Skip to content

Commit

Permalink
changes from peer review
Browse files Browse the repository at this point in the history
  • Loading branch information
SNiemann15 committed May 11, 2023
1 parent 77878b1 commit 64a14ab
Showing 1 changed file with 8 additions and 5 deletions.
13 changes: 8 additions & 5 deletions modules/ibmz-configure-nbde-with-static-ip.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -26,15 +26,15 @@ Enabling NBDE disk encryption in an {ibmzProductName} or {linuxoneProductName} e

.Prerequisites

* You set up the External Tang Server. See link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening#network-bound-disk-encryption_configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption[Network-bound disk encryption] for instructions.
* You have set up the External Tang Server. See link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening#network-bound-disk-encryption_configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption[Network-bound disk encryption] for instructions.
* You have installed the `butane` utility.
* You have reviewed the instructions for how to create machine configs with Butane.
.Procedure

. Create Butane config files for the control plane and compute nodes.
. Create Butane configuration files for the control plane and compute nodes.
+
The following example Butane configuration for a control plane node creates a file named `master-storage.bu` for disk encryption:
The following example of a Butane configuration for a control plane node creates a file named `master-storage.bu` for disk encryption:
+
[source,yaml]
----
Expand Down Expand Up @@ -100,12 +100,12 @@ $ coreos-installer pxe customize \
+
[NOTE]
====
Before first boot, you must customize the initramfs for each node in the cluster and add PXE kernel parameters.
Before first boot, you must customize the initramfs for each node in the cluster, and add PXE kernel parameters.
====

. Create a parameter file that includes `ignition.platform.id=metal` and `ignition.firstboot`.
+
Example kernel parameter file for the control plane machine:
.Example kernel parameter file for the control plane machine:
+
ifndef::ibm-z-kvm[]
[source,terminal]
Expand Down Expand Up @@ -143,7 +143,10 @@ rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000
----
endif::ibm-z-kvm[]
+
[NOTE]
====
Write all options in the parameter file as a single line and make sure you have no newline characters.
====

ifeval::["{context}" == "installing-ibm-z"]
:!ibm-z:
Expand Down

0 comments on commit 64a14ab

Please sign in to comment.