Hi @willian
With this screenshot I think you have problems with the dirty bit or the hiberfile mark on ntfs block device /dev/sda1.

You can do something like:

on the fog.postinit script

if [[ ${osid} -eq 9 ]]
then
ntfsfix -d /dev/sda1
## Begin put here the rest of ntfs partitions if you want

## End
mount -t ntfs-3g -o remove_hiberfile  /dev/sda1 /mnt
umount /mnt
fi

This is the idea. I have code like that in my fog.postinit and fog.postdownload script to grant access to the file system to deploy drivers and hostinfo data on fog.
Can you repeat on every ntfs partition.
Maybe it works.

It’s good to have this page, but in some cases, with a largest list of nodes, an if you have some nodes stopped by maintennance, can be to slow to load.

I think that is better not to have to wait for that list to go to fog settings page.

It’s not the same wait for a page that you don’t want to visit, than wait for a page that you want to visit.

Hi @Fernando-Gietz

We have our images configured to install and configure fog-client on the first-boot.

We use a custom service to do it but It’s possible to do it as a scheduled task when a NetworkProfile event is rised too.

Our service configuration is:
sc.exe config FOGService start=delayed-auto
sc.exe failure FOGService actions= restart/60000/restart/60000/restart/ reset= 120.

I think that is missing lan driver, because it don’t try the udhcpd requests, but better report the kernel version to get response.

If you can’t get the kernel version download a 4.12.x or upper, assign it to the computer and try if it works, if it works you can set it as default on fog settings page.

@fry_p Maybe too late, but in addition to complete a few:

You can configure the fog client to delayed-auto and to reboot the service on each error with the commands below recommended before start it:

sc.exe config FOGService start=delayed-auto
sc.exe failure FOGService actions= restart/60000/restart/60000/restart/ reset= 120.

@sebastian-roth I’m not an expert on development, but i’m a multidisciplinary sysadmin, with php knowledges, currently I had made UI changes, system changes, and had on production my own not ended plugin (multihomed location, snapins from webserver, multicast not implemented) (really is based on yours location code), on my little bit big environment, at this moment i think a have time to donate where you think that is needed, I’ll be pleased to make a try, and if it’s convenient and possible make an enrollment… Thanks so much for your great work

Try configuring the servicio with this:

sc.exe config FOGService start=delayed-auto
sc.exe failure FOGService actions= restart/60000/restart/60000/restart/ reset= 120.

It work’s to save me from stopping Fogservice errors.

@Almeida
@Sebastian-Roth

this is a simply example, security is by your side:

#!/bin/bash
SERVER=$1
USERNAME=$2
PASSWORD=$3
FILE=$4  
USER_TO_LAST=$5
echo "Result from last $USER_TO_LAST" &> $FILE
last $USER_TO_LAST &>> $FILE     
lftp -u $USERNAME,$PASSWORD $SERVER << EOF
put $FILE           
EOF

Configure as on image:
Snapin template is bash.

Tested on Linux Mint 19.

@sebastian-roth For your knowledge, I submit the information that you provides me to ACER, it seems like they go to help us with this, I continue the post with the solution if we reach it, at the same time if you have time I like to continue with this problem…

@dpullin verify that all the macs are registered on the same host,

@kallum-redgrave I recomend to do an unattended installation of fog-client from the setupcomplete.cmd instead install it on the image:

https://docs.fogproject.org/en/latest/getting_started/install_fog_client.html

and execute this commands, after installation:
sc.exe config FOGService start=delayed-auto
sc.exe failure FOGService actions= restart/60000/restart/60000/restart/ reset= 120
net start fogservice

this configure the service to start delayed and restart on failure.

@dpullin verify that all the macs are registered on the same host,

@florent All the uefi systems need to be in custom/setup/user mode to add keys or file hashes, the hint is to implement an adequate security level…

@lee-rowlett said in Secureboot issues:

LockDown.efi

a lot of thanks, that help me a lot…

@yeet
Take a look at this post

https://forums.fogproject.org/topic/13832/secureboot-issues

@lee-rowlett very interested, maybe i can do something if you can send me the information…

@yeet you must enroll the hash file from de UEFI interface; mok manager is capable to trust on 2 ways,

1º.- MOK can trust on files by hash when you enroll the file by de firmware interface, if you want you can send me the motherboard/pc manual and i can see if i can help to explain how you can do it.
2º.- I know, but i dont know how by the moment, that an efi application can be signed by a developer, (selfsigned or not), and the ca or ca intermediate can be added to the certificate database of efi firmware, to validate the file and that can be used…
3º.- I’m not sure, I’m studing about, but i think that you can do all from mok manager on uefi shell, or with some efi aplication designed for that.

I’m sure that all this is possible, but I’m searching information about how can be do it…
some references that I’m reading are:

https://www.rodsbooks.com/efi-bootloaders/controlling-sb.html
https://media.defense.gov/2020/Sep/15/2002497594/-1/-1/0/CTR-UEFI-Secure-Boot-Customization-UOO168873-20.PDF
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
https://ubuntu.com/blog/how-to-sign-things-for-secure-boot
https://jfearn.fedorapeople.org/fdocs/en-US/Fedora_Draft_Documentation/0.1/html-single/UEFI_Secure_Boot_Guide/index.html
https://www.qualcomm.com/media/documents/files/secure-boot-and-image-authentication-technical-overview-v1-0.pdf

@sebastian-roth
No problem…

I go to Host management -> Create new hosts.

I Fill the hosts field under new host section.

I fill the fields under Active Directory section

Click on Add button

The information under new host is stored on DDBB

The information under Active Directory Section are not stored on DDBB.

I inspect the web page from Firefox, and I can see that the fields under Active Diretory section are writted out of the form… then they don’t be added to the $_POST array and are stored as empty values…

@Sebastian-Roth @Tom-Elliott

On last development branch the “Name Change/AD Join Forced reboot?” don’t store value on host creation… and on version 1.5.6

The active directory section is added out of form

@sonic136 @Sebastian-Roth
You can try too with the development efi files, it worked for me

You can get it from here:
https://github.com/FOGProject/fogproject/tree/dev-branch/packages/tftp