png.map @@ -0,0 +1,2 @@ + + diff --git a/static/docs/main/_images/graphviz-87f2b5a9fa342f42cc8028f4a60d24c3ea795fd3.png b/static/docs/main/_images/graphviz-87f2b5a9fa342f42cc8028f4a60d24c3ea795fd3.png new file mode 100644 index 00000000..79e8dff8 Binary files /dev/null and b/static/docs/main/_images/graphviz-87f2b5a9fa342f42cc8028f4a60d24c3ea795fd3.png differ diff --git a/static/docs/main/_images/graphviz-87f2b5a9fa342f42cc8028f4a60d24c3ea795fd3.png.map b/static/docs/main/_images/graphviz-87f2b5a9fa342f42cc8028f4a60d24c3ea795fd3.png.map new file mode 100644 index 00000000..649d660c --- /dev/null +++ b/static/docs/main/_images/graphviz-87f2b5a9fa342f42cc8028f4a60d24c3ea795fd3.png.map @@ -0,0 +1,2 @@ + + diff --git a/static/docs/main/_images/graphviz-8be43717679b33953ee198ed82f1999c0ddd0b61.png b/static/docs/main/_images/graphviz-8be43717679b33953ee198ed82f1999c0ddd0b61.png new file mode 100644 index 00000000..67542884 Binary files /dev/null and b/static/docs/main/_images/graphviz-8be43717679b33953ee198ed82f1999c0ddd0b61.png differ diff --git a/static/docs/main/_images/graphviz-8be43717679b33953ee198ed82f1999c0ddd0b61.png.map b/static/docs/main/_images/graphviz-8be43717679b33953ee198ed82f1999c0ddd0b61.png.map new file mode 100644 index 00000000..8be6a309 --- /dev/null +++ b/static/docs/main/_images/graphviz-8be43717679b33953ee198ed82f1999c0ddd0b61.png.map @@ -0,0 +1,2 @@ + + diff --git a/static/docs/main/_sources/contents/setup.rst.txt b/static/docs/main/_sources/contents/setup.rst.txt index 1c11f03d..6f2773d7 100644 --- a/static/docs/main/_sources/contents/setup.rst.txt +++ b/static/docs/main/_sources/contents/setup.rst.txt @@ -75,7 +75,7 @@ Here is an example of how the cluster's address can be divided for a Multiple networks ================= -It is possible to configure several networks not just for the nodes but also for the management of ``dhcpd`` and ``tftp``. +It is possible to configure several networks not just for the nodes but also for the management of ``dhcpd`` and ``tftp``. There are two ways to achive this: 1. Add the networks to the templates of ``dhcpd`` and/or the ``dnsmasq`` template directly. @@ -113,33 +113,33 @@ You can check the result with ``wwctl node list``. .. code-block:: console # wwctl node list -a deliverynet - NODE FIELD PROFILE VALUE - deliverynet Id -- deliverynet - deliverynet Comment default This profile is automatically included for each node - deliverynet ContainerName default leap15.5 - deliverynet Ipxe -- (default) - deliverynet RuntimeOverlay -- (generic) - deliverynet SystemOverlay -- (wwinit) - deliverynet Root -- (initramfs) - deliverynet Init -- (/sbin/init) - deliverynet Kernel.Args -- (quiet crashkernel=no vga=791 net.naming-scheme=v238) - deliverynet Profiles -- default - deliverynet PrimaryNetDev -- (deliver1) - deliverynet NetDevs[deliver2].Type -- (ethernet) - deliverynet NetDevs[deliver2].OnBoot -- (true) - deliverynet NetDevs[deliver2].Ipaddr -- 10.0.30.250 - deliverynet NetDevs[deliver2].Netmask -- 255.255.255.0 - deliverynet NetDevs[deliver2].Tags[dynend] -- 10.10.30.50 - deliverynet NetDevs[deliver2].Tags[dynstart] -- 10.10.30.10 - deliverynet NetDevs[deliver2].Tags[network] -- 10.0.30.0 - deliverynet NetDevs[deliver1].Type -- (ethernet) - deliverynet NetDevs[deliver1].OnBoot -- (true) - deliverynet NetDevs[deliver1].Ipaddr -- 10.0.20.250 - deliverynet NetDevs[deliver1].Netmask -- 255.255.255.0 - deliverynet NetDevs[deliver1].Primary -- (true) - deliverynet NetDevs[deliver1].Tags[network] -- 10.0.20.0 - deliverynet NetDevs[deliver1].Tags[dynend] -- 10.10.20.50 - deliverynet NetDevs[deliver1].Tags[dynstart] -- 10.10.20.10 + NODE FIELD PROFILE VALUE + deliverynet Id -- deliverynet + deliverynet Comment default This profile is automatically included for each node + deliverynet ContainerName default leap15.5 + deliverynet Ipxe -- (default) + deliverynet RuntimeOverlay -- (generic) + deliverynet SystemOverlay -- (wwinit) + deliverynet Root -- (initramfs) + deliverynet Init -- (/sbin/init) + deliverynet Kernel.Args -- (quiet crashkernel=no vga=791 net.naming-scheme=v238) + deliverynet Profiles -- default + deliverynet PrimaryNetDev -- (deliver1) + deliverynet NetDevs[deliver2].Type -- (ethernet) + deliverynet NetDevs[deliver2].OnBoot -- (true) + deliverynet NetDevs[deliver2].Ipaddr -- 10.0.30.250 + deliverynet NetDevs[deliver2].Netmask -- 255.255.255.0 + deliverynet NetDevs[deliver2].Tags[dynend] -- 10.10.30.50 + deliverynet NetDevs[deliver2].Tags[dynstart] -- 10.10.30.10 + deliverynet NetDevs[deliver2].Tags[network] -- 10.0.30.0 + deliverynet NetDevs[deliver1].Type -- (ethernet) + deliverynet NetDevs[deliver1].OnBoot -- (true) + deliverynet NetDevs[deliver1].Ipaddr -- 10.0.20.250 + deliverynet NetDevs[deliver1].Netmask -- 255.255.255.0 + deliverynet NetDevs[deliver1].Primary -- (true) + deliverynet NetDevs[deliver1].Tags[network] -- 10.0.20.0 + deliverynet NetDevs[deliver1].Tags[dynend] -- 10.10.20.50 + deliverynet NetDevs[deliver1].Tags[dynstart] -- 10.10.20.10 Now the templates of ``dhcpd`` and/or ``dnsmasq`` must be modified. You can edit the configuration files. diff --git a/static/docs/main/contents/boot-management.html b/static/docs/main/contents/boot-management.html index 461f50fe..a24a7b7a 100644 --- a/static/docs/main/contents/boot-management.html +++ b/static/docs/main/contents/boot-management.html @@ -127,7 +127,7 @@

Boot Management

Booting with iPXE

-digraph G{ +
digraph G{ node [shape=box]; compound=true; edge [label2node=true] @@ -144,12 +144,13 @@ <h2>Booting with iPXE<a class=
+

Booting with GRUB

Support for GRUB as a network bootloader (replacing iPXE) is available in Warewulf as a technology preview.

-digraph G{ +
digraph G{ node [shape=box]; compound=true; edge [label2node=true] @@ -166,7 +167,8 @@ <h2>Booting with GRUB<a class=shim and GRUB can be used with the +}" class="graphviz" />
+

Instead of the iPXE starter a combination of shim and GRUB can be used with the advantage that secure boot can be used. That means that only the signed kernel of a distribution can be booted. This can be a huge security benefit for some scenarios.

@@ -175,7 +177,7 @@

Booting with GRUB

Secure boot

-digraph foo { +
digraph foo { node [shape=box]; subgraph boot { "EFI" [label="EFI",row=boot]; @@ -186,7 +188,8 @@ <h3>Secure boot<a class=
+

If secure boot is enabled at every step a signature is checked and the boot process fails if this check fails. The shim typically only includes the key for a single operating system, which means that each distribution needs separate shim and grub executables. Warewulf extracts these binaries from the @@ -212,7 +215,7 @@

Install shim and efihttp boot

Modern EFI systems have the possibility to directly boot per http. The flow diagram is the following:

-digraph G{ +
digraph G{ node [shape=box]; efi [shape=record label="{EFI|boots from URI defined in filename}"]; shim [shape=record label="{shim.efi|replaces shim.efi with grubx64.efi in URI|extracted from node container}"]; @@ -221,7 +224,8 @@ <h3>http boot<a class=
+

Warewulf delivers the initial shim.efi and grub.efi via http as taken directly from the node’s assigned container.