dracut.cmdline.7.asc

   1 DRACUT.CMDLINE(7)
   2 =================
   3 :doctype: manpage
   4 :man source:   dracut
   5 :man manual:   dracut
   6
   7 NAME
   8 ----
   9 dracut.cmdline - dracut kernel command line options
  10
  11 DESCRIPTION
  12 -----------
  13 The root device used by the kernel is specified in the boot configuration
  14 file on the kernel command line, as always.
  15
  16 The traditional _root=/dev/sda1_ style device specification is allowed, but not
  17 encouraged. The root device should better be identified by LABEL or UUID. If a
  18 label is used, as in _root=LABEL=<label_of_root>_ the initramfs will search all
  19 available devices for a filesystem with the appropriate label, and mount that
  20 device as the root filesystem. _root=UUID=<uuidnumber>_ will mount the partition
  21 with that UUID as the root filesystem.
  22
  23 In the following all kernel command line parameters, which are processed by
  24 dracut, are described.
  25
  26 "rd.*" parameters mentioned without "=" are boolean parameters. They can be
  27 turned on/off by setting them to {0|1}. If the assignment with "=" is missing
  28 "=1" is implied. For example _rd.info_ can be turned off with _rd.info=0_ or
  29 turned on with _rd.info=1_ or _rd.info_. The last value in the kernel command
  30 line is the value, which is honored.
  31
  32 Standard
  33 ~~~~~~~~
  34 **init=**__<path to real init>__::
  35     specify the path to the init programm to be started after the initramfs has
  36     finished
  37
  38 **root=**__<path to blockdevice>__::
  39     specify the block device to use as the root filesystem.
  40 +
  41 [listing]
  42 .Example
  43 --
  44 root=/dev/sda1
  45 root=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
  46 root=/dev/disk/by-label/Root
  47 root=LABEL=Root
  48 root=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
  49 root=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
  50 root=PARTUUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
  51 --
  52
  53 **rootfstype=**__<filesystem type>__:: "auto" if not specified.
  54 +
  55 [listing]
  56 .Example
  57 --
  58 rootfstype=ext3
  59 --
  60
  61 **rootflags=**__<mount options>__::
  62     specify additional mount options for the root filesystem. If not set,
  63     _/etc/fstab_ of the real root will be parsed for special mount options and
  64     mounted accordingly.
  65
  66 **ro**::
  67     force mounting _/_ and _/usr_ (if it is a separate device) read-only.  If
  68     none of ro and rw is present, both are mounted according to _/etc/fstab_.
  69
  70 **rw**::
  71     force mounting _/_ and _/usr_ (if it is a separate device) read-write.
  72     See also ro option.
  73
  74 **rootfallback=**__<path to blockdevice>__::
  75     specify the block device to use as the root filesystem, if the normal root
  76     cannot be found. This can only be a simple block device with a simple file
  77     system, for which the filesystem driver is either compiled in, or added
  78     manually to the initramfs. This parameter can be specified multiple times.
  79
  80 **rd.auto** **rd.auto=1**::
  81     enable autoassembly of special devices like cryptoLUKS, dmraid, mdraid or
  82     lvm. Default is off as of dracut version >= 024.
  83
  84 **rd.hostonly=0**::
  85     removes all compiled in configuration of the host system the initramfs image
  86     was built on. This helps booting, if any disk layout changed, especially in
  87     combination with rd.auto or other parameters specifying the layout.
  88
  89 **rd.fstab=0**::
  90     do not honor special mount options for the root filesystem found in
  91     _/etc/fstab_ of the real root.
  92
  93 **resume=**__<path to resume partition>__::
  94     resume from a swap partition
  95 +
  96 [listing]
  97 .Example
  98 --
  99 resume=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
 100 resume=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
 101 resume=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
 102 --
 103
 104 **rd.skipfsck**::
 105     skip fsck for rootfs and _/usr_.  If you're mounting _/usr_ read-only and
 106     the init system performs fsck before remount, you might want to use this
 107     option to avoid duplication.
 108
 109
 110 Misc
 111 ~~~~
 112 **rd.driver.blacklist=**__<drivername>__[,__<drivername>__,...]::
 113     do not load kernel module <drivername>. This parameter can be specified
 114     multiple times.
 115
 116 **rd.driver.pre=**__<drivername>__[,__<drivername>__,...]::
 117     force loading kernel module <drivername>. This parameter can be specified
 118     multiple times.
 119
 120 **rd.driver.post=**__<drivername>__[,__<drivername>__,...]::
 121     force loading kernel module <drivername> after all automatic loading modules
 122     have been loaded. This parameter can be specified multiple times.
 123
 124 **rd.retry=**__<seconds>__::
 125     specify how long dracut should wait for devices to appear.
 126     The default is 30 seconds. After 2/3 of the time, degraded raids are force
 127     started. If you have hardware, which takes a very long time to announce its
 128     drives, you might want to extend this value.
 129
 130 **rd.noverifyssl**::
 131     accept self-signed certificates for ssl downloads.
 132
 133 **rd.ctty=**__<terminal device>__::
 134    specify the controlling terminal for the console.
 135    This is useful, if you have multiple "console=" arguments.
 136
 137 [[dracutkerneldebug]]
 138 Debug
 139 ~~~~~
 140 If you are dropped to an emergency shell, the file
 141 _/run/initramfs/rdsosreport.txt_ is created, which can be safed to a (to be
 142 mounted by hand) partition (usually /boot) or a USB stick. Additional debugging
 143 info can be produced by adding **rd.debug** to the kernel command line.
 144 _/run/initramfs/rdsosreport.txt_ contains all logs and the output of some tools.
 145 It should be attached to any report about dracut problems.
 146
 147 **rd.info**::
 148     print informational output though "quiet" is set
 149
 150 **rd.shell**::
 151     allow dropping to a shell, if root mounting fails
 152
 153 **rd.debug**::
 154     set -x for the dracut shell.
 155     If systemd is active in the initramfs, all output is logged to the systemd
 156     journal, which you can inspect with "journalctl -ab".
 157     If systemd is not active, the logs are written to dmesg and
 158     _/run/initramfs/init.log_.
 159     If "quiet" is set, it also logs to the console.
 160
 161 **rd.memdebug=[0-3]**::
 162     Print memory usage info at various points, set the verbose level from 0 to 3.
 163 +
 164     Higher level means more debugging output:
 165 +
 166 ----
 167     0 - no output
 168     1 - partial /proc/meminfo
 169     2 - /proc/meminfo
 170     3 - /proc/meminfo + /proc/slabinfo
 171 ----
 172
 173 **rd.break**::
 174     drop to a shell at the end
 175
 176 **rd.break=**__{cmdline|pre-udev|pre-trigger|initqueue|pre-mount|mount|pre-pivot|cleanup}__::
 177     drop to a shell on defined breakpoint
 178
 179 **rd.udev.info**::
 180     set udev to loglevel info
 181
 182 **rd.udev.debug**::
 183     set udev to loglevel debug
 184
 185 I18N
 186 ~~~~
 187 **rd.vconsole.keymap=**__<keymap base file name>__::
 188     keyboard translation table loaded by loadkeys; taken from keymaps directory;
 189     will be written as KEYMAP to _/etc/vconsole.conf_ in the initramfs.
 190 +
 191 [listing]
 192 .Example
 193 --
 194 rd.vconsole.keymap=de-latin1-nodeadkeys
 195 --
 196
 197 **rd.vconsole.keymap.ext=**__<list of keymap base file names>__::
 198     list of extra keymaps to bo loaded (sep. by space); will be written as
 199     EXT_KEYMAP to _/etc/vconsole.conf_ in the initramfs
 200
 201 **rd.vconsole.unicode**::
 202     boolean, indicating UTF-8 mode; will be written as UNICODE to
 203     _/etc/vconsole.conf_ in the initramfs
 204
 205 **rd.vconsole.font=**__<font base file name>__::
 206     console font; taken from consolefonts directory; will be written as FONT to
 207     _/etc/vconsole.conf_ in the initramfs.
 208 +
 209 [listing]
 210 .Example
 211 --
 212 rd.vconsole.font=LatArCyrHeb-16
 213 --
 214
 215 **rd.vconsole.font.map=**__<console map base file name>__::
 216     see description of '-m' parameter in setfont manual; taken from consoletrans
 217     directory; will be written as FONT_MAP to _/etc/vconsole.conf_ in the
 218     initramfs
 219
 220 **rd.vconsole.font.unimap=**__<unicode table base file name>__::
 221     see description of '-u' parameter in setfont manual; taken from unimaps
 222     directory; will be written as FONT_UNIMAP to _/etc/vconsole.conf_ in the
 223     initramfs
 224
 225 **rd.locale.LANG=**__<locale>__::
 226     taken from the environment; if no UNICODE is defined we set its value in
 227     basis of LANG value (whether it ends with ".utf8" (or similar) or not); will
 228     be written as LANG to _/etc/locale.conf_ in the initramfs.
 229 +
 230 [listing]
 231 .Example
 232 --
 233 rd.locale.LANG=pl_PL.utf8
 234 --
 235
 236 **rd.locale.LC_ALL=**__<locale>__::
 237     taken from the environment; will be written as LC_ALL to _/etc/locale.conf_
 238     in the initramfs
 239
 240 LVM
 241 ~~~
 242 **rd.lvm=0**::
 243     disable LVM detection
 244
 245 **rd.lvm.vg=**__<volume group name>__::
 246     only activate the volume groups with the given name. rd.lvm.vg can be
 247     specified multiple times on the kernel command line.
 248
 249 **rd.lvm.lv=**__<logical volume name>__::
 250     only activate the logical volumes with the given name. rd.lvm.lv can be
 251     specified multiple times on the kernel command line.
 252
 253 **rd.lvm.conf=0**::
 254     remove any _/etc/lvm/lvm.conf_, which may exist in the initramfs
 255
 256 crypto LUKS
 257 ~~~~~~~~~~~
 258 **rd.luks=0**::
 259     disable crypto LUKS detection
 260
 261 **rd.luks.uuid=**__<luks uuid>__::
 262     only activate the LUKS partitions with the given UUID. Any "luks-" of the
 263     LUKS UUID is removed before comparing to _<luks uuid>_.
 264     The comparisons also matches, if _<luks uuid>_ is only the beginning of the
 265     LUKS UUID, so you don't have to specify the full UUID.
 266     This parameter can be specified multiple times.
 267
 268 **rd.luks.allow-discards=**__<luks uuid>__::
 269     Allow  using  of discards (TRIM) requests for LUKS partitions with the given
 270     UUID. Any "luks-" of the LUKS UUID is removed before comparing to
 271     _<luks uuid>_. The comparisons also matches, if _<luks uuid>_ is only the
 272     beginning of the LUKS UUID, so you don't have to specify the full UUID.
 273     This parameter can be specified multiple times.
 274
 275 **rd.luks.allow-discards**::
 276     Allow  using  of discards (TRIM) requests on all LUKS partitions.
 277
 278 **rd.luks.crypttab=0**::
 279     do not check, if LUKS partition is in _/etc/crypttab_
 280
 281 crypto LUKS - key on removable device support
 282 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 283 **rd.luks.key=**__<keypath>__:__<keydev>__:__<luksdev>__::
 284     _keypath_ is a path to key file to look for. It's REQUIRED. When _keypath_
 285     ends with '.gpg' it's considered to be key encrypted symmetrically with GPG.
 286     You will be prompted for password on boot. GPG support comes with
 287     'crypt-gpg' module which needs to be added explicitly.
 288 +
 289 _keydev_ is a device on which key file resides. It might be kernel name of
 290 devices (should start with "/dev/"), UUID (prefixed with "UUID=") or label
 291 (prefix with "LABEL="). You don't have to specify full UUID. Just its beginning
 292 will suffice, even if its ambiguous. All matching devices will be probed.
 293 This parameter is recommended, but not required. If not present, all block
 294 devices will be probed, which may significantly increase boot time.
 295 +
 296 If _luksdev_ is given, the specified key will only be applied for that LUKS
 297 device. Possible values are the same as for _keydev_. Unless you have several
 298 LUKS devices, you don't have to specify this parameter. The simplest usage is:
 299 +
 300 [listing]
 301 .Example
 302 --
 303 rd.luks.key=/foo/bar.key
 304 --
 305 +
 306 As you see, you can skip colons in such a case.
 307 +
 308 [NOTE]
 309 ===============================
 310 dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe
 311 to crypsetup luksFormat with _-d -_, too!
 312
 313 Here follows example for key encrypted with GPG:
 314
 315 [listing]
 316 --
 317 gpg --quiet --decrypt rootkey.gpg | \
 318 cryptsetup -d - -v --cipher serpent-cbc-essiv:sha256 \
 319 --key-size 256 luksFormat /dev/sda3
 320 --
 321
 322 If you use plain keys, just add path to _-d_ option:
 323
 324 [listing]
 325 --
 326 cryptsetup -d rootkey.key -v --cipher serpent-cbc-essiv:sha256 \
 327  --key-size 256 luksFormat /dev/sda3
 328 --
 329 ===============================
 330
 331 MD RAID
 332 ~~~~~~~
 333 **rd.md=0**::
 334     disable MD RAID detection
 335
 336 **rd.md.imsm=0**::
 337     disable MD RAID for imsm/isw raids, use DM RAID instead
 338
 339 **rd.md.ddf=0**::
 340     disable MD RAID for SNIA ddf raids, use DM RAID instead
 341
 342 **rd.md.conf=0**::
 343     ignore mdadm.conf included in initramfs
 344
 345 **rd.md.waitclean=1**::
 346     wait for any resync, recovery, or reshape activity to finish before
 347     continuing
 348
 349 **rd.md.uuid=**__<md raid uuid>__::
 350     only activate the raid sets with the given UUID. This parameter can be
 351     specified multiple times.
 352
 353 DM RAID
 354 ~~~~~~~
 355 **rd.dm=0**::
 356     disable DM RAID detection
 357
 358 **rd.dm.uuid=**__<dm raid uuid>__::
 359    only activate the raid sets with the given UUID. This parameter can be
 360    specified multiple times.
 361
 362 FIPS
 363 ~~~~
 364 **rd.fips**::
 365     enable FIPS
 366
 367 **boot=**__<boot device>__::
 368     specify the device, where /boot is located.
 369 +
 370 [listing]
 371 .Example
 372 --
 373 boot=/dev/sda1
 374 boot=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
 375 boot=UUID=<uuid>
 376 boot=LABEL=<label>
 377 --
 378
 379 **rd.fips.skipkernel**::
 380     skip checksum check of the kernel image. Useful, if the kernel image is not
 381     in a separate boot partition.
 382
 383 Network
 384 ~~~~~~~
 385
 386 [IMPORTANT]
 387 =====================
 388 It is recommended to either bind an interface to a MAC with the **ifname**
 389 argument, or to use the systemd-udevd predictable network interface names.
 390
 391 Predictable network interface device names based on:
 392
 393 - firmware/bios-provided index numbers for on-board devices
 394 - firmware-provided pci-express hotplug slot index number
 395 - physical/geographical location of the hardware
 396 - the interface's MAC address
 397
 398 See:
 399 http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
 400
 401 Two character prefixes based on the type of interface:
 402
 403 en:: ethernet
 404 wl:: wlan
 405 ww:: wwan
 406
 407 Type of names:
 408
 409 o<index>:: on-board device index number
 410 s<slot>[f<function>][d<dev_id>]:: hotplug slot index number
 411 x<MAC>:: MAC address
 412 [P<domain>]p<bus>s<slot>[f<function>][d<dev_id>]:: PCI geographical location
 413 [P<domain>]p<bus>s<slot>[f<function>][u<port>][..][c<config>][i<interface>]:: USB port number chain
 414
 415 All multi-function PCI devices will carry the [f<function>] number in the
 416 device name, including the function 0 device.
 417
 418 When using PCI geography, The PCI domain is only prepended when it is not 0.
 419
 420 For USB devices the full chain of port numbers of hubs is composed. If the
 421 name gets longer than the maximum number of 15 characters, the name is not
 422 exported.
 423 The usual USB configuration == 1 and interface == 0 values are suppressed.
 424
 425 PCI ethernet card with firmware index "1"::
 426 * eno1
 427
 428 PCI ethernet card in hotplug slot with firmware index number::
 429 * ens1
 430
 431 PCI ethernet multi-function card with 2 ports::
 432 * enp2s0f0
 433 * enp2s0f1
 434
 435 PCI wlan card::
 436 * wlp3s0
 437
 438 USB built-in 3G modem::
 439 * wwp0s29u1u4i6
 440
 441 USB Android phone::
 442 * enp0s29u1u2
 443 =====================
 444
 445 **ip=**__{dhcp|on|any|dhcp6|auto6}__::
 446     dhcp|on|any::: get ip from dhcp server from all interfaces. If root=dhcp,
 447     loop sequentially through all interfaces (eth0, eth1, ...) and use the first
 448     with a valid DHCP root-path.
 449
 450     auto6::: IPv6 autoconfiguration
 451
 452     dhcp6::: IPv6 DHCP
 453
 454 **ip=**__<interface>__:__{dhcp|on|any|dhcp6|auto6}__[:[__<mtu>__][:__<macaddr>__]]::
 455     This parameter can be specified multiple times.
 456 +
 457 =====================
 458 dhcp|on|any|dhcp6::: get ip from dhcp server on a specific interface
 459 auto6::: do IPv6 autoconfiguration
 460 <macaddr>::: optionally **set** <macaddr> on the <interface>. This
 461 cannot be used in conjunction with the **ifname** argument for the
 462 same <interface>.
 463 =====================
 464
 465 **ip=**__<client-IP>__:[__<peer>__]:__<gateway-IP>__:__<netmask>__:__<client_hostname>__:__<interface>__:__{none|off|dhcp|on|any|dhcp6|auto6|ibft}__:[:[__<mtu>__][:__<macaddr>__]]::
 466     explicit network configuration. If you want do define a IPv6 address, put it
 467     in brackets (e.g. [2001:DB8::1]). This parameter can be specified multiple
 468     times. __<peer>__ is optional and is the address of the remote endpoint
 469     for pointopoint interfaces and it may be followed by a slash and a decimal
 470     number, encoding the network prefix length.
 471 +
 472 =====================
 473 <macaddr>::: optionally **set** <macaddr> on the <interface>. This
 474 cannot be used in conjunction with the **ifname** argument for the
 475 same <interface>.
 476 =====================
 477
 478 **ip=**__<client-IP>__:[__<peer>__]:__<gateway-IP>__:__<netmask>__:__<client_hostname>__:__<interface>__:__{none|off|dhcp|on|any|dhcp6|auto6|ibft}__[:[__<dns1>__][:__<dns2>__]]::
 479     explicit network configuration. If you want do define a IPv6 address, put it
 480     in brackets (e.g. [2001:DB8::1]). This parameter can be specified multiple
 481     times. __<peer>__ is optional and is the address of the remote endpoint
 482     for pointopoint interfaces and it may be followed by a slash and a decimal
 483     number, encoding the network prefix length.
 484
 485 **ifname=**__<interface>__:__<MAC>__::
 486     Assign network device name <interface> (ie "bootnet") to the NIC with
 487     MAC <MAC>.
 488 +
 489 WARNING: Do **not** use the default kernel naming scheme for the interface name,
 490 as it can conflict with the kernel names. So, don't use "eth[0-9]+" for the
 491 interface name. Better name it "bootnet" or "bluesocket".
 492
 493 **bootdev=**__<interface>__::
 494     specify network interface to use routing and netroot information from.
 495     Required if multiple ip= lines are used.
 496
 497 **BOOTIF=**__<MAC>__::
 498     specify network interface to use routing and netroot information from.
 499
 500 **rd.bootif=0**::
 501     Disable BOOTIF parsing, which is provided by PXE
 502
 503 **nameserver=**__<IP>__ [**nameserver=**__<IP>__ ...]::
 504     specify nameserver(s) to use
 505
 506 **biosdevname=0**::
 507     boolean, turn off biosdevname network interface renaming
 508
 509 **rd.neednet=1**::
 510     boolean, bring up network even without netroot set
 511
 512 **vlan=**__<vlanname>__:__<phydevice>__::
 513     Setup vlan device named <vlanname> on <phydeivce>.
 514     We support the four styles of vlan names: VLAN_PLUS_VID (vlan0005),
 515     VLAN_PLUS_VID_NO_PAD (vlan5), DEV_PLUS_VID (eth0.0005),
 516     DEV_PLUS_VID_NO_PAD (eth0.5)
 517
 518 **bond=**__<bondname>__[:__<bondslaves>__:[:__<options>__]]::
 519     Setup bonding device <bondname> on top of <bondslaves>.
 520     <bondslaves> is a comma-separated list of physical (ethernet) interfaces.
 521     <options> is a comma-separated list on bonding options (modinfo bonding for
 522     details) in format compatible with initscripts. If <options> includes
 523     multi-valued arp_ip_target option, then its values should be separated by
 524     semicolon. Bond without parameters assumes
 525     bond=bond0:eth0,eth1:mode=balance-rr
 526
 527 **team=**__<teammaster>__:__<teamslaves>__::
 528     Setup team device <teammaster> on top of <teamslaves>.
 529     <teamslaves> is a comma-separated list of physical (ethernet) interfaces.
 530
 531 **bridge=**__<bridgename>__:__<ethnames>__::
 532     Setup bridge <bridgename> with <ethnames>. <ethnames> is a comma-separated
 533     list of physical (ethernet) interfaces. Bridge without parameters assumes
 534     bridge=br0:eth0
 535
 536 NFS
 537 ~~~
 538 **root=**\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__]::
 539     mount nfs share from <server-ip>:/<root-dir>, if no server-ip is given, use
 540     dhcp next_server. if server-ip is an IPv6 address it has to be put in
 541     brackets, e.g. [2001:DB8::1]. NFS options can be appended with the prefix
 542     ":" or "," and are seperated by ",".
 543
 544 **root=**nfs:\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__], **root=**nfs4:\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__], **root=**__{dhcp|dhcp6}__::
 545     root=dhcp alone directs initrd to look at the DHCP root-path where NFS
 546     options can be specified.
 547 +
 548 [listing]
 549 .Example
 550 --
 551     root-path=<server-ip>:<root-dir>[,<nfs-options>]
 552     root-path=nfs:<server-ip>:<root-dir>[,<nfs-options>]
 553     root-path=nfs4:<server-ip>:<root-dir>[,<nfs-options>]
 554 --
 555
 556 **root=**_/dev/nfs_ nfsroot=\[_<server-ip>_:]__<root-dir>__[:__<nfs-options>__]::
 557     _Deprecated!_ kernel Documentation_/filesystems/nfsroot.txt_ defines this
 558     method. This is supported by dracut, but not recommended.
 559
 560 **rd.nfs.domain=**__<NFSv4 domain name>__::
 561     Set the NFSv4 domain name. Will overwrite the settings in _/etc/idmap.conf_.
 562
 563 CIFS
 564 ~~~
 565 **root=**cifs://[__<username>__[:__<password>__]@]__<server-ip>__:__<root-dir>__::
 566     mount cifs share from <server-ip>:/<root-dir>, if no server-ip is given, use
 567     dhcp next_server. if server-ip is an IPv6 address it has to be put in
 568     brackets, e.g. [2001:DB8::1]. If a username or password are not specified
 569 as part of the root, then they must be passed on the command line through
 570 cifsuser/cifspass.
 571 +
 572 WARNING: Passwords specified on the kernel command line are visible for all
 573 users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the
 574 network, when using DHCP with DHCP root-path.
 575
 576 **cifsuser**=__<username>__::
 577     Set the cifs username, if not specified as part of the root.
 578
 579 **cifspass**=__<password>__::
 580     Set the cifs password, if not specified as part of the root.
 581 +
 582 WARNING: Passwords specified on the kernel command line are visible for all
 583 users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the
 584 network, when using DHCP with DHCP root-path.
 585
 586 iSCSI
 587 ~~~~~
 588 **root=**iscsi:[__<username>__:__<password>__[:__<reverse>__:__<password>__]@][__<servername>__]:[__<protocol>__]:[__<port>__][:[__<iscsi_iface_name>__]:[__<netdev_name>__]]:[__<LUN>__]:__<targetname>__::
 589     protocol defaults to "6", LUN defaults to "0". If the "servername" field is
 590     provided by BOOTP or DHCP, then that field is used in conjunction with other
 591     associated fields to contact the boot server in the Boot stage. However, if
 592     the "servername" field is not provided, then the "targetname" field is then
 593     used in the Discovery Service stage in conjunction with other associated
 594     fields. See
 595     link:$$http://tools.ietf.org/html/rfc4173#section-5$$[rfc4173].
 596 +
 597 WARNING: Passwords specified on the kernel command line are visible for all
 598 users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the
 599 network, when using DHCP with DHCP root-path.
 600 +
 601 [listing]
 602 .Example
 603 --
 604 root=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
 605 --
 606 +
 607 If servername is an IPv6 address, it has to be put in brackets:
 608 +
 609 [listing]
 610 .Example
 611 --
 612 root=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
 613 --
 614
 615 **root=**__???__ **netroot=**iscsi:[__<username>__:__<password>__[:__<reverse>__:__<password>__]@][__<servername>__]:[__<protocol>__]:[__<port>__][:[__<iscsi_iface_name>__]:[__<netdev_name>__]]:[__<LUN>__]:__<targetname>__ ...::
 616     multiple netroot options allow setting up multiple iscsi disks:
 617 +
 618 [listing]
 619 .Example
 620 --
 621 root=UUID=12424547
 622 netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
 623 netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target1
 624 --
 625 +
 626 If servername is an IPv6 address, it has to be put in brackets:
 627 +
 628 [listing]
 629 .Example
 630 --
 631 netroot=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
 632 --
 633 +
 634 WARNING: Passwords specified on the kernel command line are visible for all
 635 users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the
 636 network, when using DHCP with DHCP root-path.
 637 You may want to use rd.iscsi.firmware.
 638
 639 **root=**__???__ **rd.iscsi.initiator=**__<initiator>__ **rd.iscsi.target.name=**__<target name>__  **rd.iscsi.target.ip=**__<target ip>__ **rd.iscsi.target.port=**__<target port>__ **rd.iscsi.target.group=**__<target group>__ **rd.iscsi.username=**__<username>__ **rd.iscsi.password=**__<password>__ **rd.iscsi.in.username=**__<in username>__ **rd.iscsi.in.password=**__<in password>__::
 640     manually specify all iscsistart parameter (see **+iscsistart --help+**)
 641 +
 642 WARNING: Passwords specified on the kernel command line are visible for all
 643 users via the file _/proc/cmdline_ and via dmesg or can be sniffed on the
 644 network, when using DHCP with DHCP root-path.
 645 You may want to use rd.iscsi.firmware.
 646
 647 **root=**_???_ **netroot=**iscsi **rd.iscsi.firmware=1**::
 648  will read the iscsi parameter from the BIOS firmware
 649
 650 **rd.iscsi.param=**__<param>__::
 651     <param> will be passed as "--param <param>" to iscsistart.
 652     This parameter can be specified multiple times.
 653 +
 654 [listing]
 655 .Example
 656 --
 657 "netroot=iscsi rd.iscsi.firmware=1 rd.iscsi.param=node.session.timeo.replacement_timeout=30"
 658 --
 659 +
 660 will result in
 661 +
 662 [listing]
 663 --
 664 iscsistart -b --param node.session.timeo.replacement_timeout=30
 665 --
 666
 667 **rd.iscsi.ibft** **rd.iscsi.ibft=1**:
 668     Turn on iBFT autoconfiguration for the interfaces
 669
 670 FCoE
 671 ~~~~
 672 **fcoe=**__<edd|interface|MAC>__:__{dcb|nodcb}__::
 673     Try to connect to a FCoE SAN through the NIC specified by _<interface>_ or
 674     _<MAC>_ or EDD settings. For the second argument, currently only nodcb is
 675     supported. This parameter can be specified multiple times.
 676 +
 677 NOTE: letters in the MAC-address must be lowercase!
 678
 679 NBD
 680 ~~~
 681 **root=**??? **netroot=**nbd:__<server>__:__<port>__[:__<fstype>__[:__<mountopts>__[:__<nbdopts>__]]]::
 682     mount nbd share from <server>
 683
 684 **root=dhcp** with **dhcp** **root-path=**nbd:__<server>__:__<port>__[:__<fstype>__[:__<mountopts>__[:__<nbdopts>__]]]::
 685     root=dhcp alone directs initrd to look at the DHCP root-path where NBD
 686     options can be specified. This syntax is only usable in cases where you are
 687     directly mounting the volume as the rootfs.
 688
 689 DASD
 690 ~~~~
 691 **rd.dasd=**....::
 692     same syntax as the kernel module parameter (s390 only)
 693
 694 ZFCP
 695 ~~~~
 696 **rd.zfcp=**__<zfcp adaptor device bus ID>__,__<WWPN>__,__<FCPLUN>__::
 697     rd.zfcp can be specified multiple times on the kernel command line.
 698 +
 699 [listing]
 700 .Example
 701 --
 702 rd.zfcp=0.0.4000,0x5005076300C213e9,0x5022000000000000
 703 --
 704
 705 **rd.zfcp.conf=0**::
 706     ignore zfcp.conf included in the initramfs
 707
 708 ZNET
 709 ~~~~
 710 **rd.znet=**__<nettype>__,__<subchannels>__,__<options>__::
 711     rd.znet can be specified multiple times on the kernel command line.
 712 +
 713 [listing]
 714 .Example
 715 --
 716 rd.znet=qeth,0.0.0600,0.0.0601,0.0.0602,layer2=1,portname=foo
 717 rd.znet=ctc,0.0.0600,0.0.0601,protocol=bar
 718 --
 719
 720 Plymouth Boot Splash
 721 ~~~~~~~~~~~~~~~~~~~~
 722 **plymouth.enable=0**::
 723     disable the plymouth bootsplash completly.
 724
 725 **rd.plymouth=0**::
 726     disable the plymouth bootsplash only for the initramfs.
 727
 728 Kernel keys
 729 ~~~~~~~~~~~
 730 **masterkey=**__<kernel master key path name>__::
 731     Set the path name of the kernel master key.
 732 +
 733 [listing]
 734 .Example
 735 --
 736 masterkey=/etc/keys/kmk-trusted.blob
 737 --
 738
 739 **masterkeytype=**__<kernel master key type>__::
 740     Set the type of the kernel master key.
 741 +
 742 [listing]
 743 .Example
 744 --
 745 masterkeytype=trusted
 746 --
 747
 748 **evmkey=**__<EVM key path name>__::
 749     Set the path name of the EVM key.
 750 +
 751 [listing]
 752 .Example
 753 --
 754 evmkey=/etc/keys/evm-trusted.blob
 755 --
 756
 757 **ecryptfskey=**__<eCryptfs key path name>__::
 758     Set the path name of the eCryptfs key.
 759 +
 760 [listing]
 761 .Example
 762 --
 763 ecryptfskey=/etc/keys/ecryptfs-trusted.blob
 764 --
 765
 766 Deprecated, renamed Options
 767 ~~~~~~~~~~~~~~~~~~~~~~~~~~~
 768 Here is a list of options, which were used in dracut prior to version 008, and
 769 their new replacement.
 770
 771 rdbreak:: rd.break
 772
 773 rd_CCW:: rd.ccw
 774
 775 rd_DASD_MOD:: rd.dasd
 776
 777 rd_DASD:: rd.dasd
 778
 779 rdinitdebug rdnetdebug:: rd.debug
 780
 781 rd_NO_DM:: rd.dm=0
 782
 783 rd_DM_UUID:: rd.dm.uuid
 784
 785 rdblacklist:: rd.driver.blacklist
 786
 787 rdinsmodpost:: rd.driver.post
 788
 789 rdloaddriver:: rd.driver.pre
 790
 791 rd_NO_FSTAB:: rd.fstab=0
 792
 793 rdinfo:: rd.info
 794
 795 check:: rd.live.check
 796
 797 rdlivedebug:: rd.live.debug
 798
 799 live_dir:: rd.live.dir
 800
 801 liveimg:: rd.live.image
 802
 803 overlay:: rd.live.overlay
 804
 805 readonly_overlay:: rd.live.overlay.readonly
 806
 807 reset_overlay:: rd.live.overlay.reset
 808
 809 live_ram:: rd.live.ram
 810
 811 rd_NO_CRYPTTAB:: rd.luks.crypttab=0
 812
 813 rd_LUKS_KEYDEV_UUID:: rd.luks.keydev.uuid
 814
 815 rd_LUKS_KEYPATH:: rd.luks.keypath
 816
 817 rd_NO_LUKS:: rd.luks=0
 818
 819 rd_LUKS_UUID:: rd.luks.uuid
 820
 821 rd_NO_LVMCONF:: rd.lvm.conf
 822
 823 rd_LVM_LV:: rd.lvm.lv
 824
 825 rd_NO_LVM:: rd.lvm=0
 826
 827 rd_LVM_SNAPSHOT:: rd.lvm.snapshot
 828
 829 rd_LVM_SNAPSIZE:: rd.lvm.snapsize
 830
 831 rd_LVM_VG:: rd.lvm.vg
 832
 833 rd_NO_MDADMCONF:: rd.md.conf=0
 834
 835 rd_NO_MDIMSM:: rd.md.imsm=0
 836
 837 rd_NO_MD:: rd.md=0
 838
 839 rd_MD_UUID:: rd.md.uuid
 840
 841 rd_NFS_DOMAIN:: rd.nfs.domain
 842
 843 iscsi_initiator:: rd.iscsi.initiator
 844
 845 iscsi_target_name:: rd.iscsi.target.name
 846
 847 iscsi_target_ip:: rd.iscsi.target.ip
 848
 849 iscsi_target_port:: rd.iscsi.target.port
 850
 851 iscsi_target_group:: rd.iscsi.target.group
 852
 853 iscsi_username:: rd.iscsi.username
 854
 855 iscsi_password:: rd.iscsi.password
 856
 857 iscsi_in_username:: rd.iscsi.in.username
 858
 859 iscsi_in_password:: rd.iscsi.in.password
 860
 861 iscsi_firmware:: rd.iscsi.firmware=0
 862
 863 rd_NO_PLYMOUTH:: rd.plymouth=0
 864
 865 rd_retry:: rd.retry
 866
 867 rdshell:: rd.shell
 868
 869 rd_NO_SPLASH:: rd.splash
 870
 871 rdudevdebug:: rd.udev.debug
 872
 873 rdudevinfo:: rd.udev.info
 874
 875 rd_NO_ZFCPCONF:: rd.zfcp.conf=0
 876
 877 rd_ZFCP:: rd.zfcp
 878
 879 rd_ZNET:: rd.znet
 880
 881 KEYMAP:: vconsole.keymap
 882
 883 KEYTABLE:: vconsole.keymap
 884
 885 SYSFONT:: vconsole.font
 886
 887 CONTRANS:: vconsole.font.map
 888
 889 UNIMAP:: vconsole.font.unimap
 890
 891 UNICODE:: vconsole.unicode
 892
 893 EXT_KEYMAP:: vconsole.keymap.ext
 894
 895 Configuration in the Initramfs
 896 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 897 _/etc/conf.d/_::
 898     Any files found in _/etc/conf.d/_ will be sourced in the initramfs to
 899     set initial values. Command line options will override these values
 900     set in the configuration files.
 901
 902 _/etc/cmdline_::
 903     Can contain additional command line options. Deprecated, better use
 904     /etc/cmdline.d/*.conf.
 905
 906 _/etc/cmdline.d/*.conf_::
 907     Can contain additional command line options.
 908
 909 AUTHOR
 910 ------
 911 Harald Hoyer
 912
 913 SEE ALSO
 914 --------
 915 *dracut*(8) *dracut.conf*(5)