Categories

  • 13k Topics
    115k Posts
    Tom ElliottT

    @Jeremy Good news on the wget front — I closed that gap I mentioned. FOG can
    now serve boards with no wget at all, over plain TFTP instead of HTTP.

    U-Boot’s pxe get command doesn’t need wget — every U-Boot build has it,
    and unlike wget it isn’t configurable: it always fetches
    pxelinux.cfg/01-<mac, dash-separated, lowercase> by TFTP from whatever
    server your board’s serverip points at. FOG now keeps a real file at that
    path for every host, kept in sync automatically whenever a task is queued,
    completed, or canceled — so your boot sequence becomes just:

    dhcp pxe get pxe boot

    No URL, no query string, nothing for the “bad port”/no-wget class of problem
    to trip over — the filename is fixed by the MAC, so there’s nothing to
    substitute.

    This just merged into working-1.6 — same branch you’re already tracking
    (you quoted 1.6.0-beta.4707 a few hours ago; this landed after that), so
    running your update again should pick it up. Two things to check once you
    have:

    Settings → FTP/TFTP needs a TFTP host/username/password configured — same
    connection FOG already uses to upload your ARM kernel, so if that’s
    already working for you, you’re set. I still don’t have a Pi to test this against, same as everything else in
    this thread — if pxe get doesn’t find the file, or finds one FOG didn’t
    mean to serve, that’s exactly the kind of thing I need you to report back.

    One thing from your last post I want to flag separately, because it looks
    like a different problem from the wget one: the boot sequence you
    described — times out on local storage, then falls into a BOOTP broadcast
    loop that gives up with “Retry time exceeded” — reads like U-Boot’s own
    default bootcmd running, not a custom one. That’s the standard
    Raspberry Pi fallback behavior when nothing else answers, and it wouldn’t
    run dhcp / pxe get / pxe boot at all, custom or not.

    Everything you’ve described testing so far — the wget/pxe boot sequence,
    the curl check, now pxe get — sounds like it’s been typed by hand at the
    => prompt each time. That proves the commands work, but it can’t be “fully
    automated,” which was the goal from your very first post: nothing runs
    automatically unless it’s persisted as bootcmd, either with
    setenv bootcmd '...'; saveenv on the board itself, or as a boot.scr /
    extlinux.conf your SD card or TFTP server hands U-Boot on its own at power-on.

    Can you confirm which of those two you actually have in place right now? If
    the answer is “neither yet — I’ve only been testing at the prompt,” that’s
    probably the real blocker to automation, independent of wget vs. TFTP, and
    worth sorting out before we look any further at the fetch mechanism itself.

  • Get the latest news on what's happening.
    184 Topics
    825 Posts
    A

    @Tom-Elliott I really appreciate that you are putting effort into providing more frequent releases, which makes it easier for everyone to deploy new security fixes in time. Keep up the good work!

  • View tutorials or talk about FOG in general.
    2k Topics
    19k Posts
    K

    @jmeyer The first screenshot, I can’t really say what’s wrong beyond for some reason, shim either immediately exits or doesn’t start so the EFI instead moves onto the next boot option which is IPv6.

    The second one, MOK.DER is being loaded, but mokmanager itself (which does the enrolling) is failing to load. Exec format error is usually caused either by trying to load a binary built for the wrong architecture (e.g arm on an x86 CPU) or when you have Secure Boot enabled, but the binary you’re trying to load isn’t signed by one of the keys enrolled in the firmware.

    So, for the second one, double check that you have the Microsoft keys enrolled in the firmware, or try it with secureboot off and see if that fixes it.

    I’m not quite sure what to suggest for the first one, other than maybe try network booting with secureboot off to the standard snponly.efi binary.

  • Report bugs, request features, or get the latest progress.
    2k Topics
    21k Posts
    Tom ElliottT

    @Valer I think we need to understand what this plugin is doing.

    CSS isn’t something we’ve allowed to be injectable though it could be.

    You can still use your own CSS but that’s more at the FOG Configuration -> FOG Setting -> FOG_THEME, but you would need to put it on your server in a location you type the path too here.

    https://docs.fogproject.org/en/latest/development/plugin-development

    This is a good toolkit for understanding how to build your own plugin.

54

Online

12.8k

Users

17.6k

Topics

157.0k

Posts