]> git.ipfire.org Git - thirdparty/dracut.git/blame - dracut.cmdline.7.asc
dracut.sh: add /boot/efi to device paths
[thirdparty/dracut.git] / dracut.cmdline.7.asc
CommitLineData
888d53f2
HH
1DRACUT.CMDLINE(7)
2=================
3:doctype: manpage
4:man source: dracut
5:man manual: dracut
6
7NAME
8----
9dracut.cmdline - dracut kernel command line options
10
11DESCRIPTION
12-----------
13The root device used by the kernel is specified in the boot configuration
14file on the kernel command line, as always.
15
16The traditional _root=/dev/sda1_ style device specification is allowed, but not
17encouraged. The root device should better be identified by LABEL or UUID. If a
18label is used, as in _root=LABEL=<label_of_root>_ the initramfs will search all
19available devices for a filesystem with the appropriate label, and mount that
20device as the root filesystem. _root=UUID=<uuidnumber>_ will mount the partition
21with that UUID as the root filesystem.
22
23In the following all kernel command line parameters, which are processed by
24dracut, are described.
25
26"rd.*" parameters mentioned without "=" are boolean parameters. They can be
27turned on/off by setting them to {0|1}. If the assignment with "=" is missing
28"=1" is implied. For example _rd.info_ can be turned off with _rd.info=0_ or
29turned on with _rd.info=1_ or _rd.info_. The last value in the kernel command
30line is the value, which is honored.
31
32Standard
33~~~~~~~~
b6c89768 34**init=**__<path to real init>__::
888d53f2
HH
35 specify the path to the init programm to be started after the initramfs has
36 finished
37
b6c89768 38**root=**__<path to blockdevice>__::
888d53f2
HH
39 specify the block device to use as the root filesystem.
40+
b6c89768
HH
41[listing]
42.Example
43--
888d53f2
HH
44root=/dev/sda1
45root=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
46root=/dev/disk/by-label/Root
47root=LABEL=Root
48root=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
49root=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b23a2837 50root=PARTUUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b6c89768 51--
888d53f2 52
b6c89768 53**rootfstype=**__<filesystem type>__:: "auto" if not specified.
888d53f2 54+
b6c89768
HH
55[listing]
56.Example
57--
888d53f2 58rootfstype=ext3
b6c89768 59--
888d53f2 60
b6c89768 61**rootflags=**__<mount options>__::
888d53f2
HH
62 specify additional mount options for the root filesystem. If not set,
63 _/etc/fstab_ of the real root will be parsed for special mount options and
64 mounted accordingly.
65
5afa9579
66**ro**::
67 force mounting _/_ and _/usr_ (if it is a separate device) read-only. If
68 none of ro and rw is present, both are mounted according to _/etc/fstab_.
69
70**rw**::
71 force mounting _/_ and _/usr_ (if it is a separate device) read-write.
72 See also ro option.
73
b6c89768 74**rootfallback=**__<path to blockdevice>__::
c4c1c4f4
HH
75 specify the block device to use as the root filesystem, if the normal root cannot be found.
76 This can only be a simple block device with a simple file system, for which the filesystem
77 driver is either compiled in, or added manually to the initramfs.
78 This parameter can be specified multiple times.
79
a6332e69 80**rd.auto** **rd.auto=1**::
e0641277
HH
81 enable autoassembly of special devices like cryptoLUKS, dmraid, mdraid or lvm.
82 Default is off as of dracut version >= 024.
83
888d53f2
HH
84**rd.fstab=0**::
85 do not honor special mount options for the root filesystem found in
86 _/etc/fstab_ of the real root.
87
b6c89768 88**resume=**__<path to resume partition>__::
5d0404e3 89 resume from a swap partition
97903dfc 90+
b6c89768
HH
91[listing]
92.Example
93--
97903dfc
HH
94resume=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
95resume=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
96resume=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b6c89768 97--
97903dfc 98
9fb01d49
99**rd.skipfsck**::
100 skip fsck for rootfs and _/usr_. If you're mounting _/usr_ read-only and
101 the init system performs fsck before remount, you might want to use this
102 option to avoid duplication.
97903dfc 103
2ee48b4b 104
888d53f2
HH
105Misc
106~~~~
b6c89768 107**rd.driver.blacklist=**__<drivername>__[,__<drivername>__,...]::
888d53f2
HH
108 do not load kernel module <drivername>. This parameter can be specified
109 multiple times.
110
b6c89768 111**rd.driver.pre=**__<drivername>__[,__<drivername>__,...]::
888d53f2
HH
112 force loading kernel module <drivername>. This parameter can be specified
113 multiple times.
114
b6c89768 115**rd.driver.post=**__<drivername>__[,__<drivername>__,...]::
888d53f2
HH
116 force loading kernel module <drivername> after all automatic loading modules
117 have been loaded. This parameter can be specified multiple times.
118
b6c89768 119**rd.retry=**__<seconds>__::
5cd7c104
HH
120 specify how long dracut should wait for devices to appear.
121 The default is 30 seconds. After 2/3 of the time, degraded raids are force
52da8a51
HH
122 started. If you have hardware, which takes a very long time to announce its
123 drives, you might want to extend this value.
5cd7c104 124
13cb578a
BL
125**rd.noverifyssl**::
126 accept self-signed certificates for ssl downloads.
127
b6c89768 128**rd.ctty=**__<terminal device>__::
14986b9d
HH
129 specify the controlling terminal for the console.
130 This is useful, if you have multiple "console=" arguments.
131
888d53f2
HH
132[[dracutkerneldebug]]
133Debug
134~~~~~
c33488fe 135If you are dropped to an emergency shell, the file _/run/initramfs/rdsosreport.txt_ is created,
64d144ae
HH
136which can be safed to a (to be mounted by hand) partition (usually /boot) or a USB stick.
137Additional debugging info can be produced by adding **rd.debug** to the kernel command line.
c33488fe 138_/run/initramfs/rdsosreport.txt_ contains all logs and the output of some tools.
64d144ae
HH
139It should be attached to any report about dracut problems.
140
888d53f2
HH
141**rd.info**::
142 print informational output though "quiet" is set
143
144**rd.shell**::
145 allow dropping to a shell, if root mounting fails
146
147**rd.debug**::
64d144ae
HH
148 set -x for the dracut shell.
149 If systemd is active in the initramfs, all output is logged to the systemd journal,
150 which you can inspect with "journalctl -ab".
151 If systemd is not active, the logs are written to dmesg and _/run/initramfs/init.log_.
152 If "quiet" is set, it also logs to the console.
888d53f2 153
7bd8f233 154**rd.memdebug=[0-3]**::
b6c89768 155 Print memory usage info at various points, set the verbose level from 0 to 3. +
9c322b2f 156 Higher level means more debugging output:
b6c89768
HH
157+
158----
9c322b2f
DY
159 0 - no output
160 1 - partial /proc/meminfo
161 2 - /proc/meminfo
162 3 - /proc/meminfo + /proc/slabinfo
b6c89768 163----
7bd8f233 164
888d53f2
HH
165**rd.break**::
166 drop to a shell at the end
167
b6c89768 168**rd.break=**__{cmdline|pre-udev|pre-trigger|initqueue|pre-mount|mount|pre-pivot|cleanup}__::
888d53f2
HH
169 drop to a shell on defined breakpoint
170
171**rd.udev.info**::
172 set udev to loglevel info
173
174**rd.udev.debug**::
175 set udev to loglevel debug
176
177I18N
178~~~~
b6c89768 179**rd.vconsole.keymap=**__<keymap base file name>__::
888d53f2 180 keyboard translation table loaded by loadkeys; taken from keymaps directory;
b6c89768 181 will be written as KEYMAP to _/etc/vconsole.conf_ in the initramfs.
888d53f2 182+
b6c89768
HH
183[listing]
184.Example
185--
186rd.vconsole.keymap=de-latin1-nodeadkeys
187--
888d53f2 188
b6c89768 189**rd.vconsole.keymap.ext=**__<list of keymap base file names>__::
888d53f2
HH
190 list of extra keymaps to bo loaded (sep. by space); will be written as
191 EXT_KEYMAP to _/etc/vconsole.conf_ in the initramfs
192
b6c89768 193**rd.vconsole.unicode**::
888d53f2
HH
194 boolean, indicating UTF-8 mode; will be written as UNICODE to
195 _/etc/vconsole.conf_ in the initramfs
196
b6c89768 197**rd.vconsole.font=**__<font base file name>__::
888d53f2 198 console font; taken from consolefonts directory; will be written as FONT to
b6c89768 199 _/etc/vconsole.conf_ in the initramfs.
888d53f2 200+
b6c89768
HH
201[listing]
202.Example
203--
204rd.vconsole.font=LatArCyrHeb-16
205--
888d53f2 206
b6c89768 207**rd.vconsole.font.map=**__<console map base file name>__::
888d53f2
HH
208 see description of '-m' parameter in setfont manual; taken from consoletrans
209 directory; will be written as FONT_MAP to _/etc/vconsole.conf_ in the
210 initramfs
211
b6c89768 212**rd.vconsole.font.unimap=**__<unicode table base file name>__::
888d53f2
HH
213 see description of '-u' parameter in setfont manual; taken from unimaps
214 directory; will be written as FONT_UNIMAP to _/etc/vconsole.conf_ in the
215 initramfs
216
b6c89768 217**rd.locale.LANG=**__<locale>__::
888d53f2
HH
218 taken from the environment; if no UNICODE is defined we set its value in
219 basis of LANG value (whether it ends with ".utf8" (or similar) or not); will
b6c89768 220 be written as LANG to _/etc/locale.conf_ in the initramfs.
888d53f2 221+
b6c89768
HH
222[listing]
223.Example
224--
225rd.locale.LANG=pl_PL.utf8
226--
888d53f2 227
b6c89768 228**rd.locale.LC_ALL=**__<locale>__::
888d53f2
HH
229 taken from the environment; will be written as LC_ALL to _/etc/locale.conf_
230 in the initramfs
231
232LVM
233~~~
234**rd.lvm=0**::
235 disable LVM detection
236
b6c89768 237**rd.lvm.vg=**__<volume group name>__::
888d53f2
HH
238 only activate the volume groups with the given name. rd.lvm.vg can be
239 specified multiple times on the kernel command line.
240
b6c89768 241**rd.lvm.lv=**__<logical volume name>__::
888d53f2
HH
242 only activate the logical volumes with the given name. rd.lvm.lv can be
243 specified multiple times on the kernel command line.
244
245**rd.lvm.conf=0**::
246 remove any _/etc/lvm/lvm.conf_, which may exist in the initramfs
247
248crypto LUKS
249~~~~~~~~~~~
250**rd.luks=0**::
251 disable crypto LUKS detection
252
b6c89768 253**rd.luks.uuid=**__<luks uuid>__::
888d53f2
HH
254 only activate the LUKS partitions with the given UUID. Any "luks-" of the
255 LUKS UUID is removed before comparing to _<luks uuid>_.
256 The comparisons also matches, if _<luks uuid>_ is only the beginning of the
257 LUKS UUID, so you don't have to specify the full UUID.
258 This parameter can be specified multiple times.
259
b6c89768 260**rd.luks.allow-discards=**__<luks uuid>__::
5ad3803d
HH
261 Allow using of discards (TRIM) requests for LUKS partitions with the given UUID.
262 Any "luks-" of the LUKS UUID is removed before comparing to _<luks uuid>_.
263 The comparisons also matches, if _<luks uuid>_ is only the beginning of the
264 LUKS UUID, so you don't have to specify the full UUID.
265 This parameter can be specified multiple times.
266
f7235c22 267**rd.luks.allow-discards**::
5ad3803d
HH
268 Allow using of discards (TRIM) requests on all LUKS partitions.
269
888d53f2
HH
270**rd.luks.crypttab=0**::
271 do not check, if LUKS partition is in _/etc/crypttab_
272
273crypto LUKS - key on removable device support
274~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
b6c89768 275**rd.luks.key=**__<keypath>__:__<keydev>__:__<luksdev>__::
888d53f2
HH
276 _keypath_ is a path to key file to look for. It's REQUIRED. When _keypath_ ends with '.gpg' it's considered to be key encrypted symmetrically with GPG. You will be prompted for password on boot. GPG support comes with 'crypt-gpg' module which needs to be added explicitly.
277+
278_keydev_ is a device on which key file resides. It might be kernel name of devices (should start with "/dev/"), UUID (prefixed with "UUID=") or label (prefix with "LABEL="). You don't have to specify full UUID. Just its beginning will suffice, even if its ambiguous. All matching devices will be probed. This parameter is recommended, but not required. If not present, all block devices will be probed, which may significantly increase boot time.
279+
280If _luksdev_ is given, the specified key will only be applied for that LUKS device. Possible values are the same as for _keydev_. Unless you have several LUKS devices, you don't have to specify this parameter. The simplest usage is:
281+
b6c89768
HH
282[listing]
283.Example
284--
888d53f2 285rd.luks.key=/foo/bar.key
b6c89768 286--
888d53f2
HH
287+
288As you see, you can skip colons in such a case.
173edca0
289+
290[NOTE]
291===============================
600c8769 292dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe
173edca0
293to crypsetup luksFormat with _-d -_, too!
294
295Here follows example for key encrypted with GPG:
296
b6c89768
HH
297[listing]
298--
299gpg --quiet --decrypt rootkey.gpg | \
300cryptsetup -d - -v --cipher serpent-cbc-essiv:sha256 \
173edca0 301--key-size 256 luksFormat /dev/sda3
b6c89768 302--
173edca0
303
304If you use plain keys, just add path to _-d_ option:
305
b6c89768
HH
306[listing]
307--
308cryptsetup -d rootkey.key -v --cipher serpent-cbc-essiv:sha256 \
309 --key-size 256 luksFormat /dev/sda3
310--
173edca0 311===============================
888d53f2
HH
312
313MD RAID
314~~~~~~~
315**rd.md=0**::
316 disable MD RAID detection
317
318**rd.md.imsm=0**::
319 disable MD RAID for imsm/isw raids, use DM RAID instead
320
321**rd.md.ddf=0**::
322 disable MD RAID for SNIA ddf raids, use DM RAID instead
323
324**rd.md.conf=0**::
325 ignore mdadm.conf included in initramfs
326
327**rd.md.waitclean=1**::
328 wait for any resync, recovery, or reshape activity to finish before continuing
329
b6c89768 330**rd.md.uuid=**__<md raid uuid>__::
888d53f2
HH
331 only activate the raid sets with the given UUID. This parameter can be
332 specified multiple times.
333
334DM RAID
335~~~~~~~
336**rd.dm=0**::
337 disable DM RAID detection
338
b6c89768 339**rd.dm.uuid=**__<dm raid uuid>__::
888d53f2
HH
340 only activate the raid sets with the given UUID. This parameter can be
341 specified multiple times.
342
343FIPS
344~~~~
345**rd.fips**::
346 enable FIPS
347
b6c89768
HH
348**boot=**__<boot device>__::
349 specify the device, where /boot is located.
888d53f2 350+
b6c89768
HH
351[listing]
352.Example
353--
888d53f2
HH
354boot=/dev/sda1
355boot=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
356boot=UUID=<uuid>
357boot=LABEL=<label>
b6c89768 358--
888d53f2
HH
359
360**rd.fips.skipkernel**::
361 skip checksum check of the kernel image. Useful, if the kernel image is not
362 in a separate boot partition.
363
364Network
365~~~~~~~
b6c89768
HH
366
367[IMPORTANT]
368=====================
369It is recommended to either bind an interface to a MAC with the **ifname** argument,
370or to use the systemd-udevd predictable network interface names.
371
372Predictable network interface device names based on:
373
374- firmware/bios-provided index numbers for on-board devices
375- firmware-provided pci-express hotplug slot index number
376- physical/geographical location of the hardware
377- the interface's MAC address
378
379See: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
380
381Two character prefixes based on the type of interface:
382
383en:: ethernet
384wl:: wlan
385ww:: wwan
386
387Type of names:
388
389o<index>:: on-board device index number
390s<slot>[f<function>][d<dev_id>]:: hotplug slot index number
391x<MAC>:: MAC address
392[P<domain>]p<bus>s<slot>[f<function>][d<dev_id>]:: PCI geographical location
393[P<domain>]p<bus>s<slot>[f<function>][u<port>][..][c<config>][i<interface>]:: USB port number chain
394
395All multi-function PCI devices will carry the [f<function>] number in the
396device name, including the function 0 device.
397
398When using PCI geography, The PCI domain is only prepended when it is not 0.
399
400For USB devices the full chain of port numbers of hubs is composed. If the
401name gets longer than the maximum number of 15 characters, the name is not
402exported.
403The usual USB configuration == 1 and interface == 0 values are suppressed.
404
405PCI ethernet card with firmware index "1"::
406* eno1
407
408PCI ethernet card in hotplug slot with firmware index number::
409* ens1
410
411PCI ethernet multi-function card with 2 ports::
412* enp2s0f0
413* enp2s0f1
414
415PCI wlan card::
416* wlp3s0
417
418USB built-in 3G modem::
419* wwp0s29u1u4i6
420
421USB Android phone::
422* enp0s29u1u2
423=====================
424
425**ip=**__{dhcp|on|any|dhcp6|auto6|ibft}__::
888d53f2
HH
426 dhcp|on|any::: get ip from dhcp server from all interfaces. If root=dhcp, loop
427 sequentially through all interfaces (eth0, eth1, ...) and use the first with
428 a valid DHCP root-path.
429
430 auto6::: IPv6 autoconfiguration
431
432 dhcp6::: IPv6 DHCP
433
434 ibft::: iBFT autoconfiguration
435
b6c89768 436**ip=**__<interface>__:__{dhcp|on|any|dhcp6|auto6}__[:[__<mtu>__][:__<macaddr>__]]::
888d53f2
HH
437 This parameter can be specified multiple times.
438+
1760dfc0 439=====================
888d53f2
HH
440dhcp|on|any|dhcp6::: get ip from dhcp server on a specific interface
441auto6::: do IPv6 autoconfiguration
1760dfc0
HH
442<macaddr>::: optionally **set** <macaddr> on the <interface>. This
443cannot be used in conjunction with the **ifname** argument for the
444same <interface>.
445=====================
446
e38e73d5 447**ip=**__<client-IP>__:[__<peer>__]:__<gateway-IP>__:__<netmask>__:__<client_hostname>__:__<interface>__:__{none|off|dhcp|on|any|dhcp6|auto6|ibft}__:[:[__<mtu>__][:__<macaddr>__]]::
888d53f2
HH
448 explicit network configuration. If you want do define a IPv6 address, put it
449 in brackets (e.g. [2001:DB8::1]). This parameter can be specified multiple
e38e73d5
HH
450 times. __<peer>__ is optional and is the address of the remote endpoint
451 for pointopoint interfaces and it may be followed by a slash and a decimal number,
452 encoding the network prefix length.
990e945f 453+
1760dfc0
HH
454=====================
455<macaddr>::: optionally **set** <macaddr> on the <interface>. This
456cannot be used in conjunction with the **ifname** argument for the
457same <interface>.
458=====================
459
b6c89768 460**ifname=**__<interface>__:__<MAC>__::
1760dfc0
HH
461 Assign network device name <interface> (ie "bootnet") to the NIC with MAC <MAC>.
462+
b6c89768 463WARNING: Do **not** use the default kernel naming scheme for the interface name,
1760dfc0
HH
464as it can conflict with the kernel names. So, don't use "eth[0-9]+" for the
465interface name. Better name it "bootnet" or "bluesocket".
888d53f2 466
b6c89768 467**bootdev=**__<interface>__::
888d53f2
HH
468 specify network interface to use routing and netroot information from.
469 Required if multiple ip= lines are used.
470
471**nameserver=**__<IP>__ [**nameserver=**__<IP>__ ...]::
472 specify nameserver(s) to use
473
474**biosdevname=0**::
475 boolean, turn off biosdevname network interface renaming
476
48dba7f9
HH
477**rd.neednet=1**::
478 boolean, bring up network even without netroot set
479
b6c89768 480**vlan=**__<vlanname>__:__<phydevice>__::
144787fe
AW
481 Setup vlan device named <vlanname> on <phydeivce>.
482 We support the four styles of vlan names: VLAN_PLUS_VID (vlan0005), VLAN_PLUS_VID_NO_PAD (vlan5),
483 DEV_PLUS_VID (eth0.0005), DEV_PLUS_VID_NO_PAD (eth0.5)
484
b6c89768 485**bond=**__<bondname>__[:__<bondslaves>__:[:__<options>__]]::
c438bdb0
AW
486 Setup bonding device <bondname> on top of <bondslaves>.
487 <bondslaves> is a comma-separated list of physical (ethernet) interfaces.
488 <options> is a comma-separated list on bonding options (modinfo bonding for details)
489 in format compatible with initscripts. If <options> includes multi-valued arp_ip_target option,
490 then its values should be separated by semicolon.
491 Bond without parameters assumes bond=bond0:eth0,eth1:mode=balance-rr
492
b6c89768 493**team=**__<teammaster>__:__<teamslaves>__::
3baa150b
CW
494 Setup team device <teammaster> on top of <teamslaves>.
495 <teamslaves> is a comma-separated list of physical (ethernet) interfaces.
496
b6c89768 497**bridge=**__<bridgename>__:__<ethnames>__::
21928b97
AW
498 Setup bridge <bridgename> with <ethnames>. <ethnames> is a comma-separated
499 list of physical (ethernet) interfaces. Bridge without parameters assumes bridge=br0:eth0
9337c692 500
888d53f2
HH
501NFS
502~~~
b6c89768 503**root=**\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__]::
888d53f2
HH
504 mount nfs share from <server-ip>:/<root-dir>, if no server-ip is given, use
505 dhcp next_server. if server-ip is an IPv6 address it has to be put in
506 brackets, e.g. [2001:DB8::1]. NFS options can be appended with the prefix
507 ":" or "," and are seperated by ",".
508
b6c89768 509**root=**nfs:\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__], **root=**nfs4:\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__], **root=**__{dhcp|dhcp6}__::
888d53f2
HH
510 root=dhcp alone directs initrd to look at the DHCP root-path where NFS
511 options can be specified.
512+
b6c89768
HH
513[listing]
514.Example
515--
888d53f2
HH
516 root-path=<server-ip>:<root-dir>[,<nfs-options>]
517 root-path=nfs:<server-ip>:<root-dir>[,<nfs-options>]
518 root-path=nfs4:<server-ip>:<root-dir>[,<nfs-options>]
b6c89768 519--
888d53f2 520
b6c89768 521**root=**_/dev/nfs_ nfsroot=\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__]::
888d53f2
HH
522 _Deprecated!_ kernel Documentation_/filesystems/nfsroot.txt_ defines this
523 method. This is supported by dracut, but not recommended.
524
b6c89768 525**rd.nfs.domain=**__<NFSv4 domain name>__::
888d53f2
HH
526 Set the NFSv4 domain name. Will overwrite the settings in _/etc/idmap.conf_.
527
d580636e
MG
528CIFS
529~~~
b6c89768 530**root=**cifs://[__<username>__[:__<password>__]@]__<server-ip>__:__<root-dir>__::
d580636e
MG
531 mount cifs share from <server-ip>:/<root-dir>, if no server-ip is given, use
532 dhcp next_server. if server-ip is an IPv6 address it has to be put in
533 brackets, e.g. [2001:DB8::1]. If a username or password are not specified
534as part of the root, then they must be passed on the command line through
535cifsuser/cifspass.
833685de 536+
b6c89768 537WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path.
d580636e 538
b6c89768 539**cifsuser**=__<username>__::
d580636e
MG
540 Set the cifs username, if not specified as part of the root.
541
b6c89768 542**cifspass**=__<password>__::
d580636e 543 Set the cifs password, if not specified as part of the root.
833685de 544+
b6c89768 545WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path.
d580636e 546
888d53f2
HH
547iSCSI
548~~~~~
b6c89768 549**root=**iscsi:[__<username>__:__<password>__[:__<reverse>__:__<password>__]@][__<servername>__]:[__<protocol>__]:[__<port>__][:[__<iscsi_iface_name>__]:[__<netdev_name>__]]:[__<LUN>__]:__<targetname>__::
888d53f2
HH
550 protocol defaults to "6", LUN defaults to "0". If the "servername" field is
551 provided by BOOTP or DHCP, then that field is used in conjunction with other
552 associated fields to contact the boot server in the Boot stage. However, if
553 the "servername" field is not provided, then the "targetname" field is then
554 used in the Discovery Service stage in conjunction with other associated
555 fields. See
556 link:$$http://tools.ietf.org/html/rfc4173#section-5$$[rfc4173].
888d53f2 557+
b6c89768
HH
558WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path.
559+
560[listing]
561.Example
562--
888d53f2 563root=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
b6c89768 564--
888d53f2 565+
b6c89768 566If servername is an IPv6 address, it has to be put in brackets:
888d53f2 567+
b6c89768
HH
568[listing]
569.Example
570--
888d53f2 571root=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
b6c89768 572--
888d53f2 573
b6c89768
HH
574**root=**__???__ **netroot=**iscsi:[__<username>__:__<password>__[:__<reverse>__:__<password>__]@][__<servername>__]:[__<protocol>__]:[__<port>__][:[__<iscsi_iface_name>__]:[__<netdev_name>__]]:[__<LUN>__]:__<targetname>__ ...::
575 multiple netroot options allow setting up multiple iscsi disks:
888d53f2 576+
b6c89768
HH
577[listing]
578.Example
579--
888d53f2
HH
580root=UUID=12424547
581netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
582netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target1
b6c89768 583--
888d53f2 584+
b6c89768 585If servername is an IPv6 address, it has to be put in brackets:
888d53f2 586+
b6c89768
HH
587[listing]
588.Example
589--
888d53f2 590netroot=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
b6c89768 591--
833685de 592+
b6c89768 593WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path. You may want to use rd.iscsi.firmware.
888d53f2 594
b6c89768 595**root=**__???__ **rd.iscsi.initiator=**__<initiator>__ **rd.iscsi.target.name=**__<target name>__ **rd.iscsi.target.ip=**__<target ip>__ **rd.iscsi.target.port=**__<target port>__ **rd.iscsi.target.group=**__<target group>__ **rd.iscsi.username=**__<username>__ **rd.iscsi.password=**__<password>__ **rd.iscsi.in.username=**__<in username>__ **rd.iscsi.in.password=**__<in password>__::
888d53f2 596 manually specify all iscsistart parameter (see **+iscsistart --help+**)
833685de 597+
b6c89768 598WARNING: Passwords specified on the kernel command line are visible for all users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the network, when using DHCP with DHCP root-path. You may want to use rd.iscsi.firmware.
888d53f2
HH
599
600**root=**_???_ **netroot=**iscsi **rd.iscsi.firmware=1**::
601 will read the iscsi parameter from the BIOS firmware
602
b6c89768 603**rd.iscsi.param=**__<param>__::
8d51acbb
HH
604 <param> will be passed as "--param <param>" to iscsistart.
605 This parameter can be specified multiple times.
8d51acbb 606+
b6c89768
HH
607[listing]
608.Example
609--
833685de 610"netroot=iscsi rd.iscsi.firmware=1 rd.iscsi.param=node.session.timeo.replacement_timeout=30"
b6c89768 611--
8d51acbb
HH
612+
613will result in
614+
b6c89768
HH
615[listing]
616--
8d51acbb 617iscsistart -b --param node.session.timeo.replacement_timeout=30
b6c89768 618--
8d51acbb 619
888d53f2
HH
620FCoE
621~~~~
b6c89768 622**fcoe=**__<edd|interface|MAC>__:__{dcb|nodcb}__::
888d53f2
HH
623 Try to connect to a FCoE SAN through the NIC specified by _<interface>_ or
624 _<MAC>_ or EDD settings. For the second argument, currently only nodcb is
1760dfc0
HH
625 supported. This parameter can be specified multiple times.
626+
b6c89768 627NOTE: letters in the MAC-address must be lowercase!
888d53f2
HH
628
629NBD
630~~~
b6c89768 631**root=**??? **netroot=**nbd:__<server>__:__<port>__[:__<fstype>__[:__<mountopts>__[:__<nbdopts>__]]]::
888d53f2
HH
632 mount nbd share from <server>
633
b6c89768 634**root=dhcp** with **dhcp** **root-path=**nbd:__<server>__:__<port>__[:__<fstype>__[:__<mountopts>__[:__<nbdopts>__]]]::
888d53f2
HH
635 root=dhcp alone directs initrd to look at the DHCP root-path where NBD
636 options can be specified. This syntax is only usable in cases where you are
637 directly mounting the volume as the rootfs.
638
639DASD
640~~~~
4d76a85d 641**rd.dasd=**....::
888d53f2
HH
642 same syntax as the kernel module parameter (s390 only)
643
888d53f2
HH
644ZFCP
645~~~~
b6c89768
HH
646**rd.zfcp=**__<zfcp adaptor device bus ID>__,__<WWPN>__,__<FCPLUN>__::
647 rd.zfcp can be specified multiple times on the kernel command line.
888d53f2 648+
b6c89768
HH
649[listing]
650.Example
651--
888d53f2 652rd.zfcp=0.0.4000,0x5005076300C213e9,0x5022000000000000
b6c89768 653--
888d53f2
HH
654
655**rd.zfcp.conf=0**::
656 ignore zfcp.conf included in the initramfs
657
658ZNET
659~~~~
b6c89768
HH
660**rd.znet=**__<nettype>__,__<subchannels>__,__<options>__::
661 rd.znet can be specified multiple times on the kernel command line.
888d53f2 662+
b6c89768
HH
663[listing]
664.Example
665--
888d53f2 666rd.znet=qeth,0.0.0600,0.0.0601,0.0.0602,layer2=1,portname=foo
62fd2b36 667rd.znet=ctc,0.0.0600,0.0.0601,protocol=bar
b6c89768 668--
888d53f2
HH
669
670Plymouth Boot Splash
671~~~~~~~~~~~~~~~~~~~~
672**plymouth.enable=0**::
673 disable the plymouth bootsplash completly.
674
675**rd.plymouth=0**::
676 disable the plymouth bootsplash only for the initramfs.
677
678Kernel keys
679~~~~~~~~~~~
b6c89768
HH
680**masterkey=**__<kernel master key path name>__::
681 Set the path name of the kernel master key.
888d53f2 682+
b6c89768
HH
683[listing]
684.Example
685--
888d53f2 686masterkey=/etc/keys/kmk-trusted.blob
b6c89768 687--
888d53f2 688
b6c89768
HH
689**masterkeytype=**__<kernel master key type>__::
690 Set the type of the kernel master key.
888d53f2 691+
b6c89768
HH
692[listing]
693.Example
694--
888d53f2 695masterkeytype=trusted
b6c89768 696--
888d53f2 697
b6c89768
HH
698**evmkey=**__<EVM key path name>__::
699 Set the path name of the EVM key.
888d53f2 700+
b6c89768
HH
701[listing]
702.Example
703--
888d53f2 704evmkey=/etc/keys/evm-trusted.blob
b6c89768 705--
888d53f2 706
b6c89768
HH
707**ecryptfskey=**__<eCryptfs key path name>__::
708 Set the path name of the eCryptfs key.
888d53f2 709+
b6c89768
HH
710[listing]
711.Example
712--
888d53f2 713ecryptfskey=/etc/keys/ecryptfs-trusted.blob
b6c89768 714--
888d53f2
HH
715
716Deprecated, renamed Options
717~~~~~~~~~~~~~~~~~~~~~~~~~~~
718Here is a list of options, which were used in dracut prior to version 008, and their new replacement.
719
720rdbreak:: rd.break
721
722rd_CCW:: rd.ccw
723
4d76a85d 724rd_DASD_MOD:: rd.dasd
888d53f2
HH
725
726rd_DASD:: rd.dasd
727
728rdinitdebug rdnetdebug:: rd.debug
729
730rd_NO_DM:: rd.dm=0
731
732rd_DM_UUID:: rd.dm.uuid
733
734rdblacklist:: rd.driver.blacklist
735
736rdinsmodpost:: rd.driver.post
737
738rdloaddriver:: rd.driver.pre
739
740rd_NO_FSTAB:: rd.fstab=0
741
742rdinfo:: rd.info
743
744check:: rd.live.check
745
746rdlivedebug:: rd.live.debug
747
748live_dir:: rd.live.dir
749
750liveimg:: rd.live.image
751
752overlay:: rd.live.overlay
753
754readonly_overlay:: rd.live.overlay.readonly
755
756reset_overlay:: rd.live.overlay.reset
757
758live_ram:: rd.live.ram
759
760rd_NO_CRYPTTAB:: rd.luks.crypttab=0
761
762rd_LUKS_KEYDEV_UUID:: rd.luks.keydev.uuid
763
764rd_LUKS_KEYPATH:: rd.luks.keypath
765
766rd_NO_LUKS:: rd.luks=0
767
768rd_LUKS_UUID:: rd.luks.uuid
769
770rd_NO_LVMCONF:: rd.lvm.conf
771
772rd_LVM_LV:: rd.lvm.lv
773
774rd_NO_LVM:: rd.lvm=0
775
776rd_LVM_SNAPSHOT:: rd.lvm.snapshot
777
778rd_LVM_SNAPSIZE:: rd.lvm.snapsize
779
780rd_LVM_VG:: rd.lvm.vg
781
782rd_NO_MDADMCONF:: rd.md.conf=0
783
784rd_NO_MDIMSM:: rd.md.imsm=0
785
786rd_NO_MD:: rd.md=0
787
788rd_MD_UUID:: rd.md.uuid
789
790rd_NFS_DOMAIN:: rd.nfs.domain
791
792iscsi_initiator:: rd.iscsi.initiator
793
794iscsi_target_name:: rd.iscsi.target.name
795
796iscsi_target_ip:: rd.iscsi.target.ip
797
798iscsi_target_port:: rd.iscsi.target.port
799
800iscsi_target_group:: rd.iscsi.target.group
801
802iscsi_username:: rd.iscsi.username
803
804iscsi_password:: rd.iscsi.password
805
806iscsi_in_username:: rd.iscsi.in.username
807
808iscsi_in_password:: rd.iscsi.in.password
809
810iscsi_firmware:: rd.iscsi.firmware=0
811
812rd_NO_PLYMOUTH:: rd.plymouth=0
813
814rd_retry:: rd.retry
815
816rdshell:: rd.shell
817
818rd_NO_SPLASH:: rd.splash
819
820rdudevdebug:: rd.udev.debug
821
822rdudevinfo:: rd.udev.info
823
824rd_NO_ZFCPCONF:: rd.zfcp.conf=0
825
826rd_ZFCP:: rd.zfcp
827
828rd_ZNET:: rd.znet
829
830KEYMAP:: vconsole.keymap
831
832KEYTABLE:: vconsole.keymap
833
834SYSFONT:: vconsole.font
835
836CONTRANS:: vconsole.font.map
837
838UNIMAP:: vconsole.font.unimap
839
840UNICODE:: vconsole.unicode
841
842EXT_KEYMAP:: vconsole.keymap.ext
843
844Configuration in the Initramfs
845~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
846_/etc/conf.d/_::
847 Any files found in _/etc/conf.d/_ will be sourced in the initramfs to
848 set initial values. Command line options will override these values
849 set in the configuration files.
850
851_/etc/cmdline_::
3cff5fb5 852 Can contain additional command line options. Deprecated, better use /etc/cmdline.d/*.conf.
888d53f2
HH
853
854_/etc/cmdline.d/*.conf_::
855 Can contain additional command line options.
856
857AUTHOR
858------
9f355169 859Harald Hoyer
888d53f2
HH
860
861SEE ALSO
862--------
863*dracut*(8) *dracut.conf*(5)