Andrey Smirnov
Andrey Smirnov
I think installer started, but not sure why it seems to be hanging.
I'm curious what might be wrong with your specific setup, but I have no clue. It seems to be hanging around very simple initial setup, but we don't have more...
Ah, remove `wipe: true` from your machine config.
I can't say anything without logs. Capture the installation logs and we can go from it.
This goes against the security - in my opinion embedded machine configuration should be measured as well. Also embedding into the UKI means that it works for PXE booting, covering...
> I forgot about `talos.config=metal-iso`. Will that work for a partial machine config e.g. just network settings via the new multi doc network resources as well? yes, it doesn't matter...
> [@smira](https://github.com/smira) would there be any chance to add a feature that would enable the user to specify a public key in the kernel arguments, and that would use that...
I don't like the idea of providing yet another public key just for config verificaiton. There might be some other way, like signing on the valid PCR values during image...
It just feels that this feature request is more of "I want to solve my own problem". PR is fine, but maintaining and testing this feature would be on us...
There is no support for masquerade/NAT actions in the firewall. Moreover, today the only supported configuration is Ingress Firewall.