• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    Microsoft Surface Pro 4

    Scheduled Pinned Locked Moved
    Hardware Compatibility
    9
    58
    25.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Wayne WorkmanW
      Wayne Workman @x23piracy
      last edited by

      @x23piracy said in Microsoft Surface Pro 4:

      Is there a way to sign the fog kernel to match what the devices would expect from a secure boot kernel?

      Yes, @joe-schmitt has looked into this. We’d pay Microsoft to sign our boot files. This would also mean the frequency of updating our iPXE boot files would slow down to once every few years - because every new set would need signed. Currently, I think @tom-elliott is updating the iPXE boot files every couple weeks.

      Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
      Daily Clean Installation Results:
      https://fogtesting.fogproject.us/
      FOG Reporting:
      https://fog-external-reporting-results.fogproject.us/

      x23piracyX 1 Reply Last reply Reply Quote 0
      • x23piracyX
        x23piracy @Wayne Workman
        last edited by

        @Wayne-Workman that means current ipxe7156.efi is a signed one?

        ║▌║█║▌│║▌║▌█

        george1421G Wayne WorkmanW 2 Replies Last reply Reply Quote 0
        • george1421G
          george1421 Moderator @x23piracy
          last edited by

          @x23piracy said in Microsoft Surface Pro 4:

          that means current ipxe7156.efi is a signed one?

          No it is not, its an older build of the ipxe kernel that is known to boot correctly on the SP’s.

          I looked over the link you posted and I can say its possible. All efi ipxe kernels would have to be signed as well as the FOS kernel. This is totally possible to do in an automated manner. (I’m not speaking on behalf of the devs only saying its possible)

          The issue (as I see it) is on the workstation side. The workflow (to me seems a but complicated). Somehow you need to get something (already registered) to boot. Then you can add the FOG kpi keys. If you read the instructions you actually have to remove the MS signed keys (!!). Then you can add your self signed keys. The problem here is that these keys are only for FOG supplied boot images. What happens if you want to run windows after that. You’ve unloaded the MS keys and loaded FOG’s keys.

          IMO its much easier to just turn off secure boot, deploy the image with FOG and then (if Dell use cckt to) reeanble secure boot.

          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

          1 Reply Last reply Reply Quote 0
          • Wayne WorkmanW
            Wayne Workman @x23piracy
            last edited by

            @x23piracy No, it’s not. It’s just the only one that works with Surface Pro 4s. We need to find out why, but the developers don’t have any Surface Pro device to test the code commits around that time with. Someone has to step up and send Tom or George or myself a Surface Pro to test with. That’s all we need to get this straightened out - it’s all we need to have real documentation.

            Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
            Daily Clean Installation Results:
            https://fogtesting.fogproject.us/
            FOG Reporting:
            https://fog-external-reporting-results.fogproject.us/

            x23piracyX 1 Reply Last reply Reply Quote 1
            • x23piracyX
              x23piracy @Wayne Workman
              last edited by

              @Wayne-Workman What about crowdfunding? I would give some dollars for this.

              ║▌║█║▌│║▌║▌█

              Wayne WorkmanW 1 Reply Last reply Reply Quote 0
              • Wayne WorkmanW
                Wayne Workman @x23piracy
                last edited by

                @x23piracy That could work - it would be for an individual though, not ‘fog’. The money should go to @george1421 or @tom-elliott so they can buy a Surface Pro.

                Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
                Daily Clean Installation Results:
                https://fogtesting.fogproject.us/
                FOG Reporting:
                https://fog-external-reporting-results.fogproject.us/

                1 Reply Last reply Reply Quote 0
                • AvaryanA
                  Avaryan
                  last edited by

                  I doubt I’d be allowed to send them one of ours, but I could test things here.

                  1 Reply Last reply Reply Quote 0
                  • S
                    Sebastian Roth Moderator
                    last edited by Sebastian Roth

                    @Avaryan Well, if you are keen to try out several different iPXE binaries (maybe in dozens)… I am happy to provide those for testing pretty soon.

                    @Tom-Elliott Am I right that ipxe7156 is compiled using this ipxe git commit? As well, do you know a git commit having the issue and being kind of close to the working one so we don’t have to bisect down from the current version?

                    Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                    Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                    1 Reply Last reply Reply Quote 0
                    • S
                      Sebastian Roth Moderator
                      last edited by

                      @Avaryan Please find a test plan in the spreadsheet and binaries here. Start from the bottom of the table. Download 01_ipxe.efi and point your DHCP to that file (I prefer this to renaming the file to not confuse the files while testing several different ones). Schedule an upload task for one of your surface clients and boot it up. With 01_ipxe.efi things should work fine - just to confirm. Then work your way up the list and update the status in column B - ok or hang…

                      Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                      Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                      AvaryanA 1 Reply Last reply Reply Quote 0
                      • Tom ElliottT
                        Tom Elliott
                        last edited by

                        @Sebastian-Roth The git commit is accurate (7156 was the starter). I’m not sure what’s changed since this was implemented all the way to now. My thoughts were to find the 7156 as “working” and the closest to “broken” and run git bisect from those so we could hopefully determine exactly when it was introduced.

                        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

                        Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                        Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                        1 Reply Last reply Reply Quote 0
                        • AvaryanA
                          Avaryan @Sebastian Roth
                          last edited by

                          @Sebastian-Roth I don’t have access to the DHCP server, so would renaming and uploading the file work? Will keep track of names.

                          I’m still waiting to get my hands on the surface device.

                          S 1 Reply Last reply Reply Quote 0
                          • S
                            Sebastian Roth Moderator @Avaryan
                            last edited by

                            @Avaryan Sure you can run the same tests and just rename the files to ipxe.efi every time. As we have the git commit rev in the binary we’ll always figure out which was which. When iPXE comes up, it says “iPXE 1.0.0+ (xxxxx) – Open Source Network Boot Firmware” where xxxxx is the start of the git commit rev you see in the spreadsheet.

                            I really hope we can find out what is causing this hang on surface devices…

                            Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                            Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                            1 Reply Last reply Reply Quote 0
                            • S
                              Sebastian Roth Moderator
                              last edited by

                              @Tom-Elliott While building all those binaries I was wondering if maybe a change in the iPXE header files (general.h, settings.h, console.h) was - and still is - causing iPXE to hang on those surface devices?! Well see.
                              Anyhow, I will stop building more binaries for now and wait for the firsts test results. Let’s see if the newly built 7156 actually is working… Looking forward to hear from you @Avaryan

                              Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                              Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                              1 Reply Last reply Reply Quote 1
                              • S
                                Sebastian Roth Moderator
                                last edited by Sebastian Roth

                                @Avaryan Did you get to test some of the binaries yet? I uploaded the full set now.

                                Would be great if others ( @sarge_212 , @jhuesser, @Psycholiquid, @fry_p, @Scott-Adams, @xerxes2985, @dylan123, @ecicerkofski, @Arsenal101) could also join the testing so we hopefully find what is actually causing this issue and eventually get rid of those extra-7156-ipxe binaries… Find the test plan and binaries here. Please start from the bottom of the table (01_ipxe.efi) and mark rows as you test those. Thanks in advance!

                                @Tom-Elliott In case none of those binaries work (not even the 7156 one) then I reckon we have an issue with the iPXE header files. For this I have put together another test plan in the subdirectory called ‘svn’ where I put all the iPXE binaries that were compiled around that time - plus the header files (in ‘svn/config’ dir).

                                Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                                Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                                AvaryanA 1 Reply Last reply Reply Quote 0
                                • AvaryanA
                                  Avaryan @Sebastian Roth
                                  last edited by

                                  @Sebastian-Roth Still waiting on the device.

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Sebastian Roth Moderator
                                    last edited by

                                    @Avaryan @sarge_212 , @jhuesser, @Psycholiquid, @fry_p, @Scott-Adams, @xerxes2985, @dylan123, @ecicerkofski, @Arsenal101 Please guys, get your MS Surface devices out and help us find this issue!

                                    Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                                    Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                                    Scott AdamsS fry_pF 2 Replies Last reply Reply Quote 0
                                    • Scott AdamsS
                                      Scott Adams @Sebastian Roth
                                      last edited by

                                      @Sebastian-Roth I am currently out of the office on vacation. When I get back, I will be more than happy to get one and start testing.

                                      1 Reply Last reply Reply Quote 1
                                      • fry_pF
                                        fry_p Moderator @Sebastian Roth
                                        last edited by

                                        @Sebastian-Roth Sorry for the delay, I will hit this on Monday. We’ve been re-wiring Chromebook carts the past few weeks and I’ve been absent from FOG dealings and checking the forums. I will try to find a spare Pro 4 to fiddle with

                                        Like open source community computing? Why not do it for a good cause?
                                        Use your computer/server for humanitarian projects when it is idle!
                                        https://join.worldcommunitygrid.org?recruiterId=1026912

                                        fry_pF 1 Reply Last reply Reply Quote 0
                                        • fry_pF
                                          fry_p Moderator @fry_p
                                          last edited by

                                          @fry_p said in Microsoft Surface Pro 4:

                                          @Sebastian-Roth Sorry for the delay, I will hit this on Monday. We’ve been re-wiring Chromebook carts the past few weeks and I’ve been absent from FOG dealings and checking the forums. I will try to find a spare Pro 4 to fiddle with

                                          Hi there, I came back that Monday and had to give away my last Pro 4 to a user. So I guess I’m out for testing this, my apologies. We aren’t planning on purchasing any more in the near future as they are not durable enough for our “rough” users. Sorry everyone

                                          Like open source community computing? Why not do it for a good cause?
                                          Use your computer/server for humanitarian projects when it is idle!
                                          https://join.worldcommunitygrid.org?recruiterId=1026912

                                          1 Reply Last reply Reply Quote 0
                                          • AvaryanA
                                            Avaryan
                                            last edited by Avaryan

                                            I’m still waiting for some. I heard they possibly might not arrive until September… which I really hope isn’t true.

                                            edit: Confirmed ETA. Sometime in mid August.

                                            fry_pF 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 1 / 3
                                            • First post
                                              Last post

                                            227

                                            Online

                                            12.0k

                                            Users

                                            17.3k

                                            Topics

                                            155.2k

                                            Posts
                                            Copyright © 2012-2024 FOG Project