Adding Sophos Anti-Virus to the Advanced Menu

Dalton Childers

I’ve been attempted to boot a Sophos live cd over PXE, but have been unsuccessful in my attempts.

I followed this design here: https://forums.fogproject.org/topic/4493/how-to-edit-the-pxe-boot-menu-in-fog-1-2-0/15

The link seemed like they were suggesting it works as intended. The main issue I’m having is after a select the ISO and it loads I get the following response “looking for ‘slax’ data directory”. After about a minute or two it times out and I have to manually reboot the machine.

My current Advanced Menu:

:MENU
menu
item -- gap--             ------- Welcome to the Danger Zone --------
item -- gap--			  -------------- Anti-Virus -----------------
item bitdefender          BitDefender Rescue CD
item sophos 			  Sophos Anti-virus Scan
item -- gap--             ----------- Tools and Utilities -----------
item falconfour           Falcon Four's Ultimate Boot CD
item dban                 Darik's Boot and Nuke
item -- gap--             -------- Windows OS Installations ---------
item WIN7PE64BIT          Boot Windows 7 Ent 64 bit
item WIN7PE32BIT          Boot Windows 7 Ent 32 bit
item WIN10PE64BIT         Boot Windows 10 Edu 64 bit
item WIN10PE32BIT         Boot Windows 10 Edu 32 bit
item -- gap--             ------------ Advanced Options -------------
item return               Return to Main Menu
item fog.local            Boot from Hard Disk
item reboot               Reboot Computer


choose --default bitdefender --timeout 10000 target && goto ${target}

################## ANTI-VIRUS ##################

:bitdefender
initrd http://${fog-ip}/${fog-webroot}/iso/bitdefender.iso
chain memdisk iso raw ||
goto MENU

:sophos
initrd http://${fog-ip}/${fog-webroot}/iso/sophosbootable.iso
chain memdisk iso raw ||
goto MENU

########### WINDOWS OS INSTALLATIONS ###########

:WIN7PE64BIT
initrd http://${fog-ip}/${fog-webroot}/iso/win7ent64.ISO
chain memdisk iso raw ||
goto MENU
 
:WIN7PE32BIT
initrd http://${fog-ip}/${fog-webroot}/iso/win7ent32.ISO
chain memdisk iso raw ||
goto MENU

:WIN10PE64BIT
initrd http://${fog-ip}/${fog-webroot}/iso/win10edu64.ISO
chain memdisk iso raw ||
goto MENU
 
:WIN10PE32BIT
initrd http://${fog-ip}/${fog-webroot}/iso/win10edu32.ISO
chain memdisk iso raw ||
goto MENU

############ TOOLS & UTILITIES MENU ############

:falconfour
initrd http://${fog-ip}/${fog-webroot}/iso/falconfour.iso
chain memdisk iso raw ||
goto MENU

:dban
kernel ${boot_url}/fog/dban/dban.bzi nuke="dwipe --autonuke" silent nousb vga=785
boot

############ ADVANCED OPTIONS MENU ############

:fog.local
sanboot --no-describe --drive 0x80 || goto MENU
boot || goto MENU

:return
chain http://${fog-ip}/${fog-webroot}/service/ipxe/boot.php?mac=${net0/mac} || goto MENU

:reboot
reboot

autoboot

I’d also like to boot the Win7 and Win10 ISOs, but that’s a different issue altogether. Has anyone else encountered this issue with Sophos?

Wayne Workman

the Win7 and Win10 is probably easier - and you wouldn’t even bother with the ISO itself, but just copy the files to a windows share. Then, if you can just get WinPE to work (there are advanced copies out there now), then use that to just get to the share and launch the setup.exe, far more efficient than loading a huge ISO into the RAM of a machine that may or may not have it to spare.

But, for linux based ISOs, you’d mount as read-only with loopback, and then you’d point to the kernel and init after it’s mounted via NFS. I think you will find the below articles helpful.

http://www.cyberciti.biz/tips/how-to-mount-iso-image-under-linux.html

http://ipxe.org/appnote/ubuntu_live