Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: document the rhel fips known issue #3043

Merged
merged 12 commits into from
Jun 11, 2024
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,16 @@ image with.

<TabItem label="Red Hat Enterprise Linux" value="rhel">

:::warning

When you create a cluster with an Edge host that operates the FIPS-compliant RHEL Operating System (OS), you may
encounter an error where the `systemd-resolved.service` service enters the **failed** state. This prevents the
nameserver from being configured, which will result in cluster deployment failure. Refer to
[TroubleShooting](../../../../troubleshooting/edge.md#scenario---systemd-resolvedservice-enters-failed-state) for a
workaround.

:::

5. Change into the **rhel-fips** directory.

6. In the file **Dockerfile**, provide your RHEL subscription username and password.
Expand Down
6 changes: 6 additions & 0 deletions docs/docs-content/release-notes/release-notes.md
Original file line number Diff line number Diff line change
Expand Up @@ -101,6 +101,12 @@ features and improvements.
successful. For more information about key enrollment, refer to
[Enroll Trusted Boot Keys in Edge Host](../clusters/edge/trusted-boot/deployment-day2/install.md#enroll-secure-boot-keys-into-edge-device).

- Edge hosts with FIPS-compliant RHEL Operating System (OS) distribution may encounter the error where the
`systemd-resolved.service` service enters the **failed** state. This prevents the nameserver from being configured,
which will result in cluster deployment failure. Refer to
[TroubleShooting](../../../../troubleshooting/edge.md#scenario---systemd-resolvedservice-enters-failed-state) for a
workaround.

### Edge

#### Features
Expand Down
24 changes: 23 additions & 1 deletion docs/docs-content/troubleshooting/edge.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ The following are common scenarios that you may encounter when using Edge.

If you need to override or reconfigure the read-only file system, you can do so using the following steps.

## Debug Steps
### Debug Steps

1. Power on the Edge host.

Expand Down Expand Up @@ -136,3 +136,25 @@ issues or not being available. Use the following steps to troubleshoot and resol

7. If you continue to encounter issues, contact our support team by emailing
[[email protected]](mailto:[email protected]) so that we can provide you with further guidance.

## Scenario - systemd-resolved.service Enters Failed State

When you create a cluster with an Edge host that operates the FIPS-compliant RHEL Operating System (OS), you may
encounter an error where the `systemd-resolved.service` process enters the **failed** state. This prevents the
nameserver from being configured, which will result in cluster deployment failure.

### Debug Steps

1. Establish an SSH connection to the Edge host. A
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I thin this sentence got cut off by mistake

lennessyy marked this conversation as resolved.
Show resolved Hide resolved

Alternatively, press the keys **Fn + Ctrl +Cmd + F1** on a keyboard that is connected to the Edge host to log in to
the terminal. If you are on Windows, press **Fn + Ctrl + Alt + F1**.

2. Issue the following command.

```shell
chmod a+rwxt /var/tmp
systemctl enable --now systemd-resolved.service
```

This will start the `systemd-resolved.service` process and move the cluster creation process forward.
Loading