Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

short profile ID isn't accepted in GUI mode but works in text mode #226

Open
jan-cerny opened this issue Nov 22, 2022 · 0 comments
Open

Comments

@jan-cerny
Copy link
Member

jan-cerny commented Nov 22, 2022

During review of the PR #225 we have discovered that when performing a kickstart installation in GUI mode the profile ID in the kickstart needs to be specified in the full XCCDF profile ID form, eg. xccdf_org.ssgproject.content_profile_anssi_bp28_minimal . Using short profile ID, eg. anssi_bp28_minimal doesn't work and cause an error message "profile not found" shown in a red panel in the Security Policy window.

But, in the text mode (text keyword present in the kickstart) it works.

We should either support short IDs or document clearly that they aren't supported.

Steps to reproduce:

virt-install --connect qemu:///system --name oaa_test_rhel8 --memory 4096 --vcpus 2 --disk size=8 --os-variant rhel8.7 --location http://INSERT_URL_HERE/released/rhel-8/RHEL-8/8.7.0/BaseOS/x86_64/os/ -x inst.ks=http://192.168.122.1:8000/rhel8_ks_with_rpm.cfg -x inst.updates=http://192.168.122.1:8000/update.img --network default

In my case the update.img has been created from the top of PR #225.

Kickstart file:

# values saving a lot of clicks in the GUI
lang en_US.UTF-9
keyboard --xlayouts=us --vckeymap=us
timezone Europe/Prague
rootpw aaaaa
bootloader --location=mbr
clearpart --initlabel --all
autopart --type=plain
skipx

url --url=http://INSERT_URL_HERE/released/rhel-8/RHEL-8/8.7.0/BaseOS/x86_64/os/
repo --name appstream --baseurl=http://INSERT_URL_HERE/released/rhel-8/RHEL-8/8.7.0/AppStream/x86_64/os/

%packages
vim
%end

%addon org_fedora_oscap
  content-type = rpm
  content-url = "http://192.168.122.1:8000/scap-security-guide-0.1.63-4.el8.noarch.rpm"
  content-path = usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml
  profile = anssi_bp28_minimal
%end

OS: RHEL 8.7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant