Foreman Provisioning Interest Group [October 2025]

I am not 100% sure if I can make it to the meeting as I am on vacation, but I will try as I was hit by several problems with Debian provisioning which I can probably better explain in person. But I will try to describe them here as detailed as I can in the case I can not make it to the meeting.

  • The problem which was the main reason I was at the costumer was caused by them trying to use Grub2 UEFI HTTP to provision Debian which always failed with preseed telling us the preconfiguration file is corrupt. After investigation I found this is caused by the DHCP lease containing supersede server.filename = "http://smart-proxy.example.com:8000/httpboot/host-config/aa-bb-cc-dd-ee-ff/grub2/boot.efi";. I removed the line of code from the Smart Proxy creating the entry as a workaround and verified also AlmaLinux and Ubuntu can be installed without. This breaks bootloader-universe and with this secure boot which is no requirement yet for provisioning. I opened a thread but unfortunately did not get any feedback yet, so I want to ask here if someone has an idea for the root cause and/or how to process!
  • Next question was than about installation repositories as currently there is no support for installing from synced content in Katello, in pulp_deb is only broken support for it. I think noone is working on this currently, but it is something which results in a bad user experience as every OS has now a different way to setup installation media (synced content for EL, manually provide ISO for Ubuntu, stick with upstream for Debian).
  • Next one came up after the system was provisioned and registered with the repositories being by default not structured with all the drawbacks. Is there a reason for this still being the default or could we go for deprecation, migration and have structured repositories as default?
  • Registration itself is also not in a good state as it needs to be done after provisioning, manually or by an Ansible role, which again shows how much Debian is lacking behind.
  • Which brings me to signing the deb repositories which is quite hard to find documentation on. I had to point the customer to it because running out of time and I ended up with a community thread to start jumping on it. Should we get better documentation on this or go further and improve it for example with an UI interface to it?

TLDR: Debian Provisioning is not in the best shape, can we improve?

3 Likes