Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS Build Kit

Product Version

RHEL 7 & 8

Date

20 Jul



Problem

Info

After applying a Build Kit to a RHEL image in Azure, the system now boots in emergency mode

Solution

The below script is causing the issue.

Need to remove the Remove the below script and execute the hardening script, otherwise server will go to emergency mode.

Remove -
/root/CISHardening/CIS-LBK/RHEL8/functions/recommendations/nix_vfat_filesystem_disabled_rec.sh

 

In Azure environment, there is a filesystem /boot/efi” efi which is having uses vfat format by default. The above script is creating the kernel module, which is blocking to mount the mandatory /boot/efi filesystem which leads emergency.

Server Emergenct Emergency mode https://access.redhat.com/solutions/3215551

Note

Highlight important information

Please note that you will need to make adjustments when using Build Kits in the cloud. https://cisecurity.atlassian.net/l/cp/QrE9gPDu

Keywords; Build Kit Linux Cloud CSP RHEL

Content by Label

Filter by label (Content by label)
showLabelsfalse
showSpacefalse
cqllabel = "sbp_fer"

Copyright © 2020 2022

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

Jira Legacy
serverSystem JIRA
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-20494

Created by

Nick Romanzo

July 2022

Reviewed by

Amanda McGown Andrew Dannenberger Allan Cornwell Parami Swenson (Unlicensed) Perfect Tangban (Unlicensed)

Approved by

Amanda McGown

Remove by