rpms/lorax-templates-rhel
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Add a boot menu for fips=1

Browse Source 
In RHEL10 it is no longer possible to switch a system to FIPS after it
is installed. Setting fips=1 is documents, but in order to make it
easier for users there should also be a menu entry.

Resolves: RHEL-91929
This commit is contained in:
Brian C. Lane 2025-05-07 09:46:40 -07:00
parent 5f724032d8
commit 5d2bf7ce08
5 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
80-rhel/config_files/aarch64/grub2-efi.cfg
View File

@ -34,6 +34,10 @@ menuentry 'Test this media & install @PRODUCT@ @VERSION@' --class red --class gn
linux @KERNELPATH@ @ROOT@ rd.live.check linux @KERNELPATH@ @ROOT@ rd.live.check
initrd @INITRDPATH@ initrd @INITRDPATH@
} }
menuentry 'Install @PRODUCT@ @VERSION@ in FIPS mode' --class red --class gnu-linux --class gnu --class os {
linux @KERNELPATH@ @ROOT@ ro fips=1
initrd @INITRDPATH@
}
submenu 'Troubleshooting -->' { submenu 'Troubleshooting -->' {
menuentry 'Install @PRODUCT@ @VERSION@ in basic graphics mode' --class red --class gnu-linux --class gnu --class os { menuentry 'Install @PRODUCT@ @VERSION@ in basic graphics mode' --class red --class gnu-linux --class gnu --class os {
linux @KERNELPATH@ @ROOT@ nomodeset linux @KERNELPATH@ @ROOT@ nomodeset

5
80-rhel/config_files/ppc/grub.cfg.in
View File

@ -13,6 +13,11 @@ menuentry "Test this media & install @PRODUCT@ @VERSION@ (64-bit kernel)" --cla
initrd /ppc/ppc64/initrd.img initrd /ppc/ppc64/initrd.img
} }
menuentry "Install @PRODUCT@ @VERSION@ (64-bit kernel) in FIPS mode" --class fedora --class gnu-linux --class gnu --class os {
linux /ppc/ppc64/vmlinuz @ROOT@ ro fips=1
initrd /ppc/ppc64/initrd.img
}
menuentry "Rescue a @PRODUCT@ system (64-bit kernel)" --class fedora --class gnu-linux --class gnu --class os { menuentry "Rescue a @PRODUCT@ system (64-bit kernel)" --class fedora --class gnu-linux --class gnu --class os {
linux /ppc/ppc64/vmlinuz @ROOT@ inst.rescue ro linux /ppc/ppc64/vmlinuz @ROOT@ inst.rescue ro
initrd /ppc/ppc64/initrd.img initrd /ppc/ppc64/initrd.img

4
80-rhel/config_files/x86/grub2-bios.cfg
View File

@ -25,6 +25,10 @@ menuentry 'Test this media & install @PRODUCT@ @VERSION@' --class fedora --class
linux @KERNELPATH@ @ROOT@ rd.live.check quiet linux @KERNELPATH@ @ROOT@ rd.live.check quiet
initrd @INITRDPATH@ initrd @INITRDPATH@
} }
menuentry 'Install @PRODUCT@ @VERSION@ in FIPS mode' --class fedora --class gnu-linux --class gnu --class os {
linux @KERNELPATH@ @ROOT@ quiet fips=1
initrd @INITRDPATH@
}
submenu 'Troubleshooting -->' { submenu 'Troubleshooting -->' {
menuentry 'Install @PRODUCT@ @VERSION@ in basic graphics mode' --class fedora --class gnu-linux --class gnu --class os { menuentry 'Install @PRODUCT@ @VERSION@ in basic graphics mode' --class fedora --class gnu-linux --class gnu --class os {
linux @KERNELPATH@ @ROOT@ nomodeset quiet linux @KERNELPATH@ @ROOT@ nomodeset quiet

4
80-rhel/config_files/x86/grub2-efi.cfg
View File

@ -28,6 +28,10 @@ menuentry 'Test this media & install @PRODUCT@ @VERSION@' --class fedora --class
linuxefi @KERNELPATH@ @ROOT@ rd.live.check quiet linuxefi @KERNELPATH@ @ROOT@ rd.live.check quiet
initrdefi @INITRDPATH@ initrdefi @INITRDPATH@
} }
menuentry 'Install @PRODUCT@ @VERSION@ in FIPS mode' --class fedora --class gnu-linux --class gnu --class os {
linuxefi @KERNELPATH@ @ROOT@ quiet fips=1
initrdefi @INITRDPATH@
}
submenu 'Troubleshooting -->' { submenu 'Troubleshooting -->' {
menuentry 'Install @PRODUCT@ @VERSION@ in basic graphics mode' --class fedora --class gnu-linux --class gnu --class os { menuentry 'Install @PRODUCT@ @VERSION@ in basic graphics mode' --class fedora --class gnu-linux --class gnu --class os {
linuxefi @KERNELPATH@ @ROOT@ nomodeset quiet linuxefi @KERNELPATH@ @ROOT@ nomodeset quiet

5
80-rhel/config_files/x86/isolinux.cfg
View File

@ -69,6 +69,11 @@ label check
kernel vmlinuz kernel vmlinuz
append initrd=initrd.img @ROOT@ rd.live.check quiet append initrd=initrd.img @ROOT@ rd.live.check quiet
label fips
menu label ^Install @PRODUCT@ @VERSION@ in FIPS mode
kernel vmlinuz
append initrd=initrd.img @ROOT@ quiet fips=1
menu separator # insert an empty line menu separator # insert an empty line
# utilities submenu # utilities submenu