Auto-Installing FOG with HTTPS enabled issues

[Sebastian Roth]

@TBuzaTechnician Ok, back to work, lets tackle this.

Compiling iPXE binaries that trust our SSL certificate......Failed!

Have you checked the install error log (fogproject/bin/error_logs/fog_error...) to see if there is any hint in there on why this fails?

In other words, I want to send an installation package to run on a remote machine, and not have to touch it. I will be remotely deploying images to the machine as well.

Can you give us more details on the tools you use for this? I am fairly sure this is a kind of new thing not many people have done before (except @Wayne-Workman) and it might be a bug in the installer preventing from it to work in your setup. The more we know about it the better we can help.

[TBuzaTechnician]

@Sebastian-Roth Thanks for the help. I will deploy another server and retrieve the error log to share here. On another note, I have not been using any other tools other than the FOG server. I’ll reply sooner or later with more information!

Again, Thank you for the help.

[Sebastian Roth]

@TBuzaTechnician But what sort of tools do you use to automate the install? Remote shell script execution? Puppet?..

[Wayne Workman]

@TBuzaTechnician said in Auto-Installing FOG with HTTPS enabled issues:

but I have a habit of using sudo anyway.

This has in-fact caused many people problems. I don’t know why, don’t really care why, but using sudo with the installer doesn’t work. As Sebastion said, properly log in as root with sudo -i and then execute the installer.

[Sebastian Roth]

@TBuzaTechnician Any news on this?

[lebrun78]

@Sebastian-Roth said in Auto-Installing FOG with HTTPS enabled issues:

fogproject/bin/error_logs/fog_error

Hello Sebastian
Using ./installfog.sh -W http://cosinus/ -S
I get the same error:

* Compiling iPXE binaries that trust our SSL certificate......Failed!

Here is my error log file:
fog_error_1.5.7.56.log

[lebrun78]

Works without -S option

[Sebastian Roth]

@lebrun78 In the logs we see:

Clonage dans '/opt/ipxe'...
fatal: unable to access 'https://git.ipxe.org/ipxe.git/': error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol

Possibly you are behind a proxy server? Find information on how to configure git to use your proxy see here: https://gist.github.com/evantoli/f8c23a37eb3558ab8765

[lebrun78]

No, we don’t have any proxy.

[lebrun78]

I am on a Centos 8 server.
wget https://git.ipxe.org/ipxe.git/ gives :

--2019-12-09 15:51:41--  https://git.ipxe.org/ipxe.git/
Résolution de git.ipxe.org (git.ipxe.org)… 212.13.204.60
Connexion à git.ipxe.org (git.ipxe.org)|212.13.204.60|:443… connecté.
GnuTLS: A packet with illegal or unsupported version was received.
Incapable d’établir une connexion SSL.

On a centos 7, wget https://git.ipxe.org/ipxe.git/ works

[Sebastian Roth]

@lebrun78 Possibly they have an old version running on the ipxe git server. If I remember correctly there was some discussion of server maintenance on the developer mailing list.

Can you please try wget on this URL on your CentOS 8 machine: https://github.com/ipxe/ipxe

[lebrun78]

@Sebastian-Roth said in Auto-Installing FOG with HTTPS enabled issues:

https://github.com/ipxe/ipxe

wget https://github.com/ipxe/ipxe works on my centos 8.0 machine

[Sebastian Roth]

@lebrun78 Ok then you want to edit the file fogproject/utils/FOGiPXE/buildipxe.sh and replace the URL in line 7 of that script.

[lebrun78]

@Sebastian-Roth
with your modification, the execution of the script goes to the end

Thank you

[Sebastian Roth]

@lebrun78 Thanks, I will change the URL in our code as well.

[Sebastian Roth]

Updated the URL in the official code (ref).