Re: Netinstall over HTTPS with Custom Image
On Thu, May 13, 2021 at 02:00:01PM -0700, Nick Pleatsikas wrote:
> Hello,
>
> There’s a net install setup that I’m having trouble with
> ...
> Essentially here is the scenario:
>
> We have a custom Debian image
> want to be able to remotely install this image using PXE.
> However, in order to meet certain security requirements,
> the remote systems have to PXE boot over HTTPS.
> ...
> but if I’m going wildly in the wrong direction here I’m all
> ears for a better solution. If there’s anything you want me to clarify or
> try out, let me know and I’ll get back to you.
I see two solutions:
* Reconcider the security requirement a.k.a. be aware of how unsafe
the environment is where the install happens.
* Abandon the idea of an image, transfer smaller parts over HTTPS.
> Thanks,
>
> Nick Pleatsikas
> Site Reliability Engineer, ByteDance
> Email: nick.pleatsikas@bytedance.com
Groeten
Geert Stappers
--
Silence is hard to parse
Reply to: