Bug 2010700

Summary:	BMC driver ipmi is not supported for secure UEFI boot in Dual stack deployment
Product:	OpenShift Container Platform	Reporter:	Jatan Malde <jmalde>
Component:	Documentation	Assignee:	John Wilkins <jowilkin>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Xiaoli Tian <xtian>
Severity:	high	Docs Contact:	Tomas 'Sheldon' Radej <tradej>
Priority:	unspecified
Version:	4.8	CC:	aos-bugs, dmoessne, jokerman, tradej
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	2011893 (view as bug list)		Environment:
Last Closed:	2021-11-02 15:58:21 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2011893

Description Jatan Malde 2021-10-05 11:34:22 UTC

Document URL: 

https://docs.openshift.com/container-platform/4.8/installing/installing_bare_metal_ipi/ipi-install-installation-workflow.html#configuring-managed-secure-boot-in-the-install-config-file_ipi-install-configuration-files

Section Number and Name: 

Configuring managed Secure Boot in the install-config.yaml file (optional)

Describe the issue: 

 The above documentation mentions an example of using ipmi driver along with UEFISecureBoot when Dual stack deployment is done for OpenShift IPI installation. 

 But when the ipmi driver is used for HP DL 360 Gen 10 with iLO5 machines, it gives the error as the ipmi driver is not supported for secure boot. 

 If the above is correct then the documentation should include the Note or example of the driver which is supported with secure boot. 

 Checking the attachment included in the bugzilla. 

Suggestions for improvement: 

Additional information:

Comment 2 Dmitry Tantsur 2021-10-05 13:16:33 UTC

Hi! This is correct, only Redfish-based drivers are supported now.

Comment 3 Dmitry Tantsur 2021-10-07 09:26:04 UTC

To elaborate: IPMI does not provide secure boot management facilities. All redfish based drivers (redfish, redfish-virtualmedia and idrac-virtualmedia) support it. I'm not 100% sure about the iRMC status: they have the related code in place, but the ball is on the Fujitsu's side on whether to support it.

Comment 4 John Wilkins 2021-10-13 05:26:30 UTC

https://github.com/openshift/openshift-docs/pull/37425

Comment 5 John Wilkins 2021-10-13 20:13:40 UTC

Verified and merged.