Deploying images is ever evolving topic. Although much of the deployments today are concerned with containers, base systems for container host are somehow needed to be deployed as well. Let me present Saltboot, part of Uyuni stack. Saltboot is building on SaltStack to make image deployment secure and together with Uyuni provides complete image lifecycle and management - from image building, staging to deployment on target machines.

1. Uyuni Saltboot
An Automated Image Deployment And
Lifecycle
openSUSE Conference
project@lists.opensuse.org
oSC22 @openSUSE

2. Uyuni Saltboot

3. © Anouchka Unel

4. configuration management
patch and package management
content lifecycle management
compliance auditing
image building, …

5. configuration management
patch and package management
content lifecycle management
compliance auditing
image building, …

6. Saltboot
salt-integrated initrd
salt states and modules
partitioning and filesystem management
filesystem image deployment concept

7. Saltboot
salt-integrated initrd
salt states and modules
partitioning and filesystem management
filesystem image deployment concept

8. Automated image deployment

9. Images
Kiwi (https://osinside.github.io/kiwi/)
Kernel, Initrd, System (KIS)
Building integrated with Uyuni
Saltboot kiwi templates
(https://github.com/SUSE/manager-build-profiles/)

10. Images
Kiwi (https://osinside.github.io/kiwi/)
Kernel, Initrd, System (KIS)
Building integrated with Uyuni
Saltboot kiwi templates
(https://github.com/SUSE/manager-build-profiles/)

11. Image building
Packages
Image templates
Build hosts
Image repository

12. Package management
Product
Channels
Activation keys

13. Package management
Product
Channels
Activation keys

14. Package management
Product
Channels
Activation keys

15. Image building
Packages ✓
Image templates
Build hosts
Image repository

16. Image profiles
link channels
and image
templates

17. Image building
Packages ✓
Image templates – saltboot templates ✓
Build hosts
Image repository

18. Build hosts
VM or real HW
OS Image
entitlement

19. Image building
Packages ✓
Image templates – saltboot templates ✓
Build hosts ✓
Image repository

20. Image building
Packages ✓
Image templates – saltboot templates ✓
Build hosts ✓
Image repository (Uyuni) ✓

21. Image build
link image
profile with
build host
initiate build

22. Automated image deployment

23. Deployment
manual dd command
PXE and UEFI PXE
HTTP UEFI
...

24. Automated deployment
manual dd command
PXE and UEFI PXE
HTTP UEFI
...

25. PXE, UEFI PXE, UEFI HTTP
DHCP + TFTP
DHCP + HTTP
subnet 192.168.0.0 netmask 255.255.255.0 {
if substring (option vendor-class-identifier, 0, 10) =
"HTTPClient" {
option vendor-class-identifier "HTTPClient";
filename "http://192.168.0.1/saltboot/grub.efi";
} else {
if option arch = 00:07 {
filename "boot/grub.efi";
next-server 192.168.0.1
}
else {
filename "boot/pxelinux.0";
next-server 192.168.0.1
}
}
}

26. TFTP server?
Uyuni Proxy pod
– squid cache
– tftp router
– salt broker
– ssh tunnel

27. Proxy Pod
podman pod
k8s deployment
#> spacecmd proxy_container_config_generate_cert -- proxy.example.org uyuni.example.org 30000
root@example.org -p 8022
#> scp config.tgz containerhost:
#> ssh containerhost -- tar -xf config.tgz -C /etc/uyuni
#> ssh containerhost -- systemctl enable --now uyuni-proxy-pod

28. Automated image deployment

29. Automated image deployment

30. Image? Where? Where to?
Server discovery
Partitioning
Image selection

31. Saltboot Group
Salt pillar data
– group id
– image repo
server
– naming
PXE menu

32. Partitioning
Saltboot pillar
Disk selection and partitioning
Image selection

33. Partitioning
partitioning:
----------
disk:
----------
device:
*
disklabel:
gpt
level:
1
partitions:
----------
p1:
----------
flags:
swap
format:
swap
size_MiB:
2000

34. Hardware type group
Auto assignment of machines to the group
Group with common partitioning setup

35. Automated image deployment

36. Salt and saltboot security
Salt PKI

37. Salt and saltboot security
Salt PKI

38. Salt and saltboot security
Salt PKI
Image validation
Image encryption

39. Automated image deployment

40. Image lifecycle
Uyuni knows what is in the image
– CVE auditing
Manual image rebuilds

41. Q&A

42. https://www.uyuni-project.org/