1DRACUT.CMDLINE(7) dracut DRACUT.CMDLINE(7)
2
3
4
6 dracut.cmdline - dracut kernel command line options
7
9 The root device used by the kernel is specified in the boot
10 configuration file on the kernel command line, as always.
11
12 The traditional root=/dev/sda1 style device specification is allowed,
13 but not encouraged. The root device should better be identified by
14 LABEL or UUID. If a label is used, as in root=LABEL=<label_of_root> the
15 initramfs will search all available devices for a filesystem with the
16 appropriate label, and mount that device as the root filesystem.
17 root=UUID=<uuidnumber> will mount the partition with that UUID as the
18 root filesystem.
19
20 In the following all kernel command line parameters, which are
21 processed by dracut, are described.
22
23 "rd.*" parameters mentioned without "=" are boolean parameters. They
24 can be turned on/off by setting them to {0|1}. If the assignment with
25 "=" is missing "=1" is implied. For example rd.info can be turned off
26 with rd.info=0 or turned on with rd.info=1 or rd.info. The last value
27 in the kernel command line is the value, which is honored.
28
29 Standard
30 init=<path to real init>
31 specify the path to the init program to be started after the
32 initramfs has finished
33
34 root=<path to blockdevice>
35 specify the block device to use as the root filesystem.
36
37 Example.
38
39 root=/dev/sda1
40 root=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
41 root=/dev/disk/by-label/Root
42 root=LABEL=Root
43 root=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
44 root=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
45 root=PARTUUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
46
47
48 rootfstype=<filesystem type>
49 "auto" if not specified.
50
51 Example.
52
53 rootfstype=ext3
54
55
56 rootflags=<mount options>
57 specify additional mount options for the root filesystem. If not
58 set, /etc/fstab of the real root will be parsed for special mount
59 options and mounted accordingly.
60
61 ro
62 force mounting / and /usr (if it is a separate device) read-only.
63 If none of ro and rw is present, both are mounted according to
64 /etc/fstab.
65
66 rw
67 force mounting / and /usr (if it is a separate device) read-write.
68 See also ro option.
69
70 rootfallback=<path to blockdevice>
71 specify the block device to use as the root filesystem, if the
72 normal root cannot be found. This can only be a simple block device
73 with a simple file system, for which the filesystem driver is
74 either compiled in, or added manually to the initramfs. This
75 parameter can be specified multiple times.
76
77 rd.auto rd.auto=1
78 enable autoassembly of special devices like cryptoLUKS, dmraid,
79 mdraid or lvm. Default is off as of dracut version >= 024.
80
81 rd.hostonly=0
82 removes all compiled in configuration of the host system the
83 initramfs image was built on. This helps booting, if any disk
84 layout changed, especially in combination with rd.auto or other
85 parameters specifying the layout.
86
87 rd.cmdline=ask
88 prompts the user for additional kernel command line parameters
89
90 rd.fstab=0
91 do not honor special mount options for the root filesystem found in
92 /etc/fstab of the real root.
93
94 resume=<path to resume partition>
95 resume from a swap partition
96
97 Example.
98
99 resume=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
100 resume=/dev/disk/by-uuid/3f5ad593-4546-4a94-a374-bcfb68aa11f7
101 resume=UUID=3f5ad593-4546-4a94-a374-bcfb68aa11f7
102
103
104 rd.skipfsck
105 skip fsck for rootfs and /usr. If you’re mounting /usr read-only
106 and the init system performs fsck before remount, you might want to
107 use this option to avoid duplication.
108
109 iso-scan/filename
110 Using iso-scan/filename with a Fedora/Red Hat/CentOS Live iso should
111 just work by copying the original kernel cmdline parameters.
112
113 Example.
114
115 menuentry 'Live Fedora 20' --class fedora --class gnu-linux --class gnu --class os {
116 set isolabel=Fedora-Live-LXDE-x86_64-20-1
117 set isofile="/boot/iso/Fedora-Live-LXDE-x86_64-20-1.iso"
118 loopback loop $isofile
119 linux (loop)/isolinux/vmlinuz0 boot=isolinux iso-scan/filename=$isofile root=live:LABEL=$isolabel ro rd.live.image quiet rhgb
120 initrd (loop)/isolinux/initrd0.img
121 }
122
123
124 Misc
125 rd.emergency=[reboot|poweroff|halt]
126 specify, what action to execute in case of a critical failure.
127 rd.shell=0 also be specified.
128
129 rd.driver.blacklist=<drivername>[,<drivername>,...]
130 do not load kernel module <drivername>. This parameter can be
131 specified multiple times.
132
133 rd.driver.pre=<drivername>[,<drivername>,...]
134 force loading kernel module <drivername>. This parameter can be
135 specified multiple times.
136
137 rd.driver.post=<drivername>[,<drivername>,...]
138 force loading kernel module <drivername> after all automatic
139 loading modules have been loaded. This parameter can be specified
140 multiple times.
141
142 rd.retry=<seconds>
143 specify how long dracut should retry the initqueue to configure
144 devices. The default is 30 seconds. After 2/3 of the time, degraded
145 raids are force started. If you have hardware, which takes a very
146 long time to announce its drives, you might want to extend this
147 value.
148
149 rd.timeout=<seconds>
150 specify how long dracut should wait for devices to appear. The
151 default is 0, which means forever. Note that this timeout should be
152 longer than rd.retry to allow for proper configuration.
153
154 rd.noverifyssl
155 accept self-signed certificates for ssl downloads.
156
157 rd.ctty=<terminal device>
158 specify the controlling terminal for the console. This is useful,
159 if you have multiple "console=" arguments.
160
161 Debug
162 If you are dropped to an emergency shell, the file
163 /run/initramfs/rdsosreport.txt is created, which can be saved to a (to
164 be mounted by hand) partition (usually /boot) or a USB stick.
165 Additional debugging info can be produced by adding rd.debug to the
166 kernel command line. /run/initramfs/rdsosreport.txt contains all logs
167 and the output of some tools. It should be attached to any report about
168 dracut problems.
169
170 rd.info
171 print informational output though "quiet" is set
172
173 rd.shell
174 allow dropping to a shell, if root mounting fails
175
176 rd.debug
177 set -x for the dracut shell. If systemd is active in the initramfs,
178 all output is logged to the systemd journal, which you can inspect
179 with "journalctl -ab". If systemd is not active, the logs are
180 written to dmesg and /run/initramfs/init.log. If "quiet" is set, it
181 also logs to the console.
182
183 rd.memdebug=[0-4]
184 Print memory usage info at various points, set the verbose level
185 from 0 to 4.
186
187 Higher level means more debugging output:
188
189 0 - no output
190 1 - partial /proc/meminfo
191 2 - /proc/meminfo
192 3 - /proc/meminfo + /proc/slabinfo
193 4 - /proc/meminfo + /proc/slabinfo + tracekomem
194 NOTE: tracekomem is a shell script utilizing kernel trace to track
195 the rough total memory consumption of kernel modules during
196 loading. It may override other trace configurations.
197
198 rd.break
199 drop to a shell at the end
200
201 rd.break={cmdline|pre-udev|pre-trigger|initqueue|pre-mount|mount|pre-pivot|cleanup}
202 drop to a shell on defined breakpoint
203
204 rd.udev.info
205 set udev to loglevel info
206
207 rd.udev.debug
208 set udev to loglevel debug
209
210 I18N
211 rd.vconsole.keymap=<keymap base file name>
212 keyboard translation table loaded by loadkeys; taken from keymaps
213 directory; will be written as KEYMAP to /etc/vconsole.conf in the
214 initramfs.
215
216 Example.
217
218 rd.vconsole.keymap=de-latin1-nodeadkeys
219
220
221 rd.vconsole.keymap.ext=<list of keymap base file names>
222 list of extra keymaps to bo loaded (sep. by space); will be written
223 as EXT_KEYMAP to /etc/vconsole.conf in the initramfs
224
225 rd.vconsole.unicode
226 boolean, indicating UTF-8 mode; will be written as UNICODE to
227 /etc/vconsole.conf in the initramfs
228
229 rd.vconsole.font=<font base file name>
230 console font; taken from consolefonts directory; will be written as
231 FONT to /etc/vconsole.conf in the initramfs.
232
233 Example.
234
235 rd.vconsole.font=LatArCyrHeb-16
236
237
238 rd.vconsole.font.map=<console map base file name>
239 see description of -m parameter in setfont manual; taken from
240 consoletrans directory; will be written as FONT_MAP to
241 /etc/vconsole.conf in the initramfs
242
243 rd.vconsole.font.unimap=<unicode table base file name>
244 see description of -u parameter in setfont manual; taken from
245 unimaps directory; will be written as FONT_UNIMAP to
246 /etc/vconsole.conf in the initramfs
247
248 rd.locale.LANG=<locale>
249 taken from the environment; if no UNICODE is defined we set its
250 value in basis of LANG value (whether it ends with ".utf8" (or
251 similar) or not); will be written as LANG to /etc/locale.conf in
252 the initramfs.
253
254 Example.
255
256 rd.locale.LANG=pl_PL.utf8
257
258
259 rd.locale.LC_ALL=<locale>
260 taken from the environment; will be written as LC_ALL to
261 /etc/locale.conf in the initramfs
262
263 LVM
264 rd.lvm=0
265 disable LVM detection
266
267 rd.lvm.vg=<volume group name>
268 only activate the volume groups with the given name. rd.lvm.vg can
269 be specified multiple times on the kernel command line.
270
271 rd.lvm.lv=<logical volume name>
272 only activate the logical volumes with the given name. rd.lvm.lv
273 can be specified multiple times on the kernel command line.
274
275 rd.lvm.conf=0
276 remove any /etc/lvm/lvm.conf, which may exist in the initramfs
277
278 crypto LUKS
279 rd.luks=0
280 disable crypto LUKS detection
281
282 rd.luks.uuid=<luks uuid>
283 only activate the LUKS partitions with the given UUID. Any "luks-"
284 of the LUKS UUID is removed before comparing to <luks uuid>. The
285 comparisons also matches, if <luks uuid> is only the beginning of
286 the LUKS UUID, so you don’t have to specify the full UUID. This
287 parameter can be specified multiple times.
288
289 rd.luks.allow-discards=<luks uuid>
290 Allow using of discards (TRIM) requests for LUKS partitions with
291 the given UUID. Any "luks-" of the LUKS UUID is removed before
292 comparing to <luks uuid>. The comparisons also matches, if <luks
293 uuid> is only the beginning of the LUKS UUID, so you don’t have to
294 specify the full UUID. This parameter can be specified multiple
295 times.
296
297 rd.luks.allow-discards
298 Allow using of discards (TRIM) requests on all LUKS partitions.
299
300 rd.luks.crypttab=0
301 do not check, if LUKS partition is in /etc/crypttab
302
303 rd.luks.timeout=<seconds>
304 specify how long dracut should wait when waiting for the user to
305 enter the password. This avoid blocking the boot if no password is
306 entered. It does not apply to luks key. The default is 0, which
307 means forever.
308
309 crypto LUKS - key on removable device support
310 rd.luks.key=<keypath>:<keydev>:<luksdev>
311 keypath is a path to key file to look for. It’s REQUIRED. When
312 keypath ends with .gpg it’s considered to be key encrypted
313 symmetrically with GPG. You will be prompted for password on boot.
314 GPG support comes with crypt-gpg module which needs to be added
315 explicitly.
316
317 keydev is a device on which key file resides. It might be kernel
318 name of devices (should start with "/dev/"), UUID (prefixed with
319 "UUID=") or label (prefix with "LABEL="). You don’t have to specify
320 full UUID. Just its beginning will suffice, even if its ambiguous.
321 All matching devices will be probed. This parameter is recommended,
322 but not required. If not present, all block devices will be probed,
323 which may significantly increase boot time.
324
325 If luksdev is given, the specified key will only be applied for
326 that LUKS device. Possible values are the same as for keydev.
327 Unless you have several LUKS devices, you don’t have to specify
328 this parameter. The simplest usage is:
329
330 Example.
331
332 rd.luks.key=/foo/bar.key
333
334
335 As you see, you can skip colons in such a case.
336
337 Note
338 dracut pipes key to cryptsetup with -d - argument, therefore
339 you need to pipe to crypsetup luksFormat with -d -, too!
340
341 Here follows example for key encrypted with GPG:
342
343 gpg --quiet --decrypt rootkey.gpg | \
344 cryptsetup -d - -v --cipher serpent-cbc-essiv:sha256 \
345 --key-size 256 luksFormat /dev/sda3
346
347 If you use plain keys, just add path to -d option:
348
349 cryptsetup -d rootkey.key -v --cipher serpent-cbc-essiv:sha256 \
350 --key-size 256 luksFormat /dev/sda3
351
352 MD RAID
353 rd.md=0
354 disable MD RAID detection
355
356 rd.md.imsm=0
357 disable MD RAID for imsm/isw raids, use DM RAID instead
358
359 rd.md.ddf=0
360 disable MD RAID for SNIA ddf raids, use DM RAID instead
361
362 rd.md.conf=0
363 ignore mdadm.conf included in initramfs
364
365 rd.md.waitclean=1
366 wait for any resync, recovery, or reshape activity to finish before
367 continuing
368
369 rd.md.uuid=<md raid uuid>
370 only activate the raid sets with the given UUID. This parameter can
371 be specified multiple times.
372
373 DM RAID
374 rd.dm=0
375 disable DM RAID detection
376
377 rd.dm.uuid=<dm raid uuid>
378 only activate the raid sets with the given UUID. This parameter can
379 be specified multiple times.
380
381 MULTIPATH
382 rd.multipath=0
383 disable multipath detection
384
385 FIPS
386 rd.fips
387 enable FIPS
388
389 boot=<boot device>
390 specify the device, where /boot is located.
391
392 Example.
393
394 boot=/dev/sda1
395 boot=/dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:1:0-part1
396 boot=UUID=<uuid>
397 boot=LABEL=<label>
398
399
400 rd.fips.skipkernel
401 skip checksum check of the kernel image. Useful, if the kernel
402 image is not in a separate boot partition.
403
404 Network
405 Important
406 It is recommended to either bind an interface to a MAC with the
407 ifname argument, or to use the systemd-udevd predictable network
408 interface names.
409
410 Predictable network interface device names based on:
411
412 · firmware/bios-provided index numbers for on-board devices
413
414 · firmware-provided pci-express hotplug slot index number
415
416 · physical/geographical location of the hardware
417
418 · the interface’s MAC address
419
420 See:
421 http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
422
423 Two character prefixes based on the type of interface:
424
425 en
426 ethernet
427
428 wl
429 wlan
430
431 ww
432 wwan
433
434 Type of names:
435
436 o<index>
437 on-board device index number
438
439 s<slot>[f<function>][d<dev_id>]
440 hotplug slot index number
441
442 x<MAC>
443 MAC address
444
445 [P<domain>]p<bus>s<slot>[f<function>][d<dev_id>]
446 PCI geographical location
447
448 [P<domain>]p<bus>s<slot>[f<function>][u<port>][..][c<config>][i<interface>]
449 USB port number chain
450
451 All multi-function PCI devices will carry the [f<function>] number
452 in the device name, including the function 0 device.
453
454 When using PCI geography, The PCI domain is only prepended when it
455 is not 0.
456
457 For USB devices the full chain of port numbers of hubs is composed.
458 If the name gets longer than the maximum number of 15 characters,
459 the name is not exported. The usual USB configuration == 1 and
460 interface == 0 values are suppressed.
461
462 PCI ethernet card with firmware index "1"
463
464 · eno1
465
466 PCI ethernet card in hotplug slot with firmware index number
467
468 · ens1
469
470 PCI ethernet multi-function card with 2 ports
471
472 · enp2s0f0
473
474 · enp2s0f1
475
476 PCI wlan card
477
478 · wlp3s0
479
480 USB built-in 3G modem
481
482 · wwp0s29u1u4i6
483
484 USB Android phone
485
486 · enp0s29u1u2
487
488 ip={dhcp|on|any|dhcp6|auto6|either6}
489
490 dhcp|on|any
491 get ip from dhcp server from all interfaces. If root=dhcp, loop
492 sequentially through all interfaces (eth0, eth1, ...) and use
493 the first with a valid DHCP root-path.
494
495 auto6
496 IPv6 autoconfiguration
497
498 dhcp6
499 IPv6 DHCP
500
501 either6
502 if auto6 fails, then dhcp6
503
504 ip=<interface>:{dhcp|on|any|dhcp6|auto6}[:[<mtu>][:<macaddr>]]
505 This parameter can be specified multiple times.
506
507 dhcp|on|any|dhcp6
508 get ip from dhcp server on a specific interface
509
510 auto6
511 do IPv6 autoconfiguration
512
513 <macaddr>
514 optionally set <macaddr> on the <interface>. This cannot be
515 used in conjunction with the ifname argument for the same
516 <interface>.
517
518 ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<mtu>][:<macaddr>]]
519 explicit network configuration. If you want do define a IPv6
520 address, put it in brackets (e.g. [2001:DB8::1]). This parameter
521 can be specified multiple times. <peer> is optional and is the
522 address of the remote endpoint for pointopoint interfaces and it
523 may be followed by a slash and a decimal number, encoding the
524 network prefix length.
525
526 <macaddr>
527 optionally set <macaddr> on the <interface>. This cannot be
528 used in conjunction with the ifname argument for the same
529 <interface>.
530
531 ip=<client-IP>:[<peer>]:<gateway-IP>:<netmask>:<client_hostname>:<interface>:{none|off|dhcp|on|any|dhcp6|auto6|ibft}[:[<dns1>][:<dns2>]]
532 explicit network configuration. If you want do define a IPv6
533 address, put it in brackets (e.g. [2001:DB8::1]). This parameter
534 can be specified multiple times. <peer> is optional and is the
535 address of the remote endpoint for pointopoint interfaces and it
536 may be followed by a slash and a decimal number, encoding the
537 network prefix length.
538
539 ifname=<interface>:<MAC>
540 Assign network device name <interface> (ie "bootnet") to the NIC
541 with MAC <MAC>.
542
543 Warning
544 Do not use the default kernel naming scheme for the interface
545 name, as it can conflict with the kernel names. So, don’t use
546 "eth[0-9]+" for the interface name. Better name it "bootnet" or
547 "bluesocket".
548
549 rd.route=<net>/<netmask>:<gateway>[:<interface>]
550 Add a static route with route options, which are separated by a
551 colon. IPv6 addresses have to be put in brackets.
552
553 Example.
554
555 rd.route=192.168.200.0/24:192.168.100.222:ens10
556 rd.route=192.168.200.0/24:192.168.100.222
557 rd.route=192.168.200.0/24::ens10
558 rd.route=[2001:DB8:3::/8]:[2001:DB8:2::1]:ens10
559
560
561 bootdev=<interface>
562 specify network interface to use routing and netroot information
563 from. Required if multiple ip= lines are used.
564
565 BOOTIF=<MAC>
566 specify network interface to use routing and netroot information
567 from.
568
569 rd.bootif=0
570 Disable BOOTIF parsing, which is provided by PXE
571
572 nameserver=<IP> [nameserver=<IP> ...]
573 specify nameserver(s) to use
574
575 rd.peerdns=0
576 Disable DNS setting of DHCP parameters.
577
578 biosdevname=0
579 boolean, turn off biosdevname network interface renaming
580
581 rd.neednet=1
582 boolean, bring up network even without netroot set
583
584 vlan=<vlanname>:<phydevice>
585 Setup vlan device named <vlanname> on <phydeivce>. We support the
586 four styles of vlan names: VLAN_PLUS_VID (vlan0005),
587 VLAN_PLUS_VID_NO_PAD (vlan5), DEV_PLUS_VID (eth0.0005),
588 DEV_PLUS_VID_NO_PAD (eth0.5)
589
590 bond=<bondname>[:<bondslaves>:[:<options>[:<mtu>]]]
591 Setup bonding device <bondname> on top of <bondslaves>.
592 <bondslaves> is a comma-separated list of physical (ethernet)
593 interfaces. <options> is a comma-separated list on bonding options
594 (modinfo bonding for details) in format compatible with
595 initscripts. If <options> includes multi-valued arp_ip_target
596 option, then its values should be separated by semicolon. if the
597 mtu is specified, it will be set on the bond master. Bond without
598 parameters assumes bond=bond0:eth0,eth1:mode=balance-rr
599
600 team=<teammaster>:<teamslaves>
601 Setup team device <teammaster> on top of <teamslaves>. <teamslaves>
602 is a comma-separated list of physical (ethernet) interfaces.
603
604 bridge=<bridgename>:<ethnames>
605 Setup bridge <bridgename> with <ethnames>. <ethnames> is a
606 comma-separated list of physical (ethernet) interfaces. Bridge
607 without parameters assumes bridge=br0:eth0
608
609 NFS
610 root=[<server-ip>:]<root-dir>[:<nfs-options>]
611 mount nfs share from <server-ip>:/<root-dir>, if no server-ip is
612 given, use dhcp next_server. If server-ip is an IPv6 address it has
613 to be put in brackets, e.g. [2001:DB8::1]. NFS options can be
614 appended with the prefix ":" or "," and are separated by ",".
615
616 root=nfs:[<server-ip>:]<root-dir>[:<nfs-options>],
617 root=nfs4:[<server-ip>:]<root-dir>[:<nfs-options>], root={dhcp|dhcp6}
618 root=dhcp alone directs initrd to look at the DHCP root-path where
619 NFS options can be specified.
620
621 Example.
622
623 root-path=<server-ip>:<root-dir>[,<nfs-options>]
624 root-path=nfs:<server-ip>:<root-dir>[,<nfs-options>]
625 root-path=nfs4:<server-ip>:<root-dir>[,<nfs-options>]
626
627
628 root=/dev/nfs nfsroot=[<server-ip>:]<root-dir>[:<nfs-options>]
629 Deprecated! kernel Documentation_/filesystems/nfsroot.txt_ defines
630 this method. This is supported by dracut, but not recommended.
631
632 rd.nfs.domain=<NFSv4 domain name>
633 Set the NFSv4 domain name. Will override the settings in
634 /etc/idmap.conf.
635
636 rd.net.dhcp.retry=<cnt>
637 If this option is set, dracut will try to connect via dhcp <cnt>
638 times before failing. Default is 1.
639
640 rd.net.timeout.dhcp=<arg>
641 If this option is set, dhclient is called with "-timeout <arg>".
642
643 rd.net.timeout.iflink=<seconds>
644 Wait <seconds> until link shows up. Default is 60 seconds.
645
646 rd.net.timeout.ifup=<seconds>
647 Wait <seconds> until link has state "UP". Default is 20 seconds.
648
649 rd.net.timeout.route=<seconds>
650 Wait <seconds> until route shows up. Default is 20 seconds.
651
652 rd.net.timeout.ipv6dad=<seconds>
653 Wait <seconds> until IPv6 DAD is finished. Default is 50 seconds.
654
655 rd.net.timeout.ipv6auto=<seconds>
656 Wait <seconds> until IPv6 automatic addresses are assigned. Default
657 is 40 seconds.
658
659 rd.net.timeout.carrier=<seconds>
660 Wait <seconds> until carrier is recognized. Default is 5 seconds.
661
662 CIFS
663 root=cifs://[<username>[:<password>]@]<server-ip>:<root-dir>
664 mount cifs share from <server-ip>:/<root-dir>, if no server-ip is
665 given, use dhcp next_server. if server-ip is an IPv6 address it has
666 to be put in brackets, e.g. [2001:DB8::1]. If a username or
667 password are not specified as part of the root, then they must be
668 passed on the command line through cifsuser/cifspass.
669
670 Warning
671 Passwords specified on the kernel command line are visible for
672 all users via the file /proc/cmdline and via dmesg or can be
673 sniffed on the network, when using DHCP with DHCP root-path.
674
675 cifsuser=<username>
676 Set the cifs username, if not specified as part of the root.
677
678 cifspass=<password>
679 Set the cifs password, if not specified as part of the root.
680
681 Warning
682 Passwords specified on the kernel command line are visible for
683 all users via the file /proc/cmdline and via dmesg or can be
684 sniffed on the network, when using DHCP with DHCP root-path.
685
686 iSCSI
687 root=iscsi:[<username>:<password>[:<reverse>:<password>]@][<servername>]:[<protocol>]:[<port>][:[<iscsi_iface_name>]:[<netdev_name>]]:[<LUN>]:<targetname>
688 protocol defaults to "6", LUN defaults to "0". If the "servername"
689 field is provided by BOOTP or DHCP, then that field is used in
690 conjunction with other associated fields to contact the boot server
691 in the Boot stage. However, if the "servername" field is not
692 provided, then the "targetname" field is then used in the Discovery
693 Service stage in conjunction with other associated fields. See
694 rfc4173[1].
695
696 Warning
697 Passwords specified on the kernel command line are visible for
698 all users via the file /proc/cmdline and via dmesg or can be
699 sniffed on the network, when using DHCP with DHCP root-path.
700
701 Example.
702
703 root=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
704
705
706 If servername is an IPv6 address, it has to be put in brackets:
707
708 Example.
709
710 root=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
711
712
713 root=???
714 netroot=iscsi:[<username>:<password>[:<reverse>:<password>]@][<servername>]:[<protocol>]:[<port>][:[<iscsi_iface_name>]:[<netdev_name>]]:[<LUN>]:<targetname>
715 ...
716 multiple netroot options allow setting up multiple iscsi disks:
717
718 Example.
719
720 root=UUID=12424547
721 netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target0
722 netroot=iscsi:192.168.50.1::::iqn.2009-06.dracut:target1
723
724
725 If servername is an IPv6 address, it has to be put in brackets:
726
727 Example.
728
729 netroot=iscsi:[2001:DB8::1]::::iqn.2009-06.dracut:target0
730
731
732 Warning
733 Passwords specified on the kernel command line are visible for
734 all users via the file /proc/cmdline and via dmesg or can be
735 sniffed on the network, when using DHCP with DHCP root-path.
736 You may want to use rd.iscsi.firmware.
737
738 root=??? rd.iscsi.initiator=<initiator> rd.iscsi.target.name=<target
739 name> rd.iscsi.target.ip=<target ip> rd.iscsi.target.port=<target port>
740 rd.iscsi.target.group=<target group> rd.iscsi.username=<username>
741 rd.iscsi.password=<password> rd.iscsi.in.username=<in username>
742 rd.iscsi.in.password=<in password>
743 manually specify all iscsistart parameter (see iscsistart --help)
744
745 Warning
746 Passwords specified on the kernel command line are visible for
747 all users via the file /proc/cmdline and via dmesg or can be
748 sniffed on the network, when using DHCP with DHCP root-path.
749 You may want to use rd.iscsi.firmware.
750
751 root=??? netroot=iscsi rd.iscsi.firmware=1
752 will read the iscsi parameter from the BIOS firmware
753
754 rd.iscsi.login_retry_max=<num>
755 maximum number of login retries
756
757 rd.iscsi.param=<param>
758 <param> will be passed as "--param <param>" to iscsistart. This
759 parameter can be specified multiple times.
760
761 Example.
762
763 "netroot=iscsi rd.iscsi.firmware=1 rd.iscsi.param=node.session.timeo.replacement_timeout=30"
764
765
766 will result in
767
768 iscsistart -b --param node.session.timeo.replacement_timeout=30
769
770 rd.iscsi.ibft rd.iscsi.ibft=1: Turn on iBFT autoconfiguration for the
771 interfaces
772
773 rd.iscsi.waitnet=0: Turn off waiting for all interfaces to be up before
774 trying to login to the iSCSI targets.
775
776 rd.iscsi.testroute=0: Turn off checking, if the route to the iSCSI
777 target IP is possible before trying to login.
778
779 FCoE
780 fcoe=<edd|interface|MAC>:{dcb|nodcb}:{fabric|vn2vn}
781 Try to connect to a FCoE SAN through the NIC specified by
782 <interface> or <MAC> or EDD settings. The second argument specifies
783 if DCB should be used. The optional third argument specifies
784 whether fabric or VN2VN mode should be used. This parameter can be
785 specified multiple times.
786
787 Note
788 letters in the MAC-address must be lowercase!
789
790 NBD
791 root=???
792 netroot=nbd:<server>:<port/exportname>[:<fstype>[:<mountopts>[:<nbdopts>]]]
793 mount nbd share from <server>.
794
795 NOTE: If "exportname" instead of "port" is given the standard port
796 is used. Newer versions of nbd are only supported with
797 "exportname".
798
799 root=dhcp with dhcp
800 root-path=nbd:<server>:<port/exportname>[:<fstype>[:<mountopts>[:<nbdopts>]]]
801 root=dhcp alone directs initrd to look at the DHCP root-path where
802 NBD options can be specified. This syntax is only usable in cases
803 where you are directly mounting the volume as the rootfs.
804
805 NOTE: If "exportname" instead of "port" is given the standard port
806 is used. Newer versions of nbd are only supported with
807 "exportname".
808
809 DASD
810 rd.dasd=....
811 same syntax as the kernel module parameter (s390 only)
812
813 ZFCP
814 rd.zfcp=<zfcp adaptor device bus ID>,<WWPN>,<FCPLUN>
815 rd.zfcp can be specified multiple times on the kernel command line.
816
817 rd.zfcp=<zfcp adaptor device bus ID>
818 If NPIV is enabled and the allow_lun_scan parameter to the zfcp
819 module is set to Y then the zfcp adaptor will be initiating a scan
820 internally and the <WWPN> and <FCPLUN> parameters can be omitted.
821
822 Example.
823
824 rd.zfcp=0.0.4000,0x5005076300C213e9,0x5022000000000000
825 rd.zfcp=0.0.4000
826
827
828 rd.zfcp.conf=0
829 ignore zfcp.conf included in the initramfs
830
831 ZNET
832 rd.znet=<nettype>,<subchannels>,<options>
833 The whole parameter is appended to /etc/ccw.conf, which is used on
834 RHEL/Fedora with ccw_init, which is called from udev for certain
835 devices on z-series. rd.znet can be specified multiple times on the
836 kernel command line.
837
838 Example.
839
840 rd.znet=qeth,0.0.0600,0.0.0601,0.0.0602,layer2=1,portname=foo
841 rd.znet=ctc,0.0.0600,0.0.0601,protocol=bar
842
843
844 Booting live images
845 Dracut offers multiple options for live booted images:
846
847 SquashFS with read-only filesystem image
848 The system will boot with a read-only filesystem from the SquashFS
849 and apply a writable Device-mapper snapshot or an OverlayFS overlay
850 mount for the read-only base filesystem. This method ensures a
851 relatively fast boot and lower RAM usage. Users must be careful to
852 avoid writing too many blocks to a snapshot volume. Once the blocks
853 of the snapshot overlay are exhausted, the root filesystem becomes
854 read-only and may cause application failures. The snapshot overlay
855 file is marked Overflow, and a difficult recovery is required to
856 repair and enlarge the overlay offline. Non-persistent overlays are
857 sparse files in RAM that only consume content space as required
858 blocks are allocated. They default to an apparent size of 32 GiB in
859 RAM. The size can be adjusted with the rd.live.overlay.size= kernel
860 command line option.
861
862 The filesystem structure is traditionally expected to be:
863
864 squashfs.img | SquashFS from LiveCD .iso
865 !(mount)
866 /LiveOS
867 |- rootfs.img | Filesystem image to mount read-only
868 !(mount)
869 /bin | Live filesystem
870 /boot |
871 /dev |
872 ... |
873
874 For OverlayFS mount overlays, the filesystem structure may also be
875 a direct compression of the root filesystem:
876
877 squashfs.img | SquashFS from LiveCD .iso
878 !(mount)
879 /bin | Live filesystem
880 /boot |
881 /dev |
882 ... |
883
884 Dracut uses one of the overlay methods of live booting by default.
885 No additional command line options are required other than
886 root=live:<URL> to specify the location of your squashed
887 filesystem.
888
889 · The compressed SquashFS image can be copied during boot to RAM
890 at /run/initramfs/squashed.img by using the rd.live.ram=1
891 option.
892
893 · A device with a persistent overlay can be booted read-only by
894 using the rd.live.overlay.readonly option on the kernel command
895 line. This will either cause a temporary, writable overlay to
896 be stacked over a read-only snapshot of the root filesystem or
897 the OverlayFS mount will use an additional lower layer with the
898 root filesystem.
899
900 Uncompressed live filesystem image
901 When the live system was installed with the --skipcompress option
902 of the livecd-iso-to-disk installation script for Live USB devices,
903 the root filesystem image, rootfs.img, is expanded on installation
904 and no SquashFS is involved during boot.
905
906 · If rd.live.ram=1 is used in this situation, the full,
907 uncompressed root filesystem is copied during boot to
908 /run/initramfs/rootfs.img in the /run tmpfs.
909
910 · If rd.live.overlay=none is provided as a kernel command line
911 option, a writable, linear Device-mapper target is created on
912 boot with no overlay.
913
914 Writable filesystem image
915 The system will retrieve a compressed filesystem image, extract it
916 to /run/initramfs/fsimg/rootfs.img, connect it to a loop device,
917 create a writable, linear Device-mapper target at
918 /dev/mapper/live-rw, and mount that as a writable volume at /. More
919 RAM is required during boot but the live filesystem is easier to
920 manage if it becomes full. Users can make a filesystem image of any
921 size and that size will be maintained when the system boots. There
922 is no persistence of root filesystem changes between boots with
923 this option.
924
925 The filesystem structure is expected to be:
926
927 rootfs.tgz | Compressed tarball containing filesystem image
928 !(unpack)
929 /rootfs.img | Filesystem image at /run/initramfs/fsimg/
930 !(mount)
931 /bin | Live filesystem
932 /boot |
933 /dev |
934 ... |
935
936 To use this boot option, ensure that rd.writable.fsimg=1 is in your
937 kernel command line and add the root=live:<URL> to specify the
938 location of your compressed filesystem image tarball or SquashFS
939 image.
940
941 rd.writable.fsimg=1
942 Enables writable filesystem support. The system will boot with a
943 fully writable (but non-persistent) filesystem without snapshots
944 (see notes above about available live boot options). You can use
945 the rootflags option to set mount options for the live filesystem
946 as well (see documentation about rootflags in the Standard section
947 above). This implies that the whole image is copied to RAM before
948 the boot continues.
949
950 Note
951 There must be enough free RAM available to hold the complete
952 image.
953 This method is very suitable for diskless boots.
954
955 root=live:<url>
956 Boots a live image retrieved from <url>. Requires the dracut
957 livenet module. Valid handlers: http, https, ftp, torrent, tftp.
958
959 Examples.
960
961 root=live:http://example.com/liveboot.img
962 root=live:ftp://ftp.example.com/liveboot.img
963 root=live:torrent://example.com/liveboot.img.torrent
964
965
966 rd.live.debug=1
967 Enables debug output from the live boot process.
968
969 rd.live.dir=<path>
970 Specifies the directory within the boot device where the
971 squashfs.img or rootfs.img can be found. By default, this is
972 /LiveOS.
973
974 rd.live.squashimg=<filename of SquashFS image>
975 Specifies the filename for a SquashFS image of the root filesystem.
976 By default, this is squashfs.img.
977
978 rd.live.ram=1
979 Copy the complete image to RAM and use this for booting. This is
980 useful when the image resides on, e.g., a DVD which needs to be
981 ejected later on.
982
983 rd.live.overlay={<devspec>[:{<pathspec>|auto}]|none}
984 Manage the usage of a permanent overlay.
985
986 · <devspec> specifies the path to a device with a mountable
987 filesystem.
988
989 · <pathspec> is the path to a file within that filesystem, which
990 shall be used to persist the changes made to the device
991 specified by the root=live:<url> option.
992
993 The default pathspec, when auto or no :<pathspec> is given, is
994 /<<b>rd.live.dir</b>>/overlay-<label>-<uuid>, where <label> is
995 the device LABEL, and <uuid> is the device UUID. * none (the
996 word itself) specifies that no overlay will be used, such as
997 when an uncompressed, writable live root filesystem is
998 available.
999
1000 If a persistent overlay is detected at the standard LiveOS
1001 path, the overlay & overlay type detected, whether
1002 Device-mapper or OverlayFS, will be used.
1003
1004 Examples.
1005
1006 rd.live.overlay=/dev/sdb1:persistent-overlay.img
1007 rd.live.overlay=UUID=99440c1f-8daa-41bf-b965-b7240a8996f4
1008
1009
1010 rd.live.overlay.size=<size_MiB>
1011 Specifies a non-persistent Device-mapper overlay size in MiB. The
1012 default is 32768.
1013
1014 rd.live.overlay.readonly=1
1015 This is used to boot with a normally read-write persistent overlay
1016 in a read-only mode. With this option, either an additional,
1017 non-persistent, writable snapshot overlay will be stacked over a
1018 read-only snapshot, /dev/mapper/live-ro, of the base filesystem
1019 with the persistent overlay, or a read-only loop device, in the
1020 case of a writable rootfs.img, or an OverlayFS mount will use the
1021 persistent overlay directory linked at /run/overlayfs-r as an
1022 additional lower layer along with the base root filesystem and
1023 apply a transient, writable upper directory overlay, in order to
1024 complete the booted root filesystem.
1025
1026 rd.live.overlay.reset=1
1027 Specifies that a persistent overlay should be reset on boot. All
1028 previous root filesystem changes are vacated by this action.
1029
1030 rd.live.overlay.thin=1
1031 Enables the usage of thin snapshots instead of classic dm
1032 snapshots. The advantage of thin snapshots is that they support
1033 discards, and will free blocks that are not claimed by the
1034 filesystem. In this use case, this means that memory is given back
1035 to the kernel when the filesystem does not claim it anymore.
1036
1037 rd.live.overlay.overlayfs=1
1038 Enables the use of the OverlayFS kernel module, if available, to
1039 provide a copy-on-write union directory for the root filesystem.
1040 OverlayFS overlays are directories of the files that have changed
1041 on the read-only base (lower) filesystem. The root filesystem is
1042 provided through a special overlay type mount that merges the lower
1043 and upper directories. If an OverlayFS upper directory is not
1044 present on the boot device, a tmpfs directory will be created at
1045 /run/overlayfs to provide temporary storage. Persistent storage can
1046 be provided on vfat or msdos formatted devices by supplying the
1047 OverlayFS upper directory within an embedded filesystem that
1048 supports the creation of trusted.* extended attributes and provides
1049 a valid d_type in readdir responses, such as with ext4 and xfs. On
1050 non-vfat-formatted devices, a persistent OverlayFS overlay can
1051 extend the available root filesystem storage up to the capacity of
1052 the LiveOS disk device.
1053
1054 If a persistent overlay is detected at the standard LiveOS path,
1055 the overlay & overlay type detected, whether OverlayFS or
1056 Device-mapper, will be used.
1057
1058 The rd.live.overlay.readonly option, which allows a persistent
1059 overlayfs to be mounted read-only through a higher level transient
1060 overlay directory, has been implemented through the multiple lower
1061 layers feature of OverlayFS.
1062
1063 ZIPL
1064 rd.zipl=<path to blockdevice>
1065 Update the dracut commandline with the values found in the
1066 dracut-cmdline.conf file on the given device. The values are merged
1067 into the existing commandline values and the udev events are
1068 regenerated.
1069
1070 Example.
1071
1072 rd.zipl=UUID=0fb28157-99e3-4395-adef-da3f7d44835a
1073
1074
1075 CIO_IGNORE
1076 rd.cio_accept=<device-ids>
1077 Remove the devices listed in <device-ids> from the default
1078 cio_ignore kernel command-line settings. <device-ids> is a list of
1079 comma-separated CCW device ids. The default for this value is taken
1080 from the /boot/zipl/active_devices.txt file.
1081
1082 Example.
1083
1084 rd.cio_accept=0.0.0180,0.0.0800,0.0.0801,0.0.0802
1085
1086
1087 Plymouth Boot Splash
1088 plymouth.enable=0
1089 disable the plymouth bootsplash completely.
1090
1091 rd.plymouth=0
1092 disable the plymouth bootsplash only for the initramfs.
1093
1094 Kernel keys
1095 masterkey=<kernel master key path name>
1096 Set the path name of the kernel master key.
1097
1098 Example.
1099
1100 masterkey=/etc/keys/kmk-trusted.blob
1101
1102
1103 masterkeytype=<kernel master key type>
1104 Set the type of the kernel master key.
1105
1106 Example.
1107
1108 masterkeytype=trusted
1109
1110
1111 evmkey=<EVM key path name>
1112 Set the path name of the EVM key.
1113
1114 Example.
1115
1116 evmkey=/etc/keys/evm-trusted.blob
1117
1118
1119 ecryptfskey=<eCryptfs key path name>
1120 Set the path name of the eCryptfs key.
1121
1122 Example.
1123
1124 ecryptfskey=/etc/keys/ecryptfs-trusted.blob
1125
1126
1127 Deprecated, renamed Options
1128 Here is a list of options, which were used in dracut prior to version
1129 008, and their new replacement.
1130
1131 rdbreak
1132 rd.break
1133
1134 rd.ccw
1135 rd.znet
1136
1137 rd_CCW
1138 rd.znet
1139
1140 rd_DASD_MOD
1141 rd.dasd
1142
1143 rd_DASD
1144 rd.dasd
1145
1146 rdinitdebug rdnetdebug
1147 rd.debug
1148
1149 rd_NO_DM
1150 rd.dm=0
1151
1152 rd_DM_UUID
1153 rd.dm.uuid
1154
1155 rdblacklist
1156 rd.driver.blacklist
1157
1158 rdinsmodpost
1159 rd.driver.post
1160
1161 rdloaddriver
1162 rd.driver.pre
1163
1164 rd_NO_FSTAB
1165 rd.fstab=0
1166
1167 rdinfo
1168 rd.info
1169
1170 check
1171 rd.live.check
1172
1173 rdlivedebug
1174 rd.live.debug
1175
1176 live_dir
1177 rd.live.dir
1178
1179 liveimg
1180 rd.live.image
1181
1182 overlay
1183 rd.live.overlay
1184
1185 readonly_overlay
1186 rd.live.overlay.readonly
1187
1188 reset_overlay
1189 rd.live.overlay.reset
1190
1191 live_ram
1192 rd.live.ram
1193
1194 rd_NO_CRYPTTAB
1195 rd.luks.crypttab=0
1196
1197 rd_LUKS_KEYDEV_UUID
1198 rd.luks.keydev.uuid
1199
1200 rd_LUKS_KEYPATH
1201 rd.luks.keypath
1202
1203 rd_NO_LUKS
1204 rd.luks=0
1205
1206 rd_LUKS_UUID
1207 rd.luks.uuid
1208
1209 rd_NO_LVMCONF
1210 rd.lvm.conf
1211
1212 rd_LVM_LV
1213 rd.lvm.lv
1214
1215 rd_NO_LVM
1216 rd.lvm=0
1217
1218 rd_LVM_SNAPSHOT
1219 rd.lvm.snapshot
1220
1221 rd_LVM_SNAPSIZE
1222 rd.lvm.snapsize
1223
1224 rd_LVM_VG
1225 rd.lvm.vg
1226
1227 rd_NO_MDADMCONF
1228 rd.md.conf=0
1229
1230 rd_NO_MDIMSM
1231 rd.md.imsm=0
1232
1233 rd_NO_MD
1234 rd.md=0
1235
1236 rd_MD_UUID
1237 rd.md.uuid
1238
1239 rd_NO_MULTIPATH: rd.multipath=0
1240
1241 rd_NFS_DOMAIN
1242 rd.nfs.domain
1243
1244 iscsi_initiator
1245 rd.iscsi.initiator
1246
1247 iscsi_target_name
1248 rd.iscsi.target.name
1249
1250 iscsi_target_ip
1251 rd.iscsi.target.ip
1252
1253 iscsi_target_port
1254 rd.iscsi.target.port
1255
1256 iscsi_target_group
1257 rd.iscsi.target.group
1258
1259 iscsi_username
1260 rd.iscsi.username
1261
1262 iscsi_password
1263 rd.iscsi.password
1264
1265 iscsi_in_username
1266 rd.iscsi.in.username
1267
1268 iscsi_in_password
1269 rd.iscsi.in.password
1270
1271 iscsi_firmware
1272 rd.iscsi.firmware=0
1273
1274 rd_NO_PLYMOUTH
1275 rd.plymouth=0
1276
1277 rd_retry
1278 rd.retry
1279
1280 rdshell
1281 rd.shell
1282
1283 rd_NO_SPLASH
1284 rd.splash
1285
1286 rdudevdebug
1287 rd.udev.debug
1288
1289 rdudevinfo
1290 rd.udev.info
1291
1292 rd_NO_ZFCPCONF
1293 rd.zfcp.conf=0
1294
1295 rd_ZFCP
1296 rd.zfcp
1297
1298 rd_ZNET
1299 rd.znet
1300
1301 KEYMAP
1302 vconsole.keymap
1303
1304 KEYTABLE
1305 vconsole.keymap
1306
1307 SYSFONT
1308 vconsole.font
1309
1310 CONTRANS
1311 vconsole.font.map
1312
1313 UNIMAP
1314 vconsole.font.unimap
1315
1316 UNICODE
1317 vconsole.unicode
1318
1319 EXT_KEYMAP
1320 vconsole.keymap.ext
1321
1322 Configuration in the Initramfs
1323 /etc/conf.d/
1324 Any files found in /etc/conf.d/ will be sourced in the initramfs to
1325 set initial values. Command line options will override these values
1326 set in the configuration files.
1327
1328 /etc/cmdline
1329 Can contain additional command line options. Deprecated, better use
1330 /etc/cmdline.d/*.conf.
1331
1332 /etc/cmdline.d/*.conf
1333 Can contain additional command line options.
1334
1336 Harald Hoyer
1337
1339 dracut(8) dracut.conf(5)
1340
1342 1. rfc4173
1343 http://tools.ietf.org/html/rfc4173#section-5
1344
1345
1346
1347dracut 10/08/2018 DRACUT.CMDLINE(7)