Dalton Hubble 9493ed3b1d Change default iPXE kernel/initrd download from HTTP to HTTPS ... * Require an iPXE-enabled network boot environment with support for TLS downloads. PXE clients must chainload to iPXE firmware compiled with `DOWNLOAD_PROTO_HTTPS` enabled ([crypto](https://ipxe.org/crypto)) * iPXE's pre-compiled firmware binaries do _not_ enable HTTPS. Admins should build iPXE from source with support enabled * Affects the Container Linux and Flatcar Linux install profiles that pull from public downloads. No effect when cached_install=true or using Fedora Atomic, as those download from Matchbox * Add `download_protocol` variable. Recognizing boot firmware TLS support is difficult in some environments, set the protocol to "http" for the old behavior (discouraged)		2019-03-09 23:23:40 -08:00
..
kubernetes	Change default iPXE kernel/initrd download from HTTP to HTTPS	2019-03-09 23:23:40 -08:00