Bumping this topic. I too see the issue. I only see imaging events for registered hosts. I have a lot of field techs imaging unregistered hosts and need to have these events logged.

@TaTa

Thank you for your reply. I didn’t try your solution but after IGMP Snooping was configured on the VLAN, the multicasting worked immediately.

I left all the Fog multicasting settings as default.

@Kureebow Kernel Update resolved the issue. Thank you JJ Fullmer for the assistance!

@1337darkin The image can be captured in any state (PXE/UEFI)

But to boot the system, you need it in the “original” state of creating in the image:

For example::

You have a UEFI booted machine, and you capture the Image over PXE (Legacy) network via Virtual Box

That will be fine, as long as the system that boots is booting in UEFI mode. The “boot” mode is the important piece if that helps?

@rodluz That got it!

You are the man!

Let me give a feedback to this issue, as I faced it recently. In my case, the culprit was faulting parameters in Microsoft DHCP.
Captura de tela de 2024-05-03 12-15-42.png
It was faulting “MSFT Quarantine” User Class and PXE Vendor Class is not properly configured (It was typed “PXEclient:Arch:00007” instead of “PXEClient:Arch:00007”).
Captura de tela de 2024-05-03 12-15-26.png
After doing this corrections, PXE got successfully redirected Boot instructions to FOG Server.

@Tom-Elliott said in Ftp_login(): Maximum number of tried exceeded:

@nkduy1508 You need to resync your FOG FTP credentials and all.

https://forums.fogproject.org/topic/11203/resyncing-fog-s-service-account-password

fog shouldn’t be the user in use anymore unless you’re using a very old version of FOG?

From the INIT version, it seems maybe from 1.5.7?

Version Fog: 1.5.9 RC2
I checked password TFTP server the same with jogsetting file

@Tom-Elliott

Hi Tom,

While I was installing the Log tool as dependencies and started the capture process, it worked.

I tested it on 2 different workstations, both of which worked.

I have no idea why, but I’m happy.

As soon as I do this on more machines, I will return to congratulate you for your support and request closure.

Thank you very much.

@Greg-Plamondon @iljared98 Thank you for the input. We haven’t seen the issue reoccur after deploying a fresh image to these computers. If it crops back up, I will try your suggestions.

Time passes, but the problem is not solved. This problem happened because DHCP server not provide gateway to UEFI PXE client or UEFI ignore this… I just added to my each host
host pc131 {
option subnet-mask 255.255.255.0;
option routers 172.20.0.1;
option host-name “pc131”;
hardware ethernet 0a:e0:af:a2:02:bb;
fixed-address 172.20.0.131;
}

And it download ipxe.efi without problem! My DHCP - ISC-DHCP-SERVER - I manage it via Webmin )
I don’t know why it not working properly when it setup in “subnet” section these options “subnet-mask and routers” setted too, but ignored UEFI PXE
subnet 172.20.0.0 netmask 255.255.255.0 {
option broadcast-address 172.20.0.255;
authoritative;
next-server 172.16.0.1;
ignore unknown-clients;
boot-unknown-clients off;
max-lease-time 7200;
default-lease-time 1800;
option domain-name-servers 1.1.1.1 , 8.8.8.8;
option domain-name “pclab-customer.loc”;
option subnet-mask 255.255.255.0;
option routers 172.20.0.1;

You can try check it with your dhcp DNSMASQ or another.

I tried to change my apache conf from :

<VirtualHost *:80> <FilesMatch "\.php$"> SetHandler "proxy:fcgi://127.0.0.1:9000/" </FilesMatch> KeepAlive Off ServerName 192.168.1.200 ServerAlias fog-pi.ad.atdqm.tech DocumentRoot /var/www/ RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] RewriteRule /management/other/ca.cert.der$ - [L] RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}/$1 [R,L] </VirtualHost> <VirtualHost *:443> KeepAlive Off <FilesMatch "\.php$"> SetHandler "proxy:fcgi://127.0.0.1:9000/" </FilesMatch> ServerName 192.168.1.200 ServerAlias fog-pi.ad.atdqm.tech DocumentRoot /var/www/ SSLEngine On SSLProtocol all -SSLv3 -SSLv2 SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL # SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA SSLHonorCipherOrder On SSLCertificateFile /var/www/fog//management/other/ssl/srvpublic.crt SSLCertificateKeyFile /opt/fog/snapins/ssl//.srvprivate.key SSLCACertificateFile /var/www/fog//management/other/ca.cert.pem <Directory /var/www/fog/> DirectoryIndex index.php index.html index.htm </Directory> RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-d RewriteRule ^/fog/(.*)$ /fog/api/index.php [QSA,L] </VirtualHost>

by allowing all cipher/algo with this

SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL

didn’t work.

@tedlaur

Some additional info …

root@fog:~# cat /root/fogproject-dev-branch/bin/error_logs/fog_error_1.5.10.18.log
/usr/bin/lsb_release
/usr/bin/systemctl
systemd
ln: failed to create symbolic link ‘/lib/systemd/system/mysql.service’: File exists
ln: failed to create symbolic link ‘/lib/systemd/system/mysqld.service’: File exists
ln: failed to create symbolic link ‘/etc/systemd/system/mysql.service’: File exists
ln: failed to create symbolic link ‘/etc/systemd/system/mysqld.service’: File exists
/usr/sbin/sestatus
dpkg-query: no packages found matching mysql-server
Reading package lists…
Building dependency tree…
Reading state information…
curl is already the newest version (7.88.1-10+deb12u5).
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
Testing DNS name resolution (neverssl.com)… OK
Testing HTTP connection (http://neverssl.com)… OK
Testing HTTPS connection (https://github.com)… OK
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Get:2 http://deb.debian.org/debian bookworm InRelease [151 kB]
Hit:3 http://deb.debian.org/debian bookworm-updates InRelease
Fetched 151 kB in 1s (157 kB/s)
Reading package lists…
ii apache2 2.4.59-1~deb12u1 amd64 Apache HTTP Server
ii bc 1.07.1-3+b1 amd64 GNU bc arbitrary precision calculator language
ii build-essential 12.9 amd64 Informational list of build-essential packages
ii cpp 4:12.2.0-3 amd64 GNU C preprocessor (cpp)
ii curl 7.88.1-10+deb12u5 amd64 command line tool for transferring data with URL syntax
ii g++ 4:12.2.0-3 amd64 GNU C++ compiler
ii gawk 1:5.2.1-2 amd64 GNU awk, a pattern scanning and processing language
ii gcc 4:12.2.0-3 amd64 GNU C compiler
ii genisoimage 9:1.1.11-3.4 amd64 Creates ISO-9660 CD-ROM filesystem images
ii git 1:2.39.2-1.1 amd64 fast, scalable, distributed revision control system
ii gzip 1.12-1 amd64 GNU compression utilities
ii htmldoc 1.9.16-1 amd64 HTML processor that generates indexed HTML, PS, and PDF
ii isolinux 3:6.04~git20190206.bf6db5b4+dfsg1-3 all collection of bootloaders (ISO 9660 bootloader)
ii lftp 4.9.2-2+b1 amd64 Sophisticated command-line FTP/HTTP/BitTorrent client programs
ii libapache2-mod-php 2:8.2+93 all server-side, HTML-embedded scripting language (Apache 2 module) (default)
ii libc6:amd64 2.36-9+deb12u4 amd64 GNU C Library: Shared libraries
ii libcurl4:amd64 7.88.1-10+deb12u5 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
ii liblzma-dev:amd64 5.4.1-0.2 amd64 XZ-format compression library - development files
ii m4 1.4.19-3 amd64 macro processing language
mariadb-client-core
mariadb-client
ii mariadb-client 1:10.11.6-0+deb12u1 amd64 MariaDB database client binaries
ii mariadb-client 1:10.11.6-0+deb12u1 amd64 MariaDB database client binaries
mariadb-server
mariadb-server-core
mariadb-server-10.5
ii mariadb-server 1:10.11.6-0+deb12u1 amd64 MariaDB database server binaries
ii mariadb-server 1:10.11.6-0+deb12u1 amd64 MariaDB database server binaries
ii net-tools 2.10-0.1 amd64 NET-3 networking toolkit
ii nfs-kernel-server 1:2.6.2-4 amd64 support for NFS kernel server
ii openssh-server 1:9.2p1-2+deb12u2 amd64 secure shell (SSH) server, for secure access from remote machines
ii php 2:8.2+93 all server-side, HTML-embedded scripting language (default)
ii php-bcmath 2:8.2+93 all Bcmath module for PHP [default]
ii php-cli 2:8.2+93 all command-line interpreter for the PHP scripting language (default)
ii php-curl 2:8.2+93 all CURL module for PHP [default]
ii php-fpm 2:8.2+93 all server-side, HTML-embedded scripting language (FPM-CGI binary) (default)
ii php-gd 2:8.2+93 all GD module for PHP [default]
php-json-schema
php-json
ii php-json 2:8.2+93 all JSON module for PHP [default]
ii php-ldap 2:8.2+93 all LDAP module for PHP [default]
ii php-mbstring 2:8.2+93 all MBSTRING module for PHP [default]
php-mysql
ii php-mysql 2:8.2+93 all MySQL module for PHP [default]
php-mysql
ii php-mysql 2:8.2+93 all MySQL module for PHP [default]
ii tar 1.34+dfsg-1.2+deb12u1 amd64 GNU version of the tar archiving utility
ii tftpd-hpa 5.2+20150808-1.4 amd64 HPA’s tftp server
ii tftp-hpa 5.2+20150808-1.4 amd64 HPA’s tftp client
ii unzip 6.0-28 amd64 De-archiver for .zip files
ii vsftpd 3.0.3-13+b2 amd64 lightweight, efficient FTP server written for security
ii wget 1.21.3-1+b2 amd64 retrieves files from the web
ii zlib1g:amd64 1:1.2.13.dfsg-1 amd64 compression library - runtime
Reading package lists…
Building dependency tree…
Reading state information…
apache2 is already the newest version (2.4.59-1~deb12u1).
bc is already the newest version (1.07.1-3+b1).
build-essential is already the newest version (12.9).
cpp is already the newest version (4:12.2.0-3).
curl is already the newest version (7.88.1-10+deb12u5).
g++ is already the newest version (4:12.2.0-3).
gawk is already the newest version (1:5.2.1-2).
gcc is already the newest version (4:12.2.0-3).
genisoimage is already the newest version (9:1.1.11-3.4).
git is already the newest version (1:2.39.2-1.1).
gzip is already the newest version (1.12-1).
htmldoc is already the newest version (1.9.16-1).
isolinux is already the newest version (3:6.04~git20190206.bf6db5b4+dfsg1-3).
lftp is already the newest version (4.9.2-2+b1).
libapache2-mod-php is already the newest version (2:8.2+93).
libc6 is already the newest version (2.36-9+deb12u4).
libcurl4 is already the newest version (7.88.1-10+deb12u5).
liblzma-dev is already the newest version (5.4.1-0.2).
m4 is already the newest version (1.4.19-3).
mariadb-client is already the newest version (1:10.11.6-0+deb12u1).
mariadb-server is already the newest version (1:10.11.6-0+deb12u1).
net-tools is already the newest version (2.10-0.1).
nfs-kernel-server is already the newest version (1:2.6.2-4).
openssh-server is already the newest version (1:9.2p1-2+deb12u2).
php is already the newest version (2:8.2+93).
php-bcmath is already the newest version (2:8.2+93).
php-cli is already the newest version (2:8.2+93).
php-curl is already the newest version (2:8.2+93).
php-fpm is already the newest version (2:8.2+93).
php-gd is already the newest version (2:8.2+93).
php-json is already the newest version (2:8.2+93).
php-ldap is already the newest version (2:8.2+93).
php-mbstring is already the newest version (2:8.2+93).
php-mysql is already the newest version (2:8.2+93).
tar is already the newest version (1.34+dfsg-1.2+deb12u1).
tftpd-hpa is already the newest version (5.2+20150808-1.4).
tftp-hpa is already the newest version (5.2+20150808-1.4).
unzip is already the newest version (6.0-28).
vsftpd is already the newest version (3.0.3-13+b2).
wget is already the newest version (1.21.3-1+b2).
zlib1g is already the newest version (1:1.2.13.dfsg-1).
Calculating upgrade…
The following packages have been kept back:
linux-headers-amd64 linux-image-amd64
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
ii apache2 2.4.59-1~deb12u1 amd64 Apache HTTP Server
ii bc 1.07.1-3+b1 amd64 GNU bc arbitrary precision calculator language
ii build-essential 12.9 amd64 Informational list of build-essential packages
ii cpp 4:12.2.0-3 amd64 GNU C preprocessor (cpp)
ii curl 7.88.1-10+deb12u5 amd64 command line tool for transferring data with URL syntax
ii g++ 4:12.2.0-3 amd64 GNU C++ compiler
ii gawk 1:5.2.1-2 amd64 GNU awk, a pattern scanning and processing language
ii gcc 4:12.2.0-3 amd64 GNU C compiler
ii genisoimage 9:1.1.11-3.4 amd64 Creates ISO-9660 CD-ROM filesystem images
ii git 1:2.39.2-1.1 amd64 fast, scalable, distributed revision control system
ii gzip 1.12-1 amd64 GNU compression utilities
ii htmldoc 1.9.16-1 amd64 HTML processor that generates indexed HTML, PS, and PDF
ii isolinux 3:6.04~git20190206.bf6db5b4+dfsg1-3 all collection of bootloaders (ISO 9660 bootloader)
ii lftp 4.9.2-2+b1 amd64 Sophisticated command-line FTP/HTTP/BitTorrent client programs
ii libapache2-mod-php 2:8.2+93 all server-side, HTML-embedded scripting language (Apache 2 module) (default)
ii libc6:amd64 2.36-9+deb12u4 amd64 GNU C Library: Shared libraries
ii libcurl4:amd64 7.88.1-10+deb12u5 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
ii liblzma-dev:amd64 5.4.1-0.2 amd64 XZ-format compression library - development files
ii m4 1.4.19-3 amd64 macro processing language
ii mariadb-client 1:10.11.6-0+deb12u1 amd64 MariaDB database client binaries
ii mariadb-server 1:10.11.6-0+deb12u1 amd64 MariaDB database server binaries
ii net-tools 2.10-0.1 amd64 NET-3 networking toolkit
ii nfs-kernel-server 1:2.6.2-4 amd64 support for NFS kernel server
ii openssh-server 1:9.2p1-2+deb12u2 amd64 secure shell (SSH) server, for secure access from remote machines
ii php 2:8.2+93 all server-side, HTML-embedded scripting language (default)
ii php-bcmath 2:8.2+93 all Bcmath module for PHP [default]
ii php-cli 2:8.2+93 all command-line interpreter for the PHP scripting language (default)
ii php-curl 2:8.2+93 all CURL module for PHP [default]
ii php-fpm 2:8.2+93 all server-side, HTML-embedded scripting language (FPM-CGI binary) (default)
ii php-gd 2:8.2+93 all GD module for PHP [default]
ii php-json 2:8.2+93 all JSON module for PHP [default]
ii php-ldap 2:8.2+93 all LDAP module for PHP [default]
ii php-mbstring 2:8.2+93 all MBSTRING module for PHP [default]
ii php-mysql 2:8.2+93 all MySQL module for PHP [default]
ii tar 1.34+dfsg-1.2+deb12u1 amd64 GNU version of the tar archiving utility
ii tftpd-hpa 5.2+20150808-1.4 amd64 HPA’s tftp server
ii tftp-hpa 5.2+20150808-1.4 amd64 HPA’s tftp client
ii unzip 6.0-28 amd64 De-archiver for .zip files
ii vsftpd 3.0.3-13+b2 amd64 lightweight, efficient FTP server written for security
ii wget 1.21.3-1+b2 amd64 retrieves files from the web
ii zlib1g:amd64 1:1.2.13.dfsg-1 amd64 compression library - runtime
New password: Retype new password: passwd: password updated successfully
init.xz: OK
init_32.xz: OK
bzImage: OK
bzImage32: OK
FOGService.msi: OK
SmartInstaller.exe: OK
‘bzImage’ -> ‘/var/www/html/fog//service/ipxe/bzImage’
‘bzImage32’ -> ‘/var/www/html/fog//service/ipxe/bzImage32’
‘init.xz’ -> ‘/var/www/html/fog//service/ipxe/init.xz’
‘init_32.xz’ -> ‘/var/www/html/fog//service/ipxe/init_32.xz’
‘FOGService.msi’ -> ‘/var/www/html/fog//client/FOGService.msi’
‘SmartInstaller.exe’ -> ‘/var/www/html/fog//client/SmartInstaller.exe’
mysqlnd
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank. Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common Name (e.g. server FQDN or YOUR name) []:Email Address []:You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.

192.168.3.200 []:Certificate request self-signature ok
subject=CN = 192.168.3.200
Site 001-fog disabled.
To activate the new configuration, you need to run:
systemctl reload apache2
Enabling site 000-default.
To activate the new configuration, you need to run:
systemctl reload apache2
renamed ‘/etc/apache2/sites-available/001-fog.conf’ -> ‘/etc/apache2/sites-available/001-fog.conf.1713680529’
ln: failed to create symbolic link ‘/var/www/html/fog/fog’: File exists
ERROR: Module php does not exist!
Considering dependency proxy for proxy_fcgi:
Module proxy already enabled
Module proxy_fcgi already enabled
Module setenvif already enabled
Module rewrite already enabled
Considering dependency setenvif for ssl:
Module setenvif already enabled
Considering dependency mime for ssl:
Module mime already enabled
Considering dependency socache_shmcb for ssl:
Module socache_shmcb already enabled
Module ssl already enabled
Enabling site 001-fog.
To activate the new configuration, you need to run:
systemctl reload apache2
Site 000-default disabled.
To activate the new configuration, you need to run:
systemctl reload apache2
● apache2.service - The Apache HTTP Server
Loaded: loaded (/lib/systemd/system/apache2.service; enabled; preset: enabled)
Active: active (running) since Sat 2024-04-20 23:22:55 PDT; 106ms ago
Docs: https://httpd.apache.org/docs/2.4/
Process: 9422 ExecStart=/usr/sbin/apachectl start (code=exited, status=0/SUCCESS)
Main PID: 9427 (apache2)
Tasks: 6 (limit: 4588)
Memory: 15.5M
CPU: 170ms
CGroup: /system.slice/apache2.service
├─9427 /usr/sbin/apache2 -k start
├─9434 /usr/sbin/apache2 -k start
├─9435 /usr/sbin/apache2 -k start
├─9436 /usr/sbin/apache2 -k start
├─9437 /usr/sbin/apache2 -k start
└─9438 /usr/sbin/apache2 -k start

Apr 20 23:22:55 fog systemd[1]: Starting apache2.service - The Apache HTTP Server…
Apr 20 23:22:55 fog systemd[1]: Started apache2.service - The Apache HTTP Server.

● php8.2-fpm.service - The PHP 8.2 FastCGI Process Manager
Loaded: loaded (/lib/systemd/system/php8.2-fpm.service; enabled; preset: enabled)
Active: active (running) since Sat 2024-04-20 23:22:55 PDT; 19ms ago
Docs: man:php-fpm8.2(8)
Process: 9433 ExecStartPost=/usr/lib/php/php-fpm-socket-helper install /run/php/php-fpm.sock /etc/php/8.2/fpm/pool.d/www.conf 82 (code=exited, status=0/SUCCESS)
Main PID: 9423 (php-fpm8.2)
Status: “Ready to handle connections”
Tasks: 6 (limit: 4588)
Memory: 13.6M
CPU: 146ms
CGroup: /system.slice/php8.2-fpm.service
├─9423 “php-fpm: master process (/etc/php/8.2/fpm/php-fpm.conf)”
├─9428 “php-fpm: pool www”
├─9429 “php-fpm: pool www”
├─9430 “php-fpm: pool www”
├─9431 “php-fpm: pool www”
└─9432 “php-fpm: pool www”

Apr 20 23:22:55 fog systemd[1]: Starting php8.2-fpm.service - The PHP 8.2 FastCGI Process Manager…
Apr 20 23:22:55 fog systemd[1]: Started php8.2-fpm.service - The PHP 8.2 FastCGI Process Manager.
–2024-04-20 23:22:55-- http://192.168.3.200/fog//maintenance/backup_db.php
Connecting to 192.168.3.200:80… connected.
HTTP request sent, awaiting response… 500 Internal Server Error
2024-04-20 23:22:56 ERROR 500: Internal Server Error.

@george1421

sorry for the years delay . i ended up by setting http:// instead of https:// and it worked.

@Cire3 said in Chainloading Simple Next Server ?:

server:ipv4 10.22.24.8
set newbootfile netboot.xyz.efi
set net0.dhcp/next-server ${newserver}

You are missing the word set in the first line.

So I looked at the autoexec.ipxe file and this is what is in it :

OK then it looks like netboot.xyz uses ipxe (because of your autoexec.ipxe script)

So you might not need all of those set commands. Because FOG used iPXE as its boot loader AND netboot.xyz also uses iPXE, AND iPXE is already running in memory, all you should need to do is call that autoexec.ipxe script.

This is all that should be needed in the parameter block of the fog menu.

chain tftp://192.168.1.1/autoexec.ipxe || goto Menu

Where 192.168.1.1 is the ip address of your netboot.xyz boot server. There is a 50/50% chance of this not working because if they compiled custom stuff in iPXE that might be dependent.

@mttpr1 Thanks, that was basically it - apparently the Surface dock itself has a MAC address, so that’s what was causing the issue. No way around it really, but at least I know what the problem was. Thanks for pointing me in the right direction!

@fhhowdy said in Dell XR11 No Bootable Media:

For FOG imaging having uefi secure boot disabled is a requirement.

I’m wondering if sending a different image to the machine might be possible. Where does FOG select the image that is selected? Where are these images stored?

This explaination will take a little setup. In fog you create image definitions in the webui. Then you register a computer with FOG. This lets fog capture the target computers hardware info and stores it in the database. Part of the registration process it asks what image do you want to connect this computer to. Now when you configured a FOG image capture task and pxe boot the target computer the target computer will know what image location to store the captured image into. For this example lets say your target computer had a debian image so you just captured that and stored the image in the debian image definition. Now you go and create a rocky linux image definition. You can now update your target computer’s image definition to point to the rocky linux image definition from debian. The debian image is still there, but now we are going to capture the rocky linux image into FOG. So lets say we repeat that process for Windows 2019 and 2020. So now you have 4 captured images and 1 target computer defined in FOG.

Lets say you pxe boot a new computer, and boot into the FOG iPXE menu. From the fog ipxe menu you can pick Deploy Image and then deploy any of those 4 captured images to this new computer. System builders use this method, that I call “Load and Go” You can deploy an image to a target computer without registering it with FOG. You lose FOG’s management capabilities, but for system builders once they load the OS they will never see the computer again. But in your case you should register all of your computers with FOG for post deployment management capabilities. Don’t misunderstand, you can still use the pxe boot -> deploy image route with registered computers too.