Appending bootloader arguments

Hi!

How do I add kernel arguments, so that they end up in my pxe-grub-menu?
I’ve tried to add it as a parameter in the host-group, as “bootloader-append”, but that seem not to be the way to do it.
I’m trying to blacklist some module and to disable selinux during installation.

I’m using Katello 3.16 under Foreman 2.1, to install Centos 7 & 8.

//Br Christian

Use blacklist_kernel_modules host parameter to blacklist those.

Don’t disable SELinux, use semanage permissive to only disable it for services which you can’t/don’ŧ want to keep in enforcing. :wink:

There’s kernelcmd you can use to modify PXE command options if you need to.

1 Like

Thanks!

Host-group parameter “kernelcmd” really was what I was looking for!

//Br Christian

2 Likes

For the record, here is a rough list of our parameters:

$ ag -o --nonumbers --nofilename 'host_param(|_true\?|_false\?)\([^\)]*\)' app/views/unattended/provisioning_templates | sort -u 
host_param("http-proxy")
host_param("http-proxy-password")
host_param("http-proxy-port")
host_param("http-proxy-user")
host_param("http_proxy")
host_param("subscription_manager_password")
host_param("subscription_manager_username")
host_param('EnableFirewall')
host_param('activation_key')
host_param('additional-packages')
host_param('ansible_host_config_key')
host_param('ansible_job_template_id')
host_param('ansible_port')
host_param('ansible_tower_fqdn')
host_param('ansible_winrm_scheme')
host_param('ansible_winrm_transport')
host_param('atomic_refs_url')
host_param('blacklist')
host_param('blacklist_kernel_modules')
host_param('bmc_ipmi_auth_method')
host_param('bmc_ipmi_channel_id')
host_param('bmc_ipmi_priv_level')
host_param('bootloader-append')
host_param('chef_bootstrap_template')
host_param('computerDomain')
host_param('computerOU')
host_param('default_grub_install_entry')
host_param('device')
host_param('dns_alt_names')
host_param('domainAdminAccount')
host_param('domainAdminAccountPasswd')
host_param('efi_bootentry')
host_param('epel-repo-base')
host_param('etcd_discovery_url')
host_param('force-puppet')
host_param('foremanDebug')
host_param('freeipa_automount_location')
host_param('freeipa_automount_server')
host_param('freeipa_domain')
host_param('freeipa_opts')
host_param('freeipa_server')
host_param('http-proxy')
host_param('http-proxy-password')
host_param('http-proxy-port')
host_param('http-proxy-user')
host_param('install-disk')
host_param('keyboard')
host_param('kickstart_liveimg')
host_param('kt_activation_keys')
host_param('lang')
host_param('liveimg_name')
host_param('loader_timeout')
host_param('localAdminAccountDisabled')
host_param('machinePassword')
host_param('ntp-server')
host_param('ntpServer')
host_param('pkg_list')
host_param('preseed-kernel-image')
host_param('preseed-post-install-upgrade')
host_param('preseed-update-policy')
host_param('reboot-strategy')
host_param('remote_execution_effective_user_method')
host_param('remote_execution_ssh_keys')
host_param('remote_execution_ssh_user')
host_param('salt_grains')
host_param('salt_master')
host_param('selinux')
host_param('selinux-mode')
host_param('sle-module-basesystem-url')
host_param('spacewalk_host')
host_param('ssh_authorized_keys')
host_param('ssh_pwauth')
host_param('subscription_manager_atomic_url')
host_param('subscription_manager_certpkg_url')
host_param('subscription_manager_org')
host_param('subscription_manager_override_repos_cost')
host_param('subscription_manager_password')
host_param('subscription_manager_pool')
host_param('subscription_manager_repos')
host_param('subscription_manager_username')
host_param('syspurpose_addons')
host_param('syspurpose_role')
host_param('syspurpose_sla')
host_param('syspurpose_usage')
host_param('systemLocale')
host_param('systemTimeZone')
host_param('systemUILanguage')
host_param('time-zone')
host_param('wimImageName')
host_param('windowsLicenseKey')
host_param('windowsLicenseOwner')
host_param_false?('enable-epel')
host_param_false?('enable_etcd')
host_param_false?('freeipa_enable_sudo')
host_param_false?('freeipa_mkhomedir')
host_param_false?('freeipa_ssh')
host_param_false?('package_upgrade')
host_param_true?("use-slaac")
host_param_true?('ansible_tower_provisioning')
host_param_true?('atomic')
host_param_true?('atomic-upstream')
host_param_true?('disable-firewall')
host_param_true?('disable-uek')
host_param_true?('enable-puppet5')
host_param_true?('enable-puppet6')
host_param_true?('enable-puppetlabs-puppet5-repo')
host_param_true?('enable-puppetlabs-puppet6-repo')
host_param_true?('enable-puppetlabs-repo')
host_param_true?('enable-saltstack-repo')
host_param_true?('expose_docker_socket')
host_param_true?('fips_enabled')
host_param_true?('force-puppet')
host_param_true?('freeipa_automount')
host_param_true?('only_subscription_manager_repos')
host_param_true?('package_upgrade')
host_param_true?('preseed-live-installer')
host_param_true?('reboot')
host_param_true?('redhat_install_agent')
host_param_true?('redhat_install_host_tools')
host_param_true?('redhat_install_host_tracer_tools')
host_param_true?('remote_execution_create_user')
host_param_true?('run-puppet-in-installer')
host_param_true?('ssh_pwauth')
host_param_true?('subscription_manager')
host_param_true?('use-ntp')
host_param_true?('use-slaac')

/CC @mcorr

2 Likes

This was a hard-to-find-gem!
Thanks again!

//Br Christian

1 Like

Improved command:

$ ag -o --nonumbers --nofilename 'host_param(|_true\?|_false\?)\([^\)]*\)' app/views/unattended/provisioning_templates | egrep -o '(""|'')[A-Za-z0-9_-]+(""|'')' | sort -u
EnableFirewall
activation_key
additional-packages
ansible_host_config_key
ansible_job_template_id
ansible_port
ansible_tower_fqdn
ansible_tower_provisioning
ansible_winrm_scheme
ansible_winrm_transport
atomic
atomic-upstream
atomic_refs_url
blacklist
blacklist_kernel_modules
bmc_ipmi_auth_method
bmc_ipmi_channel_id
bmc_ipmi_priv_level
bootloader-append
chef_bootstrap_template
computerDomain
computerOU
default_grub_install_entry
device
disable-firewall
disable-uek
dns_alt_names
domainAdminAccount
domainAdminAccountPasswd
efi_bootentry
enable-epel
enable-puppet5
enable-puppet6
enable-puppetlabs-puppet5-repo
enable-puppetlabs-puppet6-repo
enable-puppetlabs-repo
enable-saltstack-repo
enable_etcd
epel-repo-base
etcd_discovery_url
expose_docker_socket
fips_enabled
force-puppet
foremanDebug
freeipa_automount
freeipa_automount_location
freeipa_automount_server
freeipa_domain
freeipa_enable_sudo
freeipa_mkhomedir
freeipa_opts
freeipa_server
freeipa_ssh
host_param
host_param_false
host_param_true
http-proxy
http-proxy-password
http-proxy-port
http-proxy-user
http_proxy
install-disk
keyboard
kickstart_liveimg
kt_activation_keys
lang
liveimg_name
loader_timeout
localAdminAccountDisabled
machinePassword
no-resolv-override
ntp-server
ntpServer
only_subscription_manager_repos
package_upgrade
pkg_list
preseed-kernel-image
preseed-live-installer
preseed-post-install-upgrade
preseed-update-policy
reboot
reboot-strategy
redhat_install_agent
redhat_install_host_tools
redhat_install_host_tracer_tools
remote_execution_create_user
remote_execution_effective_user_method
remote_execution_ssh_keys
remote_execution_ssh_user
run-puppet-in-installer
salt_grains
salt_master
selinux
selinux-mode
sle-module-basesystem-url
spacewalk_host
ssh_authorized_keys
ssh_pwauth
subscription_manager
subscription_manager_atomic_url
subscription_manager_certpkg_url
subscription_manager_org
subscription_manager_override_repos_cost
subscription_manager_password
subscription_manager_pool
subscription_manager_repos
subscription_manager_username
syspurpose_addons
syspurpose_role
syspurpose_sla
syspurpose_usage
systemLocale
systemTimeZone
systemUILanguage
time-zone
use-ntp
use-slaac
wimImageName
windowsLicenseKey
windowsLicenseOwner

For the record: Help needed: Document template parameters you know