UEFI boot pxe preseed Ubuntu20.04 via NFS with https preseed.

[fogman4]

Can i necro-bump a “solved” topic ?

Because Op talks about this option :

debian-installer/allow_unauthenticated_ssl=true url=http://${fog-ip}/preseed/preseed.cfg

@Sebastian-Roth notice the same option without the s :

debian-installer/allow_unauthenticated_ssl=true url=https://${fog-ip}/preseed/preseed.cfg

I got the same problem and i don’t get how it has been solved. Any help would be very appreciated dudes.

My ipxe boot lines :

kernel tftp://${fog-ip}/os/ubuntu/20.04D/vmlinuz
initrd tftp://${fog-ip}/os/ubuntu/20.04D/initrd
imgargs vmlinuz initrd=initrd root=/dev/nfs boot=casper netboot=nfs nfsroot=${fog-ip}:/images/os/ubuntu/ locale=fr_FR.UTF-8 net.ifnames=0 biosdevname=0 ipv6.disable=1 keyboard-configuration/layoutcode=fr ip=dhcp rw hostname=DEPLOYX-ATD domain=ad.atdqm.tech automatic-ubiquity debian-installer/allow_unauthenticated_ssl=true url=https://${fog-ip}/autoinstall/ubuntu/ubiseed_20_w.cfg DEBCONF_DEBUG=5
boot || goto MENU

The situation is i managed to make it work with ftp server but now we have to shutdown this brave little server and use http or https only. That’s also a good point as @Tom-Elliott suggested to me .

As @george1421 already told me the url= is compatible with ftp and http protocols

So i tried http and https but no success here.
I didn’t modify the apache2 conf
I cannot get the pressed downloaded here is the error message :

Any help is much appreciated.

Thank you very much

EDIT : more infos.

[fogman4]

Ok just changed my site-ebabled with

@george1421 said in UEFI boot pxe preseed Ubuntu20.04 via NFS with https preseed.:

/tftpboot/default.ipxe

Yes it does :

chain https://192.168.1.200/fog/service/ipxe/boot.php##params

I just managed to make it work :

I commented disabled rewrite in apache conf

/etc/apache2/sites-enabled/001-fog.conf

    RewriteEngine Off
#    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
#    RewriteRule .* - [F]
#    RewriteRule /management/other/ca.cert.der$ - [L]
#    RewriteCond %{HTTPS} off
#    RewriteRule (.*) https://%{HTTP_HOST}/$1 [R,L]

systemctl restart apache2

And now it can download the preseed via http !

Thank you very much @george1421 for the really good pointers as always.

[george1421]

@fogman4 OK a quick check to see if https was enabled during install. On the FOG server you can look at this file /tftpboot/default.ipxe In that file at the bottom it chains to boot.php. Does it call boot.php using http or https?

Something else to think about if ubuntu understand URI when it says URL url=https://${fog-ip}/autoinstall/ubuntu/ubiseed_20_w.cfg

See if you can use the URI of: url=nfs://${fog-ip}/images/os/ubuntu/20.04D/ubiseed_20_w.cfg

[fogman4]

@george1421 said in UEFI boot pxe preseed Ubuntu20.04 via NFS with https preseed.:

http://<fog_server_ip>/autoinstall/ubuntu/ubiseed_20_w.cfg

Yes i think i enabled it during installation.

I really like accessing FOG webUI via https because we got not VLAN here (i know my bad)

Is there a way to properly disable it to do some test without breaking any fog confs or encounter side effects ? Or just disable the Rewrite ?

Thank you @george1421

[george1421]

@fogman4 Did you specifically enable https on your FOG server? If not then switch back to http.

Second point, can you from a windows computer and browser download this config file http://<fog_server_ip>/autoinstall/ubuntu/ubiseed_20_w.cfg

That config file needs to be in the http server’s docroot /var/www/autoinstall/ubuntu file path.