[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Netinstall over HTTPS with Custom Image

On Thu, May 13, 2021 at 02:00:01PM -0700, Nick Pleatsikas wrote:
> Hello,
> There’s a net install setup that I’m having trouble with
>  ...
> Essentially here is the scenario:
> We have a custom Debian image
> want to be able to remotely install this image using PXE.
> However, in order to meet certain security requirements,
> the remote systems have to PXE boot over HTTPS.
>  ...
> but if I’m going wildly in the wrong direction here I’m all
> ears for a better solution. If there’s anything you want me to clarify or
> try out, let me know and I’ll get back to you.

I see two solutions:
* Reconcider the security requirement a.k.a. be aware of how unsafe
  the environment is where the install happens.
* Abandon the idea of an image, transfer smaller parts over HTTPS.

> Thanks,
> Nick Pleatsikas
> Site Reliability Engineer, ByteDance
> Email: nick.pleatsikas@bytedance.com

Geert Stappers
Silence is hard to parse

Reply to: