Is the domain information you put at the top a copy and paste from your config? Because I see a comma misplaced.

AD DEFAULT OU	- OU=Imaged,DC=haw,DC=k,12DC=nj,DC=us

should read

AD DEFAULT OU	- OU=Imaged,DC=haw,DC=k12,DC=nj,DC=us

@Sebastian-Roth I make all my EFI images in virtual box. My workflow has me enable efi. Do the base install and when I go to pxe I switch off efi and do my capture. The os is still an efi os and won’t boot in vbox until you reenable efi. Has worked fine for me with images going back to windows 7 all the way up to our current testing of 1903

It would be helpful for the client to be able to pull and report inventory information on machines without needing them to reboot.

I am deploying the client to machines that are already out in the field to get them into my host list for later. Forcing a reboot is disruptive to the current users, and right now I can’t even use the PXE inventory task as they aren’t set for PXE to be their primary boot device. adding this feature to the client would be really helpful.

One option for limiting support to reduce workload would be to limit to LTS branches only. So only 18.04 and 20.04 for Ubuntu and skipping the intermediary releases and dropping those that go out of support by their vendor (eg ubuntu 14.04, 16.04).

@Wayne-Workman

I know this thread is old but I am following the guide now and have a question.

I am in the process of building a new host. On my old host I have SSL setup (./installfog.sh -S). Do I set up the new machine with SSL and replace the certs with the one from the old machine? following the se instructions: https://wiki.fogproject.org/wiki/index.php?title=FOG_Client#Maintain_Control_Of_Hosts_When_Building_New_Server

Thanks

Nevermind I got it all sorted. Just wanted to make a note that the wiki needs to be update to reflect that the user that needs to be added and given permissions is now fogproject rather than fog

@Quazz

In K12 its pretty common to treat many of your internal users as hostile (right or wrong) since students seem to always try to mess with things whether with malice or just screwing around.

Also with some of the other changes in security on FOG (DB and HTTPS etc) pointing toward the outside to manage devices via the client doesn’t sound impossible for small deployments. Again, it’s not what I’m doing or planning to do, but it would be possible if measures like these were in place.

@Sebastian-Roth

To be clear I’m mostly speaking about the web UI right now. But the client would be important too. The way JAMF handles the migration is that it continues to use its internal CA and distributes the new cert to the machines on check in. It keeps track of those that have received the cert and compares that to its list of enrolled machines. When all machines have received the cert there is a UI element that goes from red to green letting you know that the server can now be switched to communicate via the external CA.

@Sebastian-Roth
Works fine for me on all the flavors of 10 we use. LTSB LTSC and 1703 1803

@Sebastian-Roth
Good to know. I’m using FOG with HTTP so it hasn’t been an issue (I’ve moved it several times as virtual environments shifted). It might be worth looking into adding a feature in the installer to ask for the DNS name of the machine so it can generate the cert with that as the CN rather than the machine’s IP.

Might be useful for FOS login too. Shouldn’t be impossible to implement. Add Fail2Ban to list of apps to get from the repo and point it to the login logs. I’m sure I’m way over simplifying it (not a dev obviously). As FOG moves to a more secure standard install (SQL password, HTTPS etc) this would be another great feature to have.

!!!
!! The installer was not able to run all the way to the end as !!
!! something has caused it to fail. The following few lines are !!
!! from the error log file which might help us figure out what’s !!
!! wrong. Please add this information when reporting an error. !!
!! As well you might want to take a look at the full error log !!
!! in /root/fogproject-dev-branch/bin/error_logs/fog_error_1.5.10.2424.log !!
!!!

2026-08-26 17:39:57 (260 MB/s) - ‘/home//fogDBbackups/fog_sql_1.5.10.2424_20260826_173957.sql’ saved [4285600]

<!DOCTYPE html><html lang=“en”><head><meta charset=“utf-8”/><meta http-equiv=“X-UA-Compatible” content=“IE=edge”/><meta name=“viewport” content=“width=device-width, initial-scale=1”/><meta name=“csrf-token” content=“bceb7f98142b1a0d6de0d1c08ef83d6eeb6632f6b7007972b21f2a9051161472”/><title>Login</title><link href=“…/management/css/animate.min.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/font-awesome.min.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/jquery-ui.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/jquery-ui.theme.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/jquery-ui.structure.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/jquery-ui-timepicker-addon.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/select2.min.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/bootstrap.min.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/bootstrap-theme.min.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/theme.bootstrap_3.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/theme.blue.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/bootstrap-dialog.min.css?ver=143” rel=“stylesheet” type=“text/css”/><link href=“…/management/css/default/fog.css?ver=143” rel=“stylesheet” type=“text/css”/><link rel=“shortcut icon” href=“…/favicon.ico” type=“image/x-icon”/></head><body><nav class=“navbar navbar-inverse navbar-fixed-top”><div class=“container-fluid”><div class=“navbar-header”><button type=“button” class=“navbar-toggle collapsed” data-toggle=“collapse” data-target=“.navbar-collapse”><span class=“sr-only”>Toggle Navigation</span><span class=“icon-bar”></span><span class=“icon-bar”></span><span class=“icon-bar”></span></button></div><div class=“collapse navbar-collapse”><ul class=“nav navbar-nav”><a class=“navbar-brand” href=“…/management/index.php?node=home”><b>FOG</b> Project</a></ul></div></div></nav><div class=“container-fluid dashboard”><div class=“form-signin”><form class=“form-horizontal” method=“post” action=“?node=home”><h3 class=“form-signin-heading text-center”><span class=“col-xs-1”><img src=“…/favicon.ico” class=“logoimg” alt=“Open Source Computer Cloning Solution”/></span>FOG Project</h3><hr/><div class=“form-group”><label class=“control-label col-md-2” for=“uname”>Username</label><div class=“col-md-10”><input type=“text” class=“form-control” name=“uname” required=“” autofocus=“” id=“uname”/></div></div><div class=“form-group”><label class=“control-label col-md-2” for=“upass”>Password</label><div class=“col-md-10”><input type=“password” class=“form-control” name=“upass” required=“” id=“upass”/></div></div><div class=“form-group”><label class=“control-label col-md-2” for=“ulang”>Language</label><div class=“col-md-10”><select class=“form-control” name=“ulang” id=“ulang”><option value=“zh”>中文</option><option value=“en” selected>English</option><option value=“es”>Español</option><option value=“fr”>Français</option><option value=“de”>Deutsch</option><option value=“it”>Italiano</option><option value=“pt”>Português</option><option value=“ja”>日本語</option></select></div></div><div class=“form-group”><div class=“col-md-offset-2 col-md-10”><button class=“btn btn-default btn-block” type=“submit” name=“login”>Login</button></div></div></form><hr/><div class=“row”><div class=“form-group”><div id=“login-form-info”><p>Estimated FOG Sites: <b><i class=“icon fa fa-circle-o-notch fa-spin fa-fw”></i></b></p><p>Latest Version: <b><i class=“icon fa fa-circle-o-notch fa-spin fa-fw”></i></b></p><p>Latest Development Version: <b><i class=“icon fa fa-circle-o-notch fa-spin fa-fw”></i></b></p></div></div></div></div></div><div class=“collapse navbar-collapse”><footer class=“footer”><nav class=“navbar navbar-inverse navbar-fixed-bottom”><div class=“container-fluid”><ul class=“nav navbar-nav”><li><a href=“https://wiki.fogproject.org/wiki/index.php?title=Credits”>Credits</a></li><li><a href=“?node=client”>FOG Client</a></li><li><a href=“https://www.paypal.com/cgi-bin/webscr?item_name=Donation+to+FOG+-+A+Free+Cloning+Solution&cmd=_donations&business=fogproject.org@gmail.com” target=“_blank”>Donate to FOG</a></li></ul></div></nav></footer></div><script src=“js/jquery-latest.min.js?ver=143” type=“text/javascript”></script><script src=“js/jquery.validate.min.js?ver=143” type=“text/javascript”></script><script src=“js/additional-methods.min.js?ver=143” type=“text/javascript”></script><script src=“js/jquery.tablesorter.combined.js?ver=143” type=“text/javascript”></script><script src=“js/jquery.tablesorter.widget-grouping.js?ver=143” type=“text/javascript”></script><script src=“js/select2.min.js?ver=143” type=“text/javascript”></script><script src=“js/jquery-migrate-latest.min.js?ver=143” type=“text/javascript”></script><script src=“js/jquery.progressbar.js?ver=143” type=“text/javascript”></script><script src=“js/jquery.tmpl.js?ver=143” type=“text/javascript”></script><script src=“js/jquery.placeholder.js?ver=143” type=“text/javascript”></script><script src=“js/jquery-ui.min.js?ver=143” type=“text/javascript”></script><script src=“js/flot/jquery.flot.js?ver=143” type=“text/javascript”></script><script src=“js/flot/jquery.flot.time.js?ver=143” type=“text/javascript”></script><script src=“js/flot/jquery.flot.pie.js?ver=143” type=“text/javascript”></script><script src=“js/flot/jquery.flot.JUMlib.js?ver=143” type=“text/javascript”></script><script src=“js/flot/jquery.flot.gantt.js?ver=143” type=“text/javascript”></script><script src=“js/jquery-ui-timepicker-addon.js?ver=143” type=“text/javascript”></script><script src=“js/bootstrap.min.js?ver=143” type=“text/javascript”></script><script src=“js/bootstrap-dialog.min.js?ver=143” type=“text/javascript”></script><script src=“js/fog/bootstrap-csrf.js?ver=143” type=“text/javascript”></script><script src=“js/fog/fog.js?ver=143” type=“text/javascript”></script><script src=“js/jscolor.min.js?ver=143” type=“text/javascript”></script><script src=“js/fog/fog.login.js?ver=143” type=“text/javascript”></script><!-- Memory Usage: 2.00 MiB–><!-- Memory Peak: 669.95 KiB–></body></html>From https://github.com/FOGProject/fog-ipxe

• branch HEAD -> FETCH_HEAD

@Tom-Elliott

Switching to dev now and re-testing.

@Tom-Elliott

I did a git pull right before I ran the installer. I am on the stable branch. Should I move to dev?

init.xz: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
init.xz: OK
init_32.xz: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
init_32.xz: OK
bzImage: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
bzImage: OK
bzImage32: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
bzImage32: OK
arm_init.cpio.gz: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
arm_init.cpio.gz: OK
arm_Image: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
arm_Image: OK```

updating fog and the pxe images are failing to build

 * Compiling iPXE binaries trusting your SSL certificate.......Failed!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! The installer was not able to run all the way to the end as   !!
!! something has caused it to fail. The following few lines are  !!
!! from the error log file which might help us figure out what's !!
!! wrong. Please add this information when reporting an error.   !!
!! As well you might want to take a look at the full error log   !!
!! in /root/fogproject-dev-branch/bin/error_logs/fog_error_1.5.10.2254.log !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!```

Trying to button up our Fog Server and apply UFW rules. Does anyone have a default ruleset that they use for Fog? This is what it is currently listening on:

udp    UNCONN  0        0                  0.0.0.0:55629          0.0.0.0:*      users:(("rpc.statd",pid=688,fd=8))
udp    UNCONN  0        0                  0.0.0.0:59831          0.0.0.0:*      users:(("rpc.mountd",pid=687,fd=8))
udp    UNCONN  0        0            127.0.0.53%lo:53             0.0.0.0:*      users:(("systemd-resolve",pid=675,fd=13))
udp    UNCONN  0        0          10.10.70.9%eth0:68             0.0.0.0:*      users:(("systemd-network",pid=673,fd=15))
udp    UNCONN  0        0                  0.0.0.0:69             0.0.0.0:*      users:(("in.tftpd",pid=819,fd=4))
udp    UNCONN  0        0                  0.0.0.0:111            0.0.0.0:*      users:(("rpcbind",pid=544,fd=5),("systemd",pid=1,fd=62))
udp    UNCONN  0        0                  0.0.0.0:49302          0.0.0.0:*
udp    UNCONN  0        0                  0.0.0.0:161            0.0.0.0:*      users:(("snmpd",pid=713,fd=6))
udp    UNCONN  0        0                127.0.0.1:864            0.0.0.0:*      users:(("rpc.statd",pid=688,fd=5))
udp    UNCONN  0        0                  0.0.0.0:33924          0.0.0.0:*      users:(("rpc.mountd",pid=687,fd=4))
udp    UNCONN  0        0                  0.0.0.0:33928          0.0.0.0:*      users:(("rpc.mountd",pid=687,fd=12))
udp    UNCONN  0        0                     [::]:46961             [::]:*      users:(("rpc.mountd",pid=687,fd=14))
udp    UNCONN  0        0                     [::]:43807             [::]:*      users:(("rpc.mountd",pid=687,fd=10))
udp    UNCONN  0        0                     [::]:44473             [::]:*      users:(("rpc.mountd",pid=687,fd=6))
udp    UNCONN  0        0                     [::]:36621             [::]:*      users:(("rpc.statd",pid=688,fd=10))
udp    UNCONN  0        0                     [::]:69                [::]:*      users:(("in.tftpd",pid=819,fd=5))
udp    UNCONN  0        0                     [::]:111               [::]:*      users:(("rpcbind",pid=544,fd=7),("systemd",pid=1,fd=64))
udp    UNCONN  0        0                     [::]:37797             [::]:*
tcp    LISTEN  0        4096               0.0.0.0:42063          0.0.0.0:*      users:(("rpc.mountd",pid=687,fd=9))
tcp    LISTEN  0        32                 0.0.0.0:21             0.0.0.0:*      users:(("vsftpd",pid=730,fd=3))
tcp    LISTEN  0        128                0.0.0.0:22             0.0.0.0:*      users:(("sshd",pid=850,fd=3))
tcp    LISTEN  0        4096               0.0.0.0:111            0.0.0.0:*      users:(("rpcbind",pid=544,fd=4),("systemd",pid=1,fd=61))
tcp    LISTEN  0        4096               0.0.0.0:60621          0.0.0.0:*      users:(("rpc.statd",pid=688,fd=9))
tcp    LISTEN  0        80                 0.0.0.0:3306           0.0.0.0:*      users:(("mariadbd",pid=926,fd=30))
tcp    LISTEN  0        4096               0.0.0.0:48417          0.0.0.0:*      users:(("rpc.mountd",pid=687,fd=5))
tcp    LISTEN  0        64                 0.0.0.0:44735          0.0.0.0:*
tcp    LISTEN  0        64                 0.0.0.0:2049           0.0.0.0:*
tcp    LISTEN  0        4096               0.0.0.0:35157          0.0.0.0:*      users:(("rpc.mountd",pid=687,fd=13))
tcp    LISTEN  0        4096                  [::]:54973             [::]:*      users:(("rpc.mountd",pid=687,fd=11))
tcp    LISTEN  0        128                   [::]:22                [::]:*      users:(("sshd",pid=850,fd=4))
tcp    LISTEN  0        511                      *:80                   *:*      users:(("apache2",pid=1338482,fd=4),("apache2",pid=1275019,fd=4),("apache2",pid=1274184,fd=4),("apache2",pid=1274085,fd=4),("apache2",pid=1274084,fd=4),("apache2",pid=1274083,fd=4),("apache2",pid=1274082,fd=4),("apache2",pid=1274081,fd=4),("apache2",pid=986,fd=4))
tcp    LISTEN  0        64                    [::]:41029             [::]:*
tcp    LISTEN  0        4096                  [::]:111               [::]:*      users:(("rpcbind",pid=544,fd=6),("systemd",pid=1,fd=63))
tcp    LISTEN  0        511                      *:443                  *:*      users:(("apache2",pid=1338482,fd=6),("apache2",pid=1275019,fd=6),("apache2",pid=1274184,fd=6),("apache2",pid=1274085,fd=6),("apache2",pid=1274084,fd=6),("apache2",pid=1274083,fd=6),("apache2",pid=1274082,fd=6),("apache2",pid=1274081,fd=6),("apache2",pid=986,fd=6))
tcp    LISTEN  0        4096                  [::]:53863             [::]:*      users:(("rpc.mountd",pid=687,fd=7))
tcp    LISTEN  0        4096                  [::]:33617             [::]:*      users:(("rpc.statd",pid=688,fd=11))
tcp    LISTEN  0        80                    [::]:3306              [::]:*      users:(("mariadbd",pid=926,fd=32))
tcp    LISTEN  0        4096                  [::]:45009             [::]:*      users:(("rpc.mountd",pid=687,fd=15))
tcp    LISTEN  0        64                    [::]:2049              [::]:*

Hey everyone,

On 1.5x dev-branch on Ubuntu 22.04

Running the script to update and getting to the portion where it is creating PXE files for use with our SSL cert. I get the following error:

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! The installer was not able to run all the way to the end as   !!
!! something has caused it to fail. The following few lines are  !!
!! from the error log file which might help us figure out what's !!
!! wrong. Please add this information when reporting an error.   !!
!! As well you might want to take a look at the full error log   !!
!! in /root/fogproject-dev-branch/bin/error_logs/fog_error_1.5.10.1733.log !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I pulled the logs and the PXE creation fails when it gets to the arm architecture files.

After this fails the main error log just shows that it saves the sql database. The system works and I can pxe boot my x86_64 systems (don’t actually have any arm stuff).

Thanks

Is there a serverside log to see what snapins have run, when and on which machines?

I am trying to see if an app was deployed to a particular device. I know it is a working snapin but short of checking the device directly, is there a way to see if it was pushed to that machine server side?

Thanks

@Tom-Elliott

Thanks. I’ll give it a shot.

I’ve searched but haven’t found a solution. I’m migrating machines from one Fog Server to another and want to uninstall the client that currently points to the old server so that I can re-install and point to the new server.

Does anyone have a script to remove the fog client? I already have a working installer script.

@anwoke8204

I think you’re misunderstanding what those fields are asking for. Those fields are asking which OU in which fog should look for the groups and users. Then you specify the groups with access in the admin group field.