Commit b989648cf45d073674677f04ca2ac8b5f7618513
Committed by
Alexander Graf
Alexander Graf
1 parent
7a82c3051c
Exists in
smarc_8mq_lf_v2020.04
and in
11 other branches
doc: README.iscsi: Open-iSCSI configuration
Provide settings for Open-iSCSI Reformat headers. h3-headers marked with ^^^ are not recognized in some markup editors. Use the ### notation instead. Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de> Signed-off-by: Alexander Graf <agraf@suse.de>
Showing 1 changed file with 20 additions and 15 deletions Side-by-side Diff
doc/README.iscsi
| 1 | -iSCSI booting with U-Boot and iPXE | |
| 2 | -================================== | |
| 1 | +# iSCSI booting with U-Boot and iPXE | |
| 3 | 2 | |
| 4 | -Motivation | |
| 5 | ----------- | |
| 3 | +## Motivation | |
| 6 | 4 | |
| 7 | 5 | U-Boot has only a reduced set of supported network protocols. The focus for |
| 8 | 6 | network booting has been on UDP based protocols. A TCP stack and HTTP support |
| ... | ... | @@ -41,8 +39,7 @@ |
| 41 | 39 | iPXE can be built as an EFI application (named snp.efi) which can be loaded and |
| 42 | 40 | run by U-Boot. |
| 43 | 41 | |
| 44 | -Boot sequence | |
| 45 | -------------- | |
| 42 | +## Boot sequence | |
| 46 | 43 | |
| 47 | 44 | U-Boot loads the EFI application iPXE snp.efi using the bootefi command. This |
| 48 | 45 | application has network access via the simple network protocol offered by |
| 49 | 46 | |
| 50 | 47 | |
| ... | ... | @@ -106,19 +103,16 @@ |
| 106 | 103 | | | |
| 107 | 104 | | ~ ~ ~ ~| |
| 108 | 105 | |
| 109 | -Security | |
| 110 | --------- | |
| 106 | +## Security | |
| 111 | 107 | |
| 112 | 108 | The iSCSI protocol is not encrypted. The traffic could be secured using IPsec |
| 113 | 109 | but neither U-Boot nor iPXE does support this. So we should at least separate |
| 114 | 110 | the iSCSI traffic from all other network traffic. This can be achieved using a |
| 115 | 111 | virtual local area network (VLAN). |
| 116 | 112 | |
| 117 | -Configuration | |
| 118 | -------------- | |
| 113 | +## Configuration | |
| 119 | 114 | |
| 120 | -iPXE | |
| 121 | -^^^^ | |
| 115 | +### iPXE | |
| 122 | 116 | |
| 123 | 117 | For running iPXE on arm64 the bin-arm64-efi/snp.efi build target is needed:: |
| 124 | 118 | |
| 125 | 119 | |
| 126 | 120 | |
| ... | ... | @@ -157,10 +151,21 @@ |
| 157 | 151 | #define DOWNLOAD_PROTO_NFS /* Network File System Protocol */ |
| 158 | 152 | #define DOWNLOAD_PROTO_FILE /* Local file system access */ |
| 159 | 153 | |
| 160 | -Links | |
| 161 | ------ | |
| 154 | +### Open-iSCSI | |
| 162 | 155 | |
| 156 | +When the root file system is on an iSCSI drive you should disable pings and set | |
| 157 | +the replacement timer to a high value [3]: | |
| 158 | + | |
| 159 | + node.conn[0].timeo.noop_out_interval = 0 | |
| 160 | + node.conn[0].timeo.noop_out_timeout = 0 | |
| 161 | + node.session.timeo.replacement_timeout = 86400 | |
| 162 | + | |
| 163 | +## Links | |
| 164 | + | |
| 163 | 165 | * [1](https://ipxe.org) https://ipxe.org - iPXE open source boot firmware |
| 164 | 166 | * [2](https://www.gnu.org/software/grub/) https://www.gnu.org/software/grub/ - |
| 165 | - GNU GRUB (Grand Unified Bootloader) | |
| 167 | + GNU GRUB (Grand Unified Bootloader) | |
| 168 | +* [3](https://github.com/open-iscsi/open-iscsi/blob/master/README) | |
| 169 | + https://github.com/open-iscsi/open-iscsi/blob/master/README - | |
| 170 | + Open-iSCSI README |