Chapter 5. Creating system images by using RHEL image builder web console interface RHEL image builder is a tool for creating custom system images. To control RHEL image builder and create your custom system images, you can use the web console interface. 5.1. Accessing the RHEL image builder dashboard in the RHEL web console With the cockpit-composer plugin for the RHEL web console, you can manage image builder blueprints and composes using a graphical interface. Prerequisites You must have root access to the system. You installed RHEL image builder. You installed the cockpit-composer package. Procedure On the host, open https://<_localhost_>:9090/ in a web browser. Log in to the web console as the root user. To display the RHEL image builder controls, click the Image Builder button, in the upper-left corner of the window. The RHEL image builder dashboard opens, listing existing blueprints, if any. Additional resources Managing systems using the RHEL 9 web console 5.2. Creating a blueprint in the web console interface Creating a blueprint is a necessary step before you build your customized RHEL system image. All the customizations available are optional. You can create a customized blueprint by using the following options: Using the CLI. See Supported image customizations . Using the web console. Follow the steps: Note These blueprint customizations are available for Red Hat Enterprise Linux 9.2 or later versions and Red Hat Enterprise Linux 8.8 or later versions. Prerequisites You have opened the RHEL image builder app from the web console in a browser. See Accessing RHEL image builder GUI in the RHEL web console . Procedure Click Create Blueprint in the upper-right corner. A dialog wizard with fields for the blueprint name and description opens. On the Details page: Enter the name of the blueprint and, optionally, its description. Click . Optional: In the Packages page: On the Available packages search, enter the package name Click the > button to move it to the Chosen packages field. Repeat the steps to search and include as many packages as you want. Click . Note These customizations are all optional unless otherwise specified. On the Kernel page, enter a kernel name and the command-line arguments. On the File system page, you can select Use automatic partitioning or Manually configure partitions for your image file system. For manually configuring the partitions, complete the following steps: Click the Manually configure partitions button. The Configure partitions section opens, showing the configuration based on Red Hat standards and security guides. From the dropdown menu, provide details to configure the partitions: For the Mount point field, select one of the following mount point type options: / - the root mount point /app /boot /data /home /opt /srv /usr /usr/local /var You can also add an additional path to the Mount point , such as /tmp . For example: /var as a prefix and /tmp as an additional path results in /var/tmp . Note Depending on the Mount point type you choose, the file system type changes to xfs . For the Minimum size partition field of the file system, enter the needed minimum partition size. In the Minimum size dropdown menu, you can use common size units such as GiB , MiB , or KiB . The default unit is GiB . Note Minimum size means that RHEL image builder can still increase the partition sizes, in case they are too small to create a working image. To add more partitions, click the Add partition button. If you see the following error message: Duplicate partitions: Only one partition at each mount point can be created. , you can: Click the Remove button to remove the duplicated partition. Choose a new mount point for the partition you want to create. After you finish the partitioning configuration, click . On the Services page, you can enable or disable services: Enter the service names you want to enable or disable, separating them by a comma, by space, or by pressing the Enter key. Click . Enter the Enabled services . Enter the Disabled services . On the Firewall page, set up your firewall setting: Enter the Ports , and the firewall services you want to enable or disable. Click the Add zone button to manage your firewall rules for each zone independently. Click . On the Users page, add a users by following the steps: Click Add user . Enter a Username , a Password , and a SSH key . You can also mark the user as a privileged user, by clicking the Server administrator checkbox. Click . On the Groups page, add groups by completing the following steps: Click the Add groups button: Enter a Group name and a Group ID . You can add more groups. Click . On the SSH keys page, add a key: Click the Add key button. Enter the SSH key. Enter a User . Click . On the Timezone page, set your time zone settings: On the Timezone field, enter the time zone you want to add to your system image. For example, add the following time zone format: "US/Eastern". If you do not set a time zone, the system uses Universal Time, Coordinated (UTC) as default. Enter the NTP servers . Click . On the Locale page, complete the following steps: On the Keyboard search field, enter the package name you want to add to your system image. For example: ["en_US.UTF-8"]. On the Languages search field, enter the package name you want to add to your system image. For example: "us". Click . On the Others page, complete the following steps: On the Hostname field, enter the hostname you want to add to your system image. If you do not add a hostname, the operating system determines the hostname. Mandatory only for the Simplifier Installer image: On the Installation Devices field, enter a valid node for your system image. For example: dev/sda1 . Click . Mandatory only when building images for FDO: On the FIDO device onboarding page, complete the following steps: On the Manufacturing server URL field, enter the following information: On the DIUN public key insecure field, enter the insecure public key. On the DIUN public key hash field, enter the public key hash. On the DIUN public key root certs field, enter the public key root certs. Click . On the OpenSCAP page, complete the following steps: On the Datastream field, enter the datastream remediation instructions you want to add to your system image. On the Profile ID field, enter the profile_id security profile you want to add to your system image. Click . Mandatory only when building images that use Ignition: On the Ignition page, complete the following steps: On the Firstboot URL field, enter the package name you want to add to your system image. On the Embedded Data field, drag or upload your file. Click . . On the Review page, review the details about the blueprint. Click Create . The RHEL image builder view opens, listing existing blueprints. 5.3. Importing a blueprint in the RHEL image builder web console interface You can import and use an already existing blueprint. The system automatically resolves all the dependencies. Prerequisites You have opened the RHEL image builder app from the web console in a browser. You have a blueprint that you want to import to use in the RHEL image builder web console interface. Procedure On the RHEL image builder dashboard, click Import blueprint . The Import blueprint wizard opens. From the Upload field, either drag or upload an existing blueprint. This blueprint can be in either TOML or JSON format. Click Import . The dashboard lists the blueprint you imported. Verification When you click the blueprint you imported, you have access to a dashboard with all the customizations for the blueprint that you imported. To verify the packages that have been selected for the imported blueprint, navigate to the Packages tab. To list all the package dependencies, click All . The list is searchable and can be ordered. steps Optional: To modify any customization: From the Customizations dashboard, click the customization you want to make a change. Optionally, you can click Edit blueprint to navigate to all the available customization options. Additional resources Creating a system image by using RHEL image builder in the web console interface 5.4. Exporting a blueprint from the RHEL image builder web console interface You can export a blueprint to use the customizations in another system. You can export the blueprint in the TOML or in the JSON format. Both formats work on the CLI and also in the API interface. Prerequisites You have opened the RHEL image builder app from the web console in a browser. You have a blueprint that you want to export. Procedure On the image builder dashboard, select the blueprint you want to export. Click Export blueprint . The Export blueprint wizard opens. Click the Export button to download the blueprint as a file or click the Copy button to copy the blueprint to the clipboard. Optional: Click the Copy button to copy the blueprint. Verification Open the exported blueprint in a text editor to inspect and review it. 5.5. Creating a system image by using RHEL image builder in the web console interface You can create a customized RHEL system image from a blueprint by completing the following steps. Prerequisites You opened the RHEL image builder app from the web console in a browser. You created a blueprint. Procedure In the RHEL image builder dashboard, click the blueprint tab. On the blueprint table, find the blueprint you want to build an image. On the right side of the chosen blueprint, click Create Image . The Create image dialog wizard opens. On the Image output page, complete the following steps: From the Select a blueprint list, select the image type you want. From the Image output type list, select the image output type you want. Depending on the image type you select, you need to add further details. Click . On the Review page, review the details about the image creation and click Create image . The image build starts and takes up to 20 minutes to complete. Verification After the image finishes building, you can: Download the image. On the RHEL image builder dashboard, click the Node options (⫶) menu and select Download image . Download the logs of the image to inspect the elements and verify if any issue is found. On the RHEL image builder dashboard, click the Node options (⫶) menu and select Download logs .

Commands: