loutrage

loutrage

Ok ! Thank you for the answer

loutrage

Indeed my image contains one partition (in fact, 3 with the “windows system” partition). The computers “target” have a hard drive of 2TB and the purpose is to separate this hard drive in two, one partition for Windows and one partition for Datas.

Yesterday I deployed the image on 20 computers and after that, I have manually shrink the Windows partition on each computer to create a “D:” partition. It was a long job and perhaps there is a solution to automate this step

loutrage

The version of the kernel is version 4.19.145

Indeed, on my image there is only one partition. I’m working with virtual environment and the image that I capture comes from a virtual machine with a virtual hard drive of 200GB

loutrage

First, thank you for the answer.

Here is the asked information :

Version 1.5.9
There are 2 different Kernell : 5.15.19 & 5.10.71
d1.partitions

/dev/sda1 : start=        2048, size=      204800, type=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, uuid=D57F2E27-A01D-4621-A62D-84C9FC80B3D4, name="EFI system partition", attrs="GUID:63"
/dev/sda2 : start=      206848, size=       32768, type=E3C9E316-0B5C-4DB8-817D-F92DF00215AE, uuid=C9EDEEE3-CCA6-4108-B0CF-B76FBD7F80D5, name="Microsoft reserved partition", attrs="GUID:63"
/dev/sda3 : start=      239616, size=   103579136, type=EBD0A0A2-B9E5-4433-87C0-68B6B72699C7, uuid=1836C411-18F3-45C4-9179-17AD54B3AC73, name="Basic data partition"
/dev/sda4 : start=   103818752, size=     1038336, type=DE94BBA4-06D1-4D40-A16A-BFD50179D6AC, uuid=028C2351-938F-4BA8-9C3D-402B7CE9C09D, attrs="RequiredPartition GUID:63"

d1.fixed_size_partitions

1:2:4

cat d1.original.fstypes

/dev/sda3 ntfs

loutrage

Hello !

I made some searchs on the forum but I didn’t find an answer.

Since several years, I’m using fog and everything works great. Now, I would like upgrade the machines that I deploy. There will be a bigger hard drive of 2TB and I would like partitionate this hard drive.

So with Gparted I created 2 partitions, one of 150GB for Windows (the “C:”) and a second partition of 1.850GB for the Datas (the “D:”).

When I deployed my image, the 2 partitions have been deleted and merged in one partition of 2TB.

Is it possible to deploy with Fog only the “windows” partition and let empty the second partition for the datas ?

If yes, how can I do this ?

Thank you !

loutrage

@Sebastian-Roth

Ohh thank you ! It works now !

I didn’t know if I had to log on and then reboot manually to join the domain.

I noticed that I have to wait 3-4 minutes after the first boot for the automatically reboot and then the PC is in the domain !

Thanks a lot for the help, the problem is now solved !

loutrage

@Sebastian-Roth

Hello, sorry for the long time to answer : hollidays and a lot of work, I didn’t have time to answer before.

Thank you for the explanation about the certificates, it’s clear now.

I’m always trying to connect to my domain when a machine is deploy but I have always the same problem.

So I checked for the file “fog.log” but it wasn’t there, the fog client isn’t install on the machine.
Is it normal or do I have to install on my “mother” image before to deploy ?

To be sure and to begin with a new solid base, I began to zero with a new update machine (Debian 10), so it’s a totally fresh install with the last version of Debian and Fog, without SSL activate.

I deploy my image and I had the same problem, no Fog Client so I install it manually with the “Smart Installer”, not the Network Installer. I reboot the machine and here is the content of the fog.txt

 16/12/2019 10:48 Main Overriding exception handling
 16/12/2019 10:48 Main Bootstrapping Zazzles
 16/12/2019 10:48 Controller Initialize
 16/12/2019 10:48 Controller Start
 
 16/12/2019 10:48 Service Starting service
 16/12/2019 10:48 Bus Became bus server
 16/12/2019 10:48 Bus Emmiting message on channel: Status
 16/12/2019 10:48 Service Invoking early JIT compilation on needed binaries
 
------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Version: 0.11.16
 16/12/2019 10:48 Client-Info OS:      Windows
 16/12/2019 10:48 Middleware::Authentication Waiting for authentication timeout to pass
 16/12/2019 10:48 Middleware::Communication Download: http://10.0.150.15/fog/management/other/ssl/srvpublic.crt
 16/12/2019 10:48 Data::RSA FOG Server CA cert found
 16/12/2019 10:48 Middleware::Authentication Cert OK
 16/12/2019 10:48 Middleware::Authentication No token found at C:\Program Files (x86)\FOG\token.dat, this is expected if the client has not authenticated before
 16/12/2019 10:48 Middleware::Authentication ERROR: Could not get security token
 16/12/2019 10:48 Middleware::Authentication ERROR: Could not find file 'C:\Program Files (x86)\FOG\token.dat'.
 16/12/2019 10:48 Middleware::Communication POST URL: http://10.0.150.15/fog/management/index.php?sub=requestClientInfo&authorize&newService
 16/12/2019 10:48 Middleware::Response Success
 16/12/2019 10:48 Middleware::Authentication Authenticated
 
 
 16/12/2019 10:48 Middleware::Communication URL: http://10.0.150.15/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 16/12/2019 10:48 Middleware::Response Success
 16/12/2019 10:48 Middleware::Communication URL: http://10.0.150.15/fog/management/index.php?sub=requestClientInfo&mac=00:50:56:87:8F:1A|0A:00:27:00:00:05&newService&json
 16/12/2019 10:48 Middleware::Response Success
 16/12/2019 10:48 Middleware::Communication URL: http://10.0.150.15/fog/service/getversion.php?clientver&newService&json
 16/12/2019 10:48 Middleware::Communication URL: http://10.0.150.15/fog/service/getversion.php?newService&json
 
 16/12/2019 10:48 Service Creating user agent cache
 16/12/2019 10:48 Middleware::Response Invalid time
 16/12/2019 10:48 Middleware::Response No Printers
 16/12/2019 10:48 Middleware::Response Module is disabled globally on the FOG server
 16/12/2019 10:48 Service Initializing modules
 
------------------------------------------------------------------------------
---------------------------------ClientUpdater--------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response Success
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
----------------------------------TaskReboot----------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response Success
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response Success
 16/12/2019 10:48 HostnameChanger Users still logged in and enforce is disabled, delaying any further actions
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
---------------------------------SnapinClient---------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response No snapins
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
--------------------------------PrinterManager--------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response No Printers
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
--------------------------------PowerManagement-------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response Success
 16/12/2019 10:48 PowerManagement Calculating tasks to unschedule
 16/12/2019 10:48 PowerManagement Calculating tasks to schedule
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:48 Client-Info Client Version: 0.11.16
 16/12/2019 10:48 Client-Info Client OS:      Windows
 16/12/2019 10:48 Client-Info Server Version: 1.5.7
 16/12/2019 10:48 Middleware::Response Success
 16/12/2019 10:48 Middleware::Communication URL: http://10.0.150.15/fog/service/usertracking.report.php?action=login&user=Corners-Test\Exploitation&mac=00:50:56:87:8F:1A|0A:00:27:00:00:05&newService&json
------------------------------------------------------------------------------
 
 16/12/2019 10:48 Service Sleeping for 94 seconds
 16/12/2019 10:50 Middleware::Communication URL: http://10.0.150.15/fog/management/index.php?sub=requestClientInfo&configure&newService&json
 16/12/2019 10:50 Middleware::Response Success
 16/12/2019 10:50 Middleware::Communication URL: http://10.0.150.15/fog/management/index.php?sub=requestClientInfo&mac=00:50:56:87:8F:1A|0A:00:27:00:00:05&newService&json
 16/12/2019 10:50 Middleware::Response Success
 16/12/2019 10:50 Middleware::Communication URL: http://10.0.150.15/fog/service/getversion.php?clientver&newService&json
 16/12/2019 10:50 Middleware::Communication URL: http://10.0.150.15/fog/service/getversion.php?newService&json
 
 16/12/2019 10:50 Service Creating user agent cache
 16/12/2019 10:50 Middleware::Response Invalid time
 16/12/2019 10:50 Middleware::Response No Printers
 16/12/2019 10:50 Middleware::Response Module is disabled globally on the FOG server
 
------------------------------------------------------------------------------
---------------------------------ClientUpdater--------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response Success
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
----------------------------------TaskReboot----------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response Success
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
--------------------------------HostnameChanger-------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response Success
 16/12/2019 10:50 HostnameChanger Users still logged in and enforce is disabled, delaying any further actions
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
---------------------------------SnapinClient---------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response No snapins
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
--------------------------------PrinterManager--------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response No Printers
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
--------------------------------PowerManagement-------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response Success
 16/12/2019 10:50 PowerManagement Calculating tasks to unschedule
 16/12/2019 10:50 PowerManagement Calculating tasks to schedule
------------------------------------------------------------------------------
 
 
------------------------------------------------------------------------------
----------------------------------UserTracker---------------------------------
------------------------------------------------------------------------------
 16/12/2019 10:50 Client-Info Client Version: 0.11.16
 16/12/2019 10:50 Client-Info Client OS:      Windows
 16/12/2019 10:50 Client-Info Server Version: 1.5.7
 16/12/2019 10:50 Middleware::Response Success
------------------------------------------------------------------------------```

loutrage

@Sebastian-Roth

Finally, I made a new fresh install…

I follow your post here : https://forums.fogproject.org/topic/13956/2019-a-step-by-step-activating-ssl-and-complying-ipxe-with-it

So FOS works in SSL now with the certificate generate by the machine.

I have a certificate error with my browsers and it’s not 100% secure but It seems to be too complicated to work with our own self signate certificate.

In fact, my original (and biggest) problem don’t seem come from there.

I install the fog without SSL to try and it still doesn’t work, I can’t join my domain. I changed the password of the account of my Domain Controller to remove all the special characters, I deploy the machine several times, it doesn’t work

And if I join my domain manually, it’s work…

Here is the error with the debugger (Problem with the path)
PrtScr capture_2.jpg

loutrage

@Sebastian-Roth

Ok, thank a lot !

The problem to join the domain can come from there ?

I notice that the machine are wel named with the FOS so I think the fog-client must be able to communicate ?

loutrage

@Sebastian-Roth, thank you for the answer !

Yes I used the --force-https option. Here is the steps I used to configure the server

* ./installfog.sh -S
* Copy the private key and the PEM file from our CA machine to the repertory /opt/fog/snapins/ssl/
* Replace the CA by default in the directories /etc/apache2/ssl/CA/ and /opt/fog/snapins/ssl/CA/ by our own CA
* Edit with vim the config of the webserver with the command vim /etc/apache2/sites-available/001-fog.conf then restart apache2
* Edit the lines with the SSL links by this
    SSLCertificateFile /opt/fog/snapins/ssl/fog.pem
    SSLCertificateKeyFile /opt/fog/snapins/ssl/fog.key
    #SSLCertificateChainFile /var/www/html/fog//management/other/ca.cert.der
* Execute the script buildipxe.sh from the directory ./opt/fog/utils/FOGiPXE/buildipxe.sh to create new binaries for the ipxe with the certificate in it.
* Copy all the files from /opt/fog/packages/tftp to /tftpboot.

Yes I have a custom certificate

Here is the content of my VHost :

<VirtualHost *:80>
    <FilesMatch "\.php$">
        SetHandler "proxy:fcgi://127.0.0.1:9000/"
    </FilesMatch>
    ServerName 10.0.150.15
    ServerAlias corners-fog
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
    RewriteRule .* - [F]
    RewriteRule /management/other/ca.cert.der$ - [L]
    RewriteCond %{HTTPS} off
    RewriteRule (.*) https://%{HTTP_HOST}/$1 [R,L]
</VirtualHost>
<VirtualHost *:443>
    KeepAlive Off
    <FilesMatch "\.php$">
        SetHandler "proxy:fcgi://127.0.0.1:9000/"
    </FilesMatch>
    ServerName 10.0.150.15
    ServerAlias corners-fog
    DocumentRoot /var/www/html/
    SSLEngine On
    SSLProtocol all -SSLv3 -SSLv2
    SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
    SSLHonorCipherOrder On
    SSLCertificateFile /opt/fog/snapins/ssl/fog.pem
    SSLCertificateKeyFile /opt/fog/snapins/ssl/fog.key
    #SSLCertificateChainFile /var/www/html/fog//management/other/ca.cert.der
    <Directory /var/www/html/fog/>
        DirectoryIndex index.php index.html index.htm
    </Directory>
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
    RewriteRule .* - [F]
    RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
    RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-d
    RewriteRule ^/fog/(.*)$ /fog/api/index.php [QSA,L]
</VirtualHost>

loutrage

@loutrage

Latest posts made by loutrage