FOG UEFI Boot Hyper-V 2016

[george1421]

Can you provide a screen shot of the actual error?

Also on the wiki pay attention to the Note in the wiki, because there are different flavors of uefi.

 Type   Architecture Name
           ----   -----------------
             0    Intel x86PC
             1    NEC/PC98
            > 2    EFI Itanium
             3    DEC Alpha
             4    Arc x86
             5    Intel Lean Client
             >6    EFI IA32
             >7    EFI BC (EFI Byte Code)
             8    EFI Xscale
             >9    EFI x86-64

[ty900000]

@george1421

@Psycholiquid

I changed it to ipxe7156.efi and DHCP pointed to the right file. But, it timed out again. Same error as above.

[george1421]

@ty900000 If you have time to debug this we can tell you what is going sideways.

Follow the steps here to get a pcap and post it here for review: https://forums.fogproject.org/topic/9673/when-dhcp-pxe-booting-process-goes-bad-and-you-have-no-clue

Also note I was appending to my previous post when you write yours.

[ty900000]

@george1421

Yeah, I got some time. Thanks!!

I tried 00002, 00006, 00008, 00007, 00009 and made the appropriate .efi file change in DHCP. The only one that picked up the proper .efi file was the 00007. If that makes sense.

[ty900000]

@george1421

0_1493998262034_output.pcap

Is this okay?

[george1421]

@ty900000 looking at it now…

Client is arch 7 EFI:BC

dhcp server 192.168.160.5 responds with:
next server - 192.168.160.90
boot file - ipxe7156.efi
your IP - 192.168.160.234
tftp server - 192.168.160.90

after normal dhcp handshake then client pulls file size
ipxe7156.efi from tftp server 192.168.160.90

Then requests ipxe7156.efi from tftp server.

What I see strange is that the client only asked for the first block of 1482 bytes. Then in at least what is in the capture it never asks for any more. I think the ipxe.efi file is a bit more than 1482 bytes.

Minus the last bit this should be a fully functional and correct dhcp/pxe booting process.

[george1421]

@ty900000 Since I’m ignorant of hyper-v is there such a thing as secure boot? And it is turned off??

[ty900000]

@george1421

Thanks for looking at it. Yeah, I disabled Secure Boot before I even booted the server the first time.

[x23piracy]

@ty900000 Secure boot must be off in the moment you boot via EFI to PXE. Or what do you mean with “first time”?

[george1421]

@ty900000 I’m still searching to see if someone else is able to pxe boot iPXE on gen2 hyper-v

[ty900000]

@george1421

Cool. Thank you. I appreciate it a lot.

@x23piracy

Before I even boot a server, I change a bunch of settings: add more processors, change checkpoint type, disable secure boot, etc. before I click Start… in Hyper-V.

[x23piracy]

@ty900000 it sounds like network isn’t working for you, maybe you need another kernel @george1421?
Is this your post? https://community.spiceworks.com/topic/1957582-pxe-problem-hyper-v-2016-with-gen2-
vm-uefi-boot

It seems your problem is known and unsolved
https://forums.fogproject.org/topic/8843/pxe-booting-hyper-v-2016

[ty900000]

@x23piracy

No, neither of those posts is mine. For the Spiceworks post, I am getting a DHCP address pulled in. And for the Fog Forum post, I am using a Gen 2 machine, not a Gen 1. I can boot a Gen 1 machine via PXE, but would like to make a Gen 2 machine.

[Tom Elliott]

@ty900000 So you cannot legacy pxe boot on the Gen 2 machine?

[Psycholiquid]

@ty900000 Does it have an option for a different type of network card as in VMWare there is E1000 and VMX

[george1421]

@Tom-Elliott So far what I found is that gen 2 is uefi only system.

I was thinking about seeing if we can get ipxe.efi to boot from an iso image to see if its a cruddy uefi network firmware issue or something else. I’m taking a break for lunch but will dig into it later.

I don’t have any experience with hyper-v so I can’t test it in my lab at all.

[Psycholiquid]

I will setup a Hyper-V lab this Saturday. If there is no answer I can let you know on Monday

[ty900000]

@Psycholiquid @george1421

Thank you both for the help! Let me know if there is anything else you need from me for debugging/verification.

[george1421]

@ty900000 <snarky> Yeah use VMWare instead </snarky>

As far as I can see ipxe.efi should work with a hyper-v gen 2 uefi virtual machine. I’ve seen videos of this working.

Can you tell me what your end game is here with pxe booting a hyper-v vm? I have a few other options in my back pocket that we may have to use depending on what your plan is.

[ty900000]

@george1421

Ha! Yeah, I had to fight to use Hyper-V in the first place…

I work for a federal government contracting company and we have orders to harden our systems, network, infrastructure, etc by the end of the year. One of our guys already created an image of a 2016 server with a hardened baseline. I was hoping I could just blow that image to a VM, rather than use the generic ISO and rebuild all the security hardening from scratch every time we need to set up a server.