Skip to content

Conversation

sounix000
Copy link
Contributor

Description

Improve the article on PXE server for SLE 16:

  • Original PR: PED-12471 PXE boot server SLE 16 #475 (merged)
  • PR from Marius Tomaschewski with some of his suggested improvements: PED-12471 PXE boot server SLE 16 improvements #485 (merged).
    • Comments from Cathy Hu about SE Linux are still unresolved.
    • Commit messages from Marius might have important clues.
  • Comments from Marius given on Slack and elsewhere needs to be collated and addressed.
  • Any other comments from any engineer about SELinux and other relevant topics must be addressed in this PR.

Are there any relevant issues/feature requests?

Is this (based on) existing content?

Improvements will be made in the existing article.

@ca-hu
Copy link
Contributor

ca-hu commented Aug 13, 2025

The important changes from the discussion in the meeting from the SELinux side:


Drop these lines, they are not needed because we do not need to create a custom module:
https://github.com/SUSE/doc-modular/blob/main/tasks/sles-pxe-server-prepare-network.xml#L284-L356
https://github.com/SUSE/doc-modular/blob/main/tasks/sles-pxe-server-prepare-network.xml#L381-L400


Here you need to add this command before you start the nginx service:


command: setsebool -P httpd_serve_cobbler_files=1
this can be also added anywhere else, as long as it before you start the nginx service

This allows nginx to serve files from that directory


You need to add this command after finishing the directory structure and before you start the nginx/tftp services
command: restorecon -Rv /srv/tftpboot
for example you could add this here after this section:

This command resets the SELinux labels of the /srv/tftpboot to the one defined in the policy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants