siderolabs / talos

Talos Linux is a modern Linux distribution built for Kubernetes.
https://www.talos.dev
Mozilla Public License 2.0
6.39k stars 514 forks source link

FR: Allow `talosctl dmesg` to be called with `--insecure` arg #9013

Open samip5 opened 1 month ago

samip5 commented 1 month ago

Feature Request

Description

There are times when the node is not going to be able to be installed onto, and to better grasp the problem, kernel logs could be useful. However before said node is installed, it's currently not possible to use dmesg with --insecure.

smira commented 1 month ago

This is not available for security reasons at the moment, as maintenance mode runs without PKI.

The best way is to use serial console and grab kernel logs there.

samip5 commented 1 month ago

This is not available for security reasons at the moment, as maintenance mode runs without PKI.

That's understandable, but results in this problem.

The best way is to use serial console and grab kernel logs there.

Unfortunately, the cases were this is usually needed lacks serial console. If we could use eg Omni for just kernel log sink, that could be useful for this, just as an idea.