]> git.ipfire.org Git - thirdparty/dracut.git/blame - dracut.cmdline.7.asc
dmsquash-live: add /dev/mapper/live-base
[thirdparty/dracut.git] / dracut.cmdline.7.asc
CommitLineData
888d53f2
HH
1DRACUT.CMDLINE(7)
2=================
3:doctype: manpage
4:man source: dracut
5:man manual: dracut
6
7NAME
8----
9dracut.cmdline - dracut kernel command line options
10
11DESCRIPTION
12-----------
13The root device used by the kernel is specified in the boot configuration
14file on the kernel command line, as always.
15
16The traditional _root=/dev/sda1_ style device specification is allowed, but not
17encouraged. The root device should better be identified by LABEL or UUID. If a
18label is used, as in _root=LABEL=<label_of_root>_ the initramfs will search all
19available devices for a filesystem with the appropriate label, and mount that
20device as the root filesystem. _root=UUID=<uuidnumber>_ will mount the partition
21with that UUID as the root filesystem.
22
23In the following all kernel command line parameters, which are processed by
24dracut, are described.
25
26"rd.*" parameters mentioned without "=" are boolean parameters. They can be
27turned on/off by setting them to {0|1}. If the assignment with "=" is missing
28"=1" is implied. For example _rd.info_ can be turned off with _rd.info=0_ or
29turned on with _rd.info=1_ or _rd.info_. The last value in the kernel command
30line is the value, which is honored.
31
32Standard
33~~~~~~~~
b6c89768 34**init=**__<path to real init>__::
888d53f2
HH
35 specify the path to the init programm to be started after the initramfs has
36 finished
37
b6c89768 38**root=**__<path to blockdevice>__::
888d53f2
HH
39 specify the block device to use as the root filesystem.
40+
b6c89768
HH
41[listing]
42.Example
43--
888d53f2
HH
44root=/dev/sda1
45root=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
46root=/dev/disk/by-label/Root
47root=LABEL=Root
48root=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
49root=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b23a2837 50root=PARTUUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b6c89768 51--
888d53f2 52
b6c89768 53**rootfstype=**__<filesystem type>__:: "auto" if not specified.
888d53f2 54+
b6c89768
HH
55[listing]
56.Example
57--
888d53f2 58rootfstype=ext3
b6c89768 59--
888d53f2 60
b6c89768 61**rootflags=**__<mount options>__::
888d53f2
HH
62 specify additional mount options for the root filesystem. If not set,
63 _/etc/fstab_ of the real root will be parsed for special mount options and
64 mounted accordingly.
65
5afa9579
66**ro**::
67 force mounting _/_ and _/usr_ (if it is a separate device) read-only. If
68 none of ro and rw is present, both are mounted according to _/etc/fstab_.
69
70**rw**::
71 force mounting _/_ and _/usr_ (if it is a separate device) read-write.
72 See also ro option.
73
b6c89768 74**rootfallback=**__<path to blockdevice>__::
c4c1c4f4
HH
75 specify the block device to use as the root filesystem, if the normal root cannot be found.
76 This can only be a simple block device with a simple file system, for which the filesystem
77 driver is either compiled in, or added manually to the initramfs.
78 This parameter can be specified multiple times.
79
a6332e69 80**rd.auto** **rd.auto=1**::
e0641277
HH
81 enable autoassembly of special devices like cryptoLUKS, dmraid, mdraid or lvm.
82 Default is off as of dracut version >= 024.
83
888d53f2
HH
84**rd.fstab=0**::
85 do not honor special mount options for the root filesystem found in
86 _/etc/fstab_ of the real root.
87
b6c89768 88**resume=**__<path to resume partition>__::
5d0404e3 89 resume from a swap partition
97903dfc 90+
b6c89768
HH
91[listing]
92.Example
93--
97903dfc
HH
94resume=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
95resume=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
96resume=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b6c89768 97--
97903dfc 98
9fb01d49
99**rd.skipfsck**::
100 skip fsck for rootfs and _/usr_. If you're mounting _/usr_ read-only and
101 the init system performs fsck before remount, you might want to use this
102 option to avoid duplication.
97903dfc 103
2ee48b4b 104
888d53f2
HH
105Misc
106~~~~
b6c89768 107**rd.driver.blacklist=**__<drivername>__[,__<drivername>__,...]::
888d53f2
HH
108 do not load kernel module <drivername>. This parameter can be specified
109 multiple times.
110
b6c89768 111**rd.driver.pre=**__<drivername>__[,__<drivername>__,...]::
888d53f2
HH
112 force loading kernel module <drivername>. This parameter can be specified
113 multiple times.
114
b6c89768 115**rd.driver.post=**__<drivername>__[,__<drivername>__,...]::
888d53f2
HH
116 force loading kernel module <drivername> after all automatic loading modules
117 have been loaded. This parameter can be specified multiple times.
118
b6c89768 119**rd.retry=**__<seconds>__::
5cd7c104
HH
120 specify how long dracut should wait for devices to appear.
121 The default is 30 seconds. After 2/3 of the time, degraded raids are force
52da8a51
HH
122 started. If you have hardware, which takes a very long time to announce its
123 drives, you might want to extend this value.
5cd7c104 124
13cb578a
BL
125**rd.noverifyssl**::
126 accept self-signed certificates for ssl downloads.
127
b6c89768 128**rd.ctty=**__<terminal device>__::
14986b9d
HH
129 specify the controlling terminal for the console.
130 This is useful, if you have multiple "console=" arguments.
131
888d53f2
HH
132[[dracutkerneldebug]]
133Debug
134~~~~~
c33488fe 135If you are dropped to an emergency shell, the file _/run/initramfs/rdsosreport.txt_ is created,
64d144ae
HH
136which can be safed to a (to be mounted by hand) partition (usually /boot) or a USB stick.
137Additional debugging info can be produced by adding **rd.debug** to the kernel command line.
c33488fe 138_/run/initramfs/rdsosreport.txt_ contains all logs and the output of some tools.
64d144ae
HH
139It should be attached to any report about dracut problems.
140
888d53f2
HH
141**rd.info**::
142 print informational output though "quiet" is set
143
144**rd.shell**::
145 allow dropping to a shell, if root mounting fails
146
147**rd.debug**::
64d144ae
HH
148 set -x for the dracut shell.
149 If systemd is active in the initramfs, all output is logged to the systemd journal,
150 which you can inspect with "journalctl -ab".
151 If systemd is not active, the logs are written to dmesg and _/run/initramfs/init.log_.
152 If "quiet" is set, it also logs to the console.
888d53f2 153
7bd8f233 154**rd.memdebug=[0-3]**::
b6c89768 155 Print memory usage info at various points, set the verbose level from 0 to 3. +
9c322b2f 156 Higher level means more debugging output:
b6c89768
HH
157+
158----
9c322b2f
DY
159 0 - no output
160 1 - partial /proc/meminfo
161 2 - /proc/meminfo
162 3 - /proc/meminfo + /proc/slabinfo
b6c89768 163----
7bd8f233 164
888d53f2
HH
165**rd.break**::
166 drop to a shell at the end
167
b6c89768 168**rd.break=**__{cmdline|pre-udev|pre-trigger|initqueue|pre-mount|mount|pre-pivot|cleanup}__::
888d53f2
HH
169 drop to a shell on defined breakpoint
170
171**rd.udev.info**::
172 set udev to loglevel info
173
174**rd.udev.debug**::
175 set udev to loglevel debug
176
177I18N
178~~~~
b6c89768 179**rd.vconsole.keymap=**__<keymap base file name>__::
888d53f2 180 keyboard translation table loaded by loadkeys; taken from keymaps directory;
b6c89768 181 will be written as KEYMAP to _/etc/vconsole.conf_ in the initramfs.
888d53f2 182+
b6c89768
HH
183[listing]
184.Example
185--
186rd.vconsole.keymap=de-latin1-nodeadkeys
187--
888d53f2 188
b6c89768 189**rd.vconsole.keymap.ext=**__<list of keymap base file names>__::
888d53f2
HH
190 list of extra keymaps to bo loaded (sep. by space); will be written as
191 EXT_KEYMAP to _/etc/vconsole.conf_ in the initramfs
192
b6c89768 193**rd.vconsole.unicode**::
888d53f2
HH
194 boolean, indicating UTF-8 mode; will be written as UNICODE to
195 _/etc/vconsole.conf_ in the initramfs
196
b6c89768 197**rd.vconsole.font=**__<font base file name>__::
888d53f2 198 console font; taken from consolefonts directory; will be written as FONT to
b6c89768 199 _/etc/vconsole.conf_ in the initramfs.
888d53f2 200+
b6c89768
HH
201[listing]
202.Example
203--
204rd.vconsole.font=LatArCyrHeb-16
205--
888d53f2 206
b6c89768 207**rd.vconsole.font.map=**__<console map base file name>__::
888d53f2
HH
208 see description of '-m' parameter in setfont manual; taken from consoletrans
209 directory; will be written as FONT_MAP to _/etc/vconsole.conf_ in the
210 initramfs
211
b6c89768 212**rd.vconsole.font.unimap=**__<unicode table base file name>__::
888d53f2
HH
213 see description of '-u' parameter in setfont manual; taken from unimaps
214 directory; will be written as FONT_UNIMAP to _/etc/vconsole.conf_ in the
215 initramfs
216
b6c89768 217**rd.locale.LANG=**__<locale>__::
888d53f2
HH
218 taken from the environment; if no UNICODE is defined we set its value in
219 basis of LANG value (whether it ends with ".utf8" (or similar) or not); will
b6c89768 220 be written as LANG to _/etc/locale.conf_ in the initramfs.
888d53f2 221+
b6c89768
HH
222[listing]
223.Example
224--
225rd.locale.LANG=pl_PL.utf8
226--
888d53f2 227
b6c89768 228**rd.locale.LC_ALL=**__<locale>__::
888d53f2
HH
229 taken from the environment; will be written as LC_ALL to _/etc/locale.conf_
230 in the initramfs
231
232LVM
233~~~
234**rd.lvm=0**::
235 disable LVM detection
236
b6c89768 237**rd.lvm.vg=**__<volume group name>__::
888d53f2
HH
238 only activate the volume groups with the given name. rd.lvm.vg can be
239 specified multiple times on the kernel command line.
240
b6c89768 241**rd.lvm.lv=**__<logical volume name>__::
888d53f2
HH
242 only activate the logical volumes with the given name. rd.lvm.lv can be
243 specified multiple times on the kernel command line.
244
245**rd.lvm.conf=0**::
246 remove any _/etc/lvm/lvm.conf_, which may exist in the initramfs
247
248crypto LUKS
249~~~~~~~~~~~
250**rd.luks=0**::
251 disable crypto LUKS detection
252
b6c89768 253**rd.luks.uuid=**__<luks uuid>__::
888d53f2
HH
254 only activate the LUKS partitions with the given UUID. Any "luks-" of the
255 LUKS UUID is removed before comparing to _<luks uuid>_.
256 The comparisons also matches, if _<luks uuid>_ is only the beginning of the
257 LUKS UUID, so you don't have to specify the full UUID.
258 This parameter can be specified multiple times.
259
b6c89768 260**rd.luks.allow-discards=**__<luks uuid>__::
5ad3803d
HH
261 Allow using of discards (TRIM) requests for LUKS partitions with the given UUID.
262 Any "luks-" of the LUKS UUID is removed before comparing to _<luks uuid>_.
263 The comparisons also matches, if _<luks uuid>_ is only the beginning of the
264 LUKS UUID, so you don't have to specify the full UUID.
265 This parameter can be specified multiple times.
266
f7235c22 267**rd.luks.allow-discards**::
5ad3803d
HH
268 Allow using of discards (TRIM) requests on all LUKS partitions.
269
888d53f2
HH
270**rd.luks.crypttab=0**::
271 do not check, if LUKS partition is in _/etc/crypttab_
272
273crypto LUKS - key on removable device support
274~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
b6c89768 275**rd.luks.key=**__<keypath>__:__<keydev>__:__<luksdev>__::
888d53f2
HH
276 _keypath_ is a path to key file to look for. It's REQUIRED. When _keypath_ ends with '.gpg' it's considered to be key encrypted symmetrically with GPG. You will be prompted for password on boot. GPG support comes with 'crypt-gpg' module which needs to be added explicitly.
277+
278_keydev_ is a device on which key file resides. It might be kernel name of devices (should start with "/dev/"), UUID (prefixed with "UUID=") or label (prefix with "LABEL="). You don't have to specify full UUID. Just its beginning will suffice, even if its ambiguous. All matching devices will be probed. This parameter is recommended, but not required. If not present, all block devices will be probed, which may significantly increase boot time.
279+
280If _luksdev_ is given, the specified key will only be applied for that LUKS device. Possible values are the same as for _keydev_. Unless you have several LUKS devices, you don't have to specify this parameter. The simplest usage is:
281+
b6c89768
HH
282[listing]
283.Example
284--
888d53f2 285rd.luks.key=/foo/bar.key
b6c89768 286--
888d53f2
HH
287+
288As you see, you can skip colons in such a case.
173edca0
289+
290[NOTE]
291===============================
600c8769 292dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe
173edca0
293to crypsetup luksFormat with _-d -_, too!
294
295Here follows example for key encrypted with GPG:
296
b6c89768
HH
297[listing]
298--
299gpg --quiet --decrypt rootkey.gpg | \
300cryptsetup -d - -v --cipher serpent-cbc-essiv:sha256 \
173edca0 301--key-size 256 luksFormat /dev/sda3
b6c89768 302--
173edca0
303
304If you use plain keys, just add path to _-d_ option:
305
b6c89768
HH
306[listing]
307--
308cryptsetup -d rootkey.key -v --cipher serpent-cbc-essiv:sha256 \
309 --key-size 256 luksFormat /dev/sda3
310--
173edca0 311===============================
888d53f2
HH
312
313MD RAID
314~~~~~~~
315**rd.md=0**::
316 disable MD RAID detection
317
318**rd.md.imsm=0**::
319 disable MD RAID for imsm/isw raids, use DM RAID instead
320
321**rd.md.ddf=0**::
322 disable MD RAID for SNIA ddf raids, use DM RAID instead
323
324**rd.md.conf=0**::
325 ignore mdadm.conf included in initramfs
326
327**rd.md.waitclean=1**::
328 wait for any resync, recovery, or reshape activity to finish before continuing
329
b6c89768 330**rd.md.uuid=**__<md raid uuid>__::
888d53f2
HH
331 only activate the raid sets with the given UUID. This parameter can be
332 specified multiple times.
333
334DM RAID
335~~~~~~~
336**rd.dm=0**::
337 disable DM RAID detection
338
b6c89768 339**rd.dm.uuid=**__<dm raid uuid>__::
888d53f2
HH
340 only activate the raid sets with the given UUID. This parameter can be
341 specified multiple times.
342
343FIPS
344~~~~
345**rd.fips**::
346 enable FIPS
347
b6c89768
HH
348**boot=**__<boot device>__::
349 specify the device, where /boot is located.
888d53f2 350+
b6c89768
HH
351[listing]
352.Example
353--
888d53f2
HH
354boot=/dev/sda1
355boot=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
356boot=UUID=<uuid>
357boot=LABEL=<label>
b6c89768 358--
888d53f2
HH
359
360**rd.fips.skipkernel**::
361 skip checksum check of the kernel image. Useful, if the kernel image is not
362 in a separate boot partition.
363
364Network
365~~~~~~~
b6c89768
HH
366
367[IMPORTANT]
368=====================
369It is recommended to either bind an interface to a MAC with the **ifname** argument,
370or to use the systemd-udevd predictable network interface names.
371
372Predictable network interface device names based on:
373
374- firmware/bios-provided index numbers for on-board devices
375- firmware-provided pci-express hotplug slot index number
376- physical/geographical location of the hardware
377- the interface's MAC address
378
379See: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
380
381Two character prefixes based on the type of interface:
382
383en:: ethernet
384wl:: wlan
385ww:: wwan
386
387Type of names:
388
389o<index>:: on-board device index number
390s<slot>[f<function>][d<dev_id>]:: hotplug slot index number
391x<MAC>:: MAC address
392[P<domain>]p<bus>s<slot>[f<function>][d<dev_id>]:: PCI geographical location
393[P<domain>]p<bus>s<slot>[f<function>][u<port>][..][c<config>][i<interface>]:: USB port number chain
394
395All multi-function PCI devices will carry the [f<function>] number in the
396device name, including the function 0 device.
397
398When using PCI geography, The PCI domain is only prepended when it is not 0.
399
400For USB devices the full chain of port numbers of hubs is composed. If the
401name gets longer than the maximum number of 15 characters, the name is not
402exported.
403The usual USB configuration == 1 and interface == 0 values are suppressed.
404
405PCI ethernet card with firmware index "1"::
406* eno1
407
408PCI ethernet card in hotplug slot with firmware index number::
409* ens1
410
411PCI ethernet multi-function card with 2 ports::
412* enp2s0f0
413* enp2s0f1
414
415PCI wlan card::
416* wlp3s0
417
418USB built-in 3G modem::
419* wwp0s29u1u4i6
420
421USB Android phone::
422* enp0s29u1u2
423=====================
424
425**ip=**__{dhcp|on|any|dhcp6|auto6|ibft}__::
888d53f2
HH
426 dhcp|on|any::: get ip from dhcp server from all interfaces. If root=dhcp, loop
427 sequentially through all interfaces (eth0, eth1, ...) and use the first with
428 a valid DHCP root-path.
429
430 auto6::: IPv6 autoconfiguration
431
432 dhcp6::: IPv6 DHCP
433
434 ibft::: iBFT autoconfiguration
435
b6c89768 436**ip=**__<interface>__:__{dhcp|on|any|dhcp6|auto6}__[:[__<mtu>__][:__<macaddr>__]]::
888d53f2
HH
437 This parameter can be specified multiple times.
438+
1760dfc0 439=====================
888d53f2
HH
440dhcp|on|any|dhcp6::: get ip from dhcp server on a specific interface
441auto6::: do IPv6 autoconfiguration
1760dfc0
HH
442<macaddr>::: optionally **set** <macaddr> on the <interface>. This
443cannot be used in conjunction with the **ifname** argument for the
444same <interface>.
445=====================
446
b6c89768 447**ip=**__<client-IP>__:__<server-IP>__:__<gateway-IP>__:__<netmask>__:__<client_hostname>__:__<interface>__:__{none|off|dhcp|on|any|dhcp6|auto6|ibft}__:[:[__<mtu>__][:__<macaddr>__]]::
888d53f2
HH
448 explicit network configuration. If you want do define a IPv6 address, put it
449 in brackets (e.g. [2001:DB8::1]). This parameter can be specified multiple
450 times.
990e945f 451+
1760dfc0
HH
452=====================
453<macaddr>::: optionally **set** <macaddr> on the <interface>. This
454cannot be used in conjunction with the **ifname** argument for the
455same <interface>.
456=====================
457
b6c89768 458**ifname=**__<interface>__:__<MAC>__::
1760dfc0
HH
459 Assign network device name <interface> (ie "bootnet") to the NIC with MAC <MAC>.
460+
b6c89768 461WARNING: Do **not** use the default kernel naming scheme for the interface name,
1760dfc0
HH
462as it can conflict with the kernel names. So, don't use "eth[0-9]+" for the
463interface name. Better name it "bootnet" or "bluesocket".
888d53f2 464
b6c89768 465**bootdev=**__<interface>__::
888d53f2
HH
466 specify network interface to use routing and netroot information from.
467 Required if multiple ip= lines are used.
468
469**nameserver=**__<IP>__ [**nameserver=**__<IP>__ ...]::
470 specify nameserver(s) to use
471
472**biosdevname=0**::
473 boolean, turn off biosdevname network interface renaming
474
48dba7f9
HH
475**rd.neednet=1**::
476 boolean, bring up network even without netroot set
477
b6c89768 478**vlan=**__<vlanname>__:__<phydevice>__::
144787fe
AW
479 Setup vlan device named <vlanname> on <phydeivce>.
480 We support the four styles of vlan names: VLAN_PLUS_VID (vlan0005), VLAN_PLUS_VID_NO_PAD (vlan5),
481 DEV_PLUS_VID (eth0.0005), DEV_PLUS_VID_NO_PAD (eth0.5)
482
b6c89768 483**bond=**__<bondname>__[:__<bondslaves>__:[:__<options>__]]::
c438bdb0
AW
484 Setup bonding device <bondname> on top of <bondslaves>.
485 <bondslaves> is a comma-separated list of physical (ethernet) interfaces.
486 <options> is a comma-separated list on bonding options (modinfo bonding for details)
487 in format compatible with initscripts. If <options> includes multi-valued arp_ip_target option,
488 then its values should be separated by semicolon.
489 Bond without parameters assumes bond=bond0:eth0,eth1:mode=balance-rr
490
b6c89768 491**team=**__<teammaster>__:__<teamslaves>__::
3baa150b
CW
492 Setup team device <teammaster> on top of <teamslaves>.
493 <teamslaves> is a comma-separated list of physical (ethernet) interfaces.
494
b6c89768 495**bridge=**__<bridgename>__:__<ethnames>__::
21928b97
AW
496 Setup bridge <bridgename> with <ethnames>. <ethnames> is a comma-separated
497 list of physical (ethernet) interfaces. Bridge without parameters assumes bridge=br0:eth0
9337c692 498
888d53f2
HH
499NFS
500~~~
b6c89768 501**root=**\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__]::
888d53f2
HH
502 mount nfs share from <server-ip>:/<root-dir>, if no server-ip is given, use
503 dhcp next_server. if server-ip is an IPv6 address it has to be put in
504 brackets, e.g. [2001:DB8::1]. NFS options can be appended with the prefix
505 ":" or "," and are seperated by ",".
506
b6c89768 507**root=**nfs:\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__], **root=**nfs4:\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__], **root=**__{dhcp|dhcp6}__::
888d53f2
HH
508 root=dhcp alone directs initrd to look at the DHCP root-path where NFS
509 options can be specified.
510+
b6c89768
HH
511[listing]
512.Example
513--
888d53f2
HH
514 root-path=<server-ip>:<root-dir>[,<nfs-options>]
515 root-path=nfs:<server-ip>:<root-dir>[,<nfs-options>]
516 root-path=nfs4:<server-ip>:<root-dir>[,<nfs-options>]
b6c89768 517--
888d53f2 518
b6c89768 519**root=**_/dev/nfs_ nfsroot=\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__]::
888d53f2
HH
520 _Deprecated!_ kernel Documentation_/filesystems/nfsroot.txt_ defines this
521 method. This is supported by dracut, but not recommended.
522
b6c89768 523**rd.nfs.domain=**__<NFSv4 domain name>__::
888d53f2
HH
524 Set the NFSv4 domain name. Will overwrite the settings in _/etc/idmap.conf_.
525
d580636e
MG
526CIFS
527~~~
b6c89768 528**root=**cifs://[__<username>__[:__<password>__]@]__<server-ip>__:__<root-dir>__::
d580636e
MG
529 mount cifs share from <server-ip>:/<root-dir>, if no server-ip is given, use
530 dhcp next_server. if server-ip is an IPv6 address it has to be put in
531 brackets, e.g. [2001:DB8::1]. If a username or password are not specified
532as part of the root, then they must be passed on the command line through
533cifsuser/cifspass.
833685de 534+
b6c89768 535WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path.
d580636e 536
b6c89768 537**cifsuser**=__<username>__::
d580636e
MG
538 Set the cifs username, if not specified as part of the root.
539
b6c89768 540**cifspass**=__<password>__::
d580636e 541 Set the cifs password, if not specified as part of the root.
833685de 542+
b6c89768 543WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path.
d580636e 544
888d53f2
HH
545iSCSI
546~~~~~
b6c89768 547**root=**iscsi:[__<username>__:__<password>__[:__<reverse>__:__<password>__]@][__<servername>__]:[__<protocol>__]:[__<port>__][:[__<iscsi_iface_name>__]:[__<netdev_name>__]]:[__<LUN>__]:__<targetname>__::
888d53f2
HH
548 protocol defaults to "6", LUN defaults to "0". If the "servername" field is
549 provided by BOOTP or DHCP, then that field is used in conjunction with other
550 associated fields to contact the boot server in the Boot stage. However, if
551 the "servername" field is not provided, then the "targetname" field is then
552 used in the Discovery Service stage in conjunction with other associated
553 fields. See
554 link:$$http://tools.ietf.org/html/rfc4173#section-5$$[rfc4173].
888d53f2 555+
b6c89768
HH
556WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path.
557+
558[listing]
559.Example
560--
888d53f2 561root=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
b6c89768 562--
888d53f2 563+
b6c89768 564If servername is an IPv6 address, it has to be put in brackets:
888d53f2 565+
b6c89768
HH
566[listing]
567.Example
568--
888d53f2 569root=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
b6c89768 570--
888d53f2 571
b6c89768
HH
572**root=**__???__ **netroot=**iscsi:[__<username>__:__<password>__[:__<reverse>__:__<password>__]@][__<servername>__]:[__<protocol>__]:[__<port>__][:[__<iscsi_iface_name>__]:[__<netdev_name>__]]:[__<LUN>__]:__<targetname>__ ...::
573 multiple netroot options allow setting up multiple iscsi disks:
888d53f2 574+
b6c89768
HH
575[listing]
576.Example
577--
888d53f2
HH
578root=UUID=12424547
579netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
580netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target1
b6c89768 581--
888d53f2 582+
b6c89768 583If servername is an IPv6 address, it has to be put in brackets:
888d53f2 584+
b6c89768
HH
585[listing]
586.Example
587--
888d53f2 588netroot=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
b6c89768 589--
833685de 590+
b6c89768 591WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path. You may want to use rd.iscsi.firmware.
888d53f2 592
b6c89768 593**root=**__???__ **rd.iscsi.initiator=**__<initiator>__ **rd.iscsi.target.name=**__<target name>__ **rd.iscsi.target.ip=**__<target ip>__ **rd.iscsi.target.port=**__<target port>__ **rd.iscsi.target.group=**__<target group>__ **rd.iscsi.username=**__<username>__ **rd.iscsi.password=**__<password>__ **rd.iscsi.in.username=**__<in username>__ **rd.iscsi.in.password=**__<in password>__::
888d53f2 594 manually specify all iscsistart parameter (see **+iscsistart --help+**)
833685de 595+
b6c89768 596WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path. You may want to use rd.iscsi.firmware.
888d53f2
HH
597
598**root=**_???_ **netroot=**iscsi **rd.iscsi.firmware=1**::
599 will read the iscsi parameter from the BIOS firmware
600
b6c89768 601**rd.iscsi.param=**__<param>__::
8d51acbb
HH
602 <param> will be passed as "--param <param>" to iscsistart.
603 This parameter can be specified multiple times.
8d51acbb 604+
b6c89768
HH
605[listing]
606.Example
607--
833685de 608"netroot=iscsi rd.iscsi.firmware=1 rd.iscsi.param=node.session.timeo.replacement_timeout=30"
b6c89768 609--
8d51acbb
HH
610+
611will result in
612+
b6c89768
HH
613[listing]
614--
8d51acbb 615iscsistart -b --param node.session.timeo.replacement_timeout=30
b6c89768 616--
8d51acbb 617
888d53f2
HH
618FCoE
619~~~~
b6c89768 620**fcoe=**__<edd|interface|MAC>__:__{dcb|nodcb}__::
888d53f2
HH
621 Try to connect to a FCoE SAN through the NIC specified by _<interface>_ or
622 _<MAC>_ or EDD settings. For the second argument, currently only nodcb is
1760dfc0
HH
623 supported. This parameter can be specified multiple times.
624+
b6c89768 625NOTE: letters in the MAC-address must be lowercase!
888d53f2
HH
626
627NBD
628~~~
b6c89768 629**root=**??? **netroot=**nbd:__<server>__:__<port>__[:__<fstype>__[:__<mountopts>__[:__<nbdopts>__]]]::
888d53f2
HH
630 mount nbd share from <server>
631
b6c89768 632**root=dhcp** with **dhcp** **root-path=**nbd:__<server>__:__<port>__[:__<fstype>__[:__<mountopts>__[:__<nbdopts>__]]]::
888d53f2
HH
633 root=dhcp alone directs initrd to look at the DHCP root-path where NBD
634 options can be specified. This syntax is only usable in cases where you are
635 directly mounting the volume as the rootfs.
636
637DASD
638~~~~
4d76a85d 639**rd.dasd=**....::
888d53f2
HH
640 same syntax as the kernel module parameter (s390 only)
641
888d53f2
HH
642ZFCP
643~~~~
b6c89768
HH
644**rd.zfcp=**__<zfcp adaptor device bus ID>__,__<WWPN>__,__<FCPLUN>__::
645 rd.zfcp can be specified multiple times on the kernel command line.
888d53f2 646+
b6c89768
HH
647[listing]
648.Example
649--
888d53f2 650rd.zfcp=0.0.4000,0x5005076300C213e9,0x5022000000000000
b6c89768 651--
888d53f2
HH
652
653**rd.zfcp.conf=0**::
654 ignore zfcp.conf included in the initramfs
655
656ZNET
657~~~~
b6c89768
HH
658**rd.znet=**__<nettype>__,__<subchannels>__,__<options>__::
659 rd.znet can be specified multiple times on the kernel command line.
888d53f2 660+
b6c89768
HH
661[listing]
662.Example
663--
888d53f2 664rd.znet=qeth,0.0.0600,0.0.0601,0.0.0602,layer2=1,portname=foo
62fd2b36 665rd.znet=ctc,0.0.0600,0.0.0601,protocol=bar
b6c89768 666--
888d53f2
HH
667
668Plymouth Boot Splash
669~~~~~~~~~~~~~~~~~~~~
670**plymouth.enable=0**::
671 disable the plymouth bootsplash completly.
672
673**rd.plymouth=0**::
674 disable the plymouth bootsplash only for the initramfs.
675
676Kernel keys
677~~~~~~~~~~~
b6c89768
HH
678**masterkey=**__<kernel master key path name>__::
679 Set the path name of the kernel master key.
888d53f2 680+
b6c89768
HH
681[listing]
682.Example
683--
888d53f2 684masterkey=/etc/keys/kmk-trusted.blob
b6c89768 685--
888d53f2 686
b6c89768
HH
687**masterkeytype=**__<kernel master key type>__::
688 Set the type of the kernel master key.
888d53f2 689+
b6c89768
HH
690[listing]
691.Example
692--
888d53f2 693masterkeytype=trusted
b6c89768 694--
888d53f2 695
b6c89768
HH
696**evmkey=**__<EVM key path name>__::
697 Set the path name of the EVM key.
888d53f2 698+
b6c89768
HH
699[listing]
700.Example
701--
888d53f2 702evmkey=/etc/keys/evm-trusted.blob
b6c89768 703--
888d53f2 704
b6c89768
HH
705**ecryptfskey=**__<eCryptfs key path name>__::
706 Set the path name of the eCryptfs key.
888d53f2 707+
b6c89768
HH
708[listing]
709.Example
710--
888d53f2 711ecryptfskey=/etc/keys/ecryptfs-trusted.blob
b6c89768 712--
888d53f2
HH
713
714Deprecated, renamed Options
715~~~~~~~~~~~~~~~~~~~~~~~~~~~
716Here is a list of options, which were used in dracut prior to version 008, and their new replacement.
717
718rdbreak:: rd.break
719
720rd_CCW:: rd.ccw
721
4d76a85d 722rd_DASD_MOD:: rd.dasd
888d53f2
HH
723
724rd_DASD:: rd.dasd
725
726rdinitdebug rdnetdebug:: rd.debug
727
728rd_NO_DM:: rd.dm=0
729
730rd_DM_UUID:: rd.dm.uuid
731
732rdblacklist:: rd.driver.blacklist
733
734rdinsmodpost:: rd.driver.post
735
736rdloaddriver:: rd.driver.pre
737
738rd_NO_FSTAB:: rd.fstab=0
739
740rdinfo:: rd.info
741
742check:: rd.live.check
743
744rdlivedebug:: rd.live.debug
745
746live_dir:: rd.live.dir
747
748liveimg:: rd.live.image
749
750overlay:: rd.live.overlay
751
752readonly_overlay:: rd.live.overlay.readonly
753
754reset_overlay:: rd.live.overlay.reset
755
756live_ram:: rd.live.ram
757
758rd_NO_CRYPTTAB:: rd.luks.crypttab=0
759
760rd_LUKS_KEYDEV_UUID:: rd.luks.keydev.uuid
761
762rd_LUKS_KEYPATH:: rd.luks.keypath
763
764rd_NO_LUKS:: rd.luks=0
765
766rd_LUKS_UUID:: rd.luks.uuid
767
768rd_NO_LVMCONF:: rd.lvm.conf
769
770rd_LVM_LV:: rd.lvm.lv
771
772rd_NO_LVM:: rd.lvm=0
773
774rd_LVM_SNAPSHOT:: rd.lvm.snapshot
775
776rd_LVM_SNAPSIZE:: rd.lvm.snapsize
777
778rd_LVM_VG:: rd.lvm.vg
779
780rd_NO_MDADMCONF:: rd.md.conf=0
781
782rd_NO_MDIMSM:: rd.md.imsm=0
783
784rd_NO_MD:: rd.md=0
785
786rd_MD_UUID:: rd.md.uuid
787
788rd_NFS_DOMAIN:: rd.nfs.domain
789
790iscsi_initiator:: rd.iscsi.initiator
791
792iscsi_target_name:: rd.iscsi.target.name
793
794iscsi_target_ip:: rd.iscsi.target.ip
795
796iscsi_target_port:: rd.iscsi.target.port
797
798iscsi_target_group:: rd.iscsi.target.group
799
800iscsi_username:: rd.iscsi.username
801
802iscsi_password:: rd.iscsi.password
803
804iscsi_in_username:: rd.iscsi.in.username
805
806iscsi_in_password:: rd.iscsi.in.password
807
808iscsi_firmware:: rd.iscsi.firmware=0
809
810rd_NO_PLYMOUTH:: rd.plymouth=0
811
812rd_retry:: rd.retry
813
814rdshell:: rd.shell
815
816rd_NO_SPLASH:: rd.splash
817
818rdudevdebug:: rd.udev.debug
819
820rdudevinfo:: rd.udev.info
821
822rd_NO_ZFCPCONF:: rd.zfcp.conf=0
823
824rd_ZFCP:: rd.zfcp
825
826rd_ZNET:: rd.znet
827
828KEYMAP:: vconsole.keymap
829
830KEYTABLE:: vconsole.keymap
831
832SYSFONT:: vconsole.font
833
834CONTRANS:: vconsole.font.map
835
836UNIMAP:: vconsole.font.unimap
837
838UNICODE:: vconsole.unicode
839
840EXT_KEYMAP:: vconsole.keymap.ext
841
842Configuration in the Initramfs
843~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
844_/etc/conf.d/_::
845 Any files found in _/etc/conf.d/_ will be sourced in the initramfs to
846 set initial values. Command line options will override these values
847 set in the configuration files.
848
849_/etc/cmdline_::
3cff5fb5 850 Can contain additional command line options. Deprecated, better use /etc/cmdline.d/*.conf.
888d53f2
HH
851
852_/etc/cmdline.d/*.conf_::
853 Can contain additional command line options.
854
855AUTHOR
856------
9f355169 857Harald Hoyer
888d53f2
HH
858
859SEE ALSO
860--------
861*dracut*(8) *dracut.conf*(5)