/
How to apply RHEL Build Kit to Cloud Image

How to apply RHEL Build Kit to Cloud Image


Product Name

CIS Build Kit

Product Version

RHEL 7 & 8

Date

Sep 14, 2022



 

Problem

After applying a Build Kit to a RHEL image in Azure, the system now boots in emergency mode

 

Solution

Remove the below script and execute the hardening script, otherwise server will go to emergency mode.

Remove
/root/CISHardening/CIS-LBK/RHEL8/functions/recommendations/nix_vfat_filesystem_disabled_rec.sh

In Azure environment, there is a filesystem /boot/efi which uses vfat format by default. The above script is creating the kernel module, which is blocking to mount the mandatory /boot/efi filesystem which leads emergency.

Server Emergency mode Can't boot, failed to mount /boot/efi on RHEL - Red Hat Customer

 

Please note that you will need to make adjustments when using Build Kits in the cloud. https://cisecurity.atlassian.net/l/cp/QrE9gPDu

Keywords; Build Kit Linux Cloud CSP RHEL

Content by Label


Copyright © 2022

Center for Internet Security®


 

Related content

Scaling Centralized Scanning - Member Method
Scaling Centralized Scanning - Member Method
Read with this
Issues with automated builds using CIS Hardened Images
Issues with automated builds using CIS Hardened Images
More like this
Extra Registry Settings in Windows Benchmarks
Extra Registry Settings in Windows Benchmarks
Read with this