search

RedHatGov / ssg-el7-kickstart

DVD embedded Kickstart for RHEL 7 utilizing SCAP Security Guide (SSG) as a hardening script.
Other
138 stars 57 forks source link

ssg-el8-kickstart #71

Open foresthus opened 5 years ago

foresthus commented 5 years ago

Hi, will there be a solution for Redhat8?

fcaviggia commented 5 years ago

Eventually, I haven't had a lot of time to maintain this...

fcaviggia commented 5 years ago

Targeting RHEL 8.1 - there needs to be a NIAP (https://www.niap-ccevs.org/) and Common Criteria evaluation to be officially used for national security systems (NSS).

foresthus commented 5 years ago

So I will wait for more informations. thnx

fcaviggia commented 5 years ago

One thing I'd like to do is unify the CentOS and RHEL install process so they are treated the same - I'm also making the kickstart script modular to change out items for static (no-interaction) and GUI (interactive) installations. Still waiting on CentOS 8 to come out...

fcaviggia commented 4 years ago

Looks like CentOS 8 is coming out 24 September - I'll probably start work on it then.

TidyData commented 4 years ago

Big day for 8.1 is here, appreciate your work for these kickstarts. Looking forward to 8.1 : )

fcaviggia commented 4 years ago

I'll finally have some down time to work on side project over the next two weeks - trying to get this done over the break.

agit05 commented 4 years ago

Hi Frank, Any update about the ssg-el8-kickstart? I think for RHEL8 we can use one of the scap profiles (eg. ccdf_org.ssgproject.content_profile_standard), since DISA STIG is still in draft mode. Cheers.

fcaviggia commented 4 years ago

I downloaded RHEL 8.2 - I'm just barley getting time to work on it - I have bigger issues that I'm dealing with right now.

agit05 commented 4 years ago

Ok, trying to help out if possible, I made some adjustment to use the rhel8 image, but I am having small issues with loading of the menu.py after the boot sequence, I know display manager changed, but I am not sure if is crashing before loading it or not. Will continue to investigate.

agit05 commented 4 years ago

May it be that because python is not installed by default the menu.py will not run by default out of the box, so a different approach is needed. Probably kickstarting the install and applying the SCAP profile as described in https://github.com/RedHatGov/rhel8-stig-latest

mithusingh32 commented 4 years ago

@agit05 Anaconda is using python3. I think the issue is the menu.py has python2 code which does not work with python3.

Currently, I made a text-based menu option that applies the STIG via shell script.

nlandas commented 3 years ago

I downloaded RHEL 8.2 - I'm just barley getting time to work on it - I have bigger issues that I'm dealing with right now.

We really appreciate your work on the ssg-elX-kickstart project. Have you had an opportunity to advance the project for RHEL 8.2? Thanks.

fcaviggia commented 3 years ago

I haven't had time to work on CentOS 8 - the major reason is the Dual Layer DVD and re-write to support pyhton3 requirements. I've generally just embedded customized kickstarts and packages on the DVD if I make something custom. I'm doing a lot of standards and cross domain work these days - I haven't had a lot of time to play due to work and life.

gsrutkowski commented 2 years ago

Rather than re-write menu.py for python3, I injected python2.7 and the necessary libraries into the rootfs.img inside the /images/install.img SquashFS. the menu works, and everything seems to install correctly minus a few missing packages on the RHEL8 DVD (screen and pam_pkcs11 being the most memeorable).
whether by intention or not, the config/ directory setup has been beautiful: everything inside is copied into the finished ISO and overwrites what was on the original disks, making it VERY easy to replace .img files and such.