Remote wipe

[SuP3R_Ch1cKeN]

Is there a way to remotely wipe a HD without actually registering the host? I know this was an option pre 1.0.0 but I cannot find it post 1.0.0.

[Tom Elliott]

I’m not aware that this was an option in prior 1.x.x versions either.

The way people “wiped” was to boot the system in debug and run the wipe command themselves.

[SuP3R_Ch1cKeN]

in the PXE menu there was the following option which you could just select and it preformed the wipe. It was helpful incase you needed to wipe many HDs at once.

LABEL fog.wipe
kernel fog/kernel/bzImage
append initrd=fog/images/init.gz root=/dev/ram0 rw ramdisk_size=127000 ip=dhcp dns= mac= web=172.16.9.13/fog/ osid=1 wipemode=full mode=wipe shutdown= loglevel=4 consoleblank=0 fdrive=

[Tom Elliott]

What version of FOG was this in? Is it possible somebody customized this into your PXE menu for the reasons you describe?

[SuP3R_Ch1cKeN]

This was in 0.32 however it was there for so long that I couldn’t tell you if it was customized in or if it came preloaded.

I was wondering it this could possibly be added in the PXE advanced configuration.

[Jaymes Driver]

[quote=“SuP3R_Ch1cKeN, post: 31845, member: 4306”]in the PXE menu there was the following option which you could just select and it preformed the wipe. It was helpful incase you needed to wipe many HDs at once.

LABEL fog.wipe
kernel fog/kernel/bzImage
append initrd=fog/images/init.gz root=/dev/ram0 rw ramdisk_size=127000 ip=dhcp dns= mac= web=172.16.9.13/fog/ osid=1 wipemode=full mode=wipe shutdown= loglevel=4 consoleblank=0 fdrive=[/quote]

I don’t have these items in my 0.32 install and it’s my production machine, so it’s been here since the beginning of my FOG journies, my good ol trusty 0.32 server.

I am curious if someone has added this item, or if it was in an earlier revision than what I have.

I have also wondered about a wipe task. I would like to wipe my disk regardless of it’s data before I try to image with FOG, too many times I have had to format a hard drive in DEBUG mode because the partition was missing or wrong.

It would be nice to have a check box during the set up of the deployment task on the web GUI, but a quick menu item would be nice as long as it was a password protected entry!

[madskillz23]

I setup dban (Derrick’s boot and nuke) in the PXE advanced menu in order to erase hdd’s.
[CODE]:dban
kernel ${boot_url}/dban/dban.bzi nuke=“dwipe” silent vga=785
boot[/CODE]

You can also configure it to autonuke, which will wipe a hard drive as soon as that item is selected from the advanced PXE menu. Its been useful.

[SuP3R_Ch1cKeN]

Now when I attempt to add what madskillz23 suggests I get the screenshot that has [url]http://172.16.8.92/fog/service/ipxe/bg.png… ok[/url] then it goes back to the ipxe menu.

The other screenshot is if I put just echo hello world in the advanced config option.

[url=“/_imported_xf_attachments/1/1095_Screenshot_2014-06-30-15-20-18.png?:”]Screenshot_2014-06-30-15-20-18.png[/url][url=“/_imported_xf_attachments/1/1096_Screenshot_2014-06-30-15-20-42.png?:”]Screenshot_2014-06-30-15-20-42.png[/url]

[Junkhacker]

did you put a copy of dban.bzi in [url]http://<fog-server-ip>/<fog-web-root>/dban/[/url] ?

[SuP3R_Ch1cKeN]

I did put a copy of dban in /var/www/html/fog/service/ipxe/dban however I modified the code to ${boot_url}/service/ipxe/dban/dban.bzi

Also I attempted to do echo ${boot_url} just to see what the variable pulls up and it was blank in the echo.

I also tried [CODE]kernel http://172.16.8.92/fog/service/ipxe/dban/dban.bzi nuke=“dwipe” silent vga=785[/CODE] but that flashed a no such file or directory but when I put [url]http://172.16.8.92/fog/service/ipxe/dban[/url] in a browser I can see all the files in that folder.

[Junkhacker]

i know it seems like i’m asking dumb questions, but answers are often simple.
by default, it looks like the download of dban.bzi is all capital letters “DBAN.BZI”
urls are often case sensitive, do you have the correct capitalization?

[SuP3R_Ch1cKeN]

I feel like an idiot now… That was it.

[Tom Elliott]

Don’t feel like an idiot, you got it. And you got it with help. That’s what matters.

[SuP3R_Ch1cKeN]

Is there anyway to password protect this option. Might be kinda dangerous to leave this unprotected in my live environment