HTTPS booting getting access denied

[lucycle]

Fog version: 1.5.9
OS: Ubuntu 18.04.6 LTS

Hello all,

I have netboot.xyz as an option in the advanced menu of fog. The install was migrated to current version from an old version of fog where this was working. It’s been a few years but I believe I used ipxe.org’s git repo to compile a version w/ DOWNLOAD_PROTO_HTTPS uncommented to make it work back then. However, now when selecting the option it gives an access denied error as if the current ipxe.efi/undionly binary was compiled w/o DOWNLOAD_PROTO_HTTPS in general.h .

I’ve searched through the forums for this specific error. Appears that this issue has been solved since 2017. Just to be sure I doublechecked in fogproject/src(-efi)/ipxe/config/ and it is uncommented.

What could be causing this error to pop on the following addition to my advanced.ipxe

:xyz
chain --autofree https://boot.netboot.xyz
goto MENU

Would really appreciate some help.

Thanks!

[george1421]

@lucycle I’m not 100% on using non-fog issues kernels, but you need to include the fog server’s certificate when compiling the ipxe boot loader. I’ve seen similar error when the fog issued ipxe is not compiled with the ssl certificate that matches the http server’s ssl certificate.

What was your rational for creating your own ipxe boot loader.

Not relevant to the issue: but you could also send this file via tftp by changing the chain command to this:

chain --autofree tftp://boot.netboot.xyz

and placing that file in the /tftpboot directory

[Sebastian Roth]

@lucycle Take a look at the first couple of lines of this script: https://github.com/FOGProject/fogproject/blob/master/utils/FOGiPXE/buildipxe.sh