]> git.ipfire.org Git - thirdparty/dracut.git/blame - dracut.cmdline.7.asc
test: disable systemd for encryption
[thirdparty/dracut.git] / dracut.cmdline.7.asc
CommitLineData
888d53f2
HH
1DRACUT.CMDLINE(7)
2=================
3:doctype: manpage
4:man source: dracut
5:man manual: dracut
6
7NAME
8----
9dracut.cmdline - dracut kernel command line options
10
11DESCRIPTION
12-----------
13The root device used by the kernel is specified in the boot configuration
14file on the kernel command line, as always.
15
16The traditional _root=/dev/sda1_ style device specification is allowed, but not
17encouraged. The root device should better be identified by LABEL or UUID. If a
18label is used, as in _root=LABEL=<label_of_root>_ the initramfs will search all
19available devices for a filesystem with the appropriate label, and mount that
20device as the root filesystem. _root=UUID=<uuidnumber>_ will mount the partition
21with that UUID as the root filesystem.
22
23In the following all kernel command line parameters, which are processed by
24dracut, are described.
25
26"rd.*" parameters mentioned without "=" are boolean parameters. They can be
27turned on/off by setting them to {0|1}. If the assignment with "=" is missing
28"=1" is implied. For example _rd.info_ can be turned off with _rd.info=0_ or
29turned on with _rd.info=1_ or _rd.info_. The last value in the kernel command
30line is the value, which is honored.
31
32Standard
33~~~~~~~~
34**init=**_<path to real init>_::
35 specify the path to the init programm to be started after the initramfs has
36 finished
37
38**root=**_<path to blockdevice>_::
39 specify the block device to use as the root filesystem.
40+
41E.g.:
42+
43----
44root=/dev/sda1
45root=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
46root=/dev/disk/by-label/Root
47root=LABEL=Root
48root=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
49root=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
b23a2837 50root=PARTUUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
888d53f2
HH
51----
52
53**rootfstype=**_<filesystem type>_:: "auto" if not specified, e.g.:
54+
55----
56rootfstype=ext3
57----
58
59**rootflags=**_<mount options>_::
60 specify additional mount options for the root filesystem. If not set,
61 _/etc/fstab_ of the real root will be parsed for special mount options and
62 mounted accordingly.
63
5afa9579
64**ro**::
65 force mounting _/_ and _/usr_ (if it is a separate device) read-only. If
66 none of ro and rw is present, both are mounted according to _/etc/fstab_.
67
68**rw**::
69 force mounting _/_ and _/usr_ (if it is a separate device) read-write.
70 See also ro option.
71
a6332e69 72**rd.auto** **rd.auto=1**::
e0641277
HH
73 enable autoassembly of special devices like cryptoLUKS, dmraid, mdraid or lvm.
74 Default is off as of dracut version >= 024.
75
888d53f2
HH
76**rd.fstab=0**::
77 do not honor special mount options for the root filesystem found in
78 _/etc/fstab_ of the real root.
79
5d0404e3
HH
80**resume=**_<path to resume partition>_::
81 resume from a swap partition
97903dfc
HH
82+
83E.g.:
84+
85----
86resume=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
87resume=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
88resume=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
89----
90
9fb01d49
91**rd.skipfsck**::
92 skip fsck for rootfs and _/usr_. If you're mounting _/usr_ read-only and
93 the init system performs fsck before remount, you might want to use this
94 option to avoid duplication.
97903dfc 95
2ee48b4b 96
888d53f2
HH
97Misc
98~~~~
99**rd.driver.blacklist=**_<drivername>[,<drivername>,...]_::
100 do not load kernel module <drivername>. This parameter can be specified
101 multiple times.
102
103**rd.driver.pre=**_<drivername>[,<drivername>,...]_::
104 force loading kernel module <drivername>. This parameter can be specified
105 multiple times.
106
107**rd.driver.post=**_<drivername>[,<drivername>,...]_::
108 force loading kernel module <drivername> after all automatic loading modules
109 have been loaded. This parameter can be specified multiple times.
110
5cd7c104
HH
111**rd.retry=**_<seconds>_::
112 specify how long dracut should wait for devices to appear.
113 The default is 30 seconds. After 2/3 of the time, degraded raids are force
52da8a51
HH
114 started. If you have hardware, which takes a very long time to announce its
115 drives, you might want to extend this value.
5cd7c104 116
888d53f2
HH
117[[dracutkerneldebug]]
118Debug
119~~~~~
120**rd.info**::
121 print informational output though "quiet" is set
122
123**rd.shell**::
124 allow dropping to a shell, if root mounting fails
125
126**rd.debug**::
127 set -x for the dracut shell and logs to dmesg, console and
128 _/run/initramfs/init.log_
129
130**rd.break**::
131 drop to a shell at the end
132
eef7649e 133**rd.break=**_{cmdline|pre-udev|pre-trigger|initqueue|pre-mount|mount|pre-pivot|cleanup}_::
888d53f2
HH
134 drop to a shell on defined breakpoint
135
136**rd.udev.info**::
137 set udev to loglevel info
138
139**rd.udev.debug**::
140 set udev to loglevel debug
141
142I18N
143~~~~
144**vconsole.keymap=**_<keymap base file name>_::
145 keyboard translation table loaded by loadkeys; taken from keymaps directory;
146 will be written as KEYMAP to _/etc/vconsole.conf_ in the initramfs, e.g.:
147+
148----
149vconsole.keymap=de-latin1-nodeadkeys
150----
151
152**vconsole.keymap.ext=**_<list of keymap base file names>_::
153 list of extra keymaps to bo loaded (sep. by space); will be written as
154 EXT_KEYMAP to _/etc/vconsole.conf_ in the initramfs
155
156**vconsole.unicode**[=_{0|1}_]::
157 boolean, indicating UTF-8 mode; will be written as UNICODE to
158 _/etc/vconsole.conf_ in the initramfs
159
160**vconsole.font=**_<font base file name>_::
161 console font; taken from consolefonts directory; will be written as FONT to
162 _/etc/vconsole.conf_ in the initramfs; e.g.:
163+
164----
165vconsole.font=LatArCyrHeb-16
166----
167
168**vconsole.font.map=**_<console map base file name>_::
169 see description of '-m' parameter in setfont manual; taken from consoletrans
170 directory; will be written as FONT_MAP to _/etc/vconsole.conf_ in the
171 initramfs
172
173**vconsole.font.unimap=**_<unicode table base file name>_::
174 see description of '-u' parameter in setfont manual; taken from unimaps
175 directory; will be written as FONT_UNIMAP to _/etc/vconsole.conf_ in the
176 initramfs
177
178**locale.LANG=**_<locale>_::
179 taken from the environment; if no UNICODE is defined we set its value in
180 basis of LANG value (whether it ends with ".utf8" (or similar) or not); will
181 be written as LANG to _/etc/locale.conf_ in the initramfs; e.g.:
182+
183----
184locale.LANG=pl_PL.utf8
185----
186
187**locale.LC_ALL=**_<locale>_::
188 taken from the environment; will be written as LC_ALL to _/etc/locale.conf_
189 in the initramfs
190
191LVM
192~~~
193**rd.lvm=0**::
194 disable LVM detection
195
196**rd.lvm.vg=**_<volume group name>_::
197 only activate the volume groups with the given name. rd.lvm.vg can be
198 specified multiple times on the kernel command line.
199
200**rd.lvm.lv=**_<logical volume name>_::
201 only activate the logical volumes with the given name. rd.lvm.lv can be
202 specified multiple times on the kernel command line.
203
204**rd.lvm.conf=0**::
205 remove any _/etc/lvm/lvm.conf_, which may exist in the initramfs
206
207crypto LUKS
208~~~~~~~~~~~
209**rd.luks=0**::
210 disable crypto LUKS detection
211
212**rd.luks.uuid=**_<luks uuid>_::
213 only activate the LUKS partitions with the given UUID. Any "luks-" of the
214 LUKS UUID is removed before comparing to _<luks uuid>_.
215 The comparisons also matches, if _<luks uuid>_ is only the beginning of the
216 LUKS UUID, so you don't have to specify the full UUID.
217 This parameter can be specified multiple times.
218
5ad3803d
HH
219**rd.luks.allow-discards=**_<luks uuid>_::
220 Allow using of discards (TRIM) requests for LUKS partitions with the given UUID.
221 Any "luks-" of the LUKS UUID is removed before comparing to _<luks uuid>_.
222 The comparisons also matches, if _<luks uuid>_ is only the beginning of the
223 LUKS UUID, so you don't have to specify the full UUID.
224 This parameter can be specified multiple times.
225
f7235c22 226**rd.luks.allow-discards**::
5ad3803d
HH
227 Allow using of discards (TRIM) requests on all LUKS partitions.
228
888d53f2
HH
229**rd.luks.crypttab=0**::
230 do not check, if LUKS partition is in _/etc/crypttab_
231
232crypto LUKS - key on removable device support
233~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
234**rd.luks.key=**_<keypath>:<keydev>:<luksdev>_::
235 _keypath_ is a path to key file to look for. It's REQUIRED. When _keypath_ ends with '.gpg' it's considered to be key encrypted symmetrically with GPG. You will be prompted for password on boot. GPG support comes with 'crypt-gpg' module which needs to be added explicitly.
236+
237_keydev_ is a device on which key file resides. It might be kernel name of devices (should start with "/dev/"), UUID (prefixed with "UUID=") or label (prefix with "LABEL="). You don't have to specify full UUID. Just its beginning will suffice, even if its ambiguous. All matching devices will be probed. This parameter is recommended, but not required. If not present, all block devices will be probed, which may significantly increase boot time.
238+
239If _luksdev_ is given, the specified key will only be applied for that LUKS device. Possible values are the same as for _keydev_. Unless you have several LUKS devices, you don't have to specify this parameter. The simplest usage is:
240+
241----
242rd.luks.key=/foo/bar.key
243----
244+
245As you see, you can skip colons in such a case.
173edca0
246+
247[NOTE]
248===============================
249Dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe
250to crypsetup luksFormat with _-d -_, too!
251
252Here follows example for key encrypted with GPG:
253
254----
255gpg --quiet --decrypt rootkey.gpg \
256| cryptsetup -d - -v \
257--cipher serpent-cbc-essiv:sha256 \
258--key-size 256 luksFormat /dev/sda3
259----
260
261If you use plain keys, just add path to _-d_ option:
262
263----
264cryptsetup -d rootkey.key -v \
265--cipher serpent-cbc-essiv:sha256 \
266--key-size 256 luksFormat /dev/sda3
267----
268===============================
888d53f2
HH
269
270MD RAID
271~~~~~~~
272**rd.md=0**::
273 disable MD RAID detection
274
275**rd.md.imsm=0**::
276 disable MD RAID for imsm/isw raids, use DM RAID instead
277
278**rd.md.ddf=0**::
279 disable MD RAID for SNIA ddf raids, use DM RAID instead
280
281**rd.md.conf=0**::
282 ignore mdadm.conf included in initramfs
283
284**rd.md.waitclean=1**::
285 wait for any resync, recovery, or reshape activity to finish before continuing
286
287**rd.md.uuid=**_<md raid uuid>_::
288 only activate the raid sets with the given UUID. This parameter can be
289 specified multiple times.
290
291DM RAID
292~~~~~~~
293**rd.dm=0**::
294 disable DM RAID detection
295
296**rd.dm.uuid=**_<dm raid uuid>_::
297 only activate the raid sets with the given UUID. This parameter can be
298 specified multiple times.
299
300FIPS
301~~~~
302**rd.fips**::
303 enable FIPS
304
305**boot=**_<boot device>_::
306 specify the device, where /boot is located. e.g.
307+
308----
309boot=/dev/sda1
310boot=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
311boot=UUID=<uuid>
312boot=LABEL=<label>
313----
314
315**rd.fips.skipkernel**::
316 skip checksum check of the kernel image. Useful, if the kernel image is not
317 in a separate boot partition.
318
319Network
320~~~~~~~
321**ip=**_{dhcp|on|any|dhcp6|auto6|ibft}_::
322 dhcp|on|any::: get ip from dhcp server from all interfaces. If root=dhcp, loop
323 sequentially through all interfaces (eth0, eth1, ...) and use the first with
324 a valid DHCP root-path.
325
326 auto6::: IPv6 autoconfiguration
327
328 dhcp6::: IPv6 DHCP
329
330 ibft::: iBFT autoconfiguration
331
990e945f 332**ip=**_<interface>_:_{dhcp|on|any|dhcp6|auto6}_[:[_<mtu>_][:_<macaddr>_]]::
888d53f2
HH
333 This parameter can be specified multiple times.
334+
1760dfc0 335=====================
888d53f2
HH
336dhcp|on|any|dhcp6::: get ip from dhcp server on a specific interface
337auto6::: do IPv6 autoconfiguration
1760dfc0
HH
338<macaddr>::: optionally **set** <macaddr> on the <interface>. This
339cannot be used in conjunction with the **ifname** argument for the
340same <interface>.
341=====================
342
343[IMPORTANT]
344=====================
345It is recommended to either bind <interface> to a MAC with the **ifname**
346argument. Or use biosdevname to name your interfaces, which will then have names according to their hardware location.
347
348em<port>::: for embedded NICs
349p<slot>#<port>_<virtual instance>::: for cards in PCI slots
350=====================
888d53f2 351
990e945f 352**ip=**_<client-IP>_:_<server-IP>_:_<gateway-IP>_:_<netmask>_:_<client_hostname>_:_<interface>_:_{none|off|dhcp|on|any|dhcp6|auto6|ibft}_[:[_<mtu>_][:_<macaddr>_]]::
888d53f2
HH
353 explicit network configuration. If you want do define a IPv6 address, put it
354 in brackets (e.g. [2001:DB8::1]). This parameter can be specified multiple
355 times.
990e945f 356+
1760dfc0
HH
357=====================
358<macaddr>::: optionally **set** <macaddr> on the <interface>. This
359cannot be used in conjunction with the **ifname** argument for the
360same <interface>.
361=====================
362
363[IMPORTANT]
364=====================
365It is recommended to either bind <interface> to a MAC with the **ifname**
366argument. Or use biosdevname to name your interfaces, which will then have names according to their hardware location.
367
368em<port>::: for embedded NICs
369p<slot>#<port>_<virtual instance>::: for cards in PCI slots
370=====================
888d53f2
HH
371
372**ifname=**_<interface>_:_<MAC>_::
1760dfc0
HH
373 Assign network device name <interface> (ie "bootnet") to the NIC with MAC <MAC>.
374+
375[IMPORTANT]
376
377Do **not** use the default kernel naming scheme for the interface name,
378as it can conflict with the kernel names. So, don't use "eth[0-9]+" for the
379interface name. Better name it "bootnet" or "bluesocket".
888d53f2
HH
380
381**bootdev=**_<interface>_::
382 specify network interface to use routing and netroot information from.
383 Required if multiple ip= lines are used.
384
385**nameserver=**__<IP>__ [**nameserver=**__<IP>__ ...]::
386 specify nameserver(s) to use
387
388**biosdevname=0**::
389 boolean, turn off biosdevname network interface renaming
390
48dba7f9
HH
391**rd.neednet=1**::
392 boolean, bring up network even without netroot set
393
144787fe
AW
394**vlan=_<vlanname>_:_<phydevice>_**::
395 Setup vlan device named <vlanname> on <phydeivce>.
396 We support the four styles of vlan names: VLAN_PLUS_VID (vlan0005), VLAN_PLUS_VID_NO_PAD (vlan5),
397 DEV_PLUS_VID (eth0.0005), DEV_PLUS_VID_NO_PAD (eth0.5)
398
c438bdb0
AW
399**bond=_<bondname>_[:_<bondslaves>_:[:_<options>_]]**::
400 Setup bonding device <bondname> on top of <bondslaves>.
401 <bondslaves> is a comma-separated list of physical (ethernet) interfaces.
402 <options> is a comma-separated list on bonding options (modinfo bonding for details)
403 in format compatible with initscripts. If <options> includes multi-valued arp_ip_target option,
404 then its values should be separated by semicolon.
405 Bond without parameters assumes bond=bond0:eth0,eth1:mode=balance-rr
406
21928b97
AW
407**bridge=_<bridgename>_:_<ethnames>_**::
408 Setup bridge <bridgename> with <ethnames>. <ethnames> is a comma-separated
409 list of physical (ethernet) interfaces. Bridge without parameters assumes bridge=br0:eth0
9337c692 410
c438bdb0 411
888d53f2
HH
412NFS
413~~~
414**root=**[_<server-ip>_:]_<root-dir>_[:_<nfs-options>_]::
415 mount nfs share from <server-ip>:/<root-dir>, if no server-ip is given, use
416 dhcp next_server. if server-ip is an IPv6 address it has to be put in
417 brackets, e.g. [2001:DB8::1]. NFS options can be appended with the prefix
418 ":" or "," and are seperated by ",".
419
420**root=**nfs:[_<server-ip>_:]_<root-dir>_[:_<nfs-options>_], **root=**nfs4:[_<server-ip>_:]_<root-dir>_[:_<nfs-options>_], **root=**_{dhcp|dhcp6}_::
421 root=dhcp alone directs initrd to look at the DHCP root-path where NFS
422 options can be specified.
423+
424----
425 root-path=<server-ip>:<root-dir>[,<nfs-options>]
426 root-path=nfs:<server-ip>:<root-dir>[,<nfs-options>]
427 root-path=nfs4:<server-ip>:<root-dir>[,<nfs-options>]
428----
429
430**root=**_/dev/nfs_ nfsroot=[_<server-ip>_:]_<root-dir>_[:_<nfs-options>_]::
431 _Deprecated!_ kernel Documentation_/filesystems/nfsroot.txt_ defines this
432 method. This is supported by dracut, but not recommended.
433
434**rd.nfs.domain=**_<NFSv4 domain name>_::
435 Set the NFSv4 domain name. Will overwrite the settings in _/etc/idmap.conf_.
436
d580636e
MG
437CIFS
438~~~
439**root=**cifs://[_<username>_[:_<password>_]@]_<server-ip>_:_<root-dir>_::
440 mount cifs share from <server-ip>:/<root-dir>, if no server-ip is given, use
441 dhcp next_server. if server-ip is an IPv6 address it has to be put in
442 brackets, e.g. [2001:DB8::1]. If a username or password are not specified
443as part of the root, then they must be passed on the command line through
444cifsuser/cifspass.
445
446**cifsuser=_<username>_::
447 Set the cifs username, if not specified as part of the root.
448
449**cifspass=_<password>_::
450 Set the cifs password, if not specified as part of the root.
451
888d53f2
HH
452iSCSI
453~~~~~
ac3f1c6e 454**root=**iscsi:[_<username>_:_<password>_[:_<reverse>_:_<password>_]@][_<servername>_]:[_<protocol>_]:[_<port>_][:[_<iscsi_iface_name>_]:[_<netdev_name>_]]:[_<LUN>_]:_<targetname>_::
888d53f2
HH
455 protocol defaults to "6", LUN defaults to "0". If the "servername" field is
456 provided by BOOTP or DHCP, then that field is used in conjunction with other
457 associated fields to contact the boot server in the Boot stage. However, if
458 the "servername" field is not provided, then the "targetname" field is then
459 used in the Discovery Service stage in conjunction with other associated
460 fields. See
461 link:$$http://tools.ietf.org/html/rfc4173#section-5$$[rfc4173].
462 e.g.:
463+
464----
465root=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
466----
467+
468If servername is an IPv6 address, it has to be put in brackets. e.g.:
469+
470----
471root=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
472----
473
ac3f1c6e 474**root=**_???_ **netroot=**iscsi:[_<username>_:_<password>_[:_<reverse>_:_<password>_]@][_<servername>_]:[_<protocol>_]:[_<port>_][:[_<iscsi_iface_name>_]:[_<netdev_name>_]]:[_<LUN>_]:_<targetname>_ ...::
888d53f2
HH
475 multiple netroot options allow setting up multiple iscsi disks. e.g.:
476+
477----
478root=UUID=12424547
479netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
480netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target1
481----
482+
483If servername is an IPv6 address, it has to be put in brackets. e.g.:
484+
485----
486netroot=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
487----
488
489**root=**_???_ **rd.iscsi.initiator=**_<initiator>_ **rd.iscsi.target.name=**_<target name>_ **rd.iscsi.target.ip=**_<target ip>_ **rd.iscsi.target.port=**_<target port>_ **rd.iscsi.target.group=**_<target group>_ **rd.iscsi.username=**_<username>_ **rd.iscsi.password=**_<password>_ **rd.iscsi.in.username=**_<in username>_ **rd.iscsi.in.password=**_<in password>_::
490 manually specify all iscsistart parameter (see **+iscsistart --help+**)
491
492**root=**_???_ **netroot=**iscsi **rd.iscsi.firmware=1**::
493 will read the iscsi parameter from the BIOS firmware
494
b48f5e84 495**rd.iscsi.param=**_<param>_::
8d51acbb
HH
496 <param> will be passed as "--param <param>" to iscsistart.
497 This parameter can be specified multiple times.
498 e.g.:
499+
500----
b48f5e84 501"netroot=iscsi iscsi_firmware rd.iscsi.param=node.session.timeo.replacement_timeout=30"
8d51acbb
HH
502----
503+
504will result in
505+
506----
507iscsistart -b --param node.session.timeo.replacement_timeout=30
508----
509
888d53f2
HH
510FCoE
511~~~~
512**fcoe=**_<edd|interface|MAC>_:_{dcb|nodcb}_::
513 Try to connect to a FCoE SAN through the NIC specified by _<interface>_ or
514 _<MAC>_ or EDD settings. For the second argument, currently only nodcb is
1760dfc0
HH
515 supported. This parameter can be specified multiple times.
516+
517[NOTE]
518letters in the MAC-address must be lowercase!
888d53f2
HH
519
520NBD
521~~~
522**root=**??? **netroot=**nbd:_<server>_:_<port>_[:_<fstype>_[:_<mountopts>_[:_<nbdopts>_]]]::
523 mount nbd share from <server>
524
525**root=dhcp** with **dhcp** **root-path=**nbd:_<server>_:_<port>_[:_<fstype>_[:_<mountopts>_[:_<nbdopts>_]]]::
526 root=dhcp alone directs initrd to look at the DHCP root-path where NBD
527 options can be specified. This syntax is only usable in cases where you are
528 directly mounting the volume as the rootfs.
529
530DASD
531~~~~
4d76a85d 532**rd.dasd=**....::
888d53f2
HH
533 same syntax as the kernel module parameter (s390 only)
534
888d53f2
HH
535ZFCP
536~~~~
537**rd.zfcp=**_<zfcp adaptor device bus ID>_,_<WWPN>_,_<FCPLUN>_::
538 rd.zfcp can be specified multiple times on the kernel command line. e.g.:
539+
540----
541rd.zfcp=0.0.4000,0x5005076300C213e9,0x5022000000000000
542----
543
544**rd.zfcp.conf=0**::
545 ignore zfcp.conf included in the initramfs
546
547ZNET
548~~~~
549**rd.znet=**_<nettype>_,_<subchannels>_,_<options>_::
550 rd.znet can be specified multiple times on the kernel command line. e.g.:
551+
552----
553rd.znet=qeth,0.0.0600,0.0.0601,0.0.0602,layer2=1,portname=foo
554rd.znet=ctc,0.0.0600,0.0.0601,0.0.0602,protocol=bar
555----
556
557Plymouth Boot Splash
558~~~~~~~~~~~~~~~~~~~~
559**plymouth.enable=0**::
560 disable the plymouth bootsplash completly.
561
562**rd.plymouth=0**::
563 disable the plymouth bootsplash only for the initramfs.
564
565Kernel keys
566~~~~~~~~~~~
567**masterkey=**_<kernel master key path name>_::
568 Set the path name of the kernel master key. e.g.:
569+
570----
571masterkey=/etc/keys/kmk-trusted.blob
572----
573
574**masterkeytype=**_<kernel master key type>_::
575 Set the type of the kernel master key. e.g.:
576+
577----
578masterkeytype=trusted
579----
580
581**evmkey=**_<EVM key path name>_::
582 Set the path name of the EVM key. e.g.:
583+
584----
585evmkey=/etc/keys/evm-trusted.blob
586----
587
588**ecryptfskey=**_<eCryptfs key path name>_::
589 Set the path name of the eCryptfs key. e.g.:
590+
591----
592ecryptfskey=/etc/keys/ecryptfs-trusted.blob
593----
594
595Deprecated, renamed Options
596~~~~~~~~~~~~~~~~~~~~~~~~~~~
597Here is a list of options, which were used in dracut prior to version 008, and their new replacement.
598
599rdbreak:: rd.break
600
601rd_CCW:: rd.ccw
602
4d76a85d 603rd_DASD_MOD:: rd.dasd
888d53f2
HH
604
605rd_DASD:: rd.dasd
606
607rdinitdebug rdnetdebug:: rd.debug
608
609rd_NO_DM:: rd.dm=0
610
611rd_DM_UUID:: rd.dm.uuid
612
613rdblacklist:: rd.driver.blacklist
614
615rdinsmodpost:: rd.driver.post
616
617rdloaddriver:: rd.driver.pre
618
619rd_NO_FSTAB:: rd.fstab=0
620
621rdinfo:: rd.info
622
623check:: rd.live.check
624
625rdlivedebug:: rd.live.debug
626
627live_dir:: rd.live.dir
628
629liveimg:: rd.live.image
630
631overlay:: rd.live.overlay
632
633readonly_overlay:: rd.live.overlay.readonly
634
635reset_overlay:: rd.live.overlay.reset
636
637live_ram:: rd.live.ram
638
639rd_NO_CRYPTTAB:: rd.luks.crypttab=0
640
641rd_LUKS_KEYDEV_UUID:: rd.luks.keydev.uuid
642
643rd_LUKS_KEYPATH:: rd.luks.keypath
644
645rd_NO_LUKS:: rd.luks=0
646
647rd_LUKS_UUID:: rd.luks.uuid
648
649rd_NO_LVMCONF:: rd.lvm.conf
650
651rd_LVM_LV:: rd.lvm.lv
652
653rd_NO_LVM:: rd.lvm=0
654
655rd_LVM_SNAPSHOT:: rd.lvm.snapshot
656
657rd_LVM_SNAPSIZE:: rd.lvm.snapsize
658
659rd_LVM_VG:: rd.lvm.vg
660
661rd_NO_MDADMCONF:: rd.md.conf=0
662
663rd_NO_MDIMSM:: rd.md.imsm=0
664
665rd_NO_MD:: rd.md=0
666
667rd_MD_UUID:: rd.md.uuid
668
669rd_NFS_DOMAIN:: rd.nfs.domain
670
671iscsi_initiator:: rd.iscsi.initiator
672
673iscsi_target_name:: rd.iscsi.target.name
674
675iscsi_target_ip:: rd.iscsi.target.ip
676
677iscsi_target_port:: rd.iscsi.target.port
678
679iscsi_target_group:: rd.iscsi.target.group
680
681iscsi_username:: rd.iscsi.username
682
683iscsi_password:: rd.iscsi.password
684
685iscsi_in_username:: rd.iscsi.in.username
686
687iscsi_in_password:: rd.iscsi.in.password
688
689iscsi_firmware:: rd.iscsi.firmware=0
690
691rd_NO_PLYMOUTH:: rd.plymouth=0
692
693rd_retry:: rd.retry
694
695rdshell:: rd.shell
696
697rd_NO_SPLASH:: rd.splash
698
699rdudevdebug:: rd.udev.debug
700
701rdudevinfo:: rd.udev.info
702
703rd_NO_ZFCPCONF:: rd.zfcp.conf=0
704
705rd_ZFCP:: rd.zfcp
706
707rd_ZNET:: rd.znet
708
709KEYMAP:: vconsole.keymap
710
711KEYTABLE:: vconsole.keymap
712
713SYSFONT:: vconsole.font
714
715CONTRANS:: vconsole.font.map
716
717UNIMAP:: vconsole.font.unimap
718
719UNICODE:: vconsole.unicode
720
721EXT_KEYMAP:: vconsole.keymap.ext
722
723Configuration in the Initramfs
724~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
725_/etc/conf.d/_::
726 Any files found in _/etc/conf.d/_ will be sourced in the initramfs to
727 set initial values. Command line options will override these values
728 set in the configuration files.
729
730_/etc/cmdline_::
731 Can contain additional command line options.
732
733_/etc/cmdline.d/*.conf_::
734 Can contain additional command line options.
735
736AUTHOR
737------
9f355169 738Harald Hoyer
888d53f2
HH
739
740SEE ALSO
741--------
742*dracut*(8) *dracut.conf*(5)