General Topics

It was mentioned in an earlier post:

@lostitguy We you will need to make up your own fog ipxe menu to specifically call the wipe function.

I am not 100% sure I have the stanza right but it should look like this

Menu Item: fog.wipeit
Description: FOG builtin Disk Eraser Tool
Parameters:
kernel tftp://${fog-ip}/bzImage
initrd tftp://${fog-ip}/init.xz
imagargs bzImage initrd=init.xz root=/dev/ram0 rw ramdisk_size=256000 ip=dhcp web=${fog-ip}/fog/ consoleblank=0 loglevel=4 mode=wipe wipemode=full
imgfetch init.xz
boot ||
goto MENU
Menu Show with: All Hosts

I was trying this today. As things likely changed since this was posted I found that I needed to change:

kernel tftp://${fog-ip}/bzImage
initrd tftp://${fog-ip}/init.xz

With :

kernel http://${fog-ip}/fog/service/ipxe/bzImage
initrd http://${fog-ip}/fog/service/ipxe/init.xz

Also there was a ram error so needed to increase size of the ramdisk to something larger such as 512000

I also omitted imgfetch init.xz and it still worked to my understandimg. Can someone please confirm that this line is redundant?

I get a database failed to update after the wipe. I am assuming this is because the wipe was initiated without being tasked?

Also I was surprised that the full wipe on the nvme SSD took less than a minute. Shouldn’t it take much long to write zeros or does FOG wipe perform some other type of erasure? If so what kind of erase method does FOG use for wipemode=full ?

@jmeyer Good work. So far looks very similar to what I was doing above but with grub instead. I’m guessing you’re aiming for something along the lines of the archived project you mentioned earlier that did this. Make sure you modify your ipxe scripts to load the shim with the shim command, and then sign whatever you’re booting from ipxe and you should be more or less there.

It’s worth noting if you want you should be able to skip the grub stage entirely, if you load the shim directly and name your ipxe binary what you’re grub binary currently is you should be able to net boot any shim pretty easily, from there the shim can automatically call mok manager as long as it’s in the same directory as your shim.

Sorry for responding so late. I’m out on training this week.

General

Tutorials

46

12.7k

17.6k

156.8k